Aller au contenu

clemfou

Membres
 Afficher le profil  Afficher son activité

  • Compteur de contenus

    8

  • Inscription

  • Dernière visite

 Type de contenu 

Messages posté(e)s par clemfou

  2. Optimisation RAM

    dans Conseils matériel - Achats & Ventes

    Posté(e)

    Bonjour ! :P

    Je voudrais savoir s'il est possible de changer / ajouter de la mémoire vive à un PC Compaq Presario 1910FR.

    J'ai actuellement 2 x 512 Mo de RAM et je voudrais passer à 2 Go au total. Ma carte mère est Asus A8M2N-LA (nodusm). Si c'est possible, quel est le mieux à faire : 4 x 512 Mo ou 2 x 1Go ?

    Je me demande aussi si le fait d'ajouter de la mémoire vive rendra vraiment mon ordi plus performant (mon processeur AMD Athlon 64 X2 Dual Core Processor 3800+ risque-t-il de ne pas suivre ?!).

     

    Merci beaucoup pour vos conseils :P

    ++

  4. [résolu] Infections multiples

    dans Analyses et éradication malwares

    Posté(e)

    J'ai fait un dernier scan avec Antivir et AVG AS.

    AVG n'a rien détecté, par contre Antivir a détecté quelque chose.

     

    Rapport Antivir :

    Licensed to: Avira AntiVir PersonalEdition Classic

    Serial number: 0000149996-ADJIE-0001

    Platform: Windows XP

    Windows version: (Service Pack 2) [5.1.2600]

    Boot mode: Save mode

    Username: Cl€m€nt

    Computer name: TITANIUM

     

    Version information:

    BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00

    AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56

    AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37

    LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23

    LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40

    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

    ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 23:46:21

    ANTIVIR2.VDF : 7.0.5.2 2048 Bytes 24/06/2008 23:46:21

    ANTIVIR3.VDF : 7.0.5.3 2048 Bytes 24/06/2008 23:46:22

    Engineversion : 8.1.0.59

    AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21

    AESCRIPT.DLL : 8.1.0.44 278907 Bytes 24/06/2008 23:46:57

    AESCN.DLL : 8.1.0.22 119157 Bytes 24/06/2008 23:46:54

    AERDL.DLL : 8.1.0.20 418165 Bytes 24/06/2008 23:46:52

    AEPACK.DLL : 8.1.1.6 364918 Bytes 24/06/2008 23:46:48

    AEOFFICE.DLL : 8.1.0.20 192891 Bytes 24/06/2008 23:46:43

    AEHEUR.DLL : 8.1.0.32 1274231 Bytes 24/06/2008 23:46:41

    AEHELP.DLL : 8.1.0.15 115063 Bytes 24/06/2008 23:46:29

    AEGEN.DLL : 8.1.0.29 307573 Bytes 24/06/2008 23:46:28

    AEEMU.DLL : 8.1.0.6 430451 Bytes 24/06/2008 23:46:25

    AECORE.DLL : 8.1.0.31 168310 Bytes 24/06/2008 23:46:23

    AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53

    AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50

    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47

    AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49

    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

    AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31

    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

    SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39

    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

    RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25

    RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

     

    Configuration settings for the scan:

    Jobname..........................: Local Hard Disks

    Configuration file...............: c:\program files\avira\antivir personaledition classic\alldiscs.avp

    Logging..........................: low

    Primary action...................: repair

    Secondary action.................: delete

    Scan master boot sector..........: on

    Scan boot sector.................: on

    Boot sectors.....................: C:,

    Scan memory......................: on

    Process scan.....................: on

    Scan registry....................: on

    Search for rootkits..............: on

    Scan all files...................: All files

    Scan archives....................: on

    Recursion depth..................: 20

    Smart extensions.................: on

    Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,

    Macro heuristic..................: on

    File heuristic...................: high

     

    Start of the scan: vendredi 27 juin 2008 13:18

     

    Starting search for hidden objects.

    The driver could not be initialized.

