Présentation Divinty mort avec le Malware

Heres mon fichier de log s'il vous plaît aider


Logfile of Trend Micro HijackThis v2.0.4
Scan sauvé à 17:33:36, le 23/04/2004
Windows XP SP2 (WinNT 05/01/2600): Plate-forme
MSIE: Internet Explorer V6.00 SP2

(6.00.2900.2180)
Boot mode: Normal

Les processus en cours:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost. exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ WINDOWS \ Explorer.EXE
C: \ Documents and Settings \ Irene \ Mes

Documents \ bin \ jqs.exe
\ Program Files \ Common Files \ Microsoft: C

Shared \ VS7Debug \ MDM.exe
C: \ Program Files \ amélioration Microsoft \ Search

Pack \ SeaPort \ SeaPort.exe
C: \ WINDOWS \ system32 \ slserv.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ explorer.exe
\ Program Files \ Common: C

Files \ Real \ Update_OB \ realsched.exe
C: \ WINDOWS \ system32 \ wuauclt. exe
\ Program Files \ HP Software \ HP: C

Mise à jour \ HPWuSchd.exe
C: \ PROGRA ~ 1 \ MYWEBS ~ 1

\ Bar \ 1.bin \ mwsoemon.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
C: \ WINDOWS \ system32 \ NOTEPAD.EXE
C: \ Program Files \ Mozilla Firefox \ firefox.exe
C: \ WINDOWS \ system32 \ taskmgr.exe
C: \ Program Files \ Mozilla Firefox \ firefox. exe
C: \ WINDOWS \ system32 \ NOTEPAD.EXE
C: \ Program Files \ Mozilla Firefox \ plugin-

container.exe
C: \ Documents and Settings \ James_shizzle \ Mes

Documents \ Downloads \ HijackThis. exe

R0 - HKCU \ Software \ Microsoft \ Internet

Explorer \ Main page de démarrage, = Demandez

Explorer \ Main, Search =
R0 - HKLM \ Software \ Microsoft \ Internet

Explorer \ Search, Page =
R0 - HKLM \ Software \ Microsoft \ Internet

Explorer \ Main, Local Page =
HKCU \ Software \ Microsoft \ Internet - R1

Explorer \ Main Title fenêtre, = Packard Bell
Classe UrlSearchHook -: URLSearchHook - R3

{00000000-6E41-4FD3-8538-502F5495E5FC} -

C: \ Program Files \ Ask.c0m \ GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-

072E-44cf-8957-5838F569A31D} - C: \ Program

Files \ MyWebSearch \ bar \ 1.bin \ MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO -

{00A6FAF1-072E-44cf-8957-5838F569A31D} -

C: \ Program

Files \ MyWebSearch \ bar \ 1.bin \ MWSSRCAS.DLL
O2 - BHO: Class AcroIEHlprObj - {06849E9F-

C8D7-4D59-B87D-784B7D6BE0B3} - C: \ Program

Files \ Adobe \ Acrobat 5. 0

\ Reader \ ActiveX \ AcroIEHelper.ocx
O2 - BHO: BHO mwsBar - {07B18EA1-A523-4961

-B6BB-170DE4475CCA} - C: \ Program

Files \ MyWebSearch \ bar \ 1.bin \ MWSBAR. DLL
O2 - BHO: (no name) - {5C255C8A-E604-49b4-

9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {62649F82-DA45-4665-

AB6F-4A88A8DF0FCC} - (no file)
O2 - BHO: Aide de recherche - {6EBF7485-159F-4bff

-A14F-B9E3AAC4465B} - C: \ Program

Files \ Enhancement Pack Microsoft \ Search \ Search

Helper \ SearchHelper. dll
O2 - BHO: Windows Live Sign-in Helper -

{9030D464-4C02-4ABF-8ECC-5164760863C6} -

\ Program Files \ Common Files \ Microsoft: C

Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-

2E5C-4ED4-8F7B-F1F7851A4497} - C: \ Program

Files \ Skype \ Barres d'outils \ Internet

Explorer \ skypeieplugin.dll
BHO - O2: BHO barre d'outils Ask - {D4027C7F-154A-

4066-A1AD-4243D8127440} - C: \ Program

Files \ Ask.c0m \ GenericAskToolbar. dll
O2 - BHO: Java (tm) Plug-In 2 Helper SSV -

