Sujet Précédent Sujet Suivant

Infection TR/SPY.KeyLogger.bti

Fabio -  
 Fabio -
Bonjour,

Je suis équipé de windows xp, avira antivir, je suis infecté par: TR/SPY.KeyLogger.bti... Antivir le detecte mais il ne le supprime pas ! Pourriez vous me dire comment faire. D'avance un grand merci a TOUS...

2 réponses

Réponse 1 / 2
Utilisateur anonyme
 
bonsoir :

Télécharge Superantispyware (SAS)

Choisis "enregistrer" et enregistre-le sur ton bureau.

Double-clique sur l'icône d'installation qui vient de se créer et suis les instructions.

Créé une icône sur le bureau.

Double-clique sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.

- Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
- Sous Configuration and Preferences, clique sur le bouton "Preferences"
- Clique sur l'onglet "Scanning Control "
- Dans "Scanner Options ", assure toi que la case devant lles lignes suivantes est cochée :

Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining
- Laisse les autres lignes décochées.

- Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.

- Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".

Dans la colonne de gauche, coche C:\Fixed Drive.

Dans la colonne de droite, sous "Complete scan", clique sur "Perform Complete Scan"

Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.

A la fin du scan, une fenêtre de résultats s'ouvre . Clique sur OK.

Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".

Tout ce qui a été trouvé sera mis en quarantaine. S'il t'es demandé de redémarrer l'ordi ("reboot"), clique sur Yes.

Pour recopier les informations sur le forum, fais ceci :

- après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
- Clique sur "Preferences" puis sur l'onglet "Statistics/Logs ".
- Dans "scanners logs", double-clique sur SUPERAntiSpyware Scan Log.

- Le rapport va s'ouvrir dans ton éditeur de texte par défaut.

- Copie son contenu dans ta réponse.

Regarde bien le tuto SUPERAntiSpyware il est très bien expliqué.
0
Réponse 2 / 2
Fabio
 
SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 03/23/2009 at 10:48 PM

Application Version : 4.25.1014

Core Rules Database Version : 3809
Trace Rules Database Version: 1741

Scan type : Complete Scan
Total Scan Time : 00:57:34

Memory items scanned : 546
Memory threats detected : 0
Registry items scanned : 5980
Registry threats detected : 56
File items scanