[virus ou ver ] fonctionnement étrange de W2KRésolu/Fermé

Question

Bonjour,Depuis 1 semaine, je suis confronté à quelques soucis :- Impossible d'effectuer window update- Impossible d'ouvrir Norton (supprimé depuis avec quelques difficultés !!)- Ctrl+alt+supp inefficace (rien ne se passe )-Impossible d'ouvrir regedit (démarrer, executer, regedit) sauf en mode sans échecAurai je un clandestin ?(voire plus ...!)Windows 2000 SP4 (WinNT 5.00.2195), sur un  P3- anti virus avast résultat : Randex +trojan digits + média motor- quelques passages de Ad-aware +ccleaner+spybot sans amélioration.Avant de bricoler à l'aide de hijackthis, pourriez vous me donner quelques conseils avertis s'il vous plaitMercije joints le log de hijackthisLogfile of HijackThis v1.99.1Scan saved at 11:33:14, on 31/12/2005Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINNT\System32\svchost.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\MSSQL7\binn\sqlservr.exeC:\WINNT\system32egsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\System32	cpsvcs.exeC:\WINNT\System32\snmp.exeC:\WINNT\Explorer.EXEC:\WINNT\system32\stisvc.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\System32\mspmspsv.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\inetsrv\inetinfo.exeC:\MSSQL7\binn\sqlagent.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\WINNT\system32\MStools1.exeC:\WINNT\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\essais\en attente\a suivre\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO1 - Hosts: 205.238.40.2 www.winmx.comO1 - Hosts: 205.238.40.2 err.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1301.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1301.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1301.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1301.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1301.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1301.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1301.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1301.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1301.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1301.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1302.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1302.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1302.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1302.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1302.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1302.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1302.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3310.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3312.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3313.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3314.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3316.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3317.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3318.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3319.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1304.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1304.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1304.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1304.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1304.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1304.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1304.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1304.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1304.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1304.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1305.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1305.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1305.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1305.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1305.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1305.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1305.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1305.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1305.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1305.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1306.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1306.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1306.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1306.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1306.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1306.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1306.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1306.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1306.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1306.winmx.comO1 - Hosts: 205.238.40.2 c3520.z1301.winmx.comO1 - Hosts: 67.18.233.36 c3521.z1301.winmx.comO1 - Hosts: 82.43.224.20 c3522.z1301.winmx.comO1 - Hosts: 209.67.209.50 c3523.z1301.winmx.comO1 - Hosts: 212.227.64.159 c3524.z1301.winmx.comO1 - Hosts: 205.238.40.2 c3525.z1301.winmx.comO1 - Hosts: 67.18.233.36 c3526.z1301.winmx.comO1 - Hosts: 82.43.224.20 c3527.z1301.winmx.comO1 - Hosts: 209.67.209.50 c3528.z1301.winmx.comO1 - Hosts: 212.227.64.159 c3529.z1301.winmx.comO1 - Hosts: 205.238.40.2 c3520.z1302.winmx.comO1 - Hosts: 67.18.233.36 c3521.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3522.z1302.winmx.comO1 - Hosts: 209.67.209.50 c3523.z1302.winmx.comO1 - Hosts: 212.227.64.159 c3524.z1302.winmx.comO1 - Hosts: 205.238.40.2 c3525.z1302.winmx.comO1 - Hosts: 67.18.233.36 c3526.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3527.z1302.winmx.comO1 - Hosts: 209.67.209.50 c3528.z1302.winmx.comO1 - Hosts: 212.227.64.159 c3529.z1302.winmx.comO1 - Hosts: 205.238.40.2 c3520.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3521.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3522.z1303.winmx.comO1 - Hosts: 209.67.209.50 c3523.z1303.winmx.comO1 - Hosts: 212.227.64.159 c3524.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3525.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3526.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3527.z1303.winmx.comO1 - Hosts: 209.67.209.50 c3528.z1303.winmx.comO1 - Hosts: 212.227.64.159 c3529.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3520.z1304.winmx.comO1 - Hosts: 67.18.233.36 c3521.z1304.winmx.comO1 - Hosts: 82.43.224.20 c3522.z1304.winmx.comO1 - Hosts: 209.67.209.50 c3523.z1304.winmx.comO1 - Hosts: 212.227.64.159 c3524.z1304.winmx.comO1 - Hosts: 205.238.40.2 c3525.z1304.winmx.comO1 - Hosts: 67.18.233.36 c3526.z1304.winmx.comO1 - Hosts: 82.43.224.20 c3527.z1304.winmx.comO1 - Hosts: 209.67.209.50 c3528.z1304.winmx.comO2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocxO3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO4 - HKLM\..\Run: [OWS Setup CmdLine] "C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\40\bin\cfgwiz.exe" /r /pkg  "Office 2000 Server Extensions" /qO4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBarO4 - HKLM\..\Run: [MSConfig] C:\WINNT\system32\msconfig.exe /autoO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [Microsoft Service TOols] MStools1.exeO4 - HKLM\..\RunServices: [Microsoft Service TOols] MStools1.exeO4 - HKCU\..\Run: [Microsoft Service TOols] MStools1.exeO4 - HKCU\..\RunServices: [Microsoft Service TOols] MStools1.exeO8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htmO8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.htmlO8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htmO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.htmlO8 - Extra context menu item: Personnaliser - C:\Program Files\PROMT98\promtie4\options.htmO8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.htmlO8 - Extra context menu item: Rechercher sur Internet - C:\Program Files\PROMT98\promtie4\search.htmO8 - Extra context menu item: Traduire - C:\Program Files\PROMT98\promtie4	ranslat.htmO8 - Extra context menu item: Traduire dans WebView - C:\Program Files\PROMT98\promtie4\webview.htmO8 - Extra context menu item: Traduire la page - C:\Program Files\PROMT98\promtie4\page.htmO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.htmlO9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS
ppdf32.dllO16 - DPF: {08BEF711-06DA-48B2-9534-802ECAA2E4F9} (PlxInstall Class) - https://www.plaxo.com/down/release/PlaxoInstall.cabO16 - DPF: {16A7470E-229C-45F9-AE05-A87034FD14CF} - http://12.sharedsource.org/html/UDConn_5.2.1.3.cab?O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125335988299O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/fr/check/qdiagh.cab?323O18 - Protocol: stibo - {FFAD3420-6D61-44F6-BA25-293F17152D79} - C:\Program Files\Fichiers communs\Stibo\RS_ProtocolHandler.dllO20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32
wprovau.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exeO23 - Service: GBPoll - Roxio, Inc. - C:\Program Files\Roxio\GoBack\GBPoll.exeO23 - Service: O&O Defrag (OODefrag) - O&O Software GmbH - C:\WINNT\system32\oodag.exeO23 - Service: Office Server Extensions Notification Service (OWSTimer) - Unknown owner - C:\Program Files\Microsoft Office\Office\OWSTIMER.EXEO23 - Service: Sound Sservice Driver  (Sound Service) - Unknown owner - C:\WINNT\system32\cfmon.exe (file missing)

