Infecté par !update.exe !!! au secours !

Résolu
joric Messages postés 5 Statut Membre -  
joric Messages postés 5 Statut Membre -
Bonjour à tous !
Voilà ! je suis aux prises avec le terrible !update.exe, tout hennissant de bave ! quelqu'un peut il me dire comment me debarrasser de ce canasson ? merci d'avance, voici le rapport d'hijackthis :
Logfile of HijackThis v1.99.1
Scan saved at 11:28:53, on 22/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
E:\drivers\LogiTray.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Babylon\Babylon.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Player Video TF1\tf1.exe
C:\Program Files\Roland Garros 2006\rg2006.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\svchost.exe
E:\drivers\FxSvr2.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
D:\Program Files\eMule\eMule.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LogitechVideoRepair] E:\drivers\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] E:\drivers\LogiTray.exe
O4 - HKLM\..\Run: [Babylon Client] D:\Program Files\Babylon\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [tf1] C:\Program Files\Player Video TF1\tf1.exe
O4 - HKLM\..\Run: [rg] C:\Program Files\Roland Garros 2006\rg2006.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] E:\drivers\ManifestEngine.exe boot
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Startup: BoontyBox Club-Internet.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Startup: eMule Plus.lnk = D:\Program Files\eMule\eMule.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O16 - DPF: Yahoo! Chess - http://download.games.yahoo.com/games/clients/y/ct2_x.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://www.1-click.com/common/files/installer2.cab
O18 - Protocol: bw+0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\msgrapp.8.0.0812.00.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\msgrapp.8.0.0812.00.dll
O18 - Protocol: offline-8876480 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

Que faire ? j'attends vos réponses ;o)
Configuration: Windows XP
Internet Explorer 6.0

6 réponses

  1.
    Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    slt,

    - > Pour vérifier, scanne ton PC avec cet antivirus en ligne (sous IE et accepte l’activX) :
    http://www.bitdefender.fr/bd/site/search.php#
    Clique sur « Bitdefender scan on line » suis les instructions.
    Démo (merci à balltrap pour cette démo) :
    http://perso.orange.fr/rginformatique/section%20virus/defender.htm

    Et colle le rapport.

    Je pense que je serai de retour en soirée.

    a+
    0
    1. joric Messages postés 5 Statut Membre
       
      Salut Seb ! voila ce que me dit birdefender... qu'en penses-tu ?
      merci...
      0
  2. Nel50 Messages postés 556 Statut Membre 67
     
    Bonjour, as tu fait un scan avec un autre antivirus et spyware ?
    car update.exe peut etre un Worm (ver) donc se propage au fur et a mesure, tu peut essayer de telecharger l'antivirus AVG 7 sur

    http://www.essentielpc.com/
    Il es assez efficace il m'as depatouillez d'un pb semblable et sans casse

    Update.exe Automatic Windows Updater Ajouté par le ver GAOBOT.AO!
    update.exe OrbitUpdate Barre d'outils Xupiter OrbitExplorer, Pourriciel
    update.exe System Update2 Ajouté par le troyen AUTOTROJ-C!
    Update.exe Windows Update Ajouté par le troyen DELF-FN!

    voila par quoi il peut venir , de plus dans ta config tu messenger, emule et aussi tu doit tchaté avec babylon (script irc) donc protege toi bien met un firewal et un spyware
    0
    1. joric Messages postés 5 Statut Membre
       
      Salut ! Ben, oui, j'ai AVG 7. mais il le detecte mais ne le corrige pas... C'est AVG qui m'a prevenu avec le scan journalier, je ne sais pas trop comment m'en sortir, je vais essayer tes autres solutions... Merci en tout cas, j'ai scanné avec bitdefender aussi, voir les resultats.
      ;o)
      0
  3. joric Messages postés 5 Statut Membre
     
    Statistics

    Time
    01:29:33

    Files
    636384

    Folders
    8938

    Boot Sectors
    5

    Archives
    8754

    Packed Files
    60381

    Results

    Identified Viruses
    5

    Infected Files
    11

    Suspect Files
    0

    Warnings
    0

    Disinfected
    0

    Deleted Files
    11

    Engines Info

    Virus Definitions
    389456

    Engine build
    AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

    Scan plugins
    14

    Archive plugins
    38

    Unpack plugins
    6

    E-mail plugins
    6

    System plugins
    1

    Scan Settings

    First Action
    Disinfect

    Second Action
    Delete

    Heuristics
    Yes

    Enable Warnings
    Yes

    Scanned Extensions
    *;

