[Virus Win32 hidrag] Que faire ?

Question

slt! j ai attrapé le virus Win32 hidrag et je n'arrive pas à l enleverexiste t-il une solution pour qu'il parte? si oui laquelle? merci d avance pour votre réponse

balltrap34 · Answer

salutFaite scan en ligne et coller le rapport ici sur le postutiliser l'antivirus en ligne suivant : http://www.ravantivirus.com/scan/  Cliquer sur "To continue without subscribing click here" et attendre quelques minutes.   Lorsque "Ready" est affiché dans "status", cocher la case "Autoclean" puis cliquer sur "Scan my PC"A la fin de l'analyse, copier/coller le rapport ici.

GomJabbar · Answer

Bonjour,tu auras des explications là :http://izsecurite.free.fr/forum/forum.php?f=1&view=397A+- L'éternité c'est très long, surtout vers la fin. -- Woody Allen -

TITO · Answer

merci pour le siteScan started at 15/05/2004 22:55:58 Scanning memory...Scanning boot sectors...Scanning files...C:\Documents and Settings\Marco-1\Local Settings\Temp\alchem.cab->alchem.exe - TrojanDownloader:Win32/Alchemic.A -> InfectedC:\Documents and Settings\Marco-1\Local Settings\Temp\Belt.cab->Belt.exe - TrojanDownloader:Win32/Stubby.A -> InfectedC:\Documents and Settings\Marco-1\Local Settings\Temp\bi8.cab->biprep.exe - TrojanSpy/Win32.BiSpy.A -> InfectedC:\Documents and Settings\Marco-1\Local Settings\Temp\THI3AA8.tmp	waintec.cab->twaintec.dll - Trojan:Win32/Spy.BiSpy.C -> InfectedC:\Documents and Settings\Marco-1\Local Settings\Temp\THI3AA8.tmp	waintec.dll - Trojan:Win32/Spy.BiSpy.C -> InfectedC:\Documents and Settings\Marco-1\Local Settings\Temporary Internet Files\Content.IE5\H7FLJTBW\laterale[1].htm->(OBJECT0000) - HTML/CodeBaseExec* -> InfectedC:\Program Files\DownloadWare\dw.exe - Tool:PornDialer.EA -> InfectedC:\Program Files\ISTsvc\istsvc.exe - TrojanDownloader:Win32/IstBar.AG -> InfectedC:\WINDOWS	waintec.dll - Trojan:Win32/Spy.BiSpy.C -> InfectedScanned============================	Objects: 34774	Directories: 2381	Archives: 710	Size(Kb): -539215	Infected files: 9Found============================	Viruses found: 7	Suspicious files: 0	Disinfected files: 0	Mail files: 102

balltrap34 · Answer

salutEffacer fichiers tempstu click sur demarrer/panneaux de configuration/option internetune fenetre s ouvre tu click sur supprime les fichiersune nouvelle petite fenetre s ouvre tu coche effacer tous le contenu hors connection et click okredemarre en mode sans echec et supprime ceciC:\Program Files\DownloadWare\dw.exeC:\Program Files\ISTsvc\istsvc.exe  C:\WINDOWS	waintec.dll redemarre et refait scan de verification

Arteon · Answer

bonjour,e viens de trouver cet excellent virus win32.hidrag, qui, aux dires de certains, ne reporésente pas grand chose.mais je passe l'antivirus, et à chaque fois il revient.amusant, mais gonflant.avez vous une réponse à apporter, pour que je puisse l'éradiquer complétement.merciJPaPS: win 98 SEScan started at 11/06/04 09:43:34 Scanning memory...c:\WINDOWS\RAV83B3.TMP - Win32/HLLP.Jeefo -> Infectedc:\WINDOWS\SVCHOST.EXE - Win32/HLLP.Jeefo -> Infectedc:\WINDOWS\RAV2062.TMP - Win32/HLLP.Jeefo -> Infectedc:\WINDOWS\RAV41A6.TMP - Win32/HLLP.Jeefo -> Infectedc:\Program Files\NetMeeting\CONF.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Accessoires\MSPAINT.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Fichiers communs\Microsoft Shared\MSINFO\MSINFO32.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Internet Explorer\DW15.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Internet Explorer\Setup\SETUP.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Internet Explorer\Assistant de connexion\icwconn1.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Internet Explorer\Assistant de connexion\ICWOOBE.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Windows Media Player\wmplayer.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Windows Media Player\dlimport.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Windows Media Player\setup_wm.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Microsoft Office\Office\MSACCESS.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Microsoft Office\Office\BINDER.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Free.fr\iconf.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2start.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2guard.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2scan.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2upd.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2cfg.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\a2\a2sys.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Kazaa Lite K++\KLConfigWizard.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Kazaa Lite K++\defuserset.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Kazaa Lite K++\AVIPreview.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Kazaa Lite K++\Kazupernodes\KaZuperNodes.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\MP3XTC\MP3XTC.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\MP3XTC\!wmaudioredist.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Lavasoft\Ad-aware 6\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero\Uninstall\UNNero.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero BackItUp\NBJ.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero BackItUp\NBR.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero SoundTrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Rippackv3\Logiciels\codec\DivX4\DivX412Codec.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Rippackv3\Logiciels\codec\DivX5.02\DivXPro502GAINBundle.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Rippackv3\Logiciels\DivxAF\setup.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Rippackv3\Logiciels\DivxG400\setup.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\iolo\System Mechanic 4 Professional\UninstallSMPro.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Clean Disk Security\Clndisk.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Sierra On-Line\UtDel32.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Sierra On-Line\SIGSPat.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Sierra On-Line\Sutil32.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Sierra On-Line\Sutil32old.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\Winamp\winamp.exe - Win32/HLLP.Jeefo -> Infectedc:\Program Files\iMesh\Client\DatingCity\DCInstaller.exe - Win32/HLLP.Jeefo -> Infectedc:\ATI\SUPPORT\hydravision-basic-3-25-9006\Setup.exe - Win32/HLLP.Jeefo -> Infectedc:\ATI\SUPPORT\hydravision-3-25-0006\Setup.exe - Win32/HLLP.Jeefo -> Infectedc:\ATI\SUPPORT\wme-radeon-7-90-030605m-009437c-efg\Setup.exe - Win32/HLLP.Jeefo -> Infectedc:\Palm\AlarmApp.exe - Win32/HLLP.Jeefo -> Infectedc:\Palm\palm.exe - Win32/HLLP.Jeefo -> Infectedc:\Palm\palmtut.exe - Win32/HLLP.Jeefo -> Infectedc:\Palm\Note Pad.exe - Win32/HLLP.Jeefo -> Infectedc:\A4Proxy\a4proxi.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\ICQ_v2.1_palm.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\AGPalmClientSetup.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\gedcomvision.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\pgpalm10.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\sendsms.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\lesechosinfoinstall.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\config bacup.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\MobipocketReaderPro_PalmOS_FR.exe - Win32/HLLP.Jeefo -> Infectedc:\CASIO AGENDA\utilisés\coola1.exe - Win32/HLLP.Jeefo -> Infectedc:\encarta\UNINST32.EXE - Win32/HLLP.Jeefo -> Infectedc:\encarta\enc98.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\a4proxy.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\mmssetup.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\mailwasher1329b.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\setupanonim.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\looker e mail\adalante.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\ProxySpy\ProxySpy.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\histoires\35heurespf.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\photos\StressSign.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\photos\msloving.exe - Win32/HLLP.Jeefo -> Infectedc:\internet\photos\Laden_1.exe - Win32/HLLP.Jeefo -> Infectedc:\MP3\CDex.exe - Win32/HLLP.Jeefo -> Infectedc:\My Shared Folder\kazaalite.exe - Win32/HLLP.Jeefo -> Infectedc:\My Shared Folder\kazaalite241.exe - Win32/HLLP.Jeefo -> Infectedc:\Filetopia3\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Setup.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full
ero backitup\NBJ.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full
ero backitup\NBR.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full
ero soundtrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Nero StartSmart\NeroStartSmart.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\System\NeroCheck.exe - Win32/HLLP.Jeefo -> Infectedc:
ero\Nero 6 Full\WMPBurn\WMPBurn.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule0.42c-Installer.exe - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\HWINFO.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\MPLAYER.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\DRWATSON.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\EXPLORER.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\EXTRAC32.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SIGVERIF.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\TUNEUP.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WINREP.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WJVIEW.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WSCRIPT.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\CLEANMGR.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\CVT1.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\REGEDIT.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SNDREC32.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WELCOME.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\WINHLP32.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\CDPLAYER.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\KODAKIMG.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\KODAKPRV.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\TOUR98.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\alcrmv.exe - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\ICWSCRPT.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\MOBSYNC.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\MSTASK.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\SFC.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSTEM\STIMON.EXE - Win32/HLLP.Jeefo -> Infectedd:\WINDOWS\SYSBCKUP\MPLAYER.EXE - Win32/HLLP.Jeefo -> Infectedd:\age of empire II\DPLAY61A.EXE - Win32/HLLP.Jeefo -> Infectedd:\age of empire II\clokspl.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\gedcomvision\gedcomvision.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\AlarmApp.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\palm.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\HOTSYNC.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\palmtut.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\Note Pad.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Palm\LesEchosInfo\LESECHOSINFOINSTALL.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\ALCCHKID.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\ALCRMV.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\ALCRMV9X.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\ALCUPD.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\Ap\AvRack2.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\pilote son carte-mère ms-6561\WinNT4\SoundMan.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\dxwebsetup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\Shareaza18A8.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\pioletsetup105.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\eMule0.42d-Installer.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\spybotsd12.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle	rojan remover.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\poubelle\Fichiers ZIP\ProxN44.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\CHAT\CCHAT.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Microsoft Shared\MSINFO\MSINFO32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Microsoft Shared\Orgchart\ORGCHART.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\IKERNEL.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\KNLWRAP.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Jetstream Shared\iwclean.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Adaptec Shared\CreateCD\CreateCD50.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Adaptec Shared\Support\RoxiScan.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Fichiers communs\Adaptec Shared\Migration\migrate.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Internet Explorer\ie6setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Internet Explorer\DW15.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Internet Explorer\Assistant de connexion\ICWOOBE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Internet Explorer\Setup\SETUP.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Outlook Express\ol3panfr.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Outlook Expressuleswiz.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\MSACCESS.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\SCHDPL32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\GRAPH8.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\BINDER.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\MSOFFICE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\POWERPNT.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Office\Office\FINDFAST.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Encyclopédie Encarta\UNINST32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Encyclopédie Encarta\enc98.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Bibliorom\BIBLIROM.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Bibliorom\Setup\INSTALL.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Microsoft Référence\Atlas mondial Encarta\MSWORLD2.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Copernic 2001 Pro\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\WinZip\WZSEPE32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\WinZip\WINZIP32.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{4C23837C-993E-11D4-9DE0-0060085C158A}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{30BB4D60-81DB-11D5-BB77-00400536ABAC}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{BA0F44C2-A883-11D1-AD0A-006097D15E2C}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{2EF0DA92-8996-11D4-ACEC-00D0092B06DA}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{31E9AC0D-24C4-4A6D-81D7-290263E3C131}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{43801800-CFEE-11D2-A41B-006097B55AD3}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{9B94BE6F-7CA3-4C40-A266-62667FF746CC}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}\Setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\InstallShield Installation Information\{E9EEA523-4540-4A23-A0EE-5C21DE90ACA9}\setup.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Bezerk\JackNetShow\JackNetShow.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Bezerk\SportsNetshow\SportsNetshow.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Add Remove Plus! 2002\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Add Remove Plus! 2002\arplus.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\avkcom.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\OnVirus.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\AVK.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\AVKWCtl9.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\NotStart.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\CUninst.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\Initpop.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\RUpgrade.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\AVKPOP.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\UpdatePGM\IUpdateAVK.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\UpdatePGM\AVK.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\UpdatePGM\AVKPop.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\UpdatePGM\AVKWCtl9.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\AntiVirusKit\NotStart\NotStart.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\RegCleaner\RegCleanr.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Clean Disk Security\Clndisk.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Documents To Go\ZipUtil.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Free.fr\iconf.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\EBPOpen.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\401comupd.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\Compta5\WinGen.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\Compta5\Install.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\Compta5\Modeles\UpdateWG.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\EBP\EBPAdmin\EBPAdmin.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Coola\Uninstall.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Executive Software\DiskeeperWorkstation\DK9xFAT.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Lavasoft RefUpdate\UNWISE.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI HydraVision\HydraCPL.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI HydraVision\HydraWizard.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI HydraVision\HYDRADM.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\ATI Technologies\ATI HydraVision\HYDRAMD.EXE - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero\Uninstall\UNNero.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero SoundTrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero BackItUp\NBJ.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Ahead\Nero BackItUp\NBR.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Altnet\Download Manager\asm.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Altnet\Download Manager\adm.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Trojan Remover\RmvTrjan.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Trojan Remover\Trjscan.exe - Win32/HLLP.Jeefo -> Infectedd:\double c\Program Files\Trojan Remover	rupd.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero v6 0-6 3 0 6c.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero Ultra 6.3.0.2 Corporate with Registration.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6 Ultra Edition.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\NERO 6 .fr.complet+crack.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Setup 6.0.0.9.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies
ero backitup\NBJ.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies
ero backitup\NBR.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies
ero soundtrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Nero StartSmart\NeroStartSmart.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Redist\shfolder.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\System\NeroCheck.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\WMPBurn\WMPBurn.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\Setup NeroVisionExpress.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\Nero ShowTime\ShowTime.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\NeroVision\w2k\NeroVision.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\NeroVision\w9x\NeroVision.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z2_Setup_NeroVisionExpress\Redist\SHFolder.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z3_Setup_NeroMIX\Setup NeroMix.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z3_Setup_NeroMIX\NeroMix\NeroMix.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z3_Setup_NeroMIX\NeroMix\Services\Compilation.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z3_Setup_NeroMIX\Redist\ShFolder.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z4_Setup_InCD\Setup InCD.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z4_Setup_InCD\sharedNT\InCD.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero 6.0.0.9 Ultra Adition_Serial Number_ and all the Goodies\Z4_Setup_InCD\w9x\InCD.exe - Win32/HLLP.Jeefo -> Infectedd:\eMule répertoire chargement\Chargés\Nero\Nero v5.5.7.2 with serial\Nero5572.exe - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\ALCCHKID.EXE - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\ALCRMV.EXE - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\ALCRMV9X.EXE - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\ALCUPD.EXE - Win32/HLLP.Jeefo -> Infectedd:\pilote son carte-mère ms-6561\Setup.exe - Win32/HLLP.Jeefo -> InfectedScanned============================	Objects: 28391	Directories: 2529	Archives: 1035	Size(Kb): -1813531	Infected files: 274Found============================	Viruses found: 2	Suspicious files: 0	Disinfected files: 0	Mail files: 762

darkcrystal33 · Answer

essaye ce cleaner:http://www.sophos.fr/support/cleaners/jeefogui.cominfos:http://www.sophos.fr/support/disinfection/jeefoa.htmlhttp://www3.ca.com/securityadvisor/virusinfo/virus.aspx?ID=35519

asian · Answer

si ta daut session de window,pour l'enlever a mon avis il faut faire un scan grace a avg 6.0et si le scan ne marche pas cela ve dire ke le virus est ds une autresession de window ke ta créer alors fait le scan ds l'aut ke ta créer avant ke le virus n'aparaisse.si ta kune seul session ds window, alors fait le scan avec avg 6.0 ou autre alors sa marchera en le  supprimant .après ke les virus sont détruit efface les fichier affecter par le virus sinon ,celui ci va se copieret il faudra tt recomencerbon ++

czec · Answer

bonjour!quand je suis trankil sur mon ordi défoi une boite souvre est me dit:"DK9xFAT a causé une défaillance...",donc je cherche sur google ,ce mot et je me retrouve sur ce forum !aurais je un virus?pourtant jai fait un scan avec kaspersky !!!zarbi!voici mon rapport grace à rav antivirus:Scan started at 04/07/2004 18:12:35 Scanning memory...c:\Program Files\oreka\service.exe->(UPXW) - Tool:PornDialer.gen! -> Suspiciousc:\Timtel32\iTimTel.exe - Tool:PornDialer.gen! -> SuspiciousScanned============================	Objects: 27714	Directories: 2083	Archives: 0	Size(Kb): 1616979	Infected files: 0Found============================	Viruses found: 0	Suspicious files: 2	Disinfected files: 0	Mail files: 246que dois je faire donc?merci

czec · Answer

kelkun p maider ?merci

czec · Answer

c a dire quoi "mode sans échec"....systeme désactivé?je le trouve où?merci

Utilisateur anonyme · Answer

Salut redemarrage en pressant en meme temps sur  F8/mode sans echec/et lances l'appli

czec · Answer

et pour revenir ?

czec · Answer

si kelkun peut me dire où pourré je cliker  (folder,drive...)car je ne suis pas un as en anglais!

Utilisateur anonyme · Answer

SalutTu veux faire quoi au juste?Folder=dossier/drive=lecteur

czec · Answer

les dossier!

czec · Answer

et aussi les lecteurs mais aprés?

czec · Answer

et quand jéteins lordi une boite de dialogue souvre et me dit arreter,redemarrer et à un moment "redemarer MS-dos".....c ca pour mode sans échec?jaimerais just sacnner les dossiers pour L'AV!merci

czec · Answer

merci d'avance pour les réponses

CiTyZe · Answer

Salut, j'ai un virus aussi, un blaster 5,J'ai fais un scan avec l'AV en ligne donner dans un des post ( http://www.ravantivirus.com/scan/ )Ca donne ça: ***** Scanning complete. ***** Total Number of Files Scanned: 33717 Total Number of Virus(es) Found: 0 Total Number of Disinfected Files: 0 Total Number of Files Renamed: 0 Total Number of Deleted Files: 0 Total Number of Errors: 4 Time Elapsed: 00:26:18 Virus Database Date: 2004/07/09 Virus Database Count: 92468Ca veut bien dire qu'il n'y est plus ?Merci

Abbé · Answer

Bonjour a tous.Je viens de scanner mon pc avec ravantivirus en plus de mes scan régulier avec norton, ad-aware et autres antti virus / spyware et le résultat fu le suivant:Scanned files:  36002 Scanned directories: 2456 Scanned archives: 800 Size of the scanned files: 3569001474 Packed files: 1108 Known viruses found: 16 Virus bodies: 10 Suspicious files: 0   Found viruses  File: C:\WINNT\alchem.exe Virus: TrojanDownloader:Win32/Alchemic.A Status: Infected  File: C:\WINNT\2_0_1browserhelper2.dll Virus: Clicker:Win32/Delf Status: Infected  File: C:\WINNT\system32\polall1m.exe->(CExe) Virus: TrojanDownloader:Win32/Agent.AE Status: Infected  File: C:\WINNT\Downloaded Program Files\jao.dll Virus: PWS:Win32/Briss.G Status: Infected  File: C:\WINNT\Downloaded Program Files\bridge.dll Virus: PWS:Win32/Briss Status: Infected  File: C:\Documents and Settings\Administrateur\Local Settings\Temp\alchem.cab->alchem.exe Virus: TrojanDownloader:Win32/Alchemic.A Status: Infected  File: C:\Documents and Settings\Administrateur\Local Settings\Temp\alchem.exe Virus: TrojanDownloader:Win32/Alchemic.A Status: Infected  File: C:\Documents and Settings\Administrateur\Local Settings\Temp\RemF38.exe Virus: TrojanDownloader:Win32/Swizzor.X Status: Infected  File: C:\Documents and Settings\Administrateur\Local Settings\Temp\THI60CB.tmp	waintec.cab->polall1m.exe->(CExe) Virus: TrojanDownloader:Win32/Agent.AE Status: Infected  File: C:\Documents and Settings\Administrateur\Local Settings\Temp\THI60CB.tmp\polall1m.exe->(CExe) Virus: TrojanDownloader:Win32/Agent.AE Status: Infected  File: C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\CRAZG3OR\bridge[1].cab->bridge.dll Virus: PWS:Win32/Briss Status: Infected  File: C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\CRAZG3OR\bridge[1].cab->jao.dll Virus: PWS:Win32/Briss.G Status: Infected  File: C:\Documents and Settings\Administrateur\Local Settings\Temp\Temporary Internet Files\Content.IE5\2J0LMHMX\bdl14025[1].exe Virus: Trojan:Win32/Revop.C Status: Infected  File: C:\Documents and Settings\Administrateur\Application Data\wa_inst.exe Virus: TrojanDropper:Win32/Small.FL Status: Infected  Pourriez vous me conseiller un programme qui me permettrais de les suprimer tous cas il semblerais que tous les moyens que j'utilisaient jusqu'a présent s'avere innéfficaces sur ces derniers.Merci par avance :)

