/!\ ANTIVIR 81039 /!\ • page 2

[helter_skelter]

Ah oui... j'ai pas précisé que j'étais sous Vista et j'avais pas vu que du coup ça changeait tout!

ok, et ben... encore merci alors!

[helter_skelter]

Voilà le rapport

SmitFraudFix v2.392

Scan done at 5:00:45,02, 06/02/2009
Run from C:Users
icoDesktopSmitfraudFix
OS: Microsoft Windows [version 6.0.6000] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:Windowssystem32csrss.exe
C:Windowssystem32wininit.exe
C:Windowssystem32csrss.exe
C:Windowssystem32services.exe
C:Windowssystem32lsass.exe
C:Windowssystem32lsm.exe
C:Windowssystem32winlogon.exe
C:Windowssystem32svchost.exe
C:Windowssystem32svchost.exe
C:WindowsSystem32svchost.exe
C:WindowsSystem32svchost.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32svchost.exe
C:Windowssystem32SLsvc.exe
C:Windowssystem32svchost.exe
C:Windowssystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe
C:Windowssystem32 askeng.exe
C:Program FilesWindows DefenderMSASCui.exe
C:WindowsRtHDVCpl.exe
C:Program FilesAdobeReader 8.0ReaderReader_SL.exe
C:Program FilesWinampwinampa.exe
C:Program FilesJavajre1.6.0_05injusched.exe
C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}PIFSvc.exe
C:Program FilesHPHP Software UpdatehpwuSchd2.exe
C:Program FilesAlwil SoftwareAvast4ashDisp.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Windowsehomeehtray.exe
C:WindowsSystem32 undll32.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesPicasa2PicasaMediaDetector.exe
C:Program FilesSony EricssonSony Ericsson PC SuiteSEPCSuite.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesHPDigital Imaginginhpqtra08.exe
C:Windowsehomeehmsas.exe
C:Windowssystem32svchost.exe
C:Program FilesCommon FilesSymantec SharedPIF{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}PIFSvc.exe
C:WindowsSystem32svchost.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32svchost.exe
C:Windowssystem32svchost.exe
C:firststepsOnlineDiagnosticTestManagerTestHandler.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32SearchIndexer.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Windowssystem32WUDFHost.exe
C:Windowssystem32 askeng.exe
C:Program FilesWindows Media Playerwmpnetwk.exe
C:Windowssystem32svchost.exe
C:Program FilesHPDigital ImaginginhpqSTE08.exe
C:Windowssystem32cmd.exe
C:Windowssystem32conime.exe
C:Windowssystem32wbemwmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, following keys are not inevitably infected!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, following keys are not inevitably infected!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, following keys are not inevitably infected!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
"AppInit_DLLs"=""
"LoadAppInit_DLLs"=dword:00000000

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon]
"Userinit"="C:\Windows\system32\userinit.exe,"
»»»»»»»»»»»»»»»»»»»»»»»» RK

»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLMSYSTEMCCSServicesTcpip..{536DCA53-9091-4423-A5D6-EAF65AE59AF9}: DhcpNameServer=212.27.40.241 212.27.40.240
HKLMSYSTEMCCSServicesTcpip..{EAACC42E-76F3-4941-865F-2779F078CC2A}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLMSYSTEMCS1ServicesTcpip..{536DCA53-9091-4423-A5D6-EAF65AE59AF9}: DhcpNameServer=212.27.40.241 212.27.40.240
HKLMSYSTEMCS1ServicesTcpip..{EAACC42E-76F3-4941-865F-2779F078CC2A}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLMSYSTEMCS2ServicesTcpip..{536DCA53-9091-4423-A5D6-EAF65AE59AF9}: DhcpNameServer=212.27.40.241 212.27.40.240
HKLMSYSTEMCS2ServicesTcpip..{EAACC42E-76F3-4941-865F-2779F078CC2A}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLMSYSTEMCCSServicesTcpipParameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLMSYSTEMCS1ServicesTcpipParameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLMSYSTEMCS2ServicesTcpipParameters: DhcpNameServer=212.27.40.240 212.27.40.241

»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection

»»»»»»»»»»»»»»»»»»»»»»»» End

Désolée, c'est un peu long

[r@in | b0w]

Ok.

Tu redémarres en Mode sans échec ([F8] au démarrage).

Tu te logges ensuite sur ta session puis tu lances SmitfraudFix.

Tu appuis sur la touche [3] puis [Entrée].

Quand le nettoyage est fini, tu relances en utilisation l'option [5].


Tu redémarres en Mode normal et tu procèdes à l'analyse HiJackThis dont je mets le lien à chacun de mes messages

[helter_skelter]

hum, la routine quoi!

Merci de ta patience!

[edwindu34]

moi aussi j ai fais cette gourde mais en telechargeant avast . jmen fou du prix du texto . ske jveux savoir c si ma carte de credit va payer ? je panique merci de me repondre svp !!!