Mon antivirus a detcter accwiz.exe

Bonjour,

mon antivirus(viruskeeper 2008 pro) a detecter accwiz.exe
il me demande de le mettre en quarantaine
je clique alor sur quarantaine et un message apparait en me disant qu'il y est bien
quelque secondes plus tard le revoila il me demande la meme chose

je vourai savoir qu'est ce que le fichier accwiz.exe et comment le supprimer definitivement de mon pc

merci de m'aider
Configuration: Windows XP
Internet Explorer 6.0

3 réponses

  1. tu ne peut pasle sup c'est un fichier de windows qui sert a configurer windows sur des effet visuel
    autant suprimer windows

    tu doit avaoir une autre infection qui declanche ce prob
    0
    1. merci pour ta reponse
      je vais bien trouver autre choz qui ne va pas et j'en reparlerai
      merci
      0
      1. ont peut vite voir sa

        instal ce prog :https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html

        clic sur :doa scan and save logfile

        attent le raport

        copi le et met le ici
        0
        1. Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 21:46:02, on 31/08/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\spoolsv.exe
          C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
          C:\WINDOWS\system32\cisvc.exe
          C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
          C:\WINDOWS\System32\FTRTSVC.exe
          C:\WINDOWS\System32\nvsvc32.exe
          C:\WINDOWS\system32\HPZipm12.exe
          C:\WINDOWS\System32\PnkBstrA.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe
          C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
          C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe
          C:\Program Files\Winamp\winampa.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\documents and settings\byk\local settings\application data\wahib.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
          C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
          C:\Program Files\MalwareAlarm\pv.exe
          C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
          C:\PROGRA~1\Wanadoo\ComComp.exe
          C:\PROGRA~1\Wanadoo\PollingModule.exe
          C:\WINDOWS\system32\wscntfy.exe
          C:\PROGRA~1\Wanadoo\Watch.exe
          C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
          C:\WINDOWS\system32\cidaemon.exe
          C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
          C:\Documents and Settings\byk\Local Settings\Temporary Internet Files\Content.IE5\9KFNJTOW\HiJackThis[1].exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.free.fr/freebox/index.html
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
          F3 - REG:win.ini: run=
          O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {405aad31-a963-4aa3-aaf5-8aba2e42a3f7} - (no file)
          O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
          O2 - BHO: (no name) - {8E3FBDE2-7DBD-4040-85D9-29BBC559C129} - (no file)
          O2 - BHO: (no name) - {9523A8F7-75D0-4E0C-854A-7CF2A1EF79EA} - C:\WINDOWS\system32\cbXNDTNE.dll
          O2 - BHO: (no name) - {969781C2-8D70-4BF5-B2FB-8A262771CE38} - (no file)
          O2 - BHO: (no name) - {ABB46183-C254-4B13-B3A6-F79B303B358C} - C:\WINDOWS\system32\opnnklKa.dll
          O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
          O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
          O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
          O4 - HKLM\..\Run: [VirusKeeper] C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe
          O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
          O4 - HKLM\..\RunServices: [Windows Update] Windowsupfixer.exe
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
          O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
          O4 - HKCU\..\Run: [MalwareAlarm] C:\Program Files\MalwareAlarm\MalwareAlarm.exe
          O4 - HKCU\..\Run: [wahib] "c:\documents and settings\byk\local settings\application data\wahib.exe" wahib
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
          O4 - HKUS\S-1-5-21-746137067-1004336348-682003330-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
          O4 - HKUS\S-1-5-21-746137067-1004336348-682003330-1003\..\Run: [MalwareAlarm] C:\Program Files\MalwareAlarm\MalwareAlarm.exe (User '?')
          O4 - HKUS\S-1-5-21-746137067-1004336348-682003330-1003\..\Run: [wahib] "c:\documents and settings\byk\local settings\application data\wahib.exe" wahib (User '?')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: F-Secure 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
          O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
          O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
          O16 - DPF: {7AA32FC7-133B-4AE7-998E-CED0D9829B12} (luna Class) - http://ww12.mcboo.com
          O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
          O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Object) - https://fr.jackpotcity.microgaming.com/fr.jackpotcity/FlashAX2.cab
          O20 - Winlogon Notify: cbXNDTNE - C:\WINDOWS\SYSTEM32\cbXNDTNE.dll
          O20 - Winlogon Notify: iifdayx - iifdayx.dll (file missing)
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
          O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
          O23 - Service: DomainService - Unknown owner - C:\WINDOWS\System32\akusicvy.exe (file missing)
          O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
          O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
          O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
          O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe
          O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - AxBx - C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe
          O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
          O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
          0
        2. Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 21:46:02, on 31/08/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\spoolsv.exe
          C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
          C:\WINDOWS\system32\cisvc.exe
          C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
          C:\WINDOWS\System32\FTRTSVC.exe
          C:\WINDOWS\System32\nvsvc32.exe
          C:\WINDOWS\system32\HPZipm12.exe
          C:\WINDOWS\System32\PnkBstrA.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe
          C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
          C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe
          C:\Program Files\Winamp\winampa.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\documents and settings\byk\local settings\application data\wahib.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
          C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
          C:\Program Files\MalwareAlarm\pv.exe
          C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
          C:\PROGRA~1\Wanadoo\ComComp.exe
          C:\PROGRA~1\Wanadoo\PollingModule.exe
          C:\WINDOWS\system32\wscntfy.exe
          C:\PROGRA~1\Wanadoo\Watch.exe
          C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
          C:\WINDOWS\system32\cidaemon.exe
          C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
          C:\Documents and Settings\byk\Local Settings\Temporary Internet Files\Content.IE5\9KFNJTOW\HiJackThis[1].exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.free.fr/freebox/index.html
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
          F3 - REG:win.ini: run=
          O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {405aad31-a963-4aa3-aaf5-8aba2e42a3f7} - (no file)
          O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
          O2 - BHO: (no name) - {8E3FBDE2-7DBD-4040-85D9-29BBC559C129} - (no file)
          O2 - BHO: (no name) - {9523A8F7-75D0-4E0C-854A-7CF2A1EF79EA} - C:\WINDOWS\system32\cbXNDTNE.dll
          O2 - BHO: (no name) - {969781C2-8D70-4BF5-B2FB-8A262771CE38} - (no file)
          O2 - BHO: (no name) - {ABB46183-C254-4B13-B3A6-F79B303B358C} - C:\WINDOWS\system32\opnnklKa.dll
          O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
          O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
          O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
          O4 - HKLM\..\Run: [VirusKeeper] C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\VirusKeeper.exe
          O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
          O4 - HKLM\..\RunServices: [Windows Update] Windowsupfixer.exe
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
          O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
          O4 - HKCU\..\Run: [MalwareAlarm] C:\Program Files\MalwareAlarm\MalwareAlarm.exe
          O4 - HKCU\..\Run: [wahib] "c:\documents and settings\byk\local settings\application data\wahib.exe" wahib
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
          O4 - HKUS\S-1-5-21-746137067-1004336348-682003330-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
          O4 - HKUS\S-1-5-21-746137067-1004336348-682003330-1003\..\Run: [MalwareAlarm] C:\Program Files\MalwareAlarm\MalwareAlarm.exe (User '?')
          O4 - HKUS\S-1-5-21-746137067-1004336348-682003330-1003\..\Run: [wahib] "c:\documents and settings\byk\local settings\application data\wahib.exe" wahib (User '?')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: F-Secure 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exe
          O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
          O14 - IERESET.INF: START_PAGE_URL=https://www.01net.com/telecharger/
          O16 - DPF: {7AA32FC7-133B-4AE7-998E-CED0D9829B12} (luna Class) - http://ww12.mcboo.com
          O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
          O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Object) - https://fr.jackpotcity.microgaming.com/fr.jackpotcity/FlashAX2.cab
          O20 - Winlogon Notify: cbXNDTNE - C:\WINDOWS\SYSTEM32\cbXNDTNE.dll
          O20 - Winlogon Notify: iifdayx - iifdayx.dll (file missing)
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
          O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXE
          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
          O23 - Service: DomainService - Unknown owner - C:\WINDOWS\System32\akusicvy.exe (file missing)
          O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exe
          O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
          O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
          O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe
          O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - AxBx - C:\Program Files\AxBx\VirusKeeper 2008 Pro Evaluation\vk_service.exe
          O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
          O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
          0