w32.mysor.fr@yf Résolu

Question

bonjour je voulais savoir si vous aviez reussi à vous debarasser de votre virus car j'ai le même et je ne m'en sort pas.en attendant votre reponse merci.

Utilisateur anonyme · Answer

Salut,télécharges hijackthis: Téléchargement de HijackThisInstalle le dans son propre dossier:-cliques droit sur le bureau, nouveau dossier, installes-le dedans.Lance le, cliques sur "do a system scan and save logfile" Puis copies et colles le rapport ici.

julien-54 · Answer

une fois lancé j'ai un "bloc note" et une fenêtre avec des cases a cocher> j'en fais quoi exactement

julien-54 · Answer

Logfile of HijackThis v1.99.1Scan saved at 22:46:27, on 07/05/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\atmclk.exeC:\WINDOWS\system32\dcomcfg.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\Network Associates\VirusScan\SHSTAT.EXEC:\Program Files\Network Associates\Common Framework\UpdaterUI.exeC:\PROGRA~1\MESSAG~1\StartMessager.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Microsoft IntelliPoint\point32.exeC:\WINDOWS\system32\qttask.exeC:\Program Files\Microsoft IntelliType Pro	ype32.exeC:\WINDOWS\system32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exeC:\Program Files\SlySoft\AnyDVD\AnyDVD.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\Program Files\WinZip\WZQKPICK.EXEC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exeC:\Program Files\Network Associates\Common Framework\FrameworkService.exeC:\Program Files\Network Associates\VirusScan\Mcshield.exeC:\Program Files\Network Associates\VirusScan\VsTskMgr.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Outlook Express\MSIMN.EXEC:\Documents and Settings\julien\Bureau\Nouveau dossier\HijackThis.exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hp5573.tmpO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll (file missing)O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [] C:\WINDOWS\Options\OEMReset.exe /AuditO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONEO4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKeyO4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager WanadooO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottimeO4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUpO4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro	ype32.exe"O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [Felix II] C:\Program Files\ScreenMates\Felix II\Fr\Felix2.exeO4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"O4 - HKCU\..\Run: [SpyBrowser] "C:\Program Files\SpyBro\SpyBro.exe" /autostartO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: hp psc 1000 series.lnk = ?O4 - Global Startup: hpoddt01.exe.lnk = ?O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXEO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.htmlO8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO18 - Protocol: bw+0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: offline-8876480 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exeO23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exeO23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exeO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

julien-54 · Answer

je ne trouve nulle part spybro et quand je veux suprimer hp5573.tmp ca me donne un message qui me dit que je ne peux pas le suprimer

julien-54 · Answer

tu trouve quelque chose ?

julien-54 · Answer

SmitFraudFix v2.40Rapport fait à 23:55:24,09, 07/05/2006Executé à partir de C:\Documents and Settings\julien\Bureau\Nouveau dossier\SmitfraudFixOS: Microsoft Windows XP [version 5.1.2600]»»»»»»»»»»»»»»»»»»»»»»»» C:\»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32C:\WINDOWS\system32\atmclk.exe PRESENT !C:\WINDOWS\system32\dcomcfg.exe PRESENT !C:\WINDOWS\system32\hp????.tmp PRESENT !C:\WINDOWS\system32\ld????.tmp PRESENT !C:\WINDOWS\system32\ot.ico PRESENT !C:\WINDOWS\system32\stdole3.tlb PRESENT !C:\WINDOWS\system32\1024\ PRESENT !»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\julien\Application Data»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\julien\FavorisC:\DOCUME~1\julien\Favoris\Antivirus Test Online.url PRESENT !»»»»»»»»»»»»»»»»»»»»»»»» Bureau»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]"Source"="About:Home""SubscribedURL"="About:Home""FriendlyName"="Ma page d'accueil" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!SrchSTS.exe by S!RiSearch SharedTaskScheduler's .dll»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll»»»»»»»»»»»»»»»»»»»»»»»» Fin

julien-54 · Answer

SmitFraudFix v2.40Rapport fait à  0:13:29,40, 08/05/2006Executé à partir de C:\Documents and Settings\julien\Bureau\Nouveau dossier\SmitfraudFixOS: Microsoft Windows XP [version 5.1.2600]»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectésC:\WINDOWS\system32\atmclk.exe suppriméC:\WINDOWS\system32\dcomcfg.exe suppriméC:\WINDOWS\system32\hp????.tmp suppriméC:\WINDOWS\system32\ld????.tmp suppriméC:\WINDOWS\system32\ot.ico suppriméC:\WINDOWS\system32\simpole.tlb suppriméC:\WINDOWS\system32\stdole3.tlb suppriméC:\WINDOWS\system32\1024\ supprimé»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre Nettoyage terminé. »»»»»»»»»»»»»»»»»»»»»»»» Fin