ben13010 · Answer

salut fixe ca et supprime les fichiers en gras O1 - Hosts: 205.238.40.2 www.winmx.comO1 - Hosts: 205.238.40.2 err.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1301.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1301.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1301.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1301.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1301.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1301.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1301.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1301.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1301.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1301.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1302.winmx.comools1.exeO4 - HKCU\..\RunServices: [Microsoft Service TOols] MStoO1 - Hosts: 67.18.233.36 c3311.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1302.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1302.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1302.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1302.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1302.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1302.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3310.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3312.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3313.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3314.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3316.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3317.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3318.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3319.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1304.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1304.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1304.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1304.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1304.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1304.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1304.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1304.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1304.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1304.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1305.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1305.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1305.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1305.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1305.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1305.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1305.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1305.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1305.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1305.winmx.comO1 - Hosts: 205.238.40.2 c3310.z1306.winmx.comO1 - Hosts: 67.18.233.36 c3311.z1306.winmx.comO1 - Hosts: 82.43.224.20 c3312.z1306.winmx.comO1 - Hosts: 209.67.209.50 c3313.z1306.winmx.comO1 - Hosts: 212.227.64.159 c3314.z1306.winmx.comO1 - Hosts: 205.238.40.2 c3315.z1306.winmx.comO1 - Hosts: 67.18.233.36 c3316.z1306.winmx.comO1 - Hosts: 82.43.224.20 c3317.z1306.winmx.comO1 - Hosts: 209.67.209.50 c3318.z1306.winmx.comO1 - Hosts: 212.227.64.159 c3319.z1306.winmx.comO1 - Hosts: 205.238.40.2 c3520.z1301.winmx.comO1 - Hosts: 67.18.233.36 c3521.z1301.winmx.comO1 - Hosts: 82.43.224.20 c3522.z1301.winmx.comO1 - Hosts: 209.67.209.50 c3523.z1301.winmx.comO1 - Hosts: 212.227.64.159 c3524.z1301.winmx.comO1 - Hosts: 205.238.40.2 c3525.z1301.winmx.comO1 - Hosts: 67.18.233.36 c3526.z1301.winmx.comO1 - Hosts: 82.43.224.20 c3527.z1301.winmx.comO1 - Hosts: 209.67.209.50 c3528.z1301.winmx.comO1 - Hosts: 212.227.64.159 c3529.z1301.winmx.comO1 - Hosts: 205.238.40.2 c3520.z1302.winmx.comO1 - Hosts: 67.18.233.36 c3521.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3522.z1302.winmx.comO1 - Hosts: 209.67.209.50 c3523.z1302.winmx.comO1 - Hosts: 212.227.64.159 c3524.z1302.winmx.comO1 - Hosts: 205.238.40.2 c3525.z1302.winmx.comO1 - Hosts: 67.18.233.36 c3526.z1302.winmx.comO1 - Hosts: 82.43.224.20 c3527.z1302.winmx.comO1 - Hosts: 209.67.209.50 c3528.z1302.winmx.comO1 - Hosts: 212.227.64.159 c3529.z1302.winmx.comO1 - Hosts: 205.238.40.2 c3520.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3521.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3522.z1303.winmx.comO1 - Hosts: 209.67.209.50 c3523.z1303.winmx.comO1 - Hosts: 212.227.64.159 c3524.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3525.z1303.winmx.comO1 - Hosts: 67.18.233.36 c3526.z1303.winmx.comO1 - Hosts: 82.43.224.20 c3527.z1303.winmx.comO1 - Hosts: 209.67.209.50 c3528.z1303.winmx.comO1 - Hosts: 212.227.64.159 c3529.z1303.winmx.comO1 - Hosts: 205.238.40.2 c3520.z1304.winmx.comO1 - Hosts: 67.18.233.36 c3521.z1304.winmx.comO1 - Hosts: 82.43.224.20 c3522.z1304.winmx.comO1 - Hosts: 209.67.209.50 c3523.z1304.winmx.comO1 - Hosts: 212.227.64.159 c3524.z1304.winmx.comO1 - Hosts: 205.238.40.2 c3525.z1304.winmx.comO1 - Hosts: 67.18.233.36 c3526.z1304.winmx.comO1 - Hosts: 82.43.224.20 c3527.z1304.winmx.comO1 - Hosts: 209.67.209.50 c3528.z1304.winmx.com O4 - HKLM\..\Run: [Microsoft Service TOols] MStools1.exeO4 - HKLM\..\RunServices: [Microsoft Service TOols] MStools1.exeO4 - HKCU\..\Run: [Microsoft Service TOols] MStols1.exe O16 - DPF: {08BEF711-06DA-48B2-9534-802ECAA2E4F9} (PlxInstall Class) - https://www.plaxo.com/down/release/PlaxoInstall.cabO16 - DPF: {16A7470E-229C-45F9-AE05-A87034FD14CF} - http://12.sharedsource.org/html/UDConn_5.2.1.3.cab?O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125335988299O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/fr/check/qdiagh.cab?323 remet un jijack ensuite

