Sujet Précédent Sujet Suivant

Est-ce un virus? Comment le supprimer?

Fermé
DolphinEye - 5 nov. 2004 à 18:34
 goupil34 - 23 févr. 2005 à 16:05
Bonsoir,
je travaille avec un groupe de personnes, et nous nous envoyons régulièrement des e-mails. Cependant, je crois qu'un virus se propage dans le groupe car plusieurs ordinateurs présentent des symptômes similaires ( le mien pas pour l'instant ):

- erreurs lors de lancement de programmes générant un message ressemblant à quelque chose comme "Windows n'a pas pu démarrer le programme à cause de problèmes sur cet ordinateur".

- suppression de fichiers àléatoires, empêchant le bon fonctionnement de certains programmes comme MSN ( disparition de la fonction "ajouter un contact" et d'autres ), suppression de l'aide windows, suppresion d'onglets divers du système Windows XP, ...

- Altération de l'affichage de programmes comme windows XP ( barre des tâches toute blanche, icônes étranges, graphiques altérés, ... ).

Quelqu'un aurait-il une idée de quoi il s'agit? Je vous remercie d'avance, vous me rendrez un énorme service au niveau professionel.

Cordialement

--Thomas - ANNECY 74

PS: j'ai tenté de rechercher sur Internet des symptômes similaires, mais je n'ai rien trouvé, hélas.

6 réponses

Réponse 1 / 6
BmV Messages postés 91368 Date d'inscription samedi 24 août 2002 Statut Modérateur Dernière intervention 25 novembre 2024 4 695
5 nov. 2004 à 19:12
Salut.

Et que disent les antivirus ?

-=O(_BmV_)O=-  L'amour comme épée,
      ||       ||       l'humour comme bouclier. 
0
Réponse 2 / 6
DolphinEye
5 nov. 2004 à 19:17
Rien malheureusement. J'ai pourtant fait isntaller aux victimes Windows XP SP1 ( SP2 étant instable, je l'ai évité ), Ad-Aware SE, un antivirus ( avast ) et le firewall windows XP. Rien n'a été détecté malheureusement.
0
Réponse 3 / 6
balltrap34 Messages postés 16240 Date d'inscription jeudi 8 janvier 2004 Statut Contributeur sécurité Dernière intervention 28 novembre 2009 331
5 nov. 2004 à 22:04
salut
Nettoyage virus
Faite scan en ligne et coller le rapport ici sur le post
utiliser l'antivirus en ligne suivant :
http://www.ravantivirus.com/scan/
Cliquer sur "To continue without subscribing click here" et attendre quelques minutes.

Lorsque "Ready" est affiché dans "status", cocher la case "Autoclean" puis cliquer sur "Scan my PC"
A la fin de l'analyse, copier/coller le rapport ici.


la chasse et le balltrap ma vrai passion
voir site perso dans profil
0
Dolphineye
5 nov. 2004 à 22:24
Merci beaucoup. Je vais procéder ainsi.
0
THORNER NATHALIE
22 févr. 2005 à 23:28
salut

voilà le rapport de rav :

