bonjour a tous j´ai windows 2000 ; bitdefender officiel en virus j´ai chopé une saloperie qui m´innonde de spyware de m...e! quand je fais une analyse antivirus mon programme enleve des virus qu´il appelle apelle adware dinky trojan je crois mais a chaque fois que je me reconnecte au net la souche virale retisse sa toile ! comment faire pour enlever le noyau? et me débarasser des spywares? et les antispyware n´arrive pas non plus a l´enlever??? merci d´avance a tous!

il existe un programme cool qui s´appelle hijackthis: il scanne ton systeme et tout ce qui est potentiellement dangereux est listé! tu peut ensuite l´effacer manuellement. L´avantage, c´est que ça laisse rien passer. L´inconvénient, et pas des moindres, c´est qu´il y a aussi du bon grain dans la liste et que si tu le vire t´es bon pour une restauration systeme et tout le tralala. si c´est vraiment important faut publier le rapport sur des forums adaptés. Mais avant essaie de faire une restauration du systeme avant la date d´infection par le virus, ça reglera peut etre le probleme (demarrer, programmes, accessoires, outil systemes ,restauration du systeme)

Logfile of HijackThis v1.99.1
Scan saved at 17:59:15, on 11/09/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
C:\WINNT\system32\1h74srrh.exe
C:\Program
Files\SpamBlockerUtility\Bin\4.6.1.0\SbOEAddOn.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
C:\Program Files\Softwin\BitDefender9\bdoesrv.exe
C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe
C:\WINNT\system32\RUNDLL32.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Winamp\winampa.exe
C:\WINNT\system32\internat.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINNT\system32\LVComS.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINNT\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINNT\system32\rundll32.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://www.wanadoo.fr/go/page_recherche/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.wanadoo.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PathNvidiaTV] C:\Program Files\Gigabyte\Nvidia\patchnvidiaTVout.exe
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [wlancfg] C:\Program Files\Inventel\Gateway\wlancfg.exe
O4 - HKLM\..\Run: [BDMCon] c:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\PROGRA~1\softwin\BITDEF~1\bdnagent.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [keyboard] C:\\kybrdff_11a.exe
O4 - HKLM\..\Run: [defender] C:\\dfndrff_11a.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d´Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Google Search - res
://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English W
ord - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res
://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of P
age - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res:
//c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into
English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra ´Tools´ menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} -
http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: {01BE5BD7-B2DD-48B3-A759-59265A91E787} -
http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1064.cab
O16 - DPF: {04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1071.cab
O16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} -
http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063.cab
O16 - DPF: {0D1011B3-89C8-4F8E-8693-BB970E2E81E0} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_ASPIV4.cab
O16 - DPF: {0DA910BC-6919-489E-B584-D9A4AAC7B8DE} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_ASPIV4.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {1604DF98-D1A5-44FE-844A-98D6FD0518D0} -
http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1060.cab
O16 - DPF: {17BFC8DA-B4D6-4DB9-AA40-1CD32EDA9845} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1066_ASPIV4.cab
O16 - DPF: {201D3DA8-B495-4A3B-BEE8-6D8DDCCC5762} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_ASPIV4.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -
http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {3616F4B5-F6AD-4E67-966A-C218673648A0} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070_ASPIV4.cab
O16 - DPF: {3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070.cab
O16 - DPF: {624321F1-0581-49D8-99BD-2E952C2DF31B} -
http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4.cab
O16 - DPF: {71DA2A4E-ACB3-4065-9E41-8BC42EABE427} -
http://scripts.dlv4.com/binaries/IA/svcia32_FR.cab
O16 - DPF: {78F584DF-BBF5-4296-839C-31DE60914DBC} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1071_ASPIV4.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) -
http://secure2.comned.com/signuptemplates/securelogin-devel.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068.cab
O16 - DPF: {9EB4F647-FE4A-42F9-9F5C-B8FB28DD02F9} -
http://scripts.dlv4.com/b/binaries/IA/sysia32svc_FR.cab
O16 - DPF: {A1C392A2-B274-46DB-89BE-1FBD476B9C93} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1065.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069.cab
O16 - DPF: {C9269872-E3D6-4811-8E5E-835CA8CBD0B3} -
http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1042_FR_XP.cab
O16 - DPF: {E114CD5B-17CE-4807-890E-7B1EDF9F2E5E} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1066.cab
O16 - DPF: {E19AB99F-AEC4-4B40-A5CA-F69D22522D77} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1065_ASPIV4.cab
O16 - DPF: {E24E8472-89B7-479F-8AD8-BBD7206A6A02} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067.cab
O16 - DPF: {E7AE1661-EBEB-492B-AE0D-860DF24174C6} -
http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1064_ASPIV4.cab
O16 - DPF: {EF4DCD99-D26B-44A4-BA77-CFDCC97E7291} -
http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1062.cab
O16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} -
http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1072.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
http://chat.msn.com/controls/msnchat45.cab
O16 - DPF: {FA605711-8E72-46B2-AE49-BED11B2E729D} -
http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4.cab
O16 - DPF: {FA83E942-B796-46DE-9155-1632ECC5473B} -
http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1061.cab
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Service d´administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINNT\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

merci! voici le rapport .....que faut il enlever?

chercher na jamais tuer
http://forum.pcastuces.cos.com/sujet.asp?SUJET_ID=69304