SPAM Il y a trop de mails identiques envoyésRésolu/Fermé

Question

bonjour,voila avast me lance toujours le meme message des dixaine de  fois"Il y a trop de mails identiques envoyés dans un faible intervalle de temps"j'ai execute hijackthis et voici le logj'spere que quelqu'un peut m'aiderLogfile of HijackThis v1.99.1Scan saved at 15:39:07, on 13/09/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Installation\Alwil Software\Avast4\aswUpdSv.exeC:\WINDOWS\Explorer.EXEC:\Installation\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\CTsvcCDA.exeC:\Installation\Diskeeper\DkService.exeC:\WINDOWS\system32\svchost.exeC:\installation\Logitech\iTouch\iTouch.exeC:\INSTAL~2\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Program Files\Java\jre1.5.0_08\bin\jusched.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32\svchost.exeC:\Installation\Creative\MediaSource\Detector\CTDetect.exeC:\installation\Logitech\MouseWare\system\em_exec.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Installation\Alwil Software\Avast4\ashMaiSv.exeC:\Installation\Alwil Software\Avast4\ashWebSv.exeC:\Installation\BOINC\boincmgr.exeC:\Installation\BOINC\boinc.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Installation\BOINC\projects\setiathome.berkeley.edu\setiathome_5.15_windows_intelx86.exeC:\INSTAL~2\FIREFOX\FIREFOX.EXEC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\WINDOWS\system32\svchost.exeD:\Fichiers reçus\vir\hijackthis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neuf.frR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Installation\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dllO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [zBrowser Launcher] C:\installation\Logitech\iTouch\iTouch.exeO4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.ExeO4 - HKLM\..\Run: [avast!] C:\INSTAL~2\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -DelayO4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /wO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Creative Detector] C:\Installation\Creative\MediaSource\Detector\CTDetect.exe /RO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: BOINC Manager.lnk = C:\Installation\BOINC\boincmgr.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{65A68C76-A57C-474D-8578-4B86074A364B}: NameServer = 84.103.237.140 86.64.145.140O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO18 - Filter: text/html - (no CLSID) - (no file)O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Installation\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Installation\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Installation\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Installation\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exeO23 - Service: Diskeeper - Executive Software International, Inc. - C:\Installation\Diskeeper\DkService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

Utilisateur anonyme · Answer

Salut,Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe" O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cabO18 - Filter: text/html - (no CLSID) - (no file)Désactive le pare-feu le de Windows(SP2) car il ne sert à rien et remplace le par celui-ciKerio: (pare-feu, qui reste gratuit après la periode d'essai!)Kerio Personal Firewall-tutorial: pour configurer et comprendre l'utilisation de Keriohttps://kerio.probb.fr/Clic sur demarrer, rechercher, cherche et supprime ce fichier:smss.exe  <attention ne supprime pas celui présent dans /system32/**Si un fichier persiste lors de la suppression fais ceci:-Redemarres ton pc, dès l'allumage de celui-ci tapote la touche f8, à l'écran qui va apparaitre choisis "mode sans echec" attends un peu.. puis vas supprimer les fichiers/dossiers qui persistaient, vides ta corbeille et redemarres normalementTelecharge, installe puis mets à jour ce logiciel(Ewido), une fois que c'est fait, fais un scan complet de ton système et colle le rapport ici avec un nouveau rapport hijackthisEwido:  (reste gratuit après la période d'essai)Télécharger Ewido Security SuiteA++