julien-54 · Answer

Logfile of HijackThis v1.99.1Scan saved at 00:20:06, on 08/05/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\Network Associates\VirusScan\SHSTAT.EXEC:\Program Files\Network Associates\Common Framework\UpdaterUI.exeC:\PROGRA~1\MESSAG~1\StartMessager.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Microsoft IntelliPoint\point32.exeC:\WINDOWS\system32\qttask.exeC:\Program Files\Microsoft IntelliType Pro	ype32.exeC:\WINDOWS\system32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exeC:\Program Files\SlySoft\AnyDVD\AnyDVD.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\Program Files\ScreenMates\Felix II\Fr\Felix2.exeC:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\Program Files\WinZip\WZQKPICK.EXEC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Network Associates\Common Framework\FrameworkService.exeC:\Program Files\Network Associates\VirusScan\Mcshield.exeC:\Program Files\Network Associates\VirusScan\VsTskMgr.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\HPZipm12.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exeC:\Program Files\Outlook Express\MSIMN.EXEC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\julien\Bureau\Nouveau dossier\HijackThis.exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [] C:\WINDOWS\Options\OEMReset.exe /AuditO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONEO4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKeyO4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager WanadooO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottimeO4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUpO4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro	ype32.exe"O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [Felix II] C:\Program Files\ScreenMates\Felix II\Fr\Felix2.exeO4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: hp psc 1000 series.lnk = ?O4 - Global Startup: hpoddt01.exe.lnk = ?O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXEO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.htmlO8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO18 - Protocol: offline-8876480 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exeO23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exeO23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exeO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

julien-54 · Answer

je crois qu'il est partije n'ai plus le message d'erreur et j'ouvre ma page de demarrage comme avant

julien-54 · Answer

je dois faire le scan en entier parce que la il me donne environ 4h30 avant la fin

julien-54 · Answer

d'apres le message il reste 30 min

julien-54 · Answer

heureusement parce que la fatigue arrive a grand pas lol

julien-54 · Answer

je ne peu pas envoyer de rapport!

julien-54 · Answer

je pense que j'ai cliqué trop vite et que le rapport est parti

julien-54 · Answer

je ferai un autre scan demain et je te renverai le rapport en tout cas merci beaucoup pour le depannage .a bientot

julien-54 · Answer

BitDefender Online Scanner - Real Time Virus Report     Generated at: Mon, May 08, 2006 - 10:52:53 --------------------------------------------------------------------------------      Scan Info     Scanned Files 338601 Infected Files 1            Virus Detected     Trojan.Spy.HTML.Bankfraud.DQ 1             --------------------------------------------------------------------------------     This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.

julien-54 · Answer

KASPERSKY ON-LINE SCANNER REPORT  Monday, May 08, 2006 12:05:17 PMOperating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)Kaspersky On-line Scanner version: 5.0.78.0Kaspersky Anti-Virus database last update: 8/05/2006Kaspersky Anti-Virus database records: 180757  Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true  Scan Target My Computer C:\D:\E:\F:\G:\H:\I:\   Scan Statistics Total number of scanned objects 62534 Number of viruses found 7 Number of infected objects 15 Number of suspicious objects 0 Duration of the scan process 00:46:23 Infected Object Name Virus Name Last Action C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Boîte de réception.dbx/[From Washington@wanadoo.fr, Mutual@wanadoo.fr,][Date Thu, 10 Feb 2005 20:23:39 +0100]/html  Infected: Trojan-Spy.HTML.Wamufraud.bo  skipped   C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Boîte de réception.dbx  Mail MS Outlook 5: infected - 1  skipped   C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From Regions Bank ][Date Tue, 01 Feb 2005 10:46:51 -0200]/UNNAMED/html  Infected: Trojan-Spy.HTML.Bankfraud.dq  skipped   C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From Regions Bank ][Date Tue, 01 Feb 2005 10:46:51 -0200]/UNNAMED  Infected: Trojan-Spy.HTML.Bankfraud.dq  skipped   C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Éléments supprimés.dbx  Mail MS Outlook 5: infected - 2  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP346\A0061716.tlb  Infected: Trojan-Downloader.Win32.Zlob.mt  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP346\A0061735.tlb  Infected: Trojan-Downloader.Win32.Zlob.ne  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP346\A0061781.tlb  Infected: Trojan-Downloader.Win32.Zlob.ne  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP347\A0061802.tlb  Infected: Trojan-Downloader.Win32.Zlob.ne  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP347\A0061834.tlb  Infected: Trojan-Downloader.Win32.Zlob.ne  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP348\A0061860.tlb  Infected: Trojan-Downloader.Win32.Zlob.nc  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP349\A0061909.exe  Infected: Trojan-Downloader.Win32.Zlob.nd  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP349\A0061926.tlb  Infected: Trojan-Downloader.Win32.Zlob.nj  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP350\A0061951.tlb  Infected: Trojan-Downloader.Win32.Zlob.nj  skipped   C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP350\A0061961.exe  Infected: Trojan-Downloader.Win32.Zlob.nj  skipped   Scan process completed.

julien-54 · Answer

salut je fais quoi aprés ?je suprime les doc. avec la tête de mort ?

julien-54 · Answer

et apres je fais quoi d'autre ?

julien-54 · Answer

c'est fais et je n'ai plus de message d'erreur

julien-54 · Answer

Merci beaucoup pour m'avoir sorti de mon virus .bonne soirée A++

julien-54 · Answer

bonjourTu devrai reprendre ce que j'ai fait moi j'ai suivie tous ce que l'on m'a dit de faire et ca remarche impec

W32.mysor.fr@yf

22 réponses

Votre réponse

Discussions similaires

Newsletters