supprimer une backdoor

[aigle333]

bonjour a tous!
j'ai attrapé une merde.j'ai effectué la procédure de cyrrus,et je joint les 2 fichiés.

merci d'avance!
-----

[invite275db609]

Bonjour aigle333

A premiere vue, ton rapport est propre (Cyrrus ou Igor viendront surement le confirmer), Ewido a bien travaillé et t'a dégagé ta backdoor ...

Pourrais-tu aller faire un scan Online stp chez Panda :
http://www.pandasoftware.fr/Activescan/Activescan.html
Si tu ne t'en sors pas, voici un excellent tutorial de Malekal_morte : http://www.malekal.com/scan_Av_en_ligne.html avec capture d'ecran et tout ce qui faut ...

Ensuite colle ton rapport a la suite de ce message ...

Bon courage

[aigle333]

bonjour synthexe!
j'ai suivi ton conseil,et je joints le rapport de panda en attendant le passage de cyrrus ou igor.
merci

[aigle333]

je rajoute que j'ai supprimé manuellement les 5 itemes que panda ma trouvé.je passe un coup de ad aware par dessus le tout!

[A voir en vidéo sur Futura]

[igor51]

Bonsoir à tous,

rien d'infectieux, juste quelque truc inutiles:

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O18 - Protocol: bw+0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw00 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw00s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw10 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw10s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw20 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw20s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw30 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw30s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw40 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw40s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw50 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw50s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw60 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw60s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw70 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw70s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw80 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw80s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw90 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bw90s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPl ugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bws0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bws0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bww0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bww0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6BE64091-6170-482E-9CF0-520D73C2DA8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPl ugProtocol-8876480.dll

sinon activscan n'a rien trouvé,

Bonne soirée,

Igor

[aigle333]

merci igor!
j'ai coché dans hijackthis les lignes mentionnés et j'ai fait "fix checked".
merci a vous tous