|
|  | | 
|
|
|
| | dirimant$2004013 dirimant
14/01 :: 15:32
Membre inscrit
| | Salut tout le monde, je ne suis pas expert en informatique et j'ai vraiment besoin d'un coup de main :
Voilà : à chaque fois que je démarre mon ordinnateur, il me crée sur le bureau 6 shortcuts vers des sites de cul. J'ai lancé plein de programmes pour scaner la base des registres, etc... j'ai viré tout ce qui semblait suspect mais rien n'y fait : dès que je redémarre, il me crée ces 6 shortcuts et change ma page de garde (normalement c'est Yahoo.fr, mais ça devient http://www.alfa-search.com/start.html.
j'ai en marre.
Pour qu'on puisse m'aider, j'ai lancé "HijackThis" v. 1.94 et voici ce qui est affiché :
ben j'arrive pas à faire un copier-coller avec les résultats de Hijack : qqun sait comment faire ?
Encore merci pour ceux qui vondront bien m'aider... | |
| Scarabee$2003165 Scarabee
14/01 :: 16:26
Membre habitué
| | | |
| dirimant$2004013 dirimant
19/01 :: 14:53
Membre inscrit
| | Merci bcp 
Donc, voici ce que me donne hijack : est-ce que qqun voit où est le problème ???? (personnellement, je remarque que mon internet explorer s'ouvre toujours sur Alaf-search et que je vois ce nom un peu partout dans les lignes R1...)
Logfile of HijackThis v1.94.0
Scan saved at 15:48:16, on 19/01/2004
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.00 (5.00.2614.3500)
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL=http://aifind.info/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL=http://www.alfa-search.com/start.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.alfa-search.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.alfa-search.com/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.yahoo.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=C:\WINDOWS\search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://www.alfa-search.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://t.rack.cc/s.php?aid=359
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://www.hand-book.com/search/
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL=http://www.the-huns-yellow-pages.com/sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL=http://www.alfa-search.com/start.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.alfa-search.com/start.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.alfa-search.com/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.alfa-search.com/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://www.fr.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://www.alfa-search.com/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://www.hand-book.com/search/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.alfa-search.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default)=http://teenhqpics.com/?homepage.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=
O1 - Hosts: 64.124.222.169 google.com
O1 - Hosts: 64.124.222.169 altavista.com
O1 - Hosts: 64.124.222.169 yahoo.com
O1 - Hosts: 64.124.222.169 thehun.com
O1 - Hosts: 64.124.222.169 lycos.com
O1 - Hosts: 64.124.222.169 dogpile.com
O1 - Hosts: 64.124.222.169 excite.com
O1 - Hosts: 64.124.222.169 metacrawler.com
O1 - Hosts: 64.124.222.169 search.com
O1 - Hosts: 64.124.222.169 google.com
O1 - Hosts: 64.124.222.169 altavista.com
O1 - Hosts: 64.124.222.169 yahoo.com
O1 - Hosts: 64.124.222.169 lycos.com
O1 - Hosts: 64.124.222.169 dogpile.com
O1 - Hosts: 64.124.222.169 excite.com
O1 - Hosts: 64.124.222.169 metacrawler.com
O1 - Hosts: 64.124.222.169 search.com
