TROJAN SMITFRAU - impossible à enlever HELP! Fermé

Question

Bonjour,J'ai toujours le virus Trojan Smitfrau sur mon PC (j'ai déjà éliminer d'autres trojans aujourd'hui... comme le horse se.dll)."Trojan smitfrau" apparait sur fond bleu de mon écran avec un message d'erreur.De plus, j'ai un icône sur la barre de tâche (cercle rouge avec point d'exclamation jaune) qui me dit que j'ai un virus... mais je crois qu'il fait partie du virus lui même car il me dirige vers une pub en cliquant dessus.J'ai lancé successivement:AVGspybotthe cleanerpandaadwareanti-trojan shield 2cwshredder... rien trouvé !Merci de m'aider... voici mon log "hijackthis" :Logfile of HijackThis v1.99.1Scan saved at 22:15:45, on 10/07/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\RUNDLL32.EXEC:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exeC:\Program Files\Ahead\InCD\InCD.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\System32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\Java\jre1.5.0_02\bin\jusched.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\Program Files\The Cleaner	ca.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\Program Files\The Cleaner	cm.exeC:\WINDOWS\System32\intel32.exeC:\WINDOWS\System32\ctfmon.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\Skype\Phone\Skype.exeC:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exeC:\Program Files\VIA\RAIDaid_tool.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\System32\wuauclt.exeC:\Program Files\Spybot - Search & Destroy\SpybotSD.exeC:\Program Files\The Cleaner\cleaner.exeC:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exeC:\Program Files\ATS2\ats.exeC:\Documents and Settings\mo\Mes documents\Logiciels\CWShredder.exeC:\Documents and Settings\mo\Mes documents\Logiciels\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\mo\LOCALS~1\Temp\se.dll/spage.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about :blankR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\mo\LOCALS~1\Temp\se.dll/spage.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about :blankR1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about :blankR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about :blankR1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about :blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about :blankR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWndO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exeO4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeO4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner	ca.exeO4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner	cm.exeO4 - HKLM\..\Run: [intel32.exe] C:\WINDOWS\System32\intel32.exeO4 - HKLM\..\Run: [PSGuard] C:\Program Files\PSGuard\PSGuard.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exeO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [LDM] \Program\O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimizedO4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe"O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAIDaid_tool.exeO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htmO9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htmO12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dllO17 - HKLM\System\CCS\Services\Tcpip\..\{34386A84-4032-4783-805F-BEBC15A5A56B}: NameServer = 194.117.200.10 194.117.200.15O18 - Protocol: bw+0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: offline-8876480 - {FFFC1583-9E38-4FDA-A92F-29B9705BDB93} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeO23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: PMounter - Unknown owner - C:\WINDOWS\system32\PMounter.exeO23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exeMerciOlivier

jean38 · Answer

salut,telecharge ceci (Un grand merci à Moe, S!Ri et balltrap pour cet outil): http://siri.urz.free.fr/Fix/SmitfraudFix.ziplance 1.et copie et colle le log ici

osimon · Answer

VoilàMerci pour ton aide...OlivierSmitFraudFix v0.7Rapport fait à 18:22:32,98 le 11/07/2005Executé à partir de C:\Documents and Settings\mo\Local Settings\Temporary Internet Files\Content.IE5\UD5WO153OS: Microsoft Windows XP [version 5.1.2600]»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWSC:\WINDOWS\uninstIU.exe PRESENT !»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32C:\WINDOWS\system32\intel32.exe PRESENT !C:\WINDOWS\system32\oleadm.dll PRESENT !C:\WINDOWS\system32\wp.bmp PRESENT !»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32\LogFiles»»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program FilesC:\WINDOWS\system32\wininet.dll infecté !»»»»»»»»»»»»»»»»»»»»»»»» Recherche wininet.dll de remplacement Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est D4AE-D3D4 R‚pertoire de C:\WINDOWS\ServicePackFiles\i38629/08/2002  11:45           603ÿ136 wininet.dll               1 fichier(s)          603ÿ136 octets R‚pertoire de C:\WINDOWS\system3229/08/2002  11:45           603ÿ136 wininet.dll               1 fichier(s)          603ÿ136 octets»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport

Pingson · Answer

vous pouvez me dire a quoi sert :http://siri.urz.free.fr/Fix/SmitfraudFix.zip ?

Utilisateur anonyme · Answer

salutC'est un outil concu pour tenter de detecter et virer quelques variantes de smitfraud.Pour  osimon:enregistre le fix ailleur que dans le cache internetExecuté à partir de C:\Documents and Settings\mo\Local Settings\Temporary Internet Files\Content.IE5\UD5WO153 reposte un hijack+l'option 1 du fixa+

TROJAN SMITFRAU - impossible à enlever HELP!

4 réponses

Discussions similaires