Pc infecté par 2trojan (les mêmes) et HiJackerCostrat..!!
Forum Sécurité - Virus : Pc infecté par 2trojan (les mêmes) et HiJackerCostrat..!!
Bonjour à tous, et à toutes,
Je viens de dégager un virus grâce à l'un de vous mais un autre est aussitôt apparu.... 
Je ne sais que faire?? J'ai avast, [b]spybotsearch and destroy[/b], avg free edition et je me coltine toujours des virus sans même toucher au pc... 
On m'a conseillé Bitdefender mais je ne trouve qu'une version payante, je ne peux payer pour un logiciel qui va laisser passer des virus (style norton...)
Pouvez vous me filer un coup de pouce, ce sera suffisant je vous poste le rapport hijackthis, merci d'avance:
Logfile of HijackThis v1.99.1
Scan saved at 14:13:08, on 28/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2
(6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI
Control Panel\atiptaxx.exe
C:\Program
Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program
Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Launch
Manager\QtZgAcer.EXE
C:\acer\epm\epm-dm.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Winamp\winampa.exe
C:\Program
Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil
Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil
Software\Avast4\ashServ.exe
C:\Program Files\Billionton\Logiciel
Bluetooth\BTTray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Billionton\Logiciel
Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers
communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe
C:\Program Files\Alwil
Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil
Software\Avast4\ashWebSv.exe
C:\Program Files\Internet
Explorer\iexplore.exe
C:\Program Files\Internet
Explorer\IEXPLORE.EXE
C:\WINDOWS\Explorer.EXE
C:\Téléchargements\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Search Bar =
http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Search Page =
http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet
Explorer\Main,Start Page =
http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL =
http://recherche.neuf.fr/
R0 - HKLM\Software\Microsoft\Internet
Explorer\Search,SearchAssistant =
http://recherche.neuf.fr/ie/default.html
R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar -
{EF99BD32-C1FB-11D2-892F-0090271D4F88} -
C:\Program
Files\Yahoo!\Companion\Installs\cpn0\yt.dl
l
O2 - BHO: Yahoo! Toolbar Helper -
{02478D38-C3F9-4EFB-9B51-7695ECA05670} -
C:\Program
Files\Yahoo!\Companion\Installs\cpn0\yt.dl
l
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat
7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) -
{53707962-6F74-2D53-2644-206D7942484F} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class -
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Program
Files\Java\jre1.5.0_10\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar -
{EF99BD32-C1FB-11D2-892F-0090271D4F88} -
C:\Program
Files\Yahoo!\Companion\Installs\cpn0\yt.dl
l
O4 - HKLM\..\Run: [ATIPTA] C:\Program
Files\ATI Technologies\ATI Control
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program
Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program
Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACU] "C:\Program
Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [LManager] C:\Program
Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [EPM-DM]
c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement]
C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [PCMService] "C:\Program
Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [DAEMON Tools]
"C:\Program Files\DAEMON Tools\daemon.exe"
-lang 1033
O4 - HKLM\..\Run: [QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run:
[BluetoothAuthenticationAgent]
rundll32.exe
bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [avast!]
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program
Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched]
"C:\Program
Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [Autoconfigurateur WiFi
Neuf] C:\Program
Files\Neuf\Kit\WiFi\9wifi.exe
O4 - HKLM\..\Run: [AVG7_CC]
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
/STARTUP
O4 - HKCU\..\Run: [ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program
Files\Adobe\Acrobat
7.0\Reader\AdobeUpdateManager.exe"
AcRdB7_0_7 -reboot 1
O4 - Global Startup: Adobe Reader Speed
Launch.lnk = C:\Program
Files\Adobe\Acrobat
7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Microsoft Office.lnk
= C:\Program Files\Microsoft
Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk
= C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xporter
vers Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.
EXE/3000
O8 - Extra context menu item: Envoyer à
&Bluetooth - C:\Program
Files\Billionton\Logiciel
Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To
&Bluetooth - C:\Program
Files\WIDCOMM\Bluetooth
Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program
Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java
(Sun) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program
Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 -
{CCA281CA-C863-46ef-9331-5C8D4460577F} -
C:\Program Files\Billionton\Logiciel
Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem:
@btrez.dll,-4017 -
{CCA281CA-C863-46ef-9331-5C8D4460577F} -
C:\Program Files\Billionton\Logiciel
Bluetooth\btsendto_ie.htm
O16 - DPF:
{5ED80217-570B-4DA9-BF44-BE107C0EC166}
(Windows Live Safety Center Base Module) -
http://cdn.scan.onecare.live.com/resource/
download/scanner/wlscbase9602.cab
O18 - Protocol: msnim -
{828030A1-22C1-4009-854F-8E305202313F} -
"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file
missing)
O18 - Protocol: widimg -
{EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} -
C:\WINDOWS\system32\btxppanel.dll
O20 - Winlogon Notify: WgaLogon -
C:\WINDOWS\
O23 - Service: Service de configuration
Atheros (ACS) - Unknown owner -
C:\WINDOWS\system32\acs.exe
O23 - Service: avast! iAVS4 Control
Service (aswUpdSv) - Unknown owner -
C:\Program Files\Alwil
Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI
Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown
owner - C:\Program Files\Alwil
Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner -
Unknown owner - C:\Program Files\Alwil
Software\Avast4\ashMaiSv.exe" /service
(file missing)
O23 - Service: avast! Web Scanner -
Unknown owner - C:\Program Files\Alwil
Software\Avast4\ashWebSv.exe" /service
(file missing)
O23 - Service: AVG7 Alert Manager Server
(Avg7Alrt) - GRISOFT, s.r.o. -
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service
(Avg7UpdSvc) - GRISOFT, s.r.o. -
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS)
- GRISOFT, s.r.o. -
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Bluetooth Service (btwdins)
- Broadcom Corporation. - C:\Program
Files\Billionton\Logiciel
Bluetooth\bin\btwdins.exe
O23 - Service: C-DillaCdaC11BA -
Macrovision -
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager
(IDriverT) - Macrovision Corporation -
C:\Program Files\Fichiers
communs\InstallShield\Driver\11\Intel
32\IDriverT.exe
O23 - Service: Remote Packet Capture
Protocol v.0 (experimental) (rpcapd) -
Unknown owner -
%ProgramFiles%\WinPcap\rpcapd.exe" -d -f
"%ProgramFiles%\WinPcap\rpcapd.ini (file
missing)
O23 - Service: STI Simulator - Unknown
owner - C:\WINDOWS\System32\PAStiSvc.exe
Message édité par TheVeryGoooooodLife le 28-01-2007 à 22:48:17
