[Virus Win32 hidrag] Que faire ?

Question

slt! j ai attrapé le virus Win32 hidrag et je n'arrive pas à l enleverexiste t-il une solution pour qu'il parte? si oui laquelle? merci d avance pour votre réponse

balltrap34 · Answer

salut
Faite scan en ligne et coller le rapport ici sur le post
utiliser l'antivirus en ligne suivant :
http://www.ravantivirus.com/scan/
Cliquer sur "To continue without subscribing click here" et attendre quelques minutes.

Lorsque "Ready" est affiché dans "status", cocher la case "Autoclean" puis cliquer sur "Scan my PC"
A la fin de l'analyse, copier/coller le rapport ici.

GomJabbar · Answer

Bonjour,tu auras des explications là :http://izsecurite.free.fr/forum/forum.php?f=1&view=397A+- L'éternité c'est très long, surtout vers la fin. -- Woody Allen -

TITO · Answer

merci pour le site

Scan started at 15/05/2004 22:55:58

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\Marco-1\Local Settings\Temp\alchem.cab->alchem.exe - TrojanDownloader:Win32/Alchemic.A -> Infected
C:\Documents and Settings\Marco-1\Local Settings\Temp\Belt.cab->Belt.exe - TrojanDownloader:Win32/Stubby.A -> Infected
C:\Documents and Settings\Marco-1\Local Settings\Temp\bi8.cab->biprep.exe - TrojanSpy/Win32.BiSpy.A -> Infected
C:\Documents and Settings\Marco-1\Local Settings\Temp\THI3AA8.tmp\twaintec.cab->twaintec.dll - Trojan:Win32/Spy.BiSpy.C -> Infected
C:\Documents and Settings\Marco-1\Local Settings\Temp\THI3AA8.tmp\twaintec.dll - Trojan:Win32/Spy.BiSpy.C -> Infected
C:\Documents and Settings\Marco-1\Local Settings\Temporary Internet Files\Content.IE5\H7FLJTBW\laterale[1].htm->(OBJECT0000) - HTML/CodeBaseExec* -> Infected
C:\Program Files\DownloadWare\dw.exe - Tool:PornDialer.EA -> Infected
C:\Program Files\ISTsvc\istsvc.exe - TrojanDownloader:Win32/IstBar.AG -> Infected
C:\WINDOWS\twaintec.dll - Trojan:Win32/Spy.BiSpy.C -> Infected

Scanned
============================
Objects: 34774
Directories: 2381
Archives: 710
Size(Kb): -539215
Infected files: 9

Found
============================
Viruses found: 7
Suspicious files: 0
Disinfected files: 0
Mail files: 102

balltrap34 · Answer

salut
Effacer fichiers temps

tu click sur demarrer/panneaux de configuration/option internet
une fenetre s ouvre tu click sur supprime les fichiers
une nouvelle petite fenetre s ouvre tu coche effacer tous le contenu hors connection et click ok
redemarre en mode sans echec et supprime ceci
C:\Program Files\DownloadWare\dw.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\WINDOWS\twaintec.dll

