Avast><outpost firewall

Bonjour Pascal

Est ce que ton infection msn a été traitée ?

Outpost est un parefeu, Avast un antivirus ils sont compatibles et complementaires, mais je n aime pas Avast, je te dirai pourquoi ;-)

Quelle version d Outpost as tu ?

Quand a outpost, si c est la 4.0 , alors il faut desactiver son antilogiciel espion qui mange enormement de ressources, voir si les ralentissements ne seraient pas du a ce dernier :

Lance Outpost / outils / applications et clique sur pluging et puis sur antilogiciel espion et desactivé puis appliquer et ok.

@ suivre

Bonjour,
Re... merci de cme consacrer du temps d'autant plus que je n'y connais pas grand chose.
Alors commençons par le plus facile: ma version de outpost est la outpost firewall pro. je ne dois donc rien faire de plus et mon ordi a maintenant un pare-feu?
Ensuite, je n'ai pas encore traité mon infection msn. je me suis pour l'instant contenté de supprimer msn... j'allais y retourner quand j'ai reçu ton mail... mon infection est-elle résolue selon toi? Si non, pourrais-tu à nouveau m'aider,
Merci.

re

non, cela ne suffit pas de supprimer msn ..

Fais ceci Lance Outpost / outils / applications et clique sur pluging et puis sur antilogiciel espion et desactivé puis appliquer et ok.

Puis cela


MSNFix.zip de !aur3n7

Téléchargez MSNFix.zip (de !aur3n7) sur votre bureau:
http://sosvirus.changelog.fr/MSNFix.zip
Décompressez-le (clic droit >> Extraire ici) et double cliquer sur le fichier MSNFix.bat.
- Exécutez l'option R.
-- Si l'infection est détectée, exécutez l'option N.
--- Sauvegardez ce rapport puis faites un copier/coller de ce rapport sur le forum, ainsi qu'un nouveau scan HijackThis. </gras>

Le rapport sera enregistré dans le même dossier que MSNFix sous forme date_heure.txt

Note :
Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal
Sauvegarder et fermer le rapport pour que Windows termine de se lancer normalement.

Bonjour,
re... Encore merci... mais je cale là.J'ai téléchargé MSN.fix.zip, j'ai exécuté l'option r. Et voilà ce qui se passe avant la fin:
le programme m'indique ceci: C:/WINDOWS/msnchk.exe n'est pas une application Win32 valide.
Que dois je faire?

