Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Analyse Hijack

JuanPa

Par JuanPa
dans Analyses et éradication malwares

 Partager

Messages recommandés

JuanPa Member

JuanPa

Posté(e)
Posté(e)

Bonjour,

 

Je viens de découvrir ce forum qui m'a l'air des plus intéressant....je me suis aussitot repporter à la rubrique sécurité car en ce moment j ai de gros doute de contamination...

je me suis empresser d'installer Hijack dont voici le log.

 

Mais au début du scan il m'a mis ces alertes.... :P J'ai envoyé à l'adresse indiquée...le mail est revenu...

 

 

An unexpected error has occurred at procedure: modRegistry_IniGetString(sFile=system.ini, sSection=boot, sValue=Shell)

Error #5 - Argument ou appel de procédure incorrect

 

Please email me at merijn@spywareinfo.com, reporting the following:

* What you were trying to fix when the error occurred, if applicable

* How you can reproduce the error

* A complete HijackThis scan log, if possible

 

Windows version: Windows NT 5.01.2600

MSIE version: 6.0.2900.2180

HijackThis version: 1.99.1

 

An unexpected error has occurred at procedure: modRegistry_IniGetString(sFile=win.ini, sSection=windows, sValue=load)

Error #5 - Argument ou appel de procédure incorrect

 

Please email me at merijn@spywareinfo.com, reporting the following:

* What you were trying to fix when the error occurred, if applicable

* How you can reproduce the error

* A complete HijackThis scan log, if possible

 

Windows version: Windows NT 5.01.2600

MSIE version: 6.0.2900.2180

HijackThis version: 1.99.1

 

An unexpected error has occurred at procedure: modMain_CheckOther1Item()

Error #5 - Argument ou appel de procédure incorrect

 

Please email me at merijn@spywareinfo.com, reporting the following:

* What you were trying to fix when the error occurred, if applicable

* How you can reproduce the error

* A complete HijackThis scan log, if possible

 

Windows version: Windows NT 5.01.2600

MSIE version: 6.0.2900.2180

HijackThis version: 1.99.1

 

This message has been copied to your clipboard.

Click OK to continue the rest of the scan.

 

 

 

 

Voici maintenant le logfile..................

 

 

 

Logfile of HijackThis v1.99.1

Scan saved at 16:44:35, on 23/12/2005

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Hijackthis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.9online.fr

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cyberfly.9online.fr/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cyberfly.9online.fr/index1a.html

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 211.184.2.252:8080

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL

N3 - Netscape 7: user_pref("browser.startup.homepage", "http://home.netscape.com/bookmark/7_2/home.html"); (C:\Documents and Settings\CyberJuan\Application Data\Mozilla\Profiles\default\ra0roqxe.slt\prefs.js)

N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src"); (C:\Documents and Settings\CyberJuan\Application Data\Mozilla\Profiles\default\ra0roqxe.slt\prefs.js)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - (no file)

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Multimedia keyboard utility\1.3\MMKEYBD.EXE

O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [sSBkgdUpdate] C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [LDM] \Program\

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm

O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT

O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm

O8 - Extra context menu item: Download by Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm

O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm

O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm

O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll

O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll

O17 - HKLM\System\CCS\Services\Tcpip\..\{721F0A76-D5E2-49EE-AEB6-8008E668EBF1}: NameServer = 80.119.119.116

O18 - Protocol: bw+0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw+0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: bwg0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwg0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwk0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwk0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bws0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bws0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O18 - Protocol: offline-8876480 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O20 - Winlogon Notify: acclog - C:\WINDOWS\

O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE

O23 - Service: CachemanXP (CachemanXPService) - OuterTechnologies - C:\PROGRA~1\CACHEM~1\CachemanXP.exe

O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe

O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe

O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe

O23 - Service: Steganos Live Encryption Engine 12 [service] (SLEE_12_SERVICE) - Unknown owner - C:\WINDOWS\system32\SLEE12.exe

O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

 

 

 

Je remercie d'avances ceux qui vont ce pencher sur ce...comment dirais-je......charabia...... lol :P

JuanPa Member

JuanPa

Posté(e)
  • Auteur
Posté(e)

Re.....

