VIRUS? ouvre de nouveaux onglets lorsque cliquer sur des liens, prend à des sites d'annonces

  • jbone
  • Born
  • Born
  • No Avatar
  • Inscription: Fév 06, 2009
  • Messages: 3
  • Status: Offline

Message Février 6th, 2009, 8:05 am

J'ai récemment rencontré un problème sur mon ordinateur. Lorsque je clique sur un lien dans google, il ouvre de nouveaux onglets et me prend à différents sites d'annonces. J'ai essayé plusieurs anti-spyware et anti-virus, mais aucun d'eux ne semble se débarrasser de ce problème. J'ai lancer un scan en utilisant ce détournement, ce qui est le fichier journal qui est en place:

Logfile de Trend Micro HijackThis v2.0.2
Scan sauvé à 10:36:14 AM, le 06.02.2009
Plate-forme: Windows Vista SP1 (WinNT 6.00. 1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C: \ Windows \ system32 \ Dwm.exe
C: \ Windows \ system32 \ taskeng.exe
C: \ Windows \ Explorer.EXE
C: \ Program Files \ Windows Defender \ MSASCui.exe
C: \ hp \ support \ hpsysdrv.exe
C: \ Program Files \ Hewlett-Packard \ On-Screen OSD Indicator \ OSD.exe
C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ jusched.exe
C: \ Program Files \ HP \ HP Software Update \ hpwuSchd2. exe
c: \ Program Files \ Common Files \ Symantec Shared \ CCSVCHST.exe
C: \ Program Files \ AVG \ AVG8 \ avgtray.exe
C: \ Windows \ System32 \ rundll32.exe
C: \ Program Files \ VMware \ VMware Workstation \ vmware-tray.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashDisp.exe
C: \ Program Files \ Windows Sidebar \ sidebar.exe
C: \ Program Files \ Windows Live \ Messenger \ msnmsgr.exe
C: \ Windows \ ehome \ ehtray.exe
C: \ Program Files \ DAEMON Tools Lite \ daemon.exe
C: \ Windows \ ehome \ ehmsas. exe
C: \ Users \ Jesse Desveaux \ AppData \ Local \ Google \ Update \ GoogleUpdate.exe
C: \ Program Files \ Windows Media Player \ wmpnscfg.exe
C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
C: \ Windows \ System32 \ mobsync.exe
N: \ Program Files \ MagicDisc \ MagicDisc.exe
C: \ Users \ Jesse Desveaux \ AppData \ Local \ Google \ Chrome \ Application \ chrome.exe
C: \ Users \ Jesse Desveaux \ AppData \ Local \ Google \ Chrome \ Application \ chrome.exe
C: \ hp \ kbd \ kbd.exe
C: \ Windows \ system32 \ wuauclt. exe
C: \ Users \ Jesse Desveaux \ AppData \ Local \ Google \ Chrome \ Application \ chrome.exe
C: \ Windows \ system32 \ searchfilterhost.exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis. exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = *. local
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
O1 - Hosts::: 1 localhost
O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll
O2 - BHO: NCO 2. 0 IE BHO - (602ADB0E-4AFF-4217-8AA1-95DAC4DFA408) - c: \ Program Files \ Common Files \ Symantec Shared \ coShared \ Browser \ 2.0 \ coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - (6D53EC84-6AAE-4787-ãÉëë-F4628F01010C) - C: \ PROGRA ~ 1 \ Common ~ 1 \ SYMANT ~ 1 \ IDS \ IPSBHO.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ ssv. dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ program files \ google \ googletoolbar1. dll
O3 - Toolbar: Show Norton Toolbar - (7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA) - c: \ Program Files \ Common Files \ Symantec Shared \ coShared \ Browser \ 2.0 \ CoIEPlg.dll
O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ program files \ google \ googletoolbar1.dll
O4 - HKLM \ .. \ Run: [Windows Defender]% ProgramFiles% \ Windows Defender \ MSASCui.exe-hide
O4 - HKLM \ .. \ Run: [hpsysdrv] c: \ hp \ support \ hpsysdrv.exe
O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KbdStub.EXE
O4 - HKLM \ .. \ Run: [OsdMaestro] "C: \ Program Files \ Hewlett-Packard \ On-Screen OSD Indicator \ OSD.exe"
O4 - HKLM \ .. \ Run: [HP Health Check Scheduler] [ProgramFilesFolder] Hewlett-Packard \ HP Health Check \ HPHC_Scheduler.exe
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [HP Software Update] c: \ Program Files \ HP \ HP Software Update \ HPWuSchd2.exe
O4 - HKLM \ .. \ Run: [ccApp] "c: \ Program Files \ Common Files \ Symantec Shared \ ccapp.exe"
O4 - HKLM \ .. \ Run: [D-Link RangeBooster G WUA-2340] C: \ Program Files \ D-Link \ RangeBooster G WUA-2340 \ AirPlusCFG.exe
O4 - HKLM \ .. \ Run: [ANIWZCS2Service] C: \ Program Files \ ANI \ ANIWZCS2 Service \ WZCSLDR2.exe
O4 - HKLM \ .. \ Run: [AVG8_TRAY] C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe
O4 - HKLM \ .. \ Run: [NvSvc] RUNDLL32.EXE C: \ Windows \ system32 \ nvsvc.dll, nvsvcStart
O4 - HKLM \ .. \ Run: [NvCplDaemon] Rundll32. EXE C: \ Windows \ system32 \ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ Windows \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [vmware-tray] "C: \ Program Files \ VMware \ VMware Workstation \ vmware-tray.exe"
O4 - HKLM \ .. \ Run: [avast!] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe
O4 - HKCU \ .. \ Run: [Sidebar] C: \ Program Files \ Windows Sidebar \ sidebar.exe / autorun