Bonjour,
Unable to open the file "\debug.exe"
Unable to open the file "\diskperf.exe"
Unable to open the file "\dllhst3g.exe"
Unable to open the file "\doskey.exe"
Unable to open the file "\drwatson.exe"
Unable to open the file "\drwtsn32.exe"
Unable to open the file "\dvdplay.exe"
Unable to open the file "\edlin.exe"
Unable to open the file "\esentutl.exe"
Unable to open the file "\eventvwr.exe"
Unable to open the file "\exe2bin.exe"
Unable to open the file "\expand.exe"
Unable to open the file "\fastopen.exe"
Unable to open the file "\fc.exe"
Unable to open the file "\find.exe"
Unable to open the file "\finger.exe"
Unable to open the file "\fixmapi.exe"
Unable to open the file "\forcedos.exe"
Unable to open the file "\fsutil.exe"
Unable to open the file "\gdi.exe"
Unable to open the file "\help.exe"
Unable to open the file "\hostname.exe"
Unable to open the file "\java.exe"
Unable to open the file "\ipsec6.exe"
Unable to open the file "\spupdsvc.exe"
Unable to open the file "\label.exe"
Unable to open the file "\lights.exe"
Unable to open the file "\lodctr.exe"
Unable to open the file "\lpq.exe"
Unable to open the file "\lpr.exe"
Unable to open the file "\mem.exe"
Unable to open the file "\mountvol.exe"
Unable to open the file "\mpnotify.exe"
Unable to open the file "\mrinfo.exe"
Unable to open the file "\mscdexnt.exe"
Unable to open the file "\msswchx.exe"
Unable to open the file "\nbtstat.exe"
Unable to open the file "\nlsfunc.exe"
Unable to open the file "\ntsd.exe"
Unable to open the file "\pathping.exe"
Unable to open the file "\ping6.exe"
Unable to open the file "\print.exe"
Unable to open the file "\rasautou.exe"
Unable to open the file "\rasdial.exe"
Unable to open the file "\recover.exe"
Unable to open the file "\regedt32.exe"
Unable to open the file "\regwiz.exe"
Unable to open the file "\replace.exe"
Unable to open the file "\route.exe"
Unable to open the file "\routemon.exe"
Unable to open the file "\rsm.exe"
Unable to open the file "\rsmsink.exe"
Unable to open the file "\rsmui.exe"
Unable to open the file "\rsvp.exe"
Unable to open the file "\runas.exe"
Unable to open the file "\sc.exe"
Unable to open the file "\setver.exe"
Unable to open the file "\sfc.exe"
Unable to open the file "\share.exe"
Unable to open the file "\sprestrt.exe"
Unable to open the file "\subst.exe"
Unable to open the file "\syncapp.exe"
Unable to open the file "\sysedit.exe"
Unable to open the file "\syskey.exe"
Unable to open the file "\systray.exe"
Unable to open the file "\taskman.exe"
Unable to open the file "\tcmsetup.exe"
Unable to open the file "\tcpsvcs.exe"
Unable to open the file "\tftp.exe"
Unable to open the file "\tracert6.exe"
Unable to open the file "\unlodctr.exe"
Unable to open the file "\user.exe"
Unable to open the file "\verifier.exe"
Unable to open the file "\vssadmin.exe"
Unable to open the file "\w32tm.exe"
Unable to open the file "\winhlp32.exe"
Unable to open the file "\winmsd.exe"
Unable to open the file "\winspool.exe"
Unable to open the file "\wowdeb.exe"
Unable to open the file "\wowexec.exe"
Unable to open the file "\wupdmgr.exe"
Unable to open the file "\dumprep.exe"
Unable to open the file "\dvdupgrd.exe"
Unable to open the file "\dxdiag.exe"
Unable to open the file "\migpwd.exe"
Unable to open the file "\lnkstub.exe"
Unable to open the file "\pentnt.exe"
Unable to open the file "\usrmlnka.exe"
Unable to open the file "\usrprbda.exe"
Unable to open the file "\usrshuta.exe"
Unable to open the file "\osuninst.exe"
Unable to open the file "\smss.exe"
Unable to open the file "\autochk.exe"
Unable to open the file "\ntvdm.exe"
Unable to open the file "\csrss.exe"
Unable to open the file "\winlogon.exe"
Unable to open the file "\drmupgds.exe"
Unable to open the file "\ntkrnlpa.exe"
Unable to open the file "\ahui.exe"
Unable to open the file "\services.exe"
