[spy/virus] comment les supprimer ?

Salut

Tu trouveras la démarche à suivre ici :

virus methode preliminaire de desinfection version fr

Fais exactement ce qui est demandé.

a+

voila tout ce qu'on me demande :

-----------------------------------------------------------------------------
LE Scan Bit Defender arrive, il est très long a faire.
------------------------------------------------------------------------------
Report EWIDO

ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 23:55:21 05/07/2006

+ Scan result:

C:\WINDOWS\system32\ddccbbx.dll -> Adware.Virtumonde : No action taken.
:mozilla.11:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.12:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.13:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.14:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.76:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.77:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.78:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.25:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.18:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.67:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.68:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.69:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.70:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.85:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.57:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.58:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.59:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.60:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.16:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.17:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.80:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.81:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.20:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Weborama : No action taken.
:mozilla.21:C:\Documents and Settings\Flo\Application Data\Mozilla\Firefox\Profiles\default.z25\cookies.txt -> TrackingCookie.Weborama : No action taken.
C:\WINDOWS\system32\1024 -> Trojan.Small : No action taken.
C:\WINDOWS\system32\atmclk.exe -> Trojan.Small : No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\\kernel32.dll -> Trojan.Small : No action taken.

::Report end

------------------------------------------------------------------------------

--------------------------------------------------------------------------------
HIJACK

Logfile of HijackThis v1.99.1
Scan saved at 23:41:40, on 05/07/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\dcomcfg.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\vsnpstd.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Documents and Settings\Flo\Mes documents\F?nts\m?hta.exe
C:\WINDOWS\ICROSO~1.NET\notepad.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\Belkin\Logiciel Bluetooth\BTTray.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Belkin\Logiciel Bluetooth\bin\btwdins.exe
C:\PROGRA~1\NCTV\bin\dm.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\PROGRA~1\Belkin\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\WINDOWS\System32\atmclk.exe
C:\Documents and Settings\Flo\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5f4c3d09-b3b9-4f88-aa82-31332fee1c08} - C:\WINDOWS\System32\hp100.tmp
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\ddccbbx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\RunOnce: [AAW] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Aware.exe" "+b1"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Jjswji] C:\Documents and Settings\Flo\Mes documents\F?nts\m?hta.exe
O4 - HKCU\..\Run: [Istb] "C:\WINDOWS\ICROSO~1.NET\notepad.exe" -vt yax
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\Belkin\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Logiciel Bluetooth\btsendto_ie.htm
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: C:\WINDOWS\System32\chkdsk.dll
O20 - Winlogon Notify: ddccbbx - C:\WINDOWS\SYSTEM32\ddccbbx.dll
O20 - Winlogon Notify: gebcddc - gebcddc.dll (file missing)
O20 - Winlogon Notify: winwil32 - C:\WINDOWS\SYSTEM32\winwil32.dll
O21 - SSODL: furnariidae - {89e4aaba-3b21-49b3-b922-8ca35193c68e} - C:\Documents and Settings\Flo\Application Data\Microsoft\MSN Messenger.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Belkin\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Download Manager Lite Service (DownloadManagerLite) - NetCableTV - C:\PROGRA~1\NCTV\bin\dm.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

------------------------------------------------------------------------------

bsr
Ewido mal configuré !!!
relis tuto correctement et recommence !
car "no action taken" = pas d action entreprise
il faut positionner fenêtre sur remote (ou delete)
à moins que tu ne préféres détruire ttes les lignes manuellement..................

Ok je vais reconfigurer, en attendant voici le rapport Bitdefender

BitDefender Online Scanner - Real Time Virus Report

Generated at: Thu, Jul 06, 2006 - 05:13:21

Scan Info

Scanned Files

290927

Infected Files

5

Virus Detected

Trojan.Hacktool.Scan.A

1

Virtool.Fxscanner.B

1

Backdoor.Servudoor.I

2

Application.MBMON.A

1

This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.

même bien configuré il me detecte tjrs WebCoolBar, zlob., virtumonde... :'(

de plus j'ai une icone ds ma barre des tache " virus alerte "

help, j'ai pourtant bien configuré Ewido la :(

slt,

Refait un scan avec Ewido et lorsque qu'il te trouve quelquechose tu dois avoir une alerte ...Et dasn la fenêtre qui s'ouvre pour t'avertir tu dois avoir le choix donc là il faut que tu mets "SUPPRIMER" !

Et coches la petite case "executer cette action pour toutes les infections" si tu scan ton PC pour le désinfecter et que tu ne supprimes pas ce qu'il te trouves on n'avancera pas ...
Alors refait un scan Ewido comme indiqué et colle le rapport.

A+

bé alors aidez moi, je ne vois plus commetn configurer Ewido :( je cherche sur google sans succé pour le moment... :(

Tu n'y arrives toujours pas flo506 ?

Dis nous où tu bloques.