virus Au travail arretez de surfer
bonjour
j ai le meme pb de virus Au travail!Arretez de surfer!
j ai tt essaié pr rien
voila le rapport HiJackThis que j ai reçu :
StartupList report, 21/02/2009, 16:42:16
StartupList version: 1.52.2
Started from : C:Program FilesTrend MicroHijackThisHijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
==================================================
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32wscript.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSRTHDCPL.EXE
C:PROGRA~1AVGAVG8avgtray.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesMSN MessengerMsnMsgr.Exe
C:PROGRA~1AVGAVG8avgwdsvc.exe
C:DOCUME~1MAHOUTALOCALS~1TempRtkBtMnt.exe
C:PROGRA~1AVGAVG8avgrsx.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesInternet Exploreriexplore.exe
C:PROGRA~1AVGAVG8aAvgApi.exe
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSSoftwareDistributionDownloadc7335f2b91892ece82339556ae30331dupdateupdate.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe
--------------------------------------------------
Checking Windows NT UserInit:
[HKLMSoftwareMicrosoftWindows NTCurrentVersionWinlogon]
UserInit = C:WINDOWSsystem32userinit.exe,C:WINDOWSsystem32wscript.exe C:WINDOWSsystem32antinul.vbe
--------------------------------------------------
Autorun entries from Registry:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun
IMJPMIG8.1 = "C:WINDOWSIMEimjp8_1IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
PHIME2002A = C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /IMEName
Adobe Reader Speed Launcher = "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
RTHDCPL = RTHDCPL.EXE
Alcmtr = ALCMTR.EXE
AVG8_TRAY = C:PROGRA~1AVGAVG8avgtray.exe
--------------------------------------------------
Autorun entries from Registry:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
CTFMON.EXE = C:WINDOWSsystem32ctfmon.exe
MsnMsgr = "C:Program FilesMSN MessengerMsnMsgr.Exe" /background
--------------------------------------------------
Autorun entries in Registry subkeys of:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun
[OptionalComponents]
=
--------------------------------------------------
Load/Run keys from C:WINDOWSWIN.INI:
load=*INI section not found*
run=*INI section not found*
Load/Run keys from Registry:
HKLM..Windows NTCurrentVersionWinLogon: load=*Registry value not found*
HKLM..Windows NTCurrentVersionWinLogon: run=*Registry value not found*
HKLM..WindowsCurrentVersionWinLogon: load=*Registry key not found*
HKLM..WindowsCurrentVersionWinLogon: run=*Registry key not found*
HKCU..Windows NTCurrentVersionWinLogon: load=*Registry value not found*
HKCU..Windows NTCurrentVersionWinLogon: run=*Registry value not found*
HKCU..WindowsCurrentVersionWinLogon: load=*Registry key not found*
HKCU..WindowsCurrentVersionWinLogon: run=*Registry key not found*
HKCU..Windows NTCurrentVersionWindows: load=
HKCU..Windows NTCurrentVersionWindows: run=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: load=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: run=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: AppInit_DLLs=avgrsstx.dll
--------------------------------------------------
Shell & screensaver key from C:WINDOWSSYSTEM.INI:
Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*
Shell & screensaver key from Registry:
Shell=explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*
Policies Shell key:
HKCU..Policies: Shell=*Registry value not found*
HKLM..Policies: Shell=*Registry value not found*
--------------------------------------------------
Enumerating Browser Helper Objects:
AcroIEHelperStub - C:Program FilesFichiers communsAdobeAcrobatActiveXAcroIEHelperShim.dll - {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
WormRadar.com IESiteBlocker.NavFilter - C:Program FilesAVGAVG8avgssie.dll - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
(no name) - (no file) - {7E853D72-626A-48EC-A868-BA8D5E23E045}
(no name) - C:PROGRA~1AVGAVG8AVGTOO~1.DLL - {A057A204-BACC-4D26-9990-79A187E2698E}
--------------------------------------------------
Enumerating ShellServiceObjectDelayLoad items:
PostBootReminder: C:WINDOWSsystem32SHELL32.dll
CDBurn: C:WINDOWSsystem32SHELL32.dll
WebCheck: C:WINDOWSsystem32webcheck.dll
SysTray: C:WINDOWSsystem32stobject.dll
--------------------------------------------------
End of report, 5 561 bytes
Report generated in 0,032 seconds
Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