Unable to open the file "\lsass.exe"
Unable to open the file "\svchost.exe"
Unable to open the file "\userinit.exe"
Unable to open the file "\MAPISRVR.EXE"
Unable to open the file "\MRT.exe"
Unable to open the file "\WudfHost.exe"
Unable to open the file "\cmd.exe"
Unable to open the file "\rundll32.exe"
Unable to open the file "\regsvr32.exe"
Unable to open the file "\imapi.exe"
Unable to open the file "\ipconfig.exe"
Unable to open the file "\net.exe"
Unable to open the file "\net1.exe"
Unable to open the file "\defrag.exe"
Unable to open the file "\dfrgfat.exe"
Unable to open the file "\dfrgntfs.exe"
Unable to open the file "\findstr.exe"
Unable to open the file "\notepad.exe"
Unable to open the file "\winver.exe"
Unable to open the file "\logonui.exe"
Unable to open the file "\actmovie.exe"
Unable to open the file "\logagent.exe"
Unable to open the file "\alg.exe"
Unable to open the file "\at.exe"
Unable to open the file "\atmadm.exe"
Unable to open the file "\auditusr.exe"
Unable to open the file "\autoconv.exe"
Unable to open the file "\autofmt.exe"
Unable to open the file "\autolfn.exe"
Unable to open the file "\javaw.exe"
Unable to open the file "\cisvc.exe"
Unable to open the file "\cleanmgr.exe"
Unable to open the file "\cliconfg.exe"
Unable to open the file "\clipsrv.exe"
Unable to open the file "\cmdl32.exe"
Unable to open the file "\cmmon32.exe"
Unable to open the file "\cmstp.exe"
Unable to open the file "\conime.exe"
Unable to open the file "\cscript.exe"
Unable to open the file "\ddeshare.exe"
Unable to open the file "\diantz.exe"
Unable to open the file "\diskpart.exe"
Unable to open the file "\dllhost.exe"
Unable to open the file "\dmadmin.exe"
Unable to open the file "\dmremote.exe"
Unable to open the file "\dosx.exe"
Unable to open the file "\dplaysvr.exe"
Unable to open the file "\dpnsvr.exe"
Unable to open the file "\dpvsetup.exe"
Unable to open the file "\dwwin.exe"
Unable to open the file "\eudcedit.exe"
Unable to open the file "\extrac32.exe"
Unable to open the file "\fontview.exe"
Unable to open the file "\fsquirt.exe"
Unable to open the file "\ftp.exe"
Unable to open the file "\grpconv.exe"
Unable to open the file "\javaws.exe"
Unable to open the file "\netsetup.exe"
Unable to open the file "\iexpress.exe"
Unable to open the file "\ipv6.exe"
Unable to open the file "\ipxroute.exe"
Unable to open the file "\locator.exe"
Unable to open the file "\logman.exe"
Unable to open the file "\magnify.exe"
Unable to open the file "\makecab.exe"
Unable to open the file "\mmc.exe"
Unable to open the file "\mobsync.exe"
Unable to open the file "\narrator.exe"
Unable to open the file "\nddeapir.exe"
Unable to open the file "\netdde.exe"
Unable to open the file "\netsh.exe"
Unable to open the file "\netstat.exe"
Unable to open the file "\nslookup.exe"
Unable to open the file "\odbcad32.exe"
Unable to open the file "\odbcconf.exe"
Unable to open the file "\osk.exe"
Unable to open the file "\packager.exe"
Unable to open the file "\perfmon.exe"
Unable to open the file "\ping.exe"
Unable to open the file "\powercfg.exe"
Unable to open the file "\progman.exe"
Unable to open the file "\proquota.exe"
Unable to open the file "\proxycfg.exe"
Unable to open the file "\rasphone.exe"
Unable to open the file "\rcimlby.exe"
Unable to open the file "\rcp.exe"
Unable to open the file "\redir.exe"
Unable to open the file "\reg.exe"
Unable to open the file "\rexec.exe"
Unable to open the file "\rsh.exe"
Unable to open the file "\rtcshare.exe"
Unable to open the file "\runonce.exe"
Unable to open the file "\savedump.exe"
Unable to open the file "\scardsvr.exe"
Unable to open the file "\sdbinst.exe"
Unable to open the file "\sethc.exe"
Unable to open the file "\setup.exe"
Unable to open the file "\shmgrate.exe"
Unable to open the file "\shrpubw.exe"
Unable to open the file "\shutdown.exe"