dalton1 · Answer

boulepateBonjour et meilleurs voeux, ci-joint le log de hijack this.Existerait-il un autre Pb ? à priori tout fonctionne correctement.MerciLogfile of HijackThis v1.99.1Scan saved at 11:53:13, on 01/01/2006Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINNT\System32\svchost.exeC:\Program Files\Roxio\GoBack\GBPoll.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\MSSQL7\binn\sqlservr.exeC:\WINNT\system32egsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\System32	cpsvcs.exeC:\WINNT\System32\snmp.exeC:\WINNT\system32\stisvc.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\System32\mspmspsv.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\inetsrv\inetinfo.exeC:\MSSQL7\binn\sqlagent.exeC:\WINNT\System32\svchost.exeC:\WINNT\Explorer.EXEC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\WINNT\system32\ctfmon.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Outlook Express\msimn.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\PROGRA~1\MOZILL~1\FIREFOX.EXEC:\hijackthis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocxO3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO4 - HKLM\..\Run: [OWS Setup CmdLine] "C:\Program Files\Fichiers communs\Microsoft Shared\Web Server Extensions\40\bin\cfgwiz.exe" /r /pkg  "Office 2000 Server Extensions" /qO4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBarO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exeO8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.htmlO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.htmlO8 - Extra context menu item: Personnaliser - C:\Program Files\PROMT98\promtie4\options.htmO8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.htmlO8 - Extra context menu item: Rechercher sur Internet - C:\Program Files\PROMT98\promtie4\search.htmO8 - Extra context menu item: Traduire - C:\Program Files\PROMT98\promtie4	ranslat.htmO8 - Extra context menu item: Traduire dans WebView - C:\Program Files\PROMT98\promtie4\webview.htmO8 - Extra context menu item: Traduire la page - C:\Program Files\PROMT98\promtie4\page.htmO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.htmlO9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS
ppdf32.dllO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1136040879995O17 - HKLM\System\CCS\Services\Tcpip\..\{D8710B84-8736-445E-9265-EE6F8C2DC72E}: NameServer = 212.151.136.242 212.151.137.166O18 - Protocol: stibo - {FFAD3420-6D61-44F6-BA25-293F17152D79} - C:\Program Files\Fichiers communs\Stibo\RS_ProtocolHandler.dllO20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32
wprovau.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exeO23 - Service: GBPoll - Roxio, Inc. - C:\Program Files\Roxio\GoBack\GBPoll.exeO23 - Service: O&O Defrag (OODefrag) - O&O Software GmbH - C:\WINNT\system32\oodag.exeO23 - Service: Office Server Extensions Notification Service (OWSTimer) - Unknown owner - C:\Program Files\Microsoft Office\Office\OWSTIMER.EXEO23 - Service: Sound Sservice Driver  (Sound Service) - Unknown owner - C:\WINNT\system32\cfmon.exe (file missing)

[virus ou ver ] fonctionnement étrange de W2K

2 réponses

Discussions similaires

Newsletters