redemarre et refait scan de verification

Arteon · Answer

bonjour,e viens de trouver cet excellent virus win32.hidrag, qui, aux dires de certains, ne reporésente pas grand chose.mais je passe l'antivirus, et à chaque fois il revient.amusant, mais gonflant.avez vous une réponse à apporter, pour que je puisse l'éradiquer complétement.merciJPaPS: win 98 SEScan started at 11/06/04 09:43:34 Scanning memory...c:\WINDOWS\RAV83B3.TMP - Win32/HLLP.Jeefo -> Infectedc:\WINDOWS\SVCHOST.EXE - Win32/HLLP.Jeefo -> Infectedc:\WINDOWS\RAV2062.TMP - Win32/HLLP.Jeefo -> Infectedc:\WINDOWS\RAV41A6.TMP - Win32/HLLP.Jeefo -> Infectedc:\Program Files\NetMeeting\CONF.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Accessoires\MSPAINT.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Fichiers communs\Microsoft Shared\MSINFO\MSINFO32.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Internet Explorer\DW15.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Internet Explorer\Setup\SETUP.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Internet Explorer\Assistant de connexion\icwconn1.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Internet Explorer\Assistant de connexion\ICWOOBE.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Windows Media Player\wmplayer.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Windows Media Player\dlimport.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Windows Media Player\setup_wm.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Microsoft Office\Office\MSACCESS.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Microsoft Office\Office\BINDER.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Free.fr\iconf.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2start.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2guard.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2scan.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2upd.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2cfg.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2sys.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Kazaa Lite K++\KLConfigWizard.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Kazaa Lite K++\defuserset.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Kazaa Lite K++\AVIPreview.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Kazaa Lite K++\Kazupernodes\KaZuperNodes.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\MP3XTC\MP3XTC.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\MP3XTC\!wmaudioredist.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Lavasoft\Ad-aware 6\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero\Uninstall\UNNero.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero BackItUp\NBJ.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero BackItUp\NBR.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero SoundTrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Rippackv3\Logiciels\codec\DivX4\DivX412Codec.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Rippackv3\Logiciels\codec\DivX5.02\DivXPro502GAINBundle.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Rippackv3\Logiciels\DivxAF\setup.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Rippackv3\Logiciels\DivxG400\setup.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\iolo\System Mechanic 4 Professional\UninstallSMPro.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Clean Disk Security\Clndisk.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Sierra On-Line\UtDel32.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Sierra On-Line\SIGSPat.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Sierra On-Line\Sutil32.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Sierra On-Line\Sutil32old.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Winamp\winamp.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\iMesh\Client\DatingCity\DCInstaller.exe - Win32/HLLP.Jeefo -> Infectedc:\ATI\SUPPORT\hydravision-basic-3-25-9006\Setup.exe - Win32/HLLP.Jeefo -> Infectedc:\ATI\SUPPORT\hydravision-3-25-0006\Setup.exe - Win32/HLLP.Jeefo -> Infectedc:\ATI\SUPPORT\wme-radeon-7-90-030605m-009437c-efg\Setup.exe - Win32/HLLP.Jeefo -> Infectedc:\Palm\AlarmApp.exe - Win32/HLLP.Jeefo -> Infectedc:\Palm\palm.exe - Win32/HLLP.Jeefo -> Infectedc:\Palm\palmtut.exe - Win32/HLLP.Jeefo -> Infectedc:\Palm\Note Pad.exe - Win32/HLLP.Jeefo -> Infectedc:\A4Proxy\a4proxi.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\ICQ_v2.1_palm.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\AGPalmClientSetup.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\gedcomvision.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\pgpalm10.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\sendsms.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\lesechosinfoinstall.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\config bacup.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\MobipocketReaderPro_PalmOS_FR.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\coola1.exe - Win32/HLLP.Jeefo -> Infectedc:\encarta\UNINST32.EXE - Win32/HLLP.Jeefo -> Infectedc:\encarta\enc98.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\a4proxy.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\mmssetup.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\mailwasher1329b.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\setupanonim.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\looker e mail\adalante.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\ProxySpy\ProxySpy.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\histoires\35heurespf.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\photos\StressSign.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\photos\msloving.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\photos\Laden_1.exe - Win32/HLLP.Jeefo -> Infectedc:\MP3\CDex.exe - Win32/HLLP.Jeefo -> Infectedc:\My Shared Folder\kazaalite.exe - Win32/HLLP.Jeefo -> Infectedc:\My Shared Folder\kazaalite241.exe - Win32/HLLP.Jeefo -> Infectedc:\Filetopia3\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Setup.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full
ero backitup\NBJ.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full
ero backitup\NBR.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full
ero soundtrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Nero StartSmart\NeroStartSmart.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\System\NeroCheck.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\WMPBurn\WMPBurn.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule0.42c-Installer.exe - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\HWINFO.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\MPLAYER.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\DRWATSON.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\EXPLORER.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\EXTRAC32.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SIGVERIF.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\TUNEUP.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WINREP.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WJVIEW.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WSCRIPT.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\CLEANMGR.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\CVT1.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\REGEDIT.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SNDREC32.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WELCOME.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WINHLP32.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\CDPLAYER.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\KODAKIMG.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\KODAKPRV.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\TOUR98.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\alcrmv.exe - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\ICWSCRPT.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\MOBSYNC.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\MSTASK.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\SFC.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\STIMON.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSBCKUP\MPLAYER.EXE - Win32/HLLP.Jeefo -> Infectedd:\age of empire II\DPLAY61A.EXE - Win32/HLLP.Jeefo -> Infectedd:\age of empire II\clokspl.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\gedcomvision\gedcomvision.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\AlarmApp.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\palm.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\HOTSYNC.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\palmtut.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\Note Pad.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\LesEchosInfo\LESECHOSINFOINSTALL.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\ALCCHKID.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\ALCRMV.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\ALCRMV9X.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\ALCUPD.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\Ap\AvRack2.