{DBC80044-A445-435B-BC74-9C25C1C588A9} -

C: \ Documents and Settings \ Irene \ Mes

Documents \ bin \ jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper -

{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} -

\ Program Files \ Windows: C

Live \ Toolbar \ wltcore. dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-

17CE-4C07-BC86-EABFE594F69C} -

C: \ Documents and Settings \ Irene \ Mes

Documents \ lib \ deploy \ JQS \ ie \ jqs_plugin.dll
O3 - Toolbar: & Windows Live Toolbar -

{21FA44EF-376D-4D53-9B0F-8A89D3229068} -

\ Program Files \ Windows: C

Live \ Toolbar \ wltcore.dll
O3 - Toolbar: Barre d'outils LimeWire - {D4027C7F-

154A-4066-A1AD-4243D8127440} - C: \ Program

Files \ Ask.c0m \ GenericAskToolbar.dll
O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program

Files \ Common

Files \ Real \ Update_OB \ realsched.exe »OSBOOT
O4 - HKLM \ .. \ Run: [QuickTime]

"C: QuickTime \ Program Files \ \ qttask.exe" -

atboottime
O4 - HKLM \ .. \ Run: [HP Software Update]

\ Program Files \ HP Software \ HP: "C

Mise à jour \ HPWuSchd.exe "
O4 - HKLM \ .. \ Run: [HKLM]

répertoire c: \ \ CyberGate \ install \ server.exe
O4 - HKLM \ .. \ Run: [My Web Search Bar]

rundll32 C: \ PROGRA ~ 1 \ MYWEBS ~ 1

\ Bar \ 1.bin \ MWSBAR.DLL, S
O4 - HKLM \ .. \ Run: [Email MyWebSearch Plugin]

C: \ PROGRA ~ 1 \ MYWEBS ~ 1

\ Bar \ 1.bin \ mwsoemon.exe
O4 - HKLM \ .. \ Run: [Adobe Pilotes]

C: \ Documents and Settings \ Casper

Blomgren \ Application

Data \ Microsoft \ Local \ UAC.exe
O4 - HKLM \ .. \ Run: [WinDir]

C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
O4 - HKLM \ .. \ Run: [ctfmon.exe]

C: \ WINDOWS \ system32 \ ctfmon. exe
O4 - HKLM \ .. \ Run: [SPMTray] C: \ Program

Files \ SpeedingUpMyPC \ SPMTray.exe
O4 - HKLM \ .. \ Run: [msnmsgr] "C: \ Program

Files \ Windows Live \ Messenger \ msnmsgr.exe "

/ Arrière-plan
O4 - HKLM \ .. \ Run: [HKCU]

C: \ WINDOWS \ system32 \ install \ server.exe
O4 - HKLM \ .. \ Run: [msmsgs] "C: \ Program

Files \ Messenger \ msmsgs.exe "/ background
O4 - HKLM \ .. \ Run: [Microsoft Config]

C: \ Documents and Settings \ James_shizzle \ Local

Settings \ Temp \ msconfig.exe
O4 - HKLM \ .. \ Run: [Adobe Pilotes]

C: \ Documents and Settings \ Casper

Blomgren \ Application

Data \ Microsoft \ Local \ UAC.exe
O4 - HKLM \ .. \ Run: [WinDir]

C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
O4 - HKLM \ .. \ Policies \ Explorer \ Run: [politiques]

C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
O4 - HKLM \ .. \ Policies \ Explorer \ Run: [politiques]

C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
O4 - HKUS \ S-1-5-18 \ .. \ Run: [CTFMON.EXE]

C: \ WINDOWS \ System32 \ CTFMON.EXE (User

"SYSTEM")
O4 - HKUS \ DEFAULT \ .. \ Run:. [CTFMON.EXE]

C: \ WINDOWS \ System32 \ CTFMON.EXE (User

Utilisateur par défaut)
O8 - Extra élément de menu contextuel: & Recherche -

http://edits.mywebsearch.c0m/toolbaredits/menu

search.jhtml?

