

phine
Membres-
Compteur de contenus
8 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par phine
-
infection TRojan.W32.Looksky
phine a répondu à un(e) sujet de phine dans Analyses et éradication malwares
j'ai fais un scan avec : Logfile of HijackThis v1.99.1 Scan saved at 11:46:39, on 11/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Avira\Avira Premium Security Suite\avguard.exe D:\WINDOWS\Explorer.EXE D:\Program Files\QuickTime\qttask.exe D:\Program Files\iTunes\iTunesHelper.exe D:\Program Files\Fichiers communs\DefenseNetSurfage\mc.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\MSN Messenger\MsnMsgr.Exe D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe D:\Program Files\Avira\Avira Premium Security Suite\avesvc.exe D:\Program Files\iPod\bin\iPodService.exe D:\WINDOWS\system32\wscntfy.exe D:\WINDOWS\system32\wuauclt.exe D:\Program Files\Hijackthis Version Française\hijackthis vf.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=...6Ojg5&lid=2 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O1 - Hosts: <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"> O1 - Hosts: <html> O1 - Hosts: <head> O1 - Hosts: <title> Songs, mp3 and lyrics db searches</title O1 - Hosts: <meta name="Author" content="net4free.org"> O1 - Hosts: <meta name="Keywords" content="free web host, domain host, mp3 searchable database, lyrics searches, lyrics, mp3 discographi"> O1 - Hosts: </head> O1 - Hosts: <STYLE type=text/css> O1 - Hosts: <!-- O1 - Hosts: a {color: #3300CC; text-decoration: none} O1 - Hosts: .bordata {border-bottom :solid #C0C0C0 1px;border-top :solid #C0C0C0 1px;border-left :solid #C0C0C0 1px;border-right :solid #C0C0C0 1px} O1 - Hosts: h3{font-family: Arial;font-style : normal ;font-size : 12pt; font-weight :bold;text-align : center; color :#FFFFFF;background-color :#004f9d } O1 - Hosts: body {FONT-SIZE: 4px; COLOR: #444444;} O1 - Hosts: .small {BORDER-RIGHT: silver 1px solid; BORDER-TOP: silver 1px solid; FONT-SIZE: 7pt; BORDER-LEFT: silver 1px solid; COLOR: black; BORDER-BOTTOM: silver 1px solid; FONT-FAMILY: Verdana,Arial,sans-serif; HEIGHT: 14px; BACKGROUND-COLOR: white} O1 - Hosts: .small1 {FONT-SIZE: 7pt; WIDTH: 75px; COLOR: black; FONT-FAMILY: Verdana,Arial,sans-serif; HEIGHT: 14px; } O1 - Hosts: .small2 {FONT-SIZE: 9pt; FONT-FAMILY: Verdana,Arial;} O1 - Hosts: .abuse {FONT-SIZE: 10pt; FONT-FAMILY: Verdana,Arial;} O1 - Hosts: .HF {FONT-SIZE: 17pt; FONT-FAMILY: Verdana,Arial;} O1 - Hosts: --> O1 - Hosts: </STYLE> O1 - Hosts: </head> O1 - Hosts: <body leftmargin=0 rightmargin=0> O1 - Hosts: <table class=bordata cellpadding=14 cellspacing=0 height=80 width=100% background="/images/sfondo1.gif" BORDER=0> O1 - Hosts: <tr> O1 - Hosts: <td valign=top><a href="http://www.net4free.org/"><img src="http://www.net4free.org/images/nff_l.gif" border=0 alt=""></a></td> O1 - Hosts: <td valign=top> O1 - Hosts: <p align=right> O1 - Hosts: <table cellpadding=2 cellspacing=2 BORDER=0> O1 - Hosts: <tr> O1 - Hosts: <td class=small align=center><a href="http://www.net4free.org/free_web_hosting.php"><b>Join Now</a></b></td> O1 - Hosts: <td class=small align=center><a href="/faq.html"><b>FAQ</a></b></td> O1 - Hosts: <td class=small align=center><a href="/terms_of_service.html"><b>Terms Of Service</a></b></td> O1 - Hosts: <td class=small align=center><a href="/free_utility.html"><b>Net4Free Utility</a></b></td> O1 - Hosts: <td class=small align=center><a href="/welcome.php"><b>Forgot Password</a></b></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </p> O1 - Hosts: </td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: <table><tr><td></td></tr></table> O1 - Hosts: <table class=bordata cellpadding=14 cellspacing=0 height=180 width=100% background="/images/sfondog.gif" BORDER=0> O1 - Hosts: <tr> O1 - Hosts: <td align=center> O1 - Hosts: <a href="http://www.top100lyrics.com/in/?id=997"><img src="/images/top100.gif" border=0></a><BR><BR> O1 - Hosts: <table class=bordata> O1 - Hosts: <tr> O1 - Hosts: <td><a href="http://www.mp3qm.com/"><img src="http://www.mp3qm.com/images/logo.gif" border=0 alt="Mp3 lyrics database"><br> O1 - Hosts: Mp3 search searchable database</a></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: <BR> O1 - Hosts: <table class=bordata> O1 - Hosts: <tr> O1 - Hosts: <td><a href="http://www.lyricsbook.net/"><img src="http://www.lyricsbook.net/images/lyrics_book1.gif" border=0 alt="Mp3 database"><br> O1 - Hosts: <CENTER>Lyrics searchable database</CENTER></a></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </td> O1 - Hosts: <td align="center"> O1 - Hosts: <table ><tr><td> O1 - Hosts: <!-- O1 - Hosts: <a href="http://www.net4free.org/angelicastore.php" onMouseover="window.status='Angelica Store!'; return true"> O1 - Hosts: <img src="http://www.net4free.org/images/angel3.jpg" alt="Angelica Store!" border="0"/></a> O1 - Hosts: --> O1 - Hosts: </td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </td> O1 - Hosts: <td> O1 - Hosts: <table class=bordata bgcolor=#FFFFFF> O1 - Hosts: <tr> O1 - Hosts: <td> O1 - Hosts: <table> O1 - Hosts: <tr> O1 - Hosts: <td align=center><a href="http://www.findhostdir.com/"><img src="http://www.findhostdir.com/images/link2.gif" border=0><br> O1 - Hosts: Free web Host, Free domain Host<br> and Cheap web Host Directory</a></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </td> O1 - Hosts: </tr> O1 - Hosts: <tr> O1 - Hosts: <td></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </body> O1 - Hosts: </html> O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: MSVPS System - {3ADCBC16-19FA-4C59-9C22-E17C71B5FD7A} - D:\WINDOWS\bndsrvnl.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar3.dll O3 - Toolbar: The netadv - {ABF529BE-6245-465A-BBD4-238C4EAB0F0A} - D:\WINDOWS\netadv.dll O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [salestart] "D:\Program Files\Fichiers communs\DefenseNetSurfage\mc.exe" dm=http://defensenetsurfage.com; ad=http://defensenetsurfage.com O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\Avira Premium Security Suite\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DefenseNetSurfage] D:\Program Files\DefenseNetSurfage\GDC.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: &Windows Live Search - res://D:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O10 - Broken Internet access because of LSP provider 'avsda.dll' missing O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: bindmod - {B5DED5A0-FF1B-434B-91A9-FD8BB7111764} - D:\WINDOWS\bindmod.dll (file missing) O21 - SSODL: msvb - {F4A24470-CE2B-4E0D-8C76-179604641BD5} - D:\WINDOWS\msvb.dll O21 - SSODL: sysdx - {0E1FB196-1C75-4A62-977A-DDE0D36889DA} - D:\WINDOWS\sysdx.dll O23 - Service: Avira Premium Security Suite Firewall (AntiVirFirewallService) - Avira GmbH - D:\Program Files\Avira\Avira Premium Security Suite\avfwsvc.exe O23 - Service: Avira Premium Security Suite MailGuard (AntiVirMailService) - Avira GmbH - D:\Program Files\Avira\Avira Premium Security Suite\avmailc.exe O23 - Service: Avira Premium Security Suite Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\Avira\Avira