O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ Windows Live \ Messenger \ MsnMsgr. Exe "/ background
O4 - HKCU \ .. \ Run: [ehTray.exe] C: \ Windows \ ehome \ ehTray.exe
O4 - HKCU \ .. \ Run: [DAEMON Tools Lite] "C: \ Program Files \ DAEMON Tools Lite \ daemon.exe"-autorun
O4 - HKCU \ .. \ Run: [AdobeUpdater] C: \ Program Files \ Fichiers communs \ Adobe \ Updater5 \ AdobeUpdater.exe
O4 - HKCU \ .. \ Run: [LightScribe Control Panel] C: \ Program Files \ Common Files \ LightScribe \ LightScribeControlPanel.exe-hidden
O4 - HKCU \ .. \ Run: [BgMonitor_ (79662E04-7C6C-4d9f-84C7-88D8A56B10AA)] "C: \ Program Files \ Common Files \ Nero \ Lib \ NMBgMonitor.exe"
O4 - HKCU \ .. \ Run: [Google Update] "C: \ Users \ Jesse Desveaux \ AppData \ Local \ Google \ Update \ GoogleUpdate.exe" / c
O4 - HKCU \ .. \ Run: [RGSC] C: \ Program Files \ Rockstar Games \ Rockstar Games Social Club \ RGSCLauncher.exe / silent
O4 - HKCU \ .. \ Run: [WMPNSCFG] C: \ Program Files \ Windows Media Player \ wmpnscfg.exe
O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
O4 - HKUS \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User LOCAL SERVICE)
O4 - HKUS \ S-1-5-19 \ .. \ Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll, ShowWelcomeCenter (User LOCAL SERVICE)
O4 - HKUS \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / detectMem (User service réseau)
O4 - Startup: MagicDisc.lnk = N: \ Program Files \ MagicDisc \ MagicDisc. exe
O4 - Startup: OneNote 2007 Screen Clipper et Launcher.lnk = C: \ Program Files \ Microsoft Office \ Office12 \ ONENOTEM.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C: \ Program Files \ Fichiers communs \ Adobe \ Calibration \ Adobe Gamma Loader.exe
O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ EXCEL.EXE/3000
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ ssv. dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_01 \ bin \ ssv.dll
O9 - Extra button: Envoyer à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ ONBttnIE.dll
O9 - Extra "Outils" menuitem: S & end à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ ONBttnIE. dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ OFFICE11 \ REFIEBAR.DLL
O10 - Unknown file dans Winsock LSP: c: \ program files \ VMware \ VMware Workstation \ vsocklib.dll
O10 - Unknown file dans Winsock LSP: c: \ program files \ VMware \ VMware Workstation \ vsocklib.dll
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C: \ Program Files \ AVG \ AVG8 \ avgpp.dll
O20 - AppInit_DLLs: avgrsstx. dll
O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswupdsv.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - c: \ Program Files \ Symantec \ LiveUpdate \ aluschedulersvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashmaisv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc. exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762 ##(Bonjour Service) - Apple Computer, Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c: \ Program Files \ Common Files \ Symantec Shared \ CCSVCHST.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c: \ Program Files \ Common Files \ Symantec Shared \ ccSvcHst. exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c: \ Program Files \ Common Files \ Symantec Shared \ CCSVCHST.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c: \ Program Files \ Common Files \ Symantec Shared \ VAScanner \ comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Fichiers communs \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService. exe
O23 - Service: GameConsoleService - WILDTANGENT, Inc - C: \ Program Files \ HP Games \ My HP Game Console \ GameConsoleService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c: \ Program Files \ Hewlett-Packard \ HP Health Check \ hphc_service. exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Fichiers communs \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - c: \ Program Files \ Symantec \ LiveUpdate \ LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - c: \ Program Files \ Common Files \ Symantec Shared \ ccSvcHst. exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C: \ Windows \ system32 \ nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C: \ Windows \ system32 \ PnkBstrA.exe
O23 - Service: Symantec Core LC - Unknown owner - C: \ PROGRA ~ 1 \ Common ~ 1 \ SYMANT ~ 1 \ DPCC-LC \ symlcsvc.exe
O23 - Service: VMware Agent Service (ufad-WS60) - VMware, Inc - C: \ Program Files \ VMware \ VMware Workstation \ vmware-ufad. exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc - C: \ Program Files \ VMware \ VMware Workstation \ vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc - C: \ Windows \ system32 \ vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc - C: \ Windows \ system32 \ vmnat.exe
O23 - Service: XAudioService - Conexant Systems, Inc - C: \ Windows \ system32 \ drivers \ xaudio. exe