Scan started at 22/02/2005 22:08:35

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.38: (irenepeglou@cegetel.net [tdarefninvf])->(part0002:data.zip)->data.ht... - Win32/Lovgate.V@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.28: (marie.baras@wanadoo.fr [hi])->(part0002:file.zip)->file.pif - Win32/Lovgate.V@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.26: (dominique.quentin@worldonline.fr [Server Report])->(part0002:text.scr) - Win32/Lovgate.V@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.25: (xxxxxxxxxx@sms.umc.com.ua [Error])->(part0002:document.scr) - Win32/Lovgate.V@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.24: (andrecassan@club-internet.fr [Status])->(part0002:file.zip)->file.do... - Win32/Lovgate.V@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.20: ("Bs.autos" [Re:])->(part0001:price.exe) - Win32/Bagle.AS@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.19: ("Bs.autos" [Re: Thank you!])->(part0001:Price.scr) - Win32/Bagle.AS@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.17: ("Bs.autos" [Re: Hi])->(part0001:Joke.scr) - Win32/Bagle.AS@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.16: (lgoodale@dbsalliance.org [read it immediately])->(part0001:object.exe) - Win32/Netsky.B@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.15: (temma@temma.com [fake])->(part0001:textfile.com) - Win32/Netsky.B@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.13: (hcsrcxxbbglp@hotmail.com [hello])->(part0001:creditcard.txt.pif) - Win32/Netsky.B@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.12: (".5000809"@wanadoo.fr [fake])->(part0001:message.txt.com) - Win32/Netsky.B@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.11: (upport@firstcup101.com [something for you])->(part0001:details.exe) - Win32/Netsky.B@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.10: (meet@htie289aze.com [something for you])->(part0001:ranking.exe) - Win32/Netsky.B@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.9: (81904@s3068.mb00.net [information])->(part0001:friend.htm.pif) - Win32/Netsky.B@mm -> Infected
C:\Documents and Settings\THORNER Nathalie\Local Settings\Application Data\Identities\{C7228547-2913-47AD-874A-AEB0E68D745C}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.8: (rancoisewanadoo@mx19148.hh02.com [read it immediately])->(part0001:ms... - Win32/Netsky.B@mm -> Infected

Scanned
============================
Objects: 77957
Directories: 5697
Archives: 3341
Size(Kb): 1506898
Infected files: 16

Found
============================
Viruses found: 3
Suspicious files: 0
Disinfected files: 0
Mail files: 742

merci
0
goupil34
23 févr. 2005 à 16:05
Scan started at 02/23/2005 13:26:15

Scanning memory...
process://C:\WINDOWS\System32\w?nlogon.exe - TrojanDownloader:Win32/PurityScan.Q -> Infected
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\PW XP 2800\Local Settings\Temporary Internet Files\Content.IE5\3VT779CW\CAHKY51V.HTM - Exploit:HTML/MhtRedir.gen* -> Infected
C:\Documents and Settings\PW XP 2800\Local Settings\Temporary Internet Files\Content.IE5\CL2NCLUF\246[1].chm->/file.exe->(FSGPE) - TrojanDownloader:Win32/Small.AG -> Suspicious
C:\Documents and Settings\PW XP 2800\Local Settings\Temporary Internet Files\Content.IE5\JYOVRT05\count[1].chm->/count.htm->(SCRIPT0001) - JS/Psyme.gen* -> Infected
C:\Documents and Settings\PW XP 2800\Local Settings\Temporary Internet Files\Content.IE5\OV5FMIF1\freepic[1].chm->/freepic.htm->(SCRIPT0001) - JS/Psyme.gen* -> Infected
C:\WINDOWS\autoclk.exe - Trojan:Win32/KillReg.D -> Infected
C:\WINDOWS\commando.exe - VirTool:Win32/HiddenRun.B -> Infected
C:\WINDOWS\system32\atmjcf.exe - Win32/Bofra.A@mm -> Infected
C:\WINDOWS\system32\dxopengl.exe - Backdoor:Win32/Rbot.dam#2 -> Infected
C:\WINDOWS\system32\Iassd.exe - Win32/HLLW.SpyBot -> Infected
C:\WINDOWS\system32\TFTP1308 - Backdoor:Win32/RBot -> Infected
C:\WINDOWS\system32\TFTP2372 - Backdoor:Win32/RBot -> Infected
C:\WINDOWS\system32\TFTP4060 - Win32/HLLW.SpyBot -> Infected
C:\WINDOWS\system32\TFTP812 - Backdoor:Win32/Rbot.dam#2 -> Infected

Scanned
============================
Objects: 65910
Directories: 2902
Archives: 6953
Size(Kb): 1863662
Infected files: 13

Found
============================
Viruses found: 9
Suspicious files: 1
Disinfected files: 0
Mail files: 55423
0
Réponse 4 / 6
balltrap34 Messages postés 16240 Date d'inscription jeudi 8 janvier 2004 Statut Contributeur sécurité Dernière intervention 28 novembre 2009 331
5 nov. 2004 à 22:32
re cela ne supprimerat pas les virus mais nous montrerat le chemin exact

la chasse et le balltrap ma vrai passion
voir site perso dans profil
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 6
DolphinEye
6 nov. 2004 à 13:40
Voici le rapport de mon ordinateur; ceux des autres membres seront placé à cet endroit dès que posible. Merci encore.
Thomas