staniceman · Answer

merci de ta reponse****voici le rapport de ewido---------------------------------------------------------ewido anti-spyware - Scan Report--------------------------------------------------------- + Created at:	13:42:41 14/09/2006 + Scan result:	:mozilla.16:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.17:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.18:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.62:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.:mozilla.63:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.C:\Documents and Settings\Stan\Cookies\stan@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.C:\Documents and Settings\Stan\Cookies\stan@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.:mozilla.14:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.C:\Documents and Settings\Stan\Cookies\stan@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.:mozilla.48:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Estat : Cleaned.:mozilla.42:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.:mozilla.43:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.C:\Documents and Settings\Stan\Cookies\stan@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned.:mozilla.7:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.:mozilla.8:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.:mozilla.9:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.C:\Documents and Settings\Stan\Cookies\stan@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned.:mozilla.38:C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\8e44g7xo.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.C:\Documents and Settings\Stan\Cookies\stan@weborama[1].txt -> TrackingCookie.Weborama : Cleaned.::Report end**** voici le rapport de hijackthisLogfile of HijackThis v1.99.1Scan saved at 13:45:10, on 14/09/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Installation\Alwil Software\Avast4\aswUpdSv.exeC:\Installation\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\CTsvcCDA.exeC:\Installation\Diskeeper\DkService.exeC:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exeC:\installation\Logitech\iTouch\iTouch.exeC:\INSTAL~2\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Installation\Creative\MediaSource\Detector\CTDetect.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Installation\BOINC\boincmgr.exeC:\WINDOWS\system32\svchost.exeC:\installation\Logitech\MouseWare\system\em_exec.exeC:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exeC:\Installation\Alwil Software\Avast4\ashMaiSv.exeC:\Installation\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exeC:\Installation\BOINC\boinc.exeC:\Installation\BOINC\projects\setiathome.berkeley.edu\setiathome_5.15_windows_intelx86.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\WINDOWS\system32\svchost.exeC:\instalaltion\ewido anti-spyware 4.0\guard.exeC:\instalaltion\ewido anti-spyware 4.0\ewido.exeC:\Installation\Satsuki Decoder Pack\mpc\mplayerc.exeC:\INSTAL~2\FIREFOX\FIREFOX.EXED:\Fichiers reçus\vir\hijackthis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neuf.frR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Installation\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dllO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [zBrowser Launcher] C:\installation\Logitech\iTouch\iTouch.exeO4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.ExeO4 - HKLM\..\Run: [avast!] C:\INSTAL~2\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -DelayO4 - HKLM\..\Run: [!ewido] "C:\instalaltion\ewido anti-spyware 4.0\ewido.exe" /minimizedO4 - HKCU\..\Run: [Creative Detector] C:\Installation\Creative\MediaSource\Detector\CTDetect.exe /RO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: BOINC Manager.lnk = C:\Installation\BOINC\boincmgr.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO17 - HKLM\System\CCS\Services\Tcpip\..\{65A68C76-A57C-474D-8578-4B86074A364B}: NameServer = 86.64.145.142 84.103.237.142O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Installation\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Installation\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Installation\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Installation\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exeO23 - Service: Diskeeper - Executive Software International, Inc. - C:\Installation\Diskeeper\DkService.exeO23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\instalaltion\ewido anti-spyware 4.0\guard.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exevoilamerci de ton aide

staniceman · Answer

oki alors voici le raport par contre c une page de code en html ^^ BitDefender Online Scanner -Scan Report

BitDefender Online Scanner

Scan report generated at: Thu, Sep 14, 2006 - 15:15:18

Scan path: A:\;C:\;D:\;E:\;F:\;G:\;

Statistics
Time	01:02:51
Files	239544
Folders	4080
Boot Sectors	3
Archives	4046
Packed Files	14124

Results
Identified Viruses	2
Infected Files	7
Suspect Files	0
Warnings	0
Disinfected	0
Deleted Files	7

Engines Info
Virus Definitions	454165
Engine build	AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)
Scan plugins	13
Archive plugins	38
Unpack plugins	6
E-mail plugins	6
System plugins	1

Scan Settings
First Action	Disinfect
Second Action	Delete
Heuristics	Yes
Enable Warnings	Yes
Scanned Extensions	*;
Exclude Extensions
Scan Emails	Yes
Scan Archives	Yes
Scan Packed	Yes
Scan Files	Yes
Scan Boot	Yes