     

    The scan of running processes will be started

    Scan process 'avscan.exe' - '1' Module(s) have been scanned

    Scan process 'avgas.exe' - '1' Module(s) have been scanned

    Scan process 'avcenter.exe' - '1' Module(s) have been scanned

    Scan process 'explorer.exe' - '1' Module(s) have been scanned

    Scan process 'svchost.exe' - '1' Module(s) have been scanned

    Scan process 'guard.exe' - '1' Module(s) have been scanned

    Scan process 'svchost.exe' - '1' Module(s) have been scanned

    Scan process 'svchost.exe' - '1' Module(s) have been scanned

    Scan process 'lsass.exe' - '1' Module(s) have been scanned

    Scan process 'services.exe' - '1' Module(s) have been scanned

    Scan process 'winlogon.exe' - '1' Module(s) have been scanned

    Scan process 'csrss.exe' - '1' Module(s) have been scanned

    Scan process 'smss.exe' - '1' Module(s) have been scanned

    13 processes with 13 modules were scanned

     

    Starting master boot sector scan:

    Master boot sector HD0

    [iNFO] No virus was found!

    Master boot sector HD1

    [iNFO] No virus was found!

    [WARNING] Le périphérique n'est pas prêt.

    Master boot sector HD2

    [iNFO] No virus was found!

    [WARNING] Le périphérique n'est pas prêt.

    Master boot sector HD3

    [iNFO] No virus was found!

    [WARNING] Le périphérique n'est pas prêt.

    Master boot sector HD4

    [iNFO] No virus was found!

    [WARNING] Le périphérique n'est pas prêt.

     

    Start scanning boot sectors:

    Boot sector 'C:\'

    [iNFO] No virus was found!

     

    Starting to scan the registry.

    The registry was scanned ( '29' files ).

     

     

    Starting the file scan:

     

    Begin scan in 'C:\'

    C:\pagefile.sys

    [WARNING] The file could not be opened!

    C:\Documents and Settings\Klément\Local Settings\Temporary Internet Files\Content.IE5\WUPGC5H6\index[1].htm

    [DETECTION] Contains suspicious code HEUR/HTML.Malware

    [NOTE] The fund was classified as suspicious.

    [NOTE] A backup was created as '48c8d17f.qua' ( QUARANTINE )

     

     

    End of the scan: vendredi 27 juin 2008 14:05

    Used time: 47:48 min

     

    The scan has been done completely.

     

    4514 Scanning directories

    220352 Files were scanned

    0 viruses and/or unwanted programs were found

    1 Files were classified as suspicious:

    0 files were deleted

    0 files were repaired

    1 files were moved to quarantine

    0 files were renamed

    1 Files cannot be scanned

    220352 Files not concerned

    1730 Archives were scanned

    5 Warnings

    1 Notes

     

     

    Rapport HijackThis

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 20:56:10, on 27/06/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16674)

    Boot mode: Normal

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe

    C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    C:\WINDOWS\system32\nvsvc32.exe

    C:\WINDOWS\system32\HPZipm12.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\WgaTray.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Fichiers communs\AOL\1207766672\ee\AOLSoftware.exe

    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

    C:\WINDOWS\system32\RUNDLL32.EXE

    C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe

    C:\Program Files\Neuf\Kit\WiFi\9wifi.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\HijackThis\HijackThis.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx

    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe

    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1207766672\ee\AOLSoftware.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized

    O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe

    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

    O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1207994105343

    O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/inst...ctDetection.cab

    O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab

    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon888.free.fr/plugins/hardwared...on_2_0_4_13.cab

    O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe

    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

     

     

    a+ :P

  5. [résolu] Infections multiples

    dans Analyses et éradication malwares

    Posté(e)

    J'ai fait toute la procédure et voilà le dernier rapport HijackThis :

     

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 20:24:40, on 26/06/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16674)

    Boot mode: Normal

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe

    C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    C:\WINDOWS\system32\nvsvc32.exe

    C:\WINDOWS\system32\HPZipm12.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\WgaTray.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Fichiers communs\AOL\1207766672\ee\AOLSoftware.exe

    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

    C:\WINDOWS\system32\RUNDLL32.EXE

    C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe

    C:\Program Files\Neuf\Kit\WiFi\9wifi.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe

    C:\Program Files\HijackThis\HijackThis.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx

    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe

    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1207766672\ee\AOLSoftware.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized

    O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe

    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

    O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1207994105343

    O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/inst...ctDetection.cab

    O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab

    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon888.free.fr/plugins/hardwared...on_2_0_4_13.cab

    O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe

    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

     

     

    a+

  6. [résolu] Infections multiples

    dans Analyses et éradication malwares

    Posté(e)

    Je n'ai plus rien qui s'affiche en effet :P

     

    Et voilà pour le scan Antivir :

     

    Licensed to: Avira AntiVir PersonalEdition Classic

    Serial number: 0000149996-ADJIE-0001

    Platform: Windows XP

    Windows version: (Service Pack 2) [5.1.2600]

    Boot mode: Save mode

    Username: Cl€m€nt

    Computer name: TITANIUM

     

    Version information:

    BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00

    AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56

    AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37

    LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23

    LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40

    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

    ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 23:46:21

    ANTIVIR2.VDF : 7.0.5.2 2048 Bytes 24/06/2008 23:46:21

    ANTIVIR3.VDF : 7.0.5.3 2048 Bytes 24/06/2008 23:46:22

    Engineversion : 8.1.0.59

    AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21

    AESCRIPT.DLL : 8.1.0.44 278907 Bytes 24/06/2008 23:46:57

    AESCN.DLL : 8.1.0.22 119157 Bytes 24/06/2008 23:46:54

    AERDL.DLL : 8.1.0.20 418165 Bytes 24/06/2008 23:46:52

    AEPACK.DLL : 8.1.1.6 364918 Bytes 24/06/2008 23:46:48

    AEOFFICE.DLL : 8.1.0.20 192891 Bytes 24/06/2008 23:46:43

    AEHEUR.DLL : 8.1.0.32 1274231 Bytes 24/06/2008 23:46:41

    AEHELP.DLL : 8.1.0.15 115063 Bytes 24/06/2008 23:46:29

    AEGEN.DLL : 8.1.0.29 307573 Bytes 24/06/2008 23:46:28

    AEEMU.DLL : 8.1.0.6 430451 Bytes 24/06/2008 23:46:25

    AECORE.DLL : 8.1.0.31 168310 Bytes 24/06/2008 23:46:23

    AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53

    AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50

    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47

    AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49

    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

    AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31

    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

    SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39

    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

    RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25

    RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

     

    Configuration settings for the scan:

    Jobname..........................: Local Drives

    Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp

    Logging..........................: low

    Primary action...................: repair

    Secondary action.................: delete

    Scan master boot sector..........: on

    Scan boot sector.................: on

    Boot sectors.....................: C:, E:, F:, G:, H:, D:,

    Scan memory......................: on

    Process scan.....................: on

    Scan registry....................: on

    Search for rootkits..............: on

    Scan all files...................: All files

    Scan archives....................: on

    Recursion depth..................: 20

    Smart extensions.................: on

    Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,

    Macro heuristic..................: on

    File heuristic...................: high

     

    Start of the scan: jeudi 26 juin 2008 13:33

     

    Starting search for hidden objects.

    The driver could not be initialized.

     

    The scan of running processes will be started

    Scan process 'avscan.exe' - '1' Module(s) have been scanned

    Scan process 'avgas.exe' - '1' Module(s) have been scanned

    Scan process 'avcenter.exe' - '1' Module(s) have been scanned

    Scan process 'explorer.exe' - '1' Module(s) have been scanned

    Scan process 'svchost.exe' - '1' Module(s) have been scanned

    Scan process 'guard.exe' - '1' Module(s) have been scanned

    Scan process 'svchost.exe' - '1' Module(s) have been scanned

    Scan process 'svchost.exe' - '1' Module(s) have been scanned

    Scan process 'lsass.exe' - '1' Module(s) have been scanned

    Scan process 'services.exe' - '1' Module(s) have been scanned

    Scan process 'winlogon.exe' - '1' Module(s) have been scanned

    Scan process 'csrss.exe' - '1' Module(s) have been scanned

    Scan process 'smss.exe' - '1' Module(s) have been scanned

    13 processes with 13 modules were scanned

     

    Starting master boot sector scan:

    Master boot sector HD0

    [iNFO] No virus was found!

    Master boot sector HD1

    [iNFO] No virus was found!

    [WARNING] Le périphérique n'est pas prêt.

    Master boot sector HD2

    [iNFO] No virus was found!

    [WARNING] Le périphérique n'est pas prêt.

    Master boot sector HD3

    [iNFO] No virus was found!

    [WARNING] Le périphérique n'est pas prêt.

    Master boot sector HD4

    [iNFO] No virus was found!

    [WARNING] Le périphérique n'est pas prêt.

     

    Start scanning boot sectors:

    Boot sector 'C:\'

    [iNFO] No virus was found!

    Boot sector 'E:\'

    [iNFO] In the drive 'E:\' no data medium is inserted!

    Boot sector 'F:\'

    [iNFO] In the drive 'F:\' no data medium is inserted!

    Boot sector 'G:\'

    [iNFO] In the drive 'G:\' no data medium is inserted!

    Boot sector 'H:\'

    [iNFO] In the drive 'H:\' no data medium is inserted!

     

    Starting to scan the registry.

    The registry was scanned ( '29' files ).