--
Fin de fichier - 11786 octets


Si quelqu'un peut aider avec ce problème, il serait grandement apprécié. Merci
  • Anonymous
  • Bot
  • No Avatar
  • Inscription: 25 Feb 2008
  • Messages: ?
  • Loc: Ozzuland
  • Status: Online

Message Février 6th, 2009, 8:05 am

  • Don2007
  • Web Master
  • Web Master
  • No Avatar
  • Inscription: Nov 21, 2006
  • Messages: 4924
  • Loc: NY
  • Status: Offline

Message Février 6th, 2009, 9:47 am

O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file)

O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)

Thats all I see. Avez-vous essayé de la lutte contre les logiciels malveillants
http://www.malwarebytes.org
How do you know when a politician is lying? His mouth is moving.
  • jbone
  • Born
  • Born
  • No Avatar
  • Inscription: Fév 06, 2009
  • Messages: 3
  • Status: Offline

Message Février 6th, 2009, 1:11 pm

[quote = "Don2007"] O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file)

O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)

Thats all I see. Avez-vous essayé de la lutte contre les logiciels malveillants
http://www.malwarebytes.org [/ quote

Oui j'ai essayé malwarebytes mais toujours le problème, il faudrait supprimer les deux fichiers que vous avez indiqué ci-dessus?
  • Don2007
  • Web Master
  • Web Master
  • No Avatar
  • Inscription: Nov 21, 2006
  • Messages: 4924
  • Loc: NY
  • Status: Offline

Message Février 6th, 2009, 1:16 pm

Oui, vous avez de supprimer celles-ci.
How do you know when a politician is lying? His mouth is moving.

Afficher de l'information

  • Total des messages de ce sujet: 4 messages
  • Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 130 invités
  • Vous ne pouvez pas poster de nouveaux sujets
  • Vous ne pouvez pas répondre aux sujets
  • Vous ne pouvez pas éditer vos messages
  • Vous ne pouvez pas supprimer vos messages
  • Vous ne pouvez pas joindre des fichiers
 
 

© 2011 Unmelted, LLC. Ozzu® est une marque déposée de Unmelted, LLC