Premium Security Suite\sched.exe O23 - Service: Avira Premium Security Suite Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\Avira Premium Security Suite\avguard.exe O23 - Service: Avira Premium Security Suite WebGuard (antivirwebservice) - Avira GmbH - D:\Program Files\Avira\Avira Premium Security Suite\AVWEBGRD.EXE O23 - Service: Avira Premium Security Suite MailGuard helper service (AVEService) - Avira GmbH - D:\Program Files\Avira\Avira Premium Security Suite\avesvc.exe O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe -
infection TRojan.W32.Looksky
phine a répondu à un(e) sujet de phine dans Analyses et éradication malwares
désolée d'être si lente. l'ordi rame énormément mais, ça y est, l'antivirus est téléchargé -
infection TRojan.W32.Looksky
phine a répondu à un(e) sujet de phine dans Analyses et éradication malwares
là est le problème... j'avais avast, mais visiblement l'ordi avait été infecté, et l'antivirus paralysait toute action... du coup, on l'a désinstallé, pour essayer d'agir... -
infection TRojan.W32.Looksky
phine a répondu à un(e) sujet de phine dans Analyses et éradication malwares
l'écran du rapport ne veut pas s'ouvrir. il reste tout blanc. je l'ai pourtant relancé plusieurs fois, puis je l'ai laissé "travailler" pendant près d'une heure... et j'ai bien suivi les instructions auxquelles tu m'as renvoyée... -
infection TRojan.W32.Looksky
phine a répondu à un(e) sujet de phine dans Analyses et éradication malwares
Voici le résultat obtenu SmitFraudFix v2.250 Recherche Process... Recherche hosts... Recherche D:\... Recherche D:\WINDOWS\... Recherche D:\WINDOWS\system... Recherche D:\WINDOWS\Web... Recherche D:\WINDOWS\system32... Recherche D:\Documents and Settings\DELPHINE... Recherche D:\Documents and Settings\DELPHINE\Application Data... Recherche Menu Démarrer... Recherche D:\DOCUME~1\DELPHINE\Favoris... Recherche Bureau... Recherche D:\Program Files... Recherche présence de clés corrompues -
infection TRojan.W32.Looksky
phine a répondu à un(e) sujet de phine dans Analyses et éradication malwares
Voici le résultat obtenu SmitFraudFix v2.250 Recherche Process... Recherche hosts... Recherche D:\... Recherche D:\WINDOWS\... Recherche D:\WINDOWS\system... Recherche D:\WINDOWS\Web... Recherche D:\WINDOWS\system32... Recherche D:\Documents and Settings\DELPHINE... Recherche D:\Documents and Settings\DELPHINE\Application Data... Recherche Menu Démarrer... Recherche D:\DOCUME~1\DELPHINE\Favoris... Recherche Bureau... Recherche D:\Program Files... Recherche présence de clés corrompues -
infection TRojan.W32.Looksky
phine a répondu à un(e) sujet de phine dans Analyses et éradication malwares
Voici le résultat obtenu... Merci de ton aide Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 10:03:25, on 07/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\wscntfy.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\QuickTime\qttask.exe D:\Program Files\iTunes\iTunesHelper.exe D:\Program Files\Fichiers communs\DefenseNetSurfage\mc.exe D:\Program Files\MSN Messenger\MsnMsgr.Exe D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe D:\Program Files\iPod\bin\iPodService.exe D:\Program Files\MSN\MSNCoreFiles\msn6.exe D:\Program Files\MSN Messenger\usnsvc.exe D:\Program Files\Internet Explorer\IEXPLORE.EXE D:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE D:\Program Files\Internet Explorer\IEXPLORE.EXE D:\WINDOWS\system32\cmd.exe D:\WINDOWS\system32\cscript.exe D:\Program Files\Internet Explorer\IEXPLORE.EXE D:\Documents and Settings\DELPHINE\Local Settings\Temporary Internet Files\Content.IE5\1G5OPKMJ\HiJackThis_v2[1].exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=...6Ojg5&lid=2 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O1 - Hosts: <!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN"> O1 - Hosts: <html> O1 - Hosts: <head> O1 - Hosts: <title> Songs, mp3 and lyrics db searches</title O1 - Hosts: <meta name="Author" content="net4free.org"> O1 - Hosts: <meta name="Keywords" content="free web host, domain host, mp3 searchable database, lyrics searches, lyrics, mp3 discographi"> O1 - Hosts: </head> O1 - Hosts: <STYLE type=text/css> O1 - Hosts: <!-- O1 - Hosts: a {color: #3300CC; text-decoration: none} O1 - Hosts: .bordata {border-bottom :solid #C0C0C0 1px;border-top :solid #C0C0C0 1px;border-left :solid #C0C0C0 1px;border-right :solid #C0C0C0 1px} O1 - Hosts: h3{font-family: Arial;font-style : normal ;font-size : 12pt; font-weight :bold;text-align : center; color :#FFFFFF;background-color :#004f9d } O1 - Hosts: body {FONT-SIZE: 4px; COLOR: #444444;} O1 - Hosts: .small {BORDER-RIGHT: silver 1px solid; BORDER-TOP: silver 1px solid; FONT-SIZE: 7pt; BORDER-LEFT: silver 1px solid; COLOR: black; BORDER-BOTTOM: silver 1px solid; FONT-FAMILY: Verdana,Arial,sans-serif; HEIGHT: 14px; BACKGROUND-COLOR: white} O1 - Hosts: .small1 {FONT-SIZE: 7pt; WIDTH: 75px; COLOR: black; FONT-FAMILY: Verdana,Arial,sans-serif; HEIGHT: 14px; } O1 - Hosts: .small2 {FONT-SIZE: 9pt; FONT-FAMILY: Verdana,Arial;} O1 - Hosts: .abuse {FONT-SIZE: 10pt; FONT-FAMILY: Verdana,Arial;} O1 - Hosts: .HF {FONT-SIZE: 17pt; FONT-FAMILY: Verdana,Arial;} O1 - Hosts: --> O1 - Hosts: </STYLE> O1 - Hosts: </head> O1 - Hosts: <body leftmargin=0 rightmargin=0> O1 - Hosts: <table class=bordata cellpadding=14 cellspacing=0 height=80 width=100% background="/images/sfondo1.gif" BORDER=0> O1 - Hosts: <tr> O1 - Hosts: <td valign=top><a href="http://www.net4free.org/"><img src="http://www.net4free.org/images/nff_l.gif" border=0 alt=""></a></td> O1 - Hosts: <td valign=top> O1 - Hosts: <p align=right> O1 - Hosts: <table cellpadding=2 cellspacing=2 BORDER=0> O1 - Hosts: <tr> O1 - Hosts: <td class=small align=center><a href="http://www.net4free.org/free_web_hosting.php"><b>Join Now</a></b></td> O1 - Hosts: <td class=small align=center><a href="/faq.html"><b>FAQ</a></b></td> O1 - Hosts: <td class=small align=center><a href="/terms_of_service.html"><b>Terms Of Service</a></b></td> O1 - Hosts: <td class=small align=center><a href="/free_utility.html"><b>Net4Free Utility</a></b></td> O1 - Hosts: <td class=small align=center><a href="/welcome.php"><b>Forgot Password</a></b></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </p> O1 - Hosts: </td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: <table><tr><td></td></tr></table> O1 - Hosts: <table class=bordata cellpadding=14 cellspacing=0 height=180 width=100% background="/images/sfondog.gif" BORDER=0> O1 - Hosts: <tr> O1 - Hosts: <td align=center> O1 - Hosts: <a href="http://www.top100lyrics.com/in/?id=997"><img src="/images/top100.gif" border=0></a><BR><BR> O1 - Hosts: <table class=bordata> O1 - Hosts: <tr> O1 - Hosts: <td><a href="http://www.mp3qm.com/"><img src="http://www.mp3qm.com/images/logo.gif" border=0 alt="Mp3 lyrics database"><br> O1 - Hosts: Mp3 search searchable database</a></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: <BR> O1 - Hosts: <table class=bordata> O1 - Hosts: <tr> O1 - Hosts: <td><a href="http://www.lyricsbook.net/"><img src="http://www.lyricsbook.net/images/lyrics_book1.gif" border=0 alt="Mp3 database"><br> O1 - Hosts: <CENTER>Lyrics searchable database</CENTER></a></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </td> O1 - Hosts: <td align="center"> O1 - Hosts: <table ><tr><td> O1 - Hosts: <!