     

     

    Starting the file scan:

     

    Begin scan in 'C:\'

    C:\pagefile.sys

    [WARNING] The file could not be opened!

    C:\Documents and Settings\Klément\Local Settings\Temporary Internet Files\Content.IE5\WUPGC5H6\index[1].htm

    [DETECTION] Contains suspicious code HEUR/HTML.Malware

    [NOTE] The fund was classified as suspicious.

    [NOTE] A backup was created as '48c7838d.qua' ( QUARANTINE )

    Begin scan in 'E:\'

    Search path E:\ could not be opened!

    Le périphérique n'est pas prêt.

     

    Begin scan in 'F:\'

    Search path F:\ could not be opened!

    Le périphérique n'est pas prêt.

     

    Begin scan in 'G:\'

    Search path G:\ could not be opened!

    Le périphérique n'est pas prêt.

     

    Begin scan in 'H:\'

    Search path H:\ could not be opened!

    Le périphérique n'est pas prêt.

     

    Begin scan in 'D:\'

    Search path D:\ could not be opened!

    Le périphérique n'est pas prêt.

     

     

     

    End of the scan: jeudi 26 juin 2008 14:26

    Used time: 53:20 min

     

    The scan has been done completely.

     

    4513 Scanning directories

    220304 Files were scanned

    0 viruses and/or unwanted programs were found

    1 Files were classified as suspicious:

    0 files were deleted

    0 files were repaired

    1 files were moved to quarantine

    0 files were renamed

    1 Files cannot be scanned

    220304 Files not concerned

    1728 Archives were scanned

    5 Warnings

    1 Notes

     

     

    J'ai aussi fait un scan avec AVG AS et il a détecté Not-a-virus.Hoax.Win32.Agent.ct et Not-a-virus.Downloader.Win32.WinFixer.fu dans le répertoire C:\System Volume Restore\...

     

    a+ :P

  7. [résolu] Infections multiples

    dans Analyses et éradication malwares

    Posté(e)

    Merci Angelique de vous occuper de mon problème :P

     

    SmitFraudFix v2.328

     

    Rapport fait à 20:23:11,31, 25/06/2008

    Executé à partir de C:\Documents and Settings\Cl?m?nt\Bureau\SmitfraudFix

    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT

    Le type du système de fichiers est NTFS

    Fix executé en mode normal

     

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix

    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

     

    SrchSTS.exe by S!Ri

    Search SharedTaskScheduler's .dll

     

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

     

     

    127.0.0.1 localhost

     

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix

     

    VACFix

    Credits: Malware Analysis & Diagnostic

    Code: S!Ri

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

     

    S!Ri's WS2Fix: LSP not Found.

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

     

    GenericRenosFix by S!Ri

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

     

    C:\Program Files\VirusHeat 4.4\ supprimé

     

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

     

    IEDFix

    Credits: Malware Analysis & Diagnostic

    Code: S!Ri

     

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

     

    404Fix

    Credits: Malware Analysis & Diagnostic

    Code: S!Ri

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

     

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{BDF53A50-B862-4C64-B09C-217AEC8D1DAA}: DhcpNameServer=192.168.1.1

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{F2221169-D4F7-4EE4-BE6C-5B2BFD73E261}: DhcpNameServer=192.168.30.1 0.0.0.0

    HKLM\SYSTEM\CS1\Services\Tcpip\..\{BDF53A50-B862-4C64-B09C-217AEC8D1DAA}: DhcpNameServer=192.168.1.1

    HKLM\SYSTEM\CS1\Services\Tcpip\..\{F2221169-D4F7-4EE4-BE6C-5B2BFD73E261}: DhcpNameServer=192.168.30.1 0.0.0.0

    HKLM\SYSTEM\CS2\Services\Tcpip\..\{BDF53A50-B862-4C64-B09C-217AEC8D1DAA}: DhcpNameServer=192.168.1.1

    HKLM\SYSTEM\CS2\Services\Tcpip\..\{F2221169-D4F7-4EE4-BE6C-5B2BFD73E261}: DhcpNameServer=192.168.30.1 0.0.0.0

    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0

    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0

    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System

    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

    "System"=""

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

     

    Nettoyage terminé.

     

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix

    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

     

    SrchSTS.exe by S!Ri

    Search SharedTaskScheduler's .dll

     

     

    »»»»»»»»»»»»»»»»»»»»»»»» Fin

     

     

    OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 06252008_202635

     

    C:\Program Files\AVG\AVG8 moved successfully.

    C:\Program Files\AVG moved successfully.