balltrap34 · Answer

salut
deja fait ceci
tu click sur demarrer/panneaux de configuration/option internet
une fenetre s ouvre tu click sur supprime les fichiers
une nouvelle petite fenetre s ouvre tu coche effacer tous le contenu hors connection et click ok
------------------
ensuite redemarre en mode sans echec et scan avec ton anti virus pour voir si il peut les virer sinon refait scan rav et on le ferat manuellement

la chasse et le balltrap ma vrai passion
voir site perso dans profil

inferno · Answer

voila j'aiune mega couille un virus trajan ma bouffer mon dlimport pour windows media player et j'ai plus de son je fais comment maintenant

cavallaro · Answer

comment vous vous ete debarrassé du virus win32.hidrag car je l'chopé et il detruit tous mes fiochiers exe.

kAZzou · Answer

Bonjour, [DSL si il ya un poste identique, suis nouveau]
Mon PC a crash et maintenant je ne peu plis ouvrir certain fichier *.exe en autre
Il s'agit du Virus Win32.PariteB
Mon anivirus ne fonctionne plus... je c pas quoi faire
I'm a Noob :'(

Comme les uatres personnes precedentes, j'ai fait un scan avec http://www.ravantivirus.com/scan
Ce qui donne sa :
Scan started at 27/04/2005 21:31:30

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe - Win32/Parite.B -> Infected
C:\Program Files\Cheating-Death\cdeath.exe - Win32/Parite.B -> Infected
C:\Program Files\DVD Decrypter\DVDDecrypter.exe - Win32/Parite.B -> Infected
C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe - Win32/Parite.B -> Infected
C:\Program Files\PowerStrip\uninstal.exe - Win32/Parite.B -> Infected
C:\WINDOWS\windowsx.dll - IRC/Generic* -> Suspicious
C:\WINDOWS\system32\NeroCheck.exe - Win32/Parite.B -> Infected
C:\WINDOWS\Temp\bca1.tmp - Win32/Parite.B -> Infected
C:\WINDOWS\Temp\fpa1.tmp - Win32/Parite.B -> Infected
C:\WINDOWS\Temp\fra1.tmp - Win32/Parite.B -> Infected
C:\WINDOWS\Temp\ppa1.tmp - Win32/Parite.B -> Infected
C:\WINDOWS\Temp\yla1.tmp - Win32/Parite.B -> Infected
C:\WINDOWS\Temp\zqa1.tmp - Win32/Parite.B -> Infected

Scanned
============================
Objects: 64774
Directories: 3989
Archives: 1586
Size(Kb): 1401851
Infected files: 12

Found
============================
Viruses found: 1
Suspicious files: 1
Disinfected files: 0
Mail files: 101

Merci ;)

Vince · Answer

salut

dsl pour le post j'avais pas lu toute la charte
En fait j'ai essayé toutes les soluces que j'ai pu trouver sur le net pour virer hidrag et ca ne fonctionne pas j(e préfererai éviter de réinstaller xp si possible).
J'aimerais notamment savoir pourquoi jeefocli (nettoyeur que j'ai testé) n' arrive pas à ouvrir les fichiers infectés.
Merci d'avance.

[Virus Win32 hidrag] Que faire ?

25 réponses

Votre réponse

Discussions similaires

Newsletters