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\WinNT4\SoundMan.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\dxwebsetup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\Shareaza18A8.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\pioletsetup105.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\eMule0.42d-Installer.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\spybotsd12.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle	rojan remover.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\Fichiers ZIP\ProxN44.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\CHAT\CCHAT.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Microsoft Shared\MSINFO\MSINFO32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Microsoft Shared\Orgchart\ORGCHART.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\IKERNEL.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\KNLWRAP.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Jetstream Shared\iwclean.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Adaptec Shared\CreateCD\CreateCD50.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Adaptec Shared\Support\RoxiScan.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Adaptec Shared\Migration\migrate.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Internet Explorer\ie6setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Internet Explorer\DW15.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Internet Explorer\Assistant de connexion\ICWOOBE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Internet Explorer\Setup\SETUP.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Outlook Express\ol3panfr.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Outlook Expressuleswiz.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\MSACCESS.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\SCHDPL32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\GRAPH8.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\BINDER.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\MSOFFICE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\POWERPNT.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\FINDFAST.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Encyclopédie Encarta\UNINST32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Encyclopédie Encarta\enc98.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Bibliorom\BIBLIROM.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Bibliorom\Setup\INSTALL.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Atlas mondial Encarta\MSWORLD2.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Copernic 2001 Pro\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\WinZip\WZSEPE32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\WinZip\WINZIP32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{4C23837C-993E-11D4-9DE0-0060085C158A}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{30BB4D60-81DB-11D5-BB77-00400536ABAC}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{BA0F44C2-A883-11D1-AD0A-006097D15E2C}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{2EF0DA92-8996-11D4-ACEC-00D0092B06DA}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{31E9AC0D-24C4-4A6D-81D7-290263E3C131}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{43801800-CFEE-11D2-A41B-006097B55AD3}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{9B94BE6F-7CA3-4C40-A266-62667FF746CC}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{E9EEA523-4540-4A23-A0EE-5C21DE90ACA9}\setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Bezerk\JackNetShow\JackNetShow.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Bezerk\SportsNetshow\SportsNetshow.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Add Remove Plus! 2002\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Add Remove Plus! 2002\arplus.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\avkcom.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\OnVirus.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\AVK.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\AVKWCtl9.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\NotStart.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\CUninst.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\Initpop.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\RUpgrade.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\AVKPOP.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\UpdatePGM\IUpdateAVK.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\UpdatePGM\AVK.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\UpdatePGM\AVKPop.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\UpdatePGM\AVKWCtl9.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\NotStart\NotStart.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\RegCleaner\RegCleanr.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Clean Disk Security\Clndisk.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Documents To Go\ZipUtil.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Free.fr\iconf.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\EBPOpen.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\401comupd.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\Compta5\WinGen.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\Compta5\Install.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\Compta5\Modeles\UpdateWG.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\EBPAdmin\EBPAdmin.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Coola\Uninstall.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Executive Software\DiskeeperWorkstation\DK9xFAT.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Lavasoft RefUpdate\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI HydraVision\HydraCPL.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI HydraVision\HydraWizard.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI HydraVision\HYDRADM.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI HydraVision\HYDRAMD.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero\Uninstall\UNNero.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero SoundTrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero BackItUp\NBJ.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero BackItUp\NBR.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Altnet\Download Manager\asm.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Altnet\Download Manager\adm.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Trojan Remover\RmvTrjan.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Trojan Remover\Trjscan.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Trojan Remover	rupd.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero v6 0-6 3 0 6c.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero Ultra 6.3.0.2 Corporate with Registration.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6 Ultra Edition.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\NERO 6 .fr.complet+crack.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Setup 6.0.0.9.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies
ero backitup\NBJ.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies
ero backitup\NBR.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies
ero soundtrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Nero StartSmart\NeroStartSmart.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Redist\shfolder.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\System\NeroCheck.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\WMPBurn\WMPBurn.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\Setup NeroVisionExpress.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\Nero ShowTime\ShowTime.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\NeroVision\w2k\NeroVision.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\NeroVision\w9x\NeroVision.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\Redist\SHFolder.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z3_Setup_NeroMIX\Setup NeroMix.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z3_Setup_NeroMIX\NeroMix\NeroMix.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z3_Setup_NeroMIX\NeroMix\Services\Compilation.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z3_Setup_NeroMIX\Redist\ShFolder.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z4_Setup_InCD\Setup InCD.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z4_Setup_InCD\sharedNT\InCD.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z4_Setup_InCD\w9x\InCD.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero v5.5.7.2 with serial\Nero5572.exe - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\ALCCHKID.EXE - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\ALCRMV.EXE - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\ALCRMV9X.EXE - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\ALCUPD.EXE - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\Setup.exe - Win32/HLLP.Jeefo -> InfectedScanned============================	Objects: 28391	Directories: 2529	Archives: 1035	Size(Kb): -1813531	Infected files: 274Found============================	Viruses found: 2	Suspicious files: 0	Disinfected files: 0	Mail files: 762

darkcrystal33 · Answer

essaye ce cleaner:http://www.sophos.fr/support/cleaners/jeefogui.cominfos:http://www.sophos.fr/support/disinfection/jeefoa.htmlhttp://www3.ca.com/securityadvisor/virusinfo/virus.aspx?ID=35519

asian · Answer

si ta daut session de window,pour l'enlever a mon avis il faut faire un scan grace a avg 6.0
et si le scan ne marche pas cela ve dire ke le virus est ds une autre
session de window ke ta créer alors fait le scan ds l'aut ke ta créer avant ke le virus n'aparaisse.
si ta kune seul session ds window, alors fait le scan avec avg 6.0 ou autre alors sa marchera en le supprimant .après ke les virus sont détruit efface les fichier affecter par le virus sinon ,celui ci va se copier
et il faudra tt recomencer
bon ++

czec · Answer

bonjour!

quand je suis trankil sur mon ordi défoi une boite souvre est me dit:"DK9xFAT a causé une défaillance...",donc je cherche sur google ,ce mot et je me retrouve sur ce forum !
aurais je un virus?pourtant jai fait un scan avec kaspersky !!!
zarbi!

voici mon rapport grace à rav antivirus:
Scan started at 04/07/2004 18:12:35

Scanning memory...
c:\Program Files\oreka\service.exe->(UPXW) - Tool:PornDialer.gen! -> Suspicious
c:\Timtel32\iTimTel.exe - Tool:PornDialer.gen! -> Suspicious

Scanned
============================
Objects: 27714
Directories: 2083
Archives: 0
Size(Kb): 1616979
Infected files: 0

