Souci avec win32-dialer.bl

je te remercie de ta réponse

* J'ai supprimé le fichier que tu m'as indiqué et j'ai un dossier backup qui s'est installé sur mon bureau - est ce que je peux le supprimer ?

* J'ai fait le scan online et voici le rapport

BitDefender Online Scanner - Real Time Virus Report



Generated at: Wed, Oct 19, 2005 - 22:32:52


--------------------------------------------------------------------------------





Scan Info



Scanned Files
337

Infected Files
0








Virus Detected



No virus found.











--------------------------------------------------------------------------------



This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.



Si j'ai bien compris tout va bien ?? non?

au fait il y est encore, je te donne le dernier rapport via kaspersky


Statistics:
Start time: 19/10/2005 22:36:36
Completion time: 19/10/2005 23:54:04
Objects scanned: 7680
Dangerous objects detected: 2
Viruses disinfected: 0
Objects deleted: 1
Objects quarantined: 0

Settings:
Objects to be scanned:
My Computer, network folders and drives
Actions to be performed with dangerous objects:
Upon virus detection, block access and prompt user for action
Actions to be performed with suspicious objects:
Block access and disinfect, delete if non-disinfectable
Scan level:
Maximum protection:
hard drives - scanned
removable drives - scanned
network drives - scanned
objects to be scanned - infectable
OLE-objects - scanned
packed files - scanned
self-extracting archives - scanned
boot sectors - scanned
scan duration limit - no
scan acceleration - iChecker/iStreams
Objects to be excluded from the protection scope:
Option not used

Report:
C:\DOCUME~1\VIVIPA~1\LOCALS~1\Temp\18275.exe is a Trojan Trojan.Win32.Dialer.bl 19/10/2005 23:36:45
C:\DOCUME~1\VIVIPA~1\LOCALS~1\Temp\18275.exe is a Trojan Trojan.Win32.Dialer.bl 19/10/2005 23:36:45
C:\DOCUME~1\VIVIPA~1\LOCALS~1\Temp\18275.exe moved to the backup storage 19/10/2005 23:36:54
C:\DOCUME~1\VIVIPA~1\LOCALS~1\Temp\18275.exe deleted 19/10/2005 23:36:54

----------------------

et aussi le dernier rapport de hijackthis
Logfile of HijackThis v1.99.1
Scan saved at 23:57:50, on 19/10/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Time Sync\time.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
C:\Program Files\WinZip 8.1 Fr\WZQKPICK.EXE
C:\Program Files\eMule\emule.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\vivipatoche\Bureau\super logiciel

patvivi\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://home.free.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName

= Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program

Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -

C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program

Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -

C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Time Sync] C:\Program Files\Time Sync\time.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky

Lab\Kaspersky Anti-Virus Personal Pro\kav.exe" /minimize
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN

Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers

communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program

Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip

8.1 Fr\WZQKPICK.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Program Files\Java\j2re1.4.1_01\bin\npjpi141_01.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\j2re1.4.1_01\bin\npjpi141_01.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} -

%windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 -

{85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file

missing)
O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE

Control) - http://www.bitdefender.com/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class)

-

http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client

/muweb_site.cab?1128070242308
O17 -

HKLM\System\CCS\Services\Tcpip\..\{EFCB4D96-843C-41BE-BC44-E6B95D61635D

}: NameServer = 212.27.54.252 212.27.39.1
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program

Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky

Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe

Je te remercie d'avance

Je te remercie de ta réponse.

J'ai utilisé clean up 40, ça m'a fait du beau ménage..

J'ai bien cru que c'était fini. Seulement au bout de quelques minutes il a réapparu.

Ya quelque chose que je comprend pas - pourquoi quand je scan manuellement KASPERSKY trouve rien et dès que c'est fini.. il est détecter par la protection résidente