Unable to open the file "\sigverif.exe"
Unable to open the file "\skeys.exe"
Unable to open the file "\smbinst.exe"
Unable to open the file "\smlogsvc.exe"
Unable to open the file "\stimon.exe"
Unable to open the file "\sysocmgr.exe"
Unable to open the file "\taskmgr.exe"
Unable to open the file "\spoolsv.exe"
Unable to open the file "\tracert.exe"
Unable to open the file "\upnpcont.exe"
Unable to open the file "\ntoskrnl.exe"
Unable to open the file "\ups.exe"
Unable to open the file "\utilman.exe"
Unable to open the file "\vssvc.exe"
Unable to open the file "\wextract.exe"
Unable to open the file "\wiaacmgr.exe"
Unable to open the file "\wpabaln.exe"
Unable to open the file "\wpnpinst.exe"
Unable to open the file "\wscntfy.exe"
Unable to open the file "\wscript.exe"
Unable to open the file "\xcopy.exe"
Unable to open the file "\ctfmon.exe"
Unable to open the file "\krnl386.exe"
Unable to open the file "\spnpinst.exe"
Unable to open the file "\wdfmgr.exe"
Unable to open the file "\blastcln.exe"
Unable to open the file "\telnet.exe"
Unable to open the file "\tourstart.exe"
Unable to open the file "\aswBoot.exe"
Unable to open the file "\NeroCheck.exe"
Unable to open the file "\irftp.exe"
Unable to open the file "\fxsclnt.exe"
Unable to open the file "\fxscover.exe"
Unable to open the file "\fxssvc.exe"
Unable to open the file "\RTLCPL.exe"
Unable to open the file "\agrsmdel.exe"
Unable to open the file "\msdtc.exe"
Unable to open the file "\qprocess.exe"
Unable to open the file "\rdpclip.exe"
Unable to open the file "\tscupgrd.exe"
Unable to open the file "\sessmgr.exe"
Unable to open the file "\rdshost.exe"
Unable to open the file "\rdsaddin.exe"
Unable to open the file "\mstsc.exe"
Unable to open the file "\spider.exe"
Unable to open the file "\clipbrd.exe"
Unable to open the file "\mspaint.exe"
Unable to open the file "\mplay32.exe"
Unable to open the file "\sndrec32.exe"
Unable to open the file "\accwiz.exe"
Unable to open the file "\fxssend.exe"
Unable to open the file "\dcomcnfg.exe"
Unable to open the file "\logoff.exe"
Unable to open the file "\msg.exe"
Unable to open the file "\qappsrv.exe"
Unable to open the file "\qwinsta.exe"
Unable to open the file "\regini.exe"
Unable to open the file "\rwinsta.exe"
Unable to open the file "\shadow.exe"
Unable to open the file "\tscon.exe"
Unable to open the file "\tsdiscon.exe"
Unable to open the file "\tsshutdn.exe"
Unable to open the file "\tskill.exe"
Unable to open the file "\reset.exe"
Unable to open the file "\freecell.exe"
Unable to open the file "\mshearts.exe"
Unable to open the file "\winmine.exe"
Unable to open the file "\sol.exe"
Unable to open the file "\calc.exe"
Unable to open the file "\charmap.exe"
Unable to open the file "\winchat.exe"
Unable to open the file "\sndvol32.exe"
Unable to open the file "\write.exe"
Unable to open the file "\mstinit.exe"
Unable to open the file "\mnmsrvc.exe"
Unable to open the file "\fltMc.exe"
Unable to open the file "\HPZipm12.exe"
Unable to open the file "\HPZinw12.exe"
Unable to open the file "\Axdist.exe"
Unable to open the file "\Wint351.exe"
Unable to open the file "\uwdf.exe"
Unable to open the file "\verclsid.exe"
Unable to open the file "\WgaTray.exe"
Unable to open the file "\wuauclt.exe"
Unable to open the file "\tzchange.exe"
Unable to open the file "\mshta.exe"
Unable to open the file "\msfeedssync.exe"
Unable to open the file "\igfxcfg.exe"
Unable to open the file "\igfxdiag.exe"
Unable to open the file "\ieudinit.exe"
Unable to open the file "\igfxtray.exe"
Unable to open the file "\hkcmd.exe"
Unable to open the file "\ie4uinit.exe"
Unable to open the file "\igfxext.exe"
Unable to open the file "\WinFXDocObj.exe"
Unable to open the file "\wpdshextautoplay.exe"
Unable to open the file "\wuauclt1.exe"
Unable to open the file "\ChCfg.exe"
Unable to open the file "\msiexec.exe"