 

Quand je dis j'ai des doutes....c'est qu'au démarrage il veut tjrs accéder à internet via svchost tjrs vers la même adresse 239.255.255.250 port 1900 j'arrive pas à savoir ce que c'est...

 

Et quand je lances une impression, il veux se connecter à internet là par contre l'adresse change.

je veux imprimer un truc et paf connection internet ça le faisait pas avant. Bon avant elle était en réseau privé mais le réseau n'existe plus et l'imprimante n'est pas configurer pour....voilà

 

 

@+

Jack_Burton Godlike Member

Jack_Burton

Posté(e)
Posté(e) (modifié)

Bonsoir et bienvenu sur le forum sécurité de zebulon,

 

Je ne vois rien d infectueux sur ce rapport mis a part de nombreuses lignes inutiles!

 

lance un scan HijackThis, clique sur "Do a system scan only" et coche les lignes ci-dessous (si présentes) :

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.9online.fr

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cyberfly.9online.fr/index1a.html

 

O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - (no file)

 

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

 

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

 

O18 - Protocol: bw+0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw+0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw-0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw00s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw10s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw20s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw30s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw40s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw50s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw60s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw70s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw80s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bw90s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwa0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwb0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwc0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwd0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwe0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwf0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: bwg0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwg0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwh0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwi0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwj0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwk0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwk0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwl0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwm0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwn0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwo0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwp0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwq0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwr0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bws0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bws0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwt0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwu0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwv0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bww0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwx0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwy0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0 - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Protocol: bwz0s - {DADF0533-ACF6-4866-97E7-D44481B1AC90} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

 

O20 - Winlogon Notify: acclog - C:\WINDOWS\

 

Ferme toutes les fenêtres sauf HijackThis et "Fix Checked".

 

Désinstalle un des antivirus!

 

Concernant ton probleme : je vais te faire scanner ton systeme avec Ewido :

Télécharge la version d'essai d'Ewido ici :

 

http://www.ewido.net/fr/

 

et l'installer (important: pendant l'installation, sur la page "Additional Options" décocher les deux options "Install background guard" et "Install scan via context menu").

 

Démarrer ewido. Cliquer sur mise à jour, attendre la fin de cette mise à jour puis, fermer le programme.

 

Lorsque vous étes passé en mode sans échec, relancer Ewido et cliquer sur scanner puis sur scan complet du système.

 

Si des fichiers infectés sont trouvés, garder l'option par défaut Supprimer (avec la ligne "Créer des copies de sauvegarde cryptées dans la quarantaine" cochée).

 

A la fin du scan, Sauver le rapport (Fichier/Enregistrer sous...) et l'envoyer

Modifié par Jack_Burton
JuanPa Member

JuanPa

Posté(e)
  • Auteur
Posté(e)

ok merci pour cette réponse........rapide de surcroit.

 

donc j'ai lancer hijack en scan seul puis supprimer les lignes....

Puis fait un scan ewido en mode sans échec dont voici le log

 

---------------------------------------------------------

ewido anti-malware - Rapport de scan

---------------------------------------------------------

 

+ Créé le: 20:31:08, 23/12/2005

+ Somme de contrôle: BCC84763

 

+ Résultats du scan:

 

HKLM\SOFTWARE\Classes\CLSID\{00000015-A527-34E7-25C2-03A4E313B2E9} -> Spyware.Ramdud : Nettoyer et sauvegarder

C:\Documents and Settings\CyberJuan\Bureau\ErrorSafeScannerInstall_fr.exe -> Not-A-Virus.Downloader.Agent.d : Nettoyer et sauvegarder

C:\Documents and Settings\CyberJuan\Bureau\sous le coude\...\?.zip/?.exe -> Trojan.Agent.jh : Nettoyer et sauvegarder

C:\Program Files\IncrediMail\bin\?.exe -> Trojan.Agent.jh : Nettoyer et sauvegarder

C:\WINDOWS\system32\drivers\erssdd.sys -> Trojan.Rootkit.Agent.af : Nettoyer et sauvegarder

