Bonjour,
je rencontre exactement le même problème que PierrePaul du 26 mai 2006 :
dès que j'allume mon pc plusieurs fenêtres mIRC apparaissent à l'écran, j'ai supprimé les fichiers mais cela revient toujours. J'ai fait HiJackThis et voilà ce que ça donne. Si quelqu'un pouvait m'aider, ce serait sympa :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:33:34, on 01/11/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\G0ahic.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\WINDOWS\System32\lpyokyq.exe
C:\WINDOWS\System32\kqkjc.exe
C:\WINDOWS\System32\first.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\AnVir Security Suite\AnVir.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tele2.fr/startpage/adsl/fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [Microsoft Windows Update] lpyokyq.exe
O4 - HKLM\..\Run: [Windows Service Agccnt] mzryzxi.exe
O4 - HKLM\..\Run: [Microsoft Windows Updata] kqkjc.exe
O4 - HKLM\..\Run: [Microsoft Network Associates] c:\windows\system32\ddkd\compact.exe
O4 - HKLM\..\Run: [Systam13] first.exe
O4 - HKLM\..\Run: [WinReg] C:\WINDOWS\System32\ttt\ournik.com
O4 - HKLM\..\Run: [msennger] C:\WINDOWS\System32\ttt\ournik.com
O4 - HKLM\..\Run: [st4rbukcs] C:\WINDOWS\system32\ikuwait\starbucks.exe
O4 - HKLM\..\Run: [Windowz Service VB] yzigwjkze.exe
O4 - HKLM\..\Run: [Windows Services Agants] ktqnhu.exe
O4 - HKLM\..\Run: [HOT FIX] G0ahic.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [Microsoft Windows Update] lpyokyq.exe
O4 - HKLM\..\RunServices: [Windows Service Agccnt] mzryzxi.exe
O4 - HKLM\..\RunServices: [Microsoft Windows Updata] kqkjc.exe
O4 - HKLM\..\RunServices: [Systam13] first.exe
O4 - HKLM\..\RunServices: [Windowz Service VB] yzigwjkze.exe
O4 - HKLM\..\RunServices: [RegAgent] C:\WINDOWS\System32\dllcache\onstart.exe
O4 - HKLM\..\RunServices: [Windows Services Agants] ktqnhu.exe
O4 - HKLM\..\RunServices: [HOT FIX] G0ahic.exe
O4 - HKLM\..\RunOnce: [HOT FIX] G0ahic.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Microsoft Windows Update] lpyokyq.exe
O4 - HKCU\..\Run: [Windows Service Agccnt] mzryzxi.exe
O4 - HKCU\..\Run: [Microsoft Windows Updata] kqkjc.exe
O4 - HKCU\..\Run: [Microsoft Network Associates] c:\windows\system32\ddkd\compact.exe
O4 - HKCU\..\Run: [hohohhaha] C:\WINDOWS\System32\ttt\ournik.com
O4 - HKCU\..\Run: [Windowz Service VB] yzigwjkze.exe
O4 - HKCU\..\Run: [Windows Services Agants] ktqnhu.exe
O4 - HKCU\..\Run: [HOT FIX] G0ahic.exe
O4 - HKCU\..\Run: [AnVir Security Suite] "C:\Program Files\AnVir Security Suite\AnVir.exe" Minimized
O4 - HKCU\..\RunOnce: [HOT FIX] G0ahic.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Microsoft Windows Updata] kqkjc.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windowz Service VB] yzigwjkze.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Services Agants] ktqnhu.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [HOT FIX] G0ahic.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [HOT FIX] G0ahic.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [HOT FIX] G0ahic.exe (User 'Default user')
O4 - Startup: yesmessenger.lnk = C:\Program Files\YesMessenger\YesMessenger.exe
O4 - Global Startup: 802.11g Wireless LAN PCI Card Utility.lnk = C:\Program Files\Nonbrand\802.11g Wireless LAN PCI Card Driver and Utility\RtWLan.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Logitech QuickCam Manager - Unknown owner - C:\WINDOWS\System32\dllcache\mlqm.exe
O23 - Service: Maxtor Network Analysis Tool - Unknown owner - C:\WINDOWS\System32\dllcache\winsshr.exe
O23 - Service: Microsoft Agent - Unknown owner - C:\WINDOWS\System32\dllcache\frehost.exe (file missing)
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