Voilà, j'ai quand même copier coller le résultat

Bonsoir Montecristo

Ceci n ai pas le rapport d msnfix...

Le rapport est enregistré dans le même dossier que MSNFix sous forme date_heure.txt

Je te conseille d'enregistrer la page en sélectionnant toutes les lignes puis de copier cette sélection dans un fichier texte sur ton PC pour pouvoir appliquer la procedure correctement.
(Note: tu n'auras pas accès à Internet à partir du moment ou te redemarrera en mode sans echec)
Il faut exécuter toutes les étapes, sans interruption, dans l'ordre exact indiqué ci-dessous.
Si un élément te paraît obscur, demande des explications avant de commencer la désinfection

1) Telecharge
-- CCleaner Basic v2.01.507

http://www.ccleaner.com/download/builds.aspx

Installe puis lance CCleaner puis Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures".
Par la suite, laisse-le avec ses réglages par défaut.
Fermer le programme pour l instant.

-- clean zip de Malekal_Morte http://www.malekal.com/download/clean.zip

Décompresse-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier clean.
N'y touche pas pour le moment.

--la version d'essai d'AVG Anti-Spyware 7.5 depuis http://www.grisoft.com/doc/downloads-products/ww/crp/0?prd=t­riasw
Installe la puis...Lancer AVG Anti-Spyware.
Cliquer sur le menu Mise à jour.
Dans le paragraphe Mise à jour manuelle, cliquer sur le bouton Commencer la mise à jour.
Attendre la fin de cette mise à jour puis fermer le programme.
Ne pas lancer d'analyse maintenant

2) Redémarre en mode sans échec

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuyer sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuyer sur [Entrée]
Il te faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.

3) Cleanzip

* Ouvre le dossier Clean qui se trouve sur ton bureau.
* Double-clique sur clean.cmd.
Une fenêtre noire va apparaître,

choisis l'option 2.


4) Lance AVG Anti-Spyware 7.5

--Reglages

Cliquer sur le menu Analyse (de la barre d'outils).
Cliquer sur l'onglet Paramètres.
Dans Comment réagir? cliquer sur Actions recommandées et choisir Quarantaine.
Dans Comment faire l'analyse ? et dans Programmes potentiellement dangereux, vérifier que toutes les cases soient cochées.
Dans Rapports cocher "générer un rapport aprés chaque analyse"

-- Scan
Dans l'onglet Analyse
Cliquer sur Analyse complète du système.
Important : Ne pas ouvrir de fenêtre, ne pas lancer de programme pendant l'exécution de AVG Anti-Spyware, car cela pourrait interférer avec le processus de recherche.
Tres important : A la fin de l'analyse, clique sur " Appliquer toutes les actions"
Ensuite.
Cliquer sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.
(C:\Programfiles\AVG Antispyware 7.5\Reports )
Puis fermer AVG Anti-Spyware.

5) Lance CCleaner
Puis dans le menu Nettoyeur
Cliquer sur Analyse (laisser travailler cela peut durer longtemps la 1ere fois)
cliquer sur le bouton Lancer le nettoyage.
Fais cela plusieurs fois d affilé puis ferme CCleaner

6) Rapports

Redemarre en mode normal et Télécharge hijackthis sur ton bureau. Tuto :http://pageperso.aol.fr/balltrap34/demohijack.htm

Ferme toutes les autres fenêtres, tous les autres programmes. Pas de connexion Internet.

Double clique dessus pour lancer l installation . Accepte la licence qui va apparaître par " I agree" .

Puis clique sur "Do a system scan and save a logfile"

Ferme hijackThis et fait un copier-coller du log entier et poste le ici en réponse ainsi que le rapport d AVG antispyware 7.5 et celui de Cleanzip qui se trouve ici --> C:\rapport_clean.txt

Bon courage, @+





Genere un HijackThis que tu posteras en reponse