rapport hijackthis systeme infecté

rapport hijackthis systeme infecté - Virus/Spywares - Windows & Software

Marsh Posté le 02-05-2009 à 14:41:11    

Bonjour,  
je sollicite votre aide car depuis quelque jours j'ai remarqué une perte de bande passante  
Après avoir effectué des mesures sur un site je constate que mon debit est de 2Mb alors que jusqu'à il n'y a pas lontgemps j'étais toujours entre 7 et 8 Mb  
je ne m'en était pas rendu compte jusqu'au week end dernier ou j'ai voulu regarder un match sur foot+ via pc et là impossible , j'ai attendu un peu pour voir mais là rien à changer  
C'est pourquoi j'ai besoin d'aide ,car mes connaissance en informatique sont limitées  
 
je viens de lancer un rappor hijackthis et un message d'avertissement apparait:  
for some reason your system denied write access to the hosts file.If any hijacked domains are in the file ,hijack may notbe able to fix this.  
if that happens , you need to edit the file yourself.to do this , click start, run and type:  
notepadC:/Windows/System32/drivers/etc/hosts  
 
je vous met aussi le rapport  
 
Logfile of Trend Micro HijackThis v2.0.2  
Scan saved at 14:09:27, on 02/05/2009  
Platform: Windows Vista SP1 (WinNT 6.00.1905)  
MSIE: Internet Explorer v7.00 (7.00.6001.18226)  
Boot mode: Normal  
 
Running processes:  
C:\Windows\system32\taskeng.exe  
C:\Windows\system32\Dwm.exe  
C:\Windows\Explorer.EXE  
C:\Program Files\Windows Defender\MSASCui.exe  
C:\Windows\RtHDVCpl.exe  
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe  
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe  
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe  
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe  
C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe  
C:\Program Files\TOSHIBA\Toshiba Online Product Information\TOPI.exe  
C:\Windows\System32\igfxtray.exe  
C:\Windows\System32\hkcmd.exe  
C:\Windows\System32\igfxpers.exe  
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe  
C:\Windows\system32\igfxsrvc.exe  
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe  
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe­  
C:\Program Files\Alwil Software\Avast4\ashDisp.exe  
C:\Program Files\Java\jre6\bin\jusched.exe  
C:\Program Files\iTunes\iTunesHelper.exe  
C:\Program Files\Windows Sidebar\sidebar.exe  
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe  
C:\Windows\ehome\ehtray.exe  
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe­  
C:\Program Files\Windows Live\Messenger\msnmsgr.exe  
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe  
C:\Program Files\Synaptics\SynTP\SynToshiba.exe  
C:\Windows\ehome\ehmsas.exe  
C:\Windows\system32\wbem\unsecapp.exe  
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe  
C:\Program Files\Windows Sidebar\sidebar.exe  
C:\Program Files\Windows Mail\WinMail.exe  
C:\Program Files\Internet Explorer\IEUser.exe  
C:\Program Files\Internet Explorer\iexplore.exe  
C:\Program Files\Internet Explorer\iexplore.exe  
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe  
C:\Users\pacc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q84YM95D\HiJackThis[1].exe  
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896  
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/  
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr  
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896  
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896  
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com  
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =  
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =  
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local  
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =  
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll  
O1 - Hosts: ::1 localhost  
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll  
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll  
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)  
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll  
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll  
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll  
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll  
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll  
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll  
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll  
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide  
O4 - HKLM\..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe  
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL  
O4 - HKLM\..\Run: [HWSetup] \HWSetup.exe hwSetUP  
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe  
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE  
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe  
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe  
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe  
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe  
O4 - HKLM\..\Run: [Desktop SMS] C:\Program Files\IDM\Desktop SMS\DesktopSMS.exe /auto  
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup  
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe  
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe  
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe  
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe"  
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe  
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe  
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe  
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"  
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe  
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"  
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe  
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime  
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"  
O4 - HKLM\..\Run: [Skytel] Skytel.exe  
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"  
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun  
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter  
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe  
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe  
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe  
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background  
O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/709-44555-9400-3/4 (file missing)  
O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.fr/exec/obidos/r [...] &site=home (file missing)  
O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url.pl?FR (file missing)  
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe  
O13 - Gopher Prefix:  
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/ [...] rtdgi1.cab  
O16 - DPF: {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} - http://fpdownload2.macromedia.com/ [...] wflash.cab  
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ [...] wflash.cab  
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://mppv2flash3.valueactive.com/Unibet/FlashAX.cab  
O17 - HKLM\System\CCS\Services\Tcpip\..\{EC3F517B-BC7E-4FC6-8830-70024B14DAAC}: NameServer = 192.168.1.1  
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll  
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe  
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe  
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe  
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe  
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe  
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe  
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe  
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe  
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe  
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe  
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe  
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe  
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE  
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)  
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe  
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe  
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe  
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe  
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe  
O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (file missing)  
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe  
 
End of file - 11509 bytes  
 
voilà merci à ceux qui prendront la peine de lire mon posts
 
   Répondre à LaPouAssE

Reply

Marsh Posté le 02-05-2009 à 14:41:11   

Reply

Marsh Posté le 02-05-2009 à 22:32:53    

Bonsoir,
 
mauvaise idée le log hijackthis ici, lit les regles et vire le vite

Reply

Marsh Posté le 02-05-2009 à 23:34:27    

Colle plutôt ton rapport Hijackthis ici: http://hijackthis.de/
(clique ensuite sur évaluer et tu auras une première analyse)

Reply

Marsh Posté le 02-05-2009 à 23:40:49    

Merci de supprimer le log, sous peine de fermeture.

Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed