belier26 Posted February 10, 2005 Share Posted February 10, 2005 bonjour, j'ai trouvé ce logiciel (virus?) dans windows, celui ci s'etant installé a 3 heurs du matin selon le point de restoration d'XP. J'y ai trouvé entre autres choses un fichier wusetup.inf avec ceci dedans: [Version] Signature="$Windows NT$" AdvancedINF=2.5 CatalogFile=wusetup.cat [updateID] GUID = d67661eb-2423-451d-bf5d-13199e37df28 RevisionID = 0 [sourceDisksNames] 1 = "Windows Update Client" [sourceDisksFiles] winhttp.dll = 1 wuaueng.dll = 1 wups.dll = 1 wuauhelp.chm = 1 wuau.adm = 1 wuaucpl.cpl = 1 wuauclt.exe = 1 wuapi.dll = 1 cdm.dll = 1 iuengine.dll = 1 wuaueng1.dll = 1 wuauclt1.exe = 1 wuweb.dll = 1 wucltui.dll = 1 [DestinationDirs] DefaultDestDir = 11 SusClient_wuauhelp = 18 SusClient_wuauadm = 17 [OS] 5.0.2195.3-5.0.2195.9999.9999 = W2K 5.1-5.1.9999.9999.9999 = WinXP 5.2-5.2.9999.9999.9999 = Win2003 ; Entry point for "SelfUpdate"; common for all OS'es [Common_SelfUpdate] cdm iuengine wuapi wuauclt wuauclt1 wuaucpl wuaueng_SelfUpdate wuaueng1 wucltui wups wuweb_SelfUpdate [W2K_SelfUpdate] msxml3r msxml3 [WinXP_SelfUpdate] winhttp ; Entry point for "WebSetup"; common for all OS'es [Common_WebSetup] cdm iuengine wuapi wuauclt wuauclt1 wuaucpl wuaueng_WebSetup wuaueng1 wuauserv_WebSetup wucltui wups ; No need to process wuweb during WebSetup [W2K_WebSetup] msxml3r msxml3 [WinXP_WebSetup] winhttp ; Entry point for "Standalone"; common for all OS'es [Common_Standalone] cdm_Standalone iuengine_Standalone wuapi_Standalone wuauclt_Standalone wuauclt1_Standalone wuaucpl_Standalone wuaueng_Standalone wuaueng1_Standalone wuauserv_Standalone wucltui_Standalone wups_Standalone wuweb_Standalone [W2K_Standalone] msxml3r_Standalone msxml3_Standalone [WinXP_Standalone] winhttp_Standalone ; Entry point for "StandaloneForce"; common for all OS'es [Common_StandaloneForce] cdm_StandaloneForce iuengine_StandaloneForce wuapi_StandaloneForce wuauclt_StandaloneForce wuauclt1_StandaloneForce wuaucpl_StandaloneForce wuaueng_StandaloneForce wuaueng1_StandaloneForce wuauserv_StandaloneForce wucltui_StandaloneForce wups_StandaloneForce wuweb_StandaloneForce [W2K_StandaloneForce] msxml3r_StandaloneForce msxml3_StandaloneForce [WinXP_StandaloneForce] winhttp_StandaloneForce ; --------------------------------------------------------------------------------- ; Common sections for files; Maintain alphabetical order ; --------------------------------------------------------------------------------- [cdm] CopyFiles = @cdm.dll Version = 5,5,3790,2182 Cab = cdm.cab [iuengine] CopyFiles = @iuengine.dll Version = 5,4,3790,2182 Cab = iuengine.cab [msxml3] CopyFiles = @msxml3.dll Version = 8,50,2162,0 Cab = wuaueng.cab SelfRegister = 1 CopyOnlyIfNotOnTarget = 1 [msxml3r] CopyFiles = @msxml3r.dll Version = 8,20,8730,1 CopyOnlyIfNotOnTarget = 1 Cab = wuaueng.cab [winhttp] CopyFiles = @winhttp.dll Version = 5,1,2600,1366 Cab = winhttp.cab SelfRegister = 1 CopyOnlyIfNotOnTarget = 1 [wuapi] CopyFiles = @wuapi.dll Version = 5,4,3790,2182 Cab = wuapi.cab SelfRegister = 1 ErrorHandling = HandleRenameFailure MuiEnabled = 1 [wuauclt] CopyFiles = @wuauclt.exe Version = 5,4,3790,2182 Cab = wuauclt.cab MuiEnabled = 1 [wuauclt1] CopyFiles = @wuauclt1.exe Version = 5,4,3790,2182 Cab = wuauclt1.cab MuiEnabled = 1 [wuaucpl] CopyFiles = @wuaucpl.cpl Version = 5,4,3790,2182 Cab = wuaucpl.cab MuiEnabled = 1 MuiHelpfile = wuauhelp.chm [wuaueng1] CopyFiles = @wuaueng1.dll Version = 5,4,3790,2182 Cab = wuaueng1.cab SelfRegister = 1 MuiEnabled = 1 [wuauserv_WebSetup] CopyFiles = @wuauserv.dll Version = 5,4,3790,2182 Cab = wuauserv.cab CopyOnlyIfNotOnTarget = 1 [wucltui] CopyFiles = @wucltui.dll Version = 5,4,3790,2182 SelfRegister = 1 Cab = wucltui.cab MuiEnabled = 1 [wups] CopyFiles = @wups.dll Version = 5,4,3790,2182 SelfRegister = 1 cab = wups.cab ErrorHandling = HandleUnloadFailure ; --------------------------------------------------------------------------------- ; Sections specific to SelfUpdate ; --------------------------------------------------------------------------------- [wuaueng_SelfUpdate] CopyFiles = @wuaueng.dll Version = 5,4,3790,2182 Cab = wuaueng.cab CopyFiles = SusClient_wuauhelp, SusClient_wuauadm DelReg = Delete_iuctl_keys ;Should not register DLL as this is self-update [wuweb_SelfUpdate] CopyFiles = @wuweb.dll Version = 5,4,3790,2182 Cab = wuweb.cab SelfRegister = 1 ErrorHandling = IgnoreError ; --------------------------------------------------------------------------------- ; Sections specific to WebSetup ; --------------------------------------------------------------------------------- [wuaueng_WebSetup] CopyFiles = @wuaueng.dll Version = 5,4,3790,2182 Cab = wuaueng.cab CopyFiles = SusClient_wuauhelp, SusClient_wuauadm DelReg = Delete_iuctl_keys SelfRegister = 1 ; --------------------------------------------------------------------------------- ; Sections specific to Standalone Setup ; --------------------------------------------------------------------------------- [wuaueng_Standalone] CopyFiles = @wuaueng.dll Version = 5,4,3790,2182 CopyFiles = SusClient_wuauhelp, SusClient_wuauadm SelfRegister = 1 DelReg = Delete_iuctl_keys [wuauclt_Standalone] CopyFiles = @wuauclt.exe Version = 5,4,3790,2182 [wups_Standalone] CopyFiles = @wups.dll Version = 5,4,3790,2182 SelfRegister = 1 ErrorHandling = HandleUnloadFailure [wuaucpl_Standalone] CopyFiles = @wuaucpl.cpl Version = 5,4,3790,2182 [cdm_Standalone] CopyFiles = @cdm.dll Version = 5,5,3790,2182 [wuapi_Standalone] CopyFiles = @wuapi.dll Version = 5,4,3790,2182 SelfRegister = 1 ErrorHandling = HandleRenameFailure [msxml3_Standalone] CopyFiles = @msxml3.dll Version = 8,50,2162,0 SelfRegister = 1 CopyOnlyIfNotOnTarget = 1 [msxml3r_Standalone] CopyFiles = @msxml3r.dll Version = 8,20,8730,1 CopyOnlyIfNotOnTarget = 1 [iuengine_Standalone] CopyFiles = @iuengine.dll Version = 5,4,3790,2182 [wuaueng1_Standalone] CopyFiles = @wuaueng1.dll Version = 5,4,3790,2182 [wuauclt1_Standalone] CopyFiles = @wuauclt1.exe Version = 5,4,3790,2182 [wuauserv_Standalone] CopyFiles = @wuauserv.dll Version = 5,4,3790,2182 CopyOnlyIfNotOnTarget = 1 [wuweb_Standalone] CopyFiles = @wuweb.dll Version = 5,4,3790,2182 SelfRegister = 1 ErrorHandling = HandleRenameFailure [wucltui_Standalone] CopyFiles = @wucltui.dll Version = 5,4,3790,2182 SelfRegister = 1 [winhttp_Standalone] CopyFiles = @winhttp.dll Version = 5,1,2600,1366 SelfRegister = 1 CopyOnlyIfNotOnTarget = 1 ; --------------------------------------------------------------------------------- ; Sections specific to FORCE Setup ; --------------------------------------------------------------------------------- [wuaueng_StandaloneForce] CopyFiles = @wuaueng.dll CopyFiles = SusClient_wuauhelp, SusClient_wuauadm SelfRegister = 1 DelReg = Delete_iuctl_keys [wuauclt_StandaloneForce] CopyFiles = @wuauclt.exe [wups_StandaloneForce] CopyFiles = @wups.dll SelfRegister = 1 ErrorHandling = HandleUnloadFailure [wuaucpl_StandaloneForce] CopyFiles = @wuaucpl.cpl [cdm_StandaloneForce] CopyFiles = @cdm.dll [wuapi_StandaloneForce] CopyFiles = @wuapi.dll SelfRegister = 1 ErrorHandling = HandleRenameFailure [msxml3_StandaloneForce] CopyFiles = @msxml3.dll SelfRegister = 1 CopyOnlyIfNotOnTarget = 1 [msxml3r_StandaloneForce] CopyFiles = @msxml3r.dll CopyOnlyIfNotOnTarget = 1 [iuengine_StandaloneForce] CopyFiles = @iuengine.dll [wuaueng1_StandaloneForce] CopyFiles = @wuaueng1.dll [wuauclt1_StandaloneForce] CopyFiles = @wuauclt1.exe [wuauserv_StandaloneForce] CopyFiles = @wuauserv.dll CopyOnlyIfNotOnTarget = 1 [wuweb_StandaloneForce] CopyFiles = @wuweb.dll SelfRegister = 1 ErrorHandling = HandleRenameFailure [wucltui_StandaloneForce] CopyFiles = @wucltui.dll SelfRegister = 1 [winhttp_StandaloneForce] CopyFiles = @winhttp.dll SelfRegister = 1 CopyOnlyIfNotOnTarget = 1 ; --------------------------------------------------------------------------------- ; File section names required for the following binaries as they have to be ; given in the DestinationDirs section to override the default destination directory ; --------------------------------------------------------------------------------- [susClient_wuauhelp] wuauhelp.chm [susClient_wuauadm] wuau.adm ; --------------------------------------------------------------------------------- ; Other sections ; --------------------------------------------------------------------------------- [Delete_iuctl_keys] HKLM,"SOFTWARE\Classes\IUCtl.Update" HKLM,"SOFTWARE\Classes\IUCtl.Update.1" HKLM,"SOFTWARE\Classes\IuCtl.Detection" HKLM,"SOFTWARE\Classes\IuCtl.Detection.1" HKLM,"SOFTWARE\Classes\IuCtl.ProgressListener" HKLM,"SOFTWARE\Classes\IuCtl.ProgressListener.1" HKLM,"SOFTWARE\Classes\IUCtl.UpdateCompleteListener" HKLM,"SOFTWARE\Classes\IUCtl.UpdateCompleteListener.1" HKLM,"SOFTWARE\Classes\CLSID\{9F1C11AA-197B-4942-BA54-47A8489BB47F}" HKLM,"SOFTWARE\Classes\CLSID\{B5AF6951-FFBD-4E7B-A126-8F28F86E5D2E}" HKLM,"SOFTWARE\Classes\CLSID\{3E873CB7-D5F5-43EF-AC4A-1F97D3118265}" HKLM,"SOFTWARE\Classes\CLSID\{C65CF02D-749C-46F0-B2BF-3E65875A5C70}" HKLM,"SOFTWARE\Classes\Interface\{CD19302B-FF55-4274-BA18-D98F21FCD672}" HKLM,"SOFTWARE\Classes\Interface\{4F5E50AF-A2C0-40EF-AC9A-469D9462EA76}" HKLM,"SOFTWARE\Classes\Interface\{8E2EF6DC-0AB8-4FE0-9049-3BEA4506BF8D}" HKLM,"SOFTWARE\Classes\TypeLib\{306C2111-D294-4DD1-9C47-41036F58EBB3}" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\iuctl.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RC\iuctl.dll" Merci de m'aider. Link to comment Share on other sites More sharing options...
belier26 Posted February 10, 2005 Author Share Posted February 10, 2005 vous me confirmerez mais je pense a windows update Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.