Scan started at 05/11/2004 23:45:58

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0026:data.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0028:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0029:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0039:document09_c.faraut.exe) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0043:word_doc_c.faraut.zip)->data.rtf .scr - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0045:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0046:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0055:letter43_c.faraut.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0062:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0063:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0066:letter43.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0068:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0069:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0072:sample01_c.faraut.zip)->document.txt .exe - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0074:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0075:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0078:data.doc .pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0089:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0090:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0093:news01.doc .exe) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0100:all_in_all_c.faraut.doc .pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0102:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0103:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0106:postcard.zip)->document.txt .exe - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0109:www.freeporn4all.pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0112:letter.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0123:document07.txt .pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0130:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0131:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0134:readme.pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0136:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0137:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0139:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0143:readme.doc .exe) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0145:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0146:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0149:id09509.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0154:your_document.zip)->data.rtf .scr - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0156:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0157:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0161:details_c.faraut.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0166:)->(part0002:file.zip)->document.txt .exe - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0168:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0169:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0175:details.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0183:readme.doc .exe) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0186:)->(part0001:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0186:)->(part0002:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0195:data.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Inbox->(part0222:Details.vbs) - VBS/Bagle.Z.dr* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0005:word_doc_c.faraut.zip)->data.rtf .scr - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0008:document09_c.faraut.exe) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0016:data.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0023:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0024:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0029:letter43.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0032:letter43_c.faraut.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0039:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0040:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0042:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0043:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0045:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0046:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0048:sample01_c.faraut.zip)->document.txt .exe - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0050:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0051:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0054:data.doc .pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0061:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0062:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0066:news01.doc .exe) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0069:all_in_all_c.faraut.doc .pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0071:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0072:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0075:postcard.zip)->document.txt .exe - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0078:www.freeporn4all.pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0081:letter.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0084:document07.txt .pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0087:id09509.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0089:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0090:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0093:readme.pif) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0095:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0096:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0098:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0102:readme.doc .exe) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0104:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0105:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0107:details_c.faraut.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0110:details.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0112:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0113:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0116:your_document.zip)->data.rtf .scr - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0119:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0120:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0125:)->(part0002:file.zip)->document.txt .exe - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0128:readme.doc .exe) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0131:)->(part0001:)->(IFRAME0000) - HTML/IFrame_Exploit* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0131:)->(part0002:message.scr) - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0134:data.zip)->details.txt .pif - Win32/Netsky.P@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0156:Details.vbs) - VBS/Bagle.Z.dr* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0159:Information.hta)->(SCRIPT0000) - VBS/Bagle.Z.dr* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0162:Details.scr) - Win32/Bagle.W@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0165:Details.com) - Win32/Bagle.W@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0169:Info.com) - Win32/Bagle.W@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0171:Info.scr) - Win32/Bagle.W@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0173:Message.com) - Win32/Bagle.W@mm -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0177:Message.hta)->(SCRIPT0000) - VBS/Bagle.Z.dr* -> Infected
C:\Documents and Settings\Dolphin's Eye\Application Data\Thunderbird\Profiles\default\v93ij2xs.slt\Mail\pop3.free.fr\Trash->(part0191:Details.cpl) - Win32/Bagle.W.dr -> Infected
C:\WINDOWS\Downloaded Program Files\WebRecomendada.dll - Tool:PornDialer.DE -> Infected

Scanned
============================
Objects: 69031
Directories: 5118
Archives: 3107
Size(Kb): 1018541
Infected files: 109

Found
============================
Viruses found: 6
Suspicious files: 0
Disinfected files: 0
Mail files: 1351
0
Réponse 6 / 6
balltrap34 Messages postés 16240 Date d'inscription jeudi 8 janvier 2004 Statut Contributeur sécurité Dernière intervention 28 novembre 2009 331
6 nov. 2004 à 18:53
re
rechC:erche et suppr ceci
\WINDOWS\Downloaded Program Files\WebRecomendada.dll

ensuite vas dans ta messageries et supprime tous les emails
dans elements supprimer et autres

la refait scan pour verif

la chasse et le balltrap ma vrai passion
voir site perso dans profil
0