    File/Folder C:\Program Files\NoWayVirus not found.

    DllUnregisterServer procedure not found in C:\WINDOWS\system32\rtmipr.dll

    C:\WINDOWS\system32\rtmipr.dll NOT unregistered.

    C:\WINDOWS\system32\rtmipr.dll moved successfully.

    < EmptyTemp >

    Temp folders emptied.

    IE temp folders emptied.

     

     

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 20:32:57, on 25/06/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16674)

    Boot mode: Normal

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe

    C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    C:\WINDOWS\system32\nvsvc32.exe

    C:\WINDOWS\system32\HPZipm12.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\WgaTray.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Fichiers communs\AOL\1207766672\ee\AOLSoftware.exe

    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

    C:\WINDOWS\system32\RUNDLL32.EXE

    C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe

    C:\Program Files\Neuf\Kit\WiFi\9wifi.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\HijackThis\HijackThis.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx

    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O4 - HKLM\..\Run: [MircoSoftSN] system.exe

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe

    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1207766672\ee\AOLSoftware.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized

    O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe

    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

    O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1207994105343

    O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/inst...ctDetection.cab

    O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab

    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon888.free.fr/plugins/hardwared...on_2_0_4_13.cab

    O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe

    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

     

     

    a+ :P

  8. [résolu] Infections multiples

    dans Analyses et éradication malwares

    Posté(e) · Modifié par clemfou

    Bonjour !

    Je sollicite votre aide car je me suis fait avoir par tous ces pseudo-antimalware (Virus Heat, WinPC Doctor, NoWay Virus, Antimalware Guard, Malware War). Du coup, je me retrouve avec plein de fenêtres qui s'affichent et une alerte sécurité Windows permanente.

    Je n'avais jusqu'à présent aucune protection antivirus, antispyware, parefeu (j'aurais mieux fait de m'en préoccuper finalement !! :P ). Pour essayer de nettoyer tout ça, j'ai installé AVG Antispyware et Antivir.

    J'ai réalisé une analyse en mode sans échec avec ces deux logiciels : j'ai plusieurs dizianes de spyware, virus, trojan. (Fakealert, TR/Dldr.FraudLoad.azv, etc). J'en ai aussi profité pour désinstaller tous ces fichus programmes avec CCleaner.

     

    Je vous poste mon rapport HijackThis :

     

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 11:50:57, on 25/06/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16674)

    Boot mode: Normal

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe

    C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

    C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    C:\WINDOWS\system32\nvsvc32.exe

    C:\WINDOWS\system32\HPZipm12.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Fichiers communs\AOL\1207766672\ee\AOLSoftware.exe

    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

    C:\WINDOWS\system32\RUNDLL32.EXE

    C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe

    C:\Program Files\Neuf\Kit\WiFi\9wifi.exe

    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\WINDOWS\system32\WgaTray.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

    C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\HijackThis\HijackThis.exe

     

    R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://internetsearchservice.com

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://internetsearchservice.com/ie6.html

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://internetsearchservice.com

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)

    O2 - BHO: 834668 helper - {413B556F-9483-4319-9DCA-5378529986E2} - (no file)

    O2 - BHO: CIEIntegrator Object - {5C3F6257-3E00-45C2-88D5-CB0F3A17BF0E} - C:\Program Files\NoWayVirus\Tools\pblock.dll (file missing)

    O2 - BHO: IEFW Object - {6F87F145-DC2D-4766-AF03-3A3B96FFAD98} - C:\Program Files\NoWayVirus\Tools\sbiebho.dll (file missing)

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx

    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O4 - HKLM\..\Run: [MircoSoftSN] system.exe

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe

    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1207766672\ee\AOLSoftware.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized

    O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe

    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

    O4 - HKLM\..\RunServices: [MircoSoftSN] system.exe

    O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe"

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 4.0\resources\fr-FR\local\search.html

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll

    O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.getietool.com/redirect.php (file missing)

    O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.getietool.com/redirect.php (file missing)

    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1207994105343

    O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/inst...ctDetection.cab

    O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab

    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon888.free.fr/plugins/hardwared...on_2_0_4_13.cab

    O22 - SharedTaskScheduler: delayingly - {e89fa8e9-5c0b-45f6-a70e-f7b177bcd193} - C:\WINDOWS\system32\rtmipr.dll

    O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

    O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe

    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe

    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

     

     

    Merci beaucoup pour l'aide que vous pourrez m'apporter :P (je n'en peux plus de tous ces problèmes)

    a+

×
×
  • Créer...