C:\WINDOWS\system32\drivers\etc\hosts -> Trojan.Qhost.r : Nettoyer et sauvegarder

C:\WINDOWS\system32\winsrvs_1.dll -> Spyware.Ramdud : Nettoyer et sauvegarder

I:\Humour\Truc à la con\Viagra.exe -> Not-A-Virus.Joke.Viagra : Nettoyer et sauvegarder

 

 

::Fin du rapport

 

NB:...j'ai remplacer le nom de 2 ou 3 fichiers par des ? :P

 

ooops! j' ai oublié de demander pourquoi vous m'avez demandé de désinstaller un des deux antivirus car je n'en est qu'un d'installer : Antivir

 

Merci encore !

Jack_Burton Godlike Member

Jack_Burton

Posté(e)
Posté(e) (modifié)

Re bonsoir,

 

Tu avais quelques saletés! Mais ewido a bien travaillé!!

 

Ton fichier hosts était infecté!

Il va falloir le remettre par défaut :

télécharge Hoster: http://www.funkytoad.com/download/hoster.zip

Dézippe le sur le bureau.

 

Ouvre Hoster et clique sur 'Restore original Hosts'

Modifié par Jack_Burton
JuanPa Member

JuanPa

Posté(e)
  • Auteur
Posté(e)

Encore milles merci ............

 

Mais je voulais savoir pour cette tentatives de connection au démarrage qui est tjrs là........

 

Generic Host Processing for Windows tente d'accéder à internet : 239.255.255.250 port 1900

 

qu'est ce que c'est.....j ai essayé de tracer avec visualroute mais ...... :P

 

 

 

Allez, passez tous un Joyeux Noël et de bonne fêtes de fin d'Année...

 

JOYEUX NOEL ET BONNE ANNEE.

 

JUAN

Jack_Burton Godlike Member

Jack_Burton

Posté(e)
Posté(e) (modifié)

Bonjour,

 

Generic Host Processing for Windows tente d'accéder à internet : 239.255.255.250 port 1900

 

qu'est ce que c'est.....j ai essayé de tracer avec visualroute mais ...... mhh.gif

C est un processus générique de windows!

Pour ma part, je lui interdit l acces au net pour plus de sécurité en le bloquant avec mon parfeu!

 

Joyeux noel a toi aussi!

Modifié par Jack_Burton
JuanPa Member

JuanPa

Posté(e)
  • Auteur
Posté(e)

ok...j'interdis aussi mais je ne peux pas appliquer toujours interdire car sinon je ne peux plus me connecter

au net.....donc à chaque démarrage je refuse......mais qu'advient-il si je lui donne accès.....

 

 

Franchement, c'est de pire en pire Internet.....que des virus que des trojans et merdes en tout genre....

Domage ce serait tellement bien sans ces soucis de sécurité.......oui je sais ...j"suis un utopiste...

 

 

Noyeux Joël !!!!! lol

Thanos Devil Member !

Thanos

Posté(e)
Posté(e)

salut Jack :P ,JuanPa

 

Une petite info concernant cette ip qui reviens à la charge!: 239.255.255.250

 

Une recherche sur cette adresse te donnerai ceci=>

OrgName: Internet Assigned Numbers Authority

OrgID: IANA

Address: 4676 Admiralty Way, Suite 330

City: Marina del Rey

StateProv: CA

PostalCode: 90292-6695

Country: US

C'est l'adresse de l'organisme en charge de l'adressage ip situé aux USA!! comme expliqué ici=>

 

http://fr.wikipedia.org/wiki/Internet_Assi...mbers_Authority

 

Il ne faut donc pas interdire cette adresse :P

 

@+

JuanPa Member

JuanPa

Posté(e)
  • Auteur
Posté(e) (modifié)

Salut Charles,

 

merci pour l'info.....

 

 

J'ai bien essayer de tracer l'ip avec un logiciel comme visualroute mais sans succès...il me trouve rien

En tout cas merci !

 

c'est pas primordial....je bloque quand même.....non?!

Modifié par JuanPa

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...