    Exclude Extensions

    Scan Emails
    Yes

    Scan Archives
    Yes

    Scan Packed
    Yes

    Scan Files
    Yes

    Scan Boot
    Yes

    Scanned File
    Status

    C:\$VAULT$.AVG\00308734.FIL.OLD
    Infected with: Exploit.Win32.WMF-PFV.B

    C:\$VAULT$.AVG\00308734.FIL.OLD
    Disinfection failed

    C:\$VAULT$.AVG\00308734.FIL.OLD
    Deleted

    C:\$VAULT$.AVG\00646734.FIL
    Infected with: Exploit.Win32.WMF-PFV.B

    C:\$VAULT$.AVG\00646734.FIL
    Disinfection failed

    C:\$VAULT$.AVG\00646734.FIL
    Deleted

    C:\$VAULT$.AVG\57658453.FIL
    Infected with: Win32.Zafi.D@mm

    C:\$VAULT$.AVG\57658453.FIL
    Deleted

    C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mexe.com
    Infected with: BehavesLike:Win32.FileInfector

    C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mexe.com
    Disinfection failed

    C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mexe.com
    Deleted

    C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mwavscan.com
    Infected with: BehavesLike:Win32.FileInfector

    C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mwavscan.com
    Disinfection failed

    C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mwavscan.com
    Deleted

    C:\Program Files\Club-Internet\Assistance\OutilsCI\uninstall.exe
    Infected with: Trojan.Downloader.Zlob.ZQN

    C:\Program Files\Club-Internet\Assistance\OutilsCI\uninstall.exe
    Disinfection failed

    C:\Program Files\Club-Internet\Assistance\OutilsCI\uninstall.exe
    Deleted

    C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP309\A0138841.exe
    Infected with: Trojan.Downloader.Zlob.ZQN

    C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP309\A0138841.exe
    Disinfection failed

    C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP309\A0138841.exe
    Deleted

    C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145166.OLD
    Infected with: Exploit.Win32.WMF-PFV.B

    C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145166.OLD
    Disinfection failed

    C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145166.OLD
    Deleted

    C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145167.exe
    Infected with: Trojan.Downloader.Zlob.ZQN

    C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145167.exe
    Disinfection failed

    C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145167.exe
    Deleted

    D:\Program Files\mwav.exe=>(RAR Sfx o)=>mexe.com
    Infected with: BehavesLike:Win32.FileInfector

    D:\Program Files\mwav.exe=>(RAR Sfx o)=>mexe.com
    Disinfection failed

    D:\Program Files\mwav.exe=>(RAR Sfx o)=>mexe.com
    Deleted

    D:\Program Files\mwav.exe=>(RAR Sfx o)
    Update failed

    D:\Program Files\mwav.exe=>(RAR Sfx o)=>mwavscan.com
    Infected with: BehavesLike:Win32.FileInfector

    D:\Program Files\mwav.exe=>(RAR Sfx o)=>mwavscan.com
    Disinfection failed

    D:\Program Files\mwav.exe=>(RAR Sfx o)=>mwavscan.com
    Deleted

    D:\Program Files\mwav.exe=>(RAR Sfx o)
    Update failed
    0
    1. Nel50 Messages postés 556 Statut Membre 67
       
      il ne t'as pas demander de les mettreen quarantaine ou de les effacer ?? bizarre sa cela m'es arriver hier et il me les effacer d'office voir ta config de AVG car il aurais du le faire mooi en plus j'ai ajouter le spywar de AVG ce qui m'as donner aussi la possibilite de virer les cookies et les trojan et backdoor a priori ce serais un spybot residant
      0
  4. Nel50 Messages postés 556 Statut Membre 67
     
    regarde j'ai fait une recherche surton virus vas a cette page
    http://forum.telecharger.01net.com/forum/high-tech/SECURITE/Securite/adware-repare-spybot-sujet_18537_1.htm

    et lis ce que marque yaya c'est tres interressant mais quand je regarde ton rapport AVG les as supprimer
    Results

    Identified Viruses
    5

    Infected Files
    11

    Suspect Files
    0

    Warnings
    0

    Disinfected
    0

    Deleted Files
    11

    en plus ton secteur boot et reparer maintenant
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    re,

    recherche et supprime ce fichier si toujours présent :

    D:\Program Files\mwav.exe

    Vide ta poubelle, redémarre tin PC et remet un log hijack.

    a+
    0
  7. joric Messages postés 5 Statut Membre
     
    Grâce à vous, j'ai réussi à éradiquer ce retors canasson troyen !
    Merci encore et bravo pour ce super forum très efficace !! ;o)
    0

Discussions similaires

Infecte par un virus
sapard -
seb77150 -

3 réponses
Mon ordinateur a été infecté par un virus ou
henry4002 -
jorginho67 -

6 réponses
comment me débarrasser de UPDATE.EXE
oss_sans17 -
oss_sans17 -

6 réponses
update.exe - erreur d'application
DiabloFofo -
vincent -

10 réponses
[Update.exe] C'est quoi ?
Suki -
Boss49 -

11 réponses