Found
============================
Viruses found: 0
Suspicious files: 2
Disinfected files: 0
Mail files: 246

que dois je faire donc?
merci

czec · Answer

kelkun p maider ?merci

czec · Answer

c a dire quoi "mode sans échec"....systeme désactivé?je le trouve où?merci

Utilisateur anonyme · Answer

Salut redemarrage en pressant en meme temps sur  F8/mode sans echec/et lances l'appli

czec · Answer

et pour revenir ?

czec · Answer

si kelkun peut me dire où pourré je cliker  (folder,drive...)car je ne suis pas un as en anglais!

Utilisateur anonyme · Answer

SalutTu veux faire quoi au juste?Folder=dossier/drive=lecteur

czec · Answer

les dossier!

czec · Answer

et aussi les lecteurs mais aprés?

czec · Answer

et quand jéteins lordi une boite de dialogue souvre et me dit arreter,redemarrer et à un moment "redemarer MS-dos".....c ca pour mode sans échec?

jaimerais just sacnner les dossiers pour L'AV!

merci

czec · Answer

merci d'avance pour les réponses

CiTyZe · Answer

Salut, j'ai un virus aussi, un blaster 5,
J'ai fais un scan avec l'AV en ligne donner dans un des post
( http://www.ravantivirus.com/scan/ )
Ca donne ça:
***** Scanning complete. *****
Total Number of Files Scanned: 33717
Total Number of Virus(es) Found: 0
Total Number of Disinfected Files: 0
Total Number of Files Renamed: 0
Total Number of Deleted Files: 0
Total Number of Errors: 4
Time Elapsed: 00:26:18
Virus Database Date: 2004/07/09
Virus Database Count: 92468

Ca veut bien dire qu'il n'y est plus ?
Merci

Abbé · Answer

Bonjour a tous.

Je viens de scanner mon pc avec ravantivirus en plus de mes scan régulier avec norton, ad-aware et autres antti virus / spyware et le résultat fu le suivant:

Scanned files: 36002
Scanned directories: 2456
Scanned archives: 800
Size of the scanned files: 3569001474
Packed files: 1108
Known viruses found: 16
Virus bodies: 10
Suspicious files: 0

Found viruses
File: C:\WINNT\alchem.exe
Virus: TrojanDownloader:Win32/Alchemic.A Status: Infected

File: C:\WINNT\2_0_1browserhelper2.dll
Virus: Clicker:Win32/Delf Status: Infected

File: C:\WINNT\system32\polall1m.exe->(CExe)
Virus: TrojanDownloader:Win32/Agent.AE Status: Infected

File: C:\WINNT\Downloaded Program Files\jao.dll
Virus: PWS:Win32/Briss.G Status: Infected

File: C:\WINNT\Downloaded Program Files\bridge.dll
Virus: PWS:Win32/Briss Status: Infected

File: C:\Documents and Settings\Administrateur\Local Settings\Temp\alchem.cab->alchem.exe
Virus: TrojanDownloader:Win32/Alchemic.A Status: Infected

File: C:\Documents and Settings\Administrateur\Local Settings\Temp\alchem.exe
Virus: TrojanDownloader:Win32/Alchemic.A Status: Infected

File: C:\Documents and Settings\Administrateur\Local Settings\Temp\RemF38.exe
Virus: TrojanDownloader:Win32/Swizzor.X Status: Infected

File: C:\Documents and Settings\Administrateur\Local Settings\Temp\THI60CB.tmp\twaintec.cab->polall1m.exe->(CExe)
Virus: TrojanDownloader:Win32/Agent.AE Status: Infected

File: C:\Documents and Settings\Administrateur\Local Settings\Temp\THI60CB.tmp\polall1m.exe->(CExe)
Virus: TrojanDownloader:Win32/Agent.AE Status: Infected

File: C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\CRAZG3OR\bridge[1].cab->bridge.dll
Virus: PWS:Win32/Briss Status: Infected

