Infecté par !update.exe !!! au secours !

Résolu/Fermé
joric Messages postés 5 Date d'inscription jeudi 22 février 2007 Statut Membre Dernière intervention 24 février 2007 - 22 févr. 2007 à 11:42
joric Messages postés 5 Date d'inscription jeudi 22 février 2007 Statut Membre Dernière intervention 24 février 2007 - 24 févr. 2007 à 08:42
Bonjour à tous !
Voilà ! je suis aux prises avec le terrible !update.exe, tout hennissant de bave ! quelqu'un peut il me dire comment me debarrasser de ce canasson ? merci d'avance, voici le rapport d'hijackthis :
Logfile of HijackThis v1.99.1
Scan saved at 11:28:53, on 22/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
E:\drivers\LogiTray.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Babylon\Babylon.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Player Video TF1\tf1.exe
C:\Program Files\Roland Garros 2006\rg2006.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\svchost.exe
E:\drivers\FxSvr2.exe
C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
D:\Program Files\eMule\eMule.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LogitechVideoRepair] E:\drivers\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] E:\drivers\LogiTray.exe
O4 - HKLM\..\Run: [Babylon Client] D:\Program Files\Babylon\Babylon.exe -AutoStart
O4 - HKLM\..\Run: [vmtalk] C:\Program Files\Fichiers communs\Talkway\vmtalk.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [tf1] C:\Program Files\Player Video TF1\tf1.exe
O4 - HKLM\..\Run: [rg] C:\Program Files\Roland Garros 2006\rg2006.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] E:\drivers\ManifestEngine.exe boot
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Startup: BoontyBox Club-Internet.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe
O4 - Startup: eMule Plus.lnk = D:\Program Files\eMule\eMule.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O16 - DPF: Yahoo! Chess - http://download.games.yahoo.com/games/clients/y/ct2_x.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://www.1-click.com/common/files/installer2.cab
O18 - Protocol: bw+0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\msgrapp.8.0.0812.00.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\msgrapp.8.0.0812.00.dll
O18 - Protocol: offline-8876480 - {35AE503B-9143-4667-A284-00DC402E771F} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

Que faire ? j'attends vos réponses ;o)

6 réponses

Séb08 Messages postés 16502 Date d'inscription dimanche 13 novembre 2005 Statut Contributeur Dernière intervention 17 février 2023 1 429
22 févr. 2007 à 11:58
slt,

- > Pour vérifier, scanne ton PC avec cet antivirus en ligne (sous IE et accepte l’activX) :
http://www.bitdefender.fr/bd/site/search.php#
Clique sur « Bitdefender scan on line » suis les instructions.
Démo (merci à balltrap pour cette démo) :
http://perso.orange.fr/rginformatique/section%20virus/defender.htm

Et colle le rapport.


Je pense que je serai de retour en soirée.

a+
0
joric Messages postés 5 Date d'inscription jeudi 22 février 2007 Statut Membre Dernière intervention 24 février 2007
22 févr. 2007 à 14:23
Salut Seb ! voila ce que me dit birdefender... qu'en penses-tu ?
merci...
0
Nel50 Messages postés 554 Date d'inscription jeudi 22 février 2007 Statut Membre Dernière intervention 3 janvier 2009 67
22 févr. 2007 à 12:06
Bonjour, as tu fait un scan avec un autre antivirus et spyware ?
car update.exe peut etre un Worm (ver) donc se propage au fur et a mesure, tu peut essayer de telecharger l'antivirus AVG 7 sur

http://www.essentielpc.com/
Il es assez efficace il m'as depatouillez d'un pb semblable et sans casse

Update.exe Automatic Windows Updater Ajouté par le ver GAOBOT.AO!
update.exe OrbitUpdate Barre d'outils Xupiter OrbitExplorer, Pourriciel
update.exe System Update2 Ajouté par le troyen AUTOTROJ-C!
Update.exe Windows Update Ajouté par le troyen DELF-FN!

voila par quoi il peut venir , de plus dans ta config tu messenger, emule et aussi tu doit tchaté avec babylon (script irc) donc protege toi bien met un firewal et un spyware
0
joric Messages postés 5 Date d'inscription jeudi 22 février 2007 Statut Membre Dernière intervention 24 février 2007
22 févr. 2007 à 14:21
Salut ! Ben, oui, j'ai AVG 7. mais il le detecte mais ne le corrige pas... C'est AVG qui m'a prevenu avec le scan journalier, je ne sais pas trop comment m'en sortir, je vais essayer tes autres solutions... Merci en tout cas, j'ai scanné avec bitdefender aussi, voir les resultats.
;o)
0
joric Messages postés 5 Date d'inscription jeudi 22 février 2007 Statut Membre Dernière intervention 24 février 2007
22 févr. 2007 à 14:16
Statistics

Time
01:29:33

Files
636384

Folders
8938

Boot Sectors
5

Archives
8754

Packed Files
60381




Results

Identified Viruses
5

Infected Files
11

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
11




Engines Info

Virus Definitions
389456

Engine build
AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

Scan plugins
14

Archive plugins
38

Unpack plugins
6

E-mail plugins
6

System plugins
1




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\$VAULT$.AVG\00308734.FIL.OLD
Infected with: Exploit.Win32.WMF-PFV.B

C:\$VAULT$.AVG\00308734.FIL.OLD
Disinfection failed

C:\$VAULT$.AVG\00308734.FIL.OLD
Deleted

C:\$VAULT$.AVG\00646734.FIL
Infected with: Exploit.Win32.WMF-PFV.B

C:\$VAULT$.AVG\00646734.FIL
Disinfection failed

C:\$VAULT$.AVG\00646734.FIL
Deleted

C:\$VAULT$.AVG\57658453.FIL
Infected with: Win32.Zafi.D@mm

C:\$VAULT$.AVG\57658453.FIL
Deleted

C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mexe.com
Infected with: BehavesLike:Win32.FileInfector

C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mexe.com
Disinfection failed

C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mexe.com
Deleted

C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mwavscan.com
Infected with: BehavesLike:Win32.FileInfector

C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mwavscan.com
Disinfection failed

C:\Documents and Settings\Administrateur.TITANIUM\Local Settings\Temp\mwavscan.com
Deleted

C:\Program Files\Club-Internet\Assistance\OutilsCI\uninstall.exe
Infected with: Trojan.Downloader.Zlob.ZQN

C:\Program Files\Club-Internet\Assistance\OutilsCI\uninstall.exe
Disinfection failed

C:\Program Files\Club-Internet\Assistance\OutilsCI\uninstall.exe
Deleted

C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP309\A0138841.exe
Infected with: Trojan.Downloader.Zlob.ZQN

C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP309\A0138841.exe
Disinfection failed

C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP309\A0138841.exe
Deleted

C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145166.OLD
Infected with: Exploit.Win32.WMF-PFV.B

C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145166.OLD
Disinfection failed

C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145166.OLD
Deleted

C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145167.exe
Infected with: Trojan.Downloader.Zlob.ZQN

C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145167.exe
Disinfection failed

C:\System Volume Information\_restore{AAF3084C-005D-4360-A734-C784D43AF7A7}\RP320\A0145167.exe
Deleted

D:\Program Files\mwav.exe=>(RAR Sfx o)=>mexe.com
Infected with: BehavesLike:Win32.FileInfector

D:\Program Files\mwav.exe=>(RAR Sfx o)=>mexe.com
Disinfection failed

D:\Program Files\mwav.exe=>(RAR Sfx o)=>mexe.com
Deleted

D:\Program Files\mwav.exe=>(RAR Sfx o)
Update failed

D:\Program Files\mwav.exe=>(RAR Sfx o)=>mwavscan.com
Infected with: BehavesLike:Win32.FileInfector

D:\Program Files\mwav.exe=>(RAR Sfx o)=>mwavscan.com
Disinfection failed

D:\Program Files\mwav.exe=>(RAR Sfx o)=>mwavscan.com
Deleted

D:\Program Files\mwav.exe=>(RAR Sfx o)
Update failed
0
Nel50 Messages postés 554 Date d'inscription jeudi 22 février 2007 Statut Membre Dernière intervention 3 janvier 2009 67
22 févr. 2007 à 15:19
il ne t'as pas demander de les mettreen quarantaine ou de les effacer ?? bizarre sa cela m'es arriver hier et il me les effacer d'office voir ta config de AVG car il aurais du le faire mooi en plus j'ai ajouter le spywar de AVG ce qui m'as donner aussi la possibilite de virer les cookies et les trojan et backdoor a priori ce serais un spybot residant
0
Nel50 Messages postés 554 Date d'inscription jeudi 22 février 2007 Statut Membre Dernière intervention 3 janvier 2009 67
22 févr. 2007 à 15:38
regarde j'ai fait une recherche surton virus vas a cette page
http://forum.telecharger.01net.com/forum/high-tech/SECURITE/Securite/adware-repare-spybot-sujet_18537_1.htm

et lis ce que marque yaya c'est tres interressant mais quand je regarde ton rapport AVG les as supprimer
Results

Identified Viruses
5

Infected Files
11

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
11

en plus ton secteur boot et reparer maintenant
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Séb08 Messages postés 16502 Date d'inscription dimanche 13 novembre 2005 Statut Contributeur Dernière intervention 17 février 2023 1 429
22 févr. 2007 à 22:27
re,

recherche et supprime ce fichier si toujours présent :

D:\Program Files\mwav.exe

Vide ta poubelle, redémarre tin PC et remet un log hijack.

a+
0
joric Messages postés 5 Date d'inscription jeudi 22 février 2007 Statut Membre Dernière intervention 24 février 2007
24 févr. 2007 à 08:42
Grâce à vous, j'ai réussi à éradiquer ce retors canasson troyen !
Merci encore et bravo pour ce super forum très efficace !! ;o)
0