s = 100000343 & p = ZKxdm603YYNZ & sc = & a = aR38

nmJFaBjkL. CrutEhTg & n = 2010112314
O9 - Extra button: Blog - {219C3416-8CB2-

491a-A3C7-D9FCDDC9D600} - C: \ Program

Files \ Windows

Live \ Writer \ WriterBrowserExtension.dll
O9 - Extra "Outils" menuitem: & Blog en

Windows Live Writer - {219C3416-8CB2-491a-

A3C7-D9FCDDC9D600} - C: \ Program

Files \ Windows

Live \ Writer \ WriterBrowserExtension. dll
O9 - Extra button: Skype add-on pour Internet

Explorer - {898EA8C8-E7FF-479b-8935-

AEC46303B9E5} - C: \ Program

Files \ Skype \ Barres d'outils \ Internet

Explorer \ skypeieplugin.dll
O9 - Extra "Outils" menuitem: Skype add-on pour

Internet Explorer - {898EA8C8-E7FF-479b-8935

-AEC46303B9E5} - C: \ Program

Files \ Skype \ Barres d'outils \ Internet

Explorer \ skypeieplugin. dll
O9 - Extra button: Messenger - {FB5F1910-F110-

11d2-BB9E-00C04F795683} - C: \ Program

Files \ Messenger \ msmsgs.exe
O9 - Extra "Outils" menuitem: Windows Messenger

- {FB5F1910-F110-11d2-BB9E-00C04F795683} -

C: \ Program Files \ Messenger \ msmsgs.exe
O12 - Plugin pour kar: \ Program Files \ Internet: C.

Explorer \ Plugins \ npqtplugin2.dll
O12 - Plugin pour le milieu: \ Program Files \ Internet: C.

Explorer \ Plugins \ npqtplugin2. dll
O18 - Protocol: skype-dire-addon-données - {91774881 -

D725-4E58-B298-07617B9B86A8} - C: \ Program

Files \ Skype \ Barres d'outils \ Internet

Explorer \ skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-

4DFF-9458-1830C7DD7F5D} - C: \ PROGRA ~ 1

\ COMMON ~ 1 \ Skype \ ~ SKYPE4 1.DLL
O20 - AppInit_DLLs: C: \ WINDOWS \ system32

\ Cru629.dat
O20 - Winlogon Notify: urqPfGYR - urqPfGYR. dll

(File missing)
O22 - SharedTaskScheduler: preloader Browseui -

{438755C2-A8BA-11D1-B96B-00A0C90312E1} -

C: \ WINDOWS \ System32 \ browseui.dll
O22 - SharedTaskScheduler: Composant

Catégories démon de cache - {8C7461EF-2B13-11d2

-BE35-3078302C2030} -

C: \ WINDOWS \ System32 \ browseui. dll
O22 - SharedTaskScheduler: edfjgj - {441EF6D9-

C6A2-419f-9A71-977E2004EE14} - (no file)
O23 - Service: Java Quick Starter

(JavaQuickStarterService) - Sun Microsystems,

Inc - C: \ Documents and Settings \ Irene \ Mes

Documents \ bin \ jqs.exe
Service - O23: Mon service de recherche Web

(MyWebSearchService) - MyWebSearch.c0m -

C: \ PROGRA ~ 1 \ MYWEBS ~ 1

\ Bar \ 1.bin \ mwssvc. exe
SmartLinkService (SLService) - -: Service - O23

C: \ WINDOWS \ System32 \ slserv.exe

-
End of file - 7989 bytes

C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
C: \ WINDOWS \ system32 \ WinDir \ svchost.exe
C: \ WINDOWS \ system32 \ WinDir \ svchost.exe

Je n'ai jamais vu \ WinDir. svchost.exe doit être dans le répertoire system32. Je n'ai jamais vu un répertoire bin \ sous le répertoire%% des utilisateurs.

Deuxièmement, vous avez installé Limewire qui peut vous donner toutes sortes de problèmes. Je voudrais désinstaller Limewire et toutes les barres d'outils.