[rdriv.sys]

Question

Bonjour,je viens vers vous pour me débarrasser de ce virusj'ai déjà lu quelques solutions mais compliquées pour moije suis sous XP promerci d'avance

balltrap34 · Answer

salut fait ceci HijackThis                         (ici)              http://www.florensac-chasse-trap.com/   section virussection virus telecharge le et met le dans son propre dossier ex/c :hj clik sur do a systeme scan et save a logfileet copier coller le rapportdemohttp://pageperso.aol.fr/balltrap34/demohijack.htm

lolo · Answer

Merci pour tout le problème a été résolu avec la même applicationpeut-être à bientôt ...

Lionne-Sauvage · Answer

même pb pour rdriv avec xp pro :Logfile of HijackThis v1.99.1Scan saved at 14:48:22, on 10/09/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:F:\WINDOWS\System32\smss.exeF:\WINDOWS\system32\winlogon.exeF:\WINDOWS\system32\services.exeF:\WINDOWS\system32\lsass.exeF:\WINDOWS\system32\svchost.exeF:\WINDOWS\System32\svchost.exeF:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exeF:\WINDOWS\Explorer.EXEF:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeF:\Program Files\Norton Internet Security\ISSVC.exeF:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeF:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeF:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeF:\WINDOWS\system32\spoolsv.exeF:\Program Files\Analog Devices\SoundMAX\SMTray.exeF:\Program Files\MessengerPlus! 3\MsgPlus.exeF:\WINDOWS\System32\CTHELPER.EXEF:\WINDOWS\System32mctrl.exeF:\WINDOWS\System32\LVCOMSX.EXEF:\Program Files\Logitech\Video\LogiTray.exeF:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0K2.EXEF:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeF:\Program Files\Logitech\Video\FxSvr2.exeF:\Program Files\Messenger\msmsgs.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeF:\WINDOWS\desktop.exeF:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeF:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exeF:\Program Files\MSN Messenger\msnmsgr.exeF:\Program Files\Analog Devices\SoundMAX\SMAgent.exeF:\WINDOWS\System32\svchost.exeF:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exeF:\PROGRA~1\NORTON~1\NORTON~1
avw32.exeF:\Program Files\Crazy Browser\Crazy Browser.exeF:\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.free.fr/search/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.free.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - F:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dllO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - F:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - F:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - F:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [Smapp] F:\Program Files\Analog Devices\SoundMAX\SMTray.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [MessengerPlus3] "F:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXEO4 - HKLM\..\Run: [UpdReg] F:\WINDOWS\UpdReg.EXEO4 - HKLM\..\Run: [Jet Detection] "F:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"O4 - HKLM\..\Run: [CTStartup] F:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /runO4 - HKLM\..\Run: [RemoteControl] F:\WINDOWS\System32mctrl.exeO4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] F:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] F:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [SYSTRAY] C:\UNMT.EXEO4 - HKLM\..\Run: [Windows Updating Service] updating.pifO4 - HKLM\..\Run: [SurfAccuracy] F:\Program Files\SurfAccuracy\SAcc.exeO4 - HKLM\..\Run: [Windows Process Manager] winproc.exeO4 - HKLM\..\Run: [default] C:\icast.exeO4 - HKLM\..\Run: [EPSON Stylus Photo RX500] F:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0K2.EXE /P24 "EPSON Stylus Photo RX500" /O6 "USB001" /M "Stylus Photo RX500"O4 - HKLM\..\Run: [ccApp] "F:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [SSC_UserPrompt] F:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exeO4 - HKLM\..\Run: [Symantec NetDriver Monitor] F:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUpO4 - HKLM\..\RunServices: [Windows Updating Service] updating.pifO4 - HKLM\..\RunServices: [Compaq Service Drivers] amsn.exeO4 - HKLM\..\RunServices: [Windows Process Manager] winproc.exeO4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [MessengerPlus3] "F:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "F:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [Windows Updating Service] updating.pifO4 - HKCU\..\Run: [Compaq Service Drivers] amsn.exeO4 - HKCU\..\Run: [eMuleAutoStart] F:\Program Files\eMule\emule.exe -AutoStartO4 - HKCU\..\Run: [msnmsgr] "F:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\RunServices: [Windows Updating Service] updating.pifO4 - HKCU\..\RunServices: [Compaq Service Drivers] amsn.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: Microsoft Office.lnk = F:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://F:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\MSMSGS.EXEO9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\MSMSGS.EXEO15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet ZoneO16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c7.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by103fd.bay103.hotmail.msn.com/activex/HMAtchmt.ocxO18 - Protocol: bw+0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: offline-8876480 - {41547F1C-263A-4195-AA70-9658CBD88980} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: desktop - Unknown owner - F:\WINDOWS\desktop.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: ISSvc (ISSVC) - Symantec Corporation - F:\Program Files\Norton Internet Security\ISSVC.exeO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - F:\Program Files\Norton Internet Security\Norton AntiVirus
avapsvc.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32
vsvc32.exeO23 - Service: SAVScan - Symantec Corporation - F:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - F:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - F:\Program Files\Analog Devices\SoundMAX\SMAgent.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - F:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exeO23 - Service: SYS MANAGER (system) - Unknown owner - F:\WINDOWS\SYSWIN32.EXEque faire ensuite ???