File: C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\CRAZG3OR\bridge[1].cab->jao.dll
Virus: PWS:Win32/Briss.G Status: Infected

File: C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\2J0LMHMX\bdl14025[1].exe
Virus: Trojan:Win32/Revop.C Status: Infected

File: C:\Documents and Settings\Administrateur\Application Data\wa_inst.exe
Virus: TrojanDropper:Win32/Small.FL Status: Infected

Pourriez vous me conseiller un programme qui me permettrais de les suprimer tous cas il semblerais que tous les moyens que j'utilisaient jusqu'a présent s'avere innéfficaces sur ces derniers.

Merci par avance :)

balltrap34 · Answer

salutdeja fait cecitu click sur demarrer/panneaux de configuration/option internetune fenetre s ouvre tu click sur supprime les fichiersune nouvelle petite fenetre s ouvre tu coche effacer tous le contenu hors connection et click ok------------------ensuite redemarre en mode sans echec et scan avec ton anti virus pour voir si il peut les virer sinon refait scan rav et on le ferat manuellementla chasse et le balltrap ma vrai passionvoir site perso dans profil

inferno · Answer

voila j'aiune mega couille un virus trajan ma bouffer mon dlimport pour windows media player et j'ai plus de son je fais comment maintenant

cavallaro · Answer

comment vous vous ete debarrassé du virus win32.hidrag car je l'chopé et il detruit tous mes fiochiers exe.

kAZzou · Answer

Bonjour, [DSL si il ya un poste identique, suis nouveau]Mon PC a crash et maintenant je ne peu plis ouvrir certain fichier *.exe en autreIl s'agit du Virus Win32.PariteBMon anivirus ne fonctionne plus... je c pas quoi faireI'm a Noob :'(Comme les uatres personnes precedentes, j'ai fait un scan avec  http://www.ravantivirus.com/scanCe qui donne sa :Scan started at 27/04/2005 21:31:30 Scanning memory...Scanning boot sectors...Scanning files...C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe - Win32/Parite.B -> InfectedC:\Program Files\Cheating-Death\cdeath.exe - Win32/Parite.B -> InfectedC:\Program Files\DVD Decrypter\DVDDecrypter.exe - Win32/Parite.B -> InfectedC:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe - Win32/Parite.B -> InfectedC:\Program Files\PowerStrip\uninstal.exe - Win32/Parite.B -> InfectedC:\WINDOWS\windowsx.dll - IRC/Generic* -> SuspiciousC:\WINDOWS\system32\NeroCheck.exe - Win32/Parite.B -> InfectedC:\WINDOWS\Temp\bca1.tmp - Win32/Parite.B -> InfectedC:\WINDOWS\Temp\fpa1.tmp - Win32/Parite.B -> InfectedC:\WINDOWS\Temp\fra1.tmp - Win32/Parite.B -> InfectedC:\WINDOWS\Temp\ppa1.tmp - Win32/Parite.B -> InfectedC:\WINDOWS\Temp\yla1.tmp - Win32/Parite.B -> InfectedC:\WINDOWS\Temp\zqa1.tmp - Win32/Parite.B -> InfectedScanned============================	Objects: 64774	Directories: 3989	Archives: 1586	Size(Kb): 1401851	Infected files: 12Found============================	Viruses found: 1	Suspicious files: 1	Disinfected files: 0	Mail files: 101Merci ;)

Vince · Answer

salutdsl pour le post j'avais pas lu toute la charteEn fait j'ai essayé toutes les soluces que j'ai pu trouver sur le net pour virer hidrag et ca ne fonctionne pas j(e préfererai éviter de réinstaller xp si possible).J'aimerais notamment savoir pourquoi jeefocli (nettoyeur que j'ai testé) n' arrive pas à ouvrir les fichiers infectés.Merci d'avance.

[Virus Win32 hidrag] Que faire ?

25 réponses

Discussions similaires

Newsletters