Scanned File	Status
C:\Documents and Settings\Stan\Local Settings\Temp\28exhdd.9.exe	Infected with: Trojan.Zlob.Gen
C:\Documents and Settings\Stan\Local Settings\Temp\28exhdd.9.exe	Disinfection failed
C:\Documents and Settings\Stan\Local Settings\Temp\28exhdd.9.exe	Deleted
C:\Documents and Settings\Stan\Local Settings\Temp\30exmodul32c.2.exe	Infected with: Trojan.Zlob.Gen
C:\Documents and Settings\Stan\Local Settings\Temp\30exmodul32c.2.exe	Disinfection failed
C:\Documents and Settings\Stan\Local Settings\Temp\30exmodul32c.2.exe	Deleted
C:\Documents and Settings\Stan\Local Settings\Temp\50exmodul32c.2.exe	Infected with: Trojan.Zlob.Gen
C:\Documents and Settings\Stan\Local Settings\Temp\50exmodul32c.2.exe	Disinfection failed
C:\Documents and Settings\Stan\Local Settings\Temp\50exmodul32c.2.exe	Deleted
C:\Documents and Settings\Stan\Local Settings\Temp\80exhdd.9.exe	Infected with: Trojan.Zlob.Gen
C:\Documents and Settings\Stan\Local Settings\Temp\80exhdd.9.exe	Disinfection failed
C:\Documents and Settings\Stan\Local Settings\Temp\80exhdd.9.exe	Deleted
C:\Documents and Settings\Stan\Local Settings\Temp\83exssd32.6.exe	Infected with: Trojan.Zlob.Gen
C:\Documents and Settings\Stan\Local Settings\Temp\83exssd32.6.exe	Disinfection failed
C:\Documents and Settings\Stan\Local Settings\Temp\83exssd32.6.exe	Deleted
D:\System Volume Information\_restore{9271B3FF-638D-4E32-B1AE-B8ED0D8280C5}\RP184\A0044573.exe	Infected with: Trojan.Zlob.Gen
D:\System Volume Information\_restore{9271B3FF-638D-4E32-B1AE-B8ED0D8280C5}\RP184\A0044573.exe	Disinfection failed
D:\System Volume Information\_restore{9271B3FF-638D-4E32-B1AE-B8ED0D8280C5}\RP184\A0044573.exe	Deleted
D:\System Volume Information\_restore{9271B3FF-638D-4E32-B1AE-B8ED0D8280C5}\RP186\A0046905.exe	Infected with: Trojan.Zlob.Gen
D:\System Volume Information\_restore{9271B3FF-638D-4E32-B1AE-B8ED0D8280C5}\RP186\A0046905.exe	Disinfection failed
D:\System Volume Information\_restore{9271B3FF-638D-4E32-B1AE-B8ED0D8280C5}\RP186\A0046905.exe	Deleted

staniceman · Answer

okc'est tout faitc'est fini alors?ben merci bien pour ta précieuse aide

staniceman · Answer

voila le raport hijackthisLogfile of HijackThis v1.99.1Scan saved at 17:40:24, on 14/09/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Installation\Alwil Software\Avast4\aswUpdSv.exeC:\Installation\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\CTsvcCDA.exeC:\Installation\Diskeeper\DkService.exeC:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exeC:\installation\Logitech\iTouch\iTouch.exeC:\INSTAL~2\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Installation\Creative\MediaSource\Detector\CTDetect.exeC:\Installation\BOINC\boincmgr.exeC:\WINDOWS\system32\svchost.exeC:\installation\Logitech\MouseWare\system\em_exec.exeC:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exeC:\Installation\Alwil Software\Avast4\ashMaiSv.exeC:\Installation\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exeC:\Installation\BOINC\boinc.exeC:\Installation\BOINC\projects\setiathome.berkeley.edu\setiathome_5.15_windows_intelx86.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\WINDOWS\system32\svchost.exeC:\instalaltion\ewido anti-spyware 4.0\guard.exeC:\instalaltion\ewido anti-spyware 4.0\ewido.exeC:\Installation\Winamp\Winamp.exeD:\Fichiers reçus\vir\hijackthis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neuf.frR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Installation\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dllO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [zBrowser Launcher] C:\installation\Logitech\iTouch\iTouch.exeO4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.ExeO4 - HKLM\..\Run: [avast!] C:\INSTAL~2\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -DelayO4 - HKLM\..\Run: [!ewido] "C:\instalaltion\ewido anti-spyware 4.0\ewido.exe" /minimizedO4 - HKCU\..\Run: [Creative Detector] C:\Installation\Creative\MediaSource\Detector\CTDetect.exe /RO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: BOINC Manager.lnk = C:\Installation\BOINC\boincmgr.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dllO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{65A68C76-A57C-474D-8578-4B86074A364B}: NameServer = 86.64.145.142 84.103.237.142O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Installation\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Installation\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Installation\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Installation\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exeO23 - Service: Diskeeper - Executive Software International, Inc. - C:\Installation\Diskeeper\DkService.exeO23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\instalaltion\ewido anti-spyware 4.0\guard.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

staniceman · Answer

ouais nickel y a plus rien qui s'affichet'es un asmerci

Utilisateur anonyme · Answer

ok, c'est cool alors ;-)Bon surf !A++

SPAM Il y a trop de mails identiques envoyés

7 réponses

Discussions similaires

Newsletters