Utilisateur anonyme · Answer

Bonjour1 Télécharge CCleaner.http://www.filehippo.com/download_ccleaner.htmlInstalle le dans un répertoire dédié.2 Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.Démarre l'ordinateur.Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows. En utilisant les touches du curseur, sélectionne le mode sans échec approprié et appuye sur Entrée.3 Tu clique sur Démarrer puis Exécuter, tu tapes services.msc et tu cliques sur OK.Dans la liste des services, cherche et sélectionne "SYS MANAGER" / double clique sur la ligne / vérifie dans Chemin d'accès des fichiers exécutables qu'ils'agit bien de "F:\WINDOWS\SYSWIN32.EXE" / dans Type de démarrage, sélectionne Désactiver / valide la modification.4 Désinstalle ces applications (si tu les trouves) dans Ajout-Suppression de programmes :SurfAccuracy5 Relance un scan HijackThis et coche les lignes ci-dessous :O4 - HKLM\..\Run: [SYSTRAY] C:\UNMT.EXE O4 - HKLM\..\Run: [Windows Updating Service] updating.pif O4 - HKLM\..\Run: [SurfAccuracy] F:\Program Files\SurfAccuracy\SAcc.exe O4 - HKLM\..\Run: [Windows Process Manager] winproc.exe O4 - HKLM\..\Run: [default] C:\icast.exe O4 - HKLM\..\RunServices: [Windows Updating Service] updating.pif O4 - HKLM\..\RunServices: [Compaq Service Drivers] amsn.exe O4 - HKLM\..\RunServices: [Windows Process Manager] winproc.exe O4 - HKCU\..\Run: [Windows Updating Service] updating.pif O4 - HKCU\..\Run: [Compaq Service Drivers] amsn.exe  O4 - HKCU\..\RunServices: [Windows Updating Service] updating.pif O4 - HKCU\..\RunServices: [Compaq Service Drivers] amsn.exe O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c7.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by103fd.bay103.hotmail.msn.com/activex/HMAtchmt.ocx rporation - F:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe O23 - Service: SYS MANAGER (system) - Unknown owner - F:\WINDOWS\SYSWIN32.EXE Ferme toutes les fenêtres Windows, Internet explorer, Outlook,sauf le logiciel Hijackthis et clique sur « Fix checked »6 Assure toi d'avoir accés à tous les fichiers.Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :Activer la case : Afficher les fichiers et dossiers cachésDésactiver la case : Masquer les extensions des fichiers dont le type est connuDésactiver la case : Masquer les fichiers protégés du système d'exploitationPuis Appliquer7 Supprime les fichiers/dossiers incriminés (s'ils existent encore) :C:\UNMT.EXEC:\icast.exeF:\Program Files\SurfAccuracyF:\WINDOWS\SYSWIN32.EXEupdating.pifwinproc.exeamsn.exePour ces derniers, probablement dans F:\WINDOWS\System32 ou F:\WINDOW8 Lance et exécute CCleanerRecache les fichiers systeme afin de ne pas faire d'erreur à l'avenir en sélectionnant ne pas afficher les fichiers cachés ou les fichiers système.9 Redémarre normalement10 Va sur ce sitehttp://virusscan.jotti.org/Clique sur Parcourir et cherche ce fichier.F:\WINDOWS\desktop.exe Ensuite clique sur Submit.Colle le rapport ici avec un nouveau log HijackThis.

[rdriv.sys]

4 réponses

Votre réponse

Discussions similaires

Newsletters