-- O1 - Hosts: <a href="http://www.net4free.org/angelicastore.php" onMouseover="window.status='Angelica Store!'; return true"> O1 - Hosts: <img src="http://www.net4free.org/images/angel3.jpg" alt="Angelica Store!" border="0"/></a> O1 - Hosts: --> O1 - Hosts: </td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </td> O1 - Hosts: <td> O1 - Hosts: <table class=bordata bgcolor=#FFFFFF> O1 - Hosts: <tr> O1 - Hosts: <td> O1 - Hosts: <table> O1 - Hosts: <tr> O1 - Hosts: <td align=center><a href="http://www.findhostdir.com/"><img src="http://www.findhostdir.com/images/link2.gif" border=0><br> O1 - Hosts: Free web Host, Free domain Host<br> and Cheap web Host Directory</a></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </td> O1 - Hosts: </tr> O1 - Hosts: <tr> O1 - Hosts: <td></td> O1 - Hosts: </tr> O1 - Hosts: </table> O1 - Hosts: </body> O1 - Hosts: </html> O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: MSVPS System - {3ADCBC16-19FA-4C59-9C22-E17C71B5FD7A} - D:\WINDOWS\bndsrvnl.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar3.dll O3 - Toolbar: The netadv - {ABF529BE-6245-465A-BBD4-238C4EAB0F0A} - D:\WINDOWS\netadv.dll O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [salestart] "D:\Program Files\Fichiers communs\DefenseNetSurfage\mc.exe" dm=http://defensenetsurfage.com; ad=http://defensenetsurfage.com O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DefenseNetSurfage] D:\Program Files\DefenseNetSurfage\GDC.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: &Windows Live Search - res://D:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx O21 - SSODL: bindmod - {B5DED5A0-FF1B-434B-91A9-FD8BB7111764} - D:\WINDOWS\bindmod.dll (file missing) O21 - SSODL: msvb - {F4A24470-CE2B-4E0D-8C76-179604641BD5} - D:\WINDOWS\msvb.dll O21 - SSODL: sysdx - {0E1FB196-1C75-4A62-977A-DDE0D36889DA} - D:\WINDOWS\sysdx.dll O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\System32\browseui.dll O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\System32\browseui.dll O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - D:\WINDOWS\System32\dmadmin.exe O23 - Service: Journal des événements (Eventlog) - Unknown owner - D:\WINDOWS\system32\services.exe O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - D:\WINDOWS\System32\imapi.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - D:\WINDOWS\System32\mnmsrvc.exe O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - D:\WINDOWS\system32\services.exe O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - D:\WINDOWS\system32\sessmgr.exe O23 - Service: Carte à puce (SCardSvr) - Unknown owner - D:\WINDOWS\System32\SCardSvr.exe O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - D:\WINDOWS\system32\smlogsvc.exe O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - D:\WINDOWS\System32\vssvc.exe O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - D:\WINDOWS\System32\wbem\wmiapsrv.exe O24 - Desktop Component 0: Privacy Protection - file:///D:\WINDOWS\privacy_danger\index.htm -- End of file - 12094 bytes -
Bonjour à tous, mon ordinateur est infecté (au moins) par le virus: Trojan.W32.Looksky. Je ne suis pas vraiment clée en informatique et je me demande bien ce que je dois faire. Pouvez-vous m'aider? delphine