O1 - Hosts: 64.124.222.169 google.com
O1 - Hosts: 64.124.222.169 altavista.com
O1 - Hosts: 64.124.222.169 yahoo.com
O1 - Hosts: 64.124.222.169 lycos.com
O1 - Hosts: 64.124.222.169 dogpile.com
O1 - Hosts: 64.124.222.169 excite.com
O1 - Hosts: 64.124.222.169 metacrawler.com
O1 - Hosts: 64.124.222.169 search.com
O1 - Hosts: 64.124.222.169 google.com
O1 - Hosts: 64.124.222.169 altavista.com
O1 - Hosts: 64.124.222.169 yahoo.com
O1 - Hosts: 64.124.222.169 lycos.com
O1 - Hosts: 64.124.222.169 dogpile.com
O1 - Hosts: 64.124.222.169 excite.com
O1 - Hosts: 64.124.222.169 metacrawler.com
O1 - Hosts: 64.124.222.169 search.com
O1 - Hosts: 64.124.222.169 google.com
O1 - Hosts: 64.124.222.169 altavista.com
O1 - Hosts: 64.124.222.169 yahoo.com
O1 - Hosts: 64.124.222.169 thehun.com
O1 - Hosts: 64.124.222.169 lycos.com
O1 - Hosts: 64.124.222.169 dogpile.com
O1 - Hosts: 64.124.222.169 excite.com
O1 - Hosts: 64.124.222.169 metacrawler.com
O1 - Hosts: 64.124.222.169 search.com
O1 - Hosts: 64.124.222.169 google.com
O1 - Hosts: 64.124.222.169 altavista.com
O1 - Hosts: 64.124.222.169 yahoo.com
O1 - Hosts: 64.124.222.169 thehun.com
O1 - Hosts: 64.124.222.169 lycos.com
O1 - Hosts: 64.124.222.169 dogpile.com
O1 - Hosts: 64.124.222.169 excite.com
O1 - Hosts: 64.124.222.169 metacrawler.com
O1 - Hosts: 64.124.222.169 search.com
O2 - BHO: (no name) - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - C:\PROGRA~1\FRESHD~1\FRESHD~1\FDCATCH.DLL
O2 - BHO: (no name) - {06849E9F-C 7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {6CC1C918-AE8B-4373-A5B4-28BA1851E39A} - C:\WINDOWS\WINSHOW.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: Microsoft Excel - {17DA0C9E-4A27-4ac5-BB75-5D24B8CDB972} - C:\WINDOWS\APPLIC~1\MICROS~1\OFFICE\EXCEL10.DLL
O3 - Toolbar: SuperBar - {ECEE6580-D4B3-11D7-B329-0030050B54F3} - C:\PROGRAM FILES\SUPERBAR\SUPERBAR.DLL (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [McAfee Guardian] "C:\PROGRAM FILES\MCAFEE\MCAFEE SHARED COMPONENTS\GUARDIAN\CMGRDIAN.EXE" /SU
O4 - HKLM\..\Run: [Control] rundll32.exe C:\WINDOWS\SYSTEM\ctrlpan.dll,Restore ControlPanel
O4 - HKLM\..\Run: [Windows Security Assistant] C:\WINDOWS\system32\rundll32.vbe
O4 - HKLM\..\Run: [sys] regedit -s sys.reg
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Machine Debug Manager] C:\WINDOWS\SYSTEM\MDM.EXE
O4 - HKLM\..\RunServices: [McAfeeVirusScanService] C:\Program Files\Network Associates\VirusScan\AVSYNMGR.EXE
O4 - HKLM\..\RunServices: [Desktop] rundll32.exe msconfd,Restore ControlPanel
O4 - HKLM\..\RunServices: [Windows Security Assistant] C:\WINDOWS\system32\rundll32.vbe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [Spyware-Cop] "C:\PROGRAM FILES\SPYWARE-COP\SPYWARE-COP.EXE" /s
O4 - HKCU\..\Run: [Windows Security Assistant] C:\WINDOWS\system32\rundll32.vbe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Télecharger avec GetRight - \GRdownload.htm
O8 - Extra context menu item: Ouvrir avec GetRight - \GRbrowse.htm
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O12 - Plugin for .wmv: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O12 - Plugin for .pl: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O12 - Plugin for .mov: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .mpeg: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = Alize
| |
| habana$ habana
20/01 :: 23:18
Admin
| | Recommence à virer les clés précédemment supprimées et pour finir, va supprimer toutes les entrées dans le fichier HOSTS autres que:
127.0.0.1 localhost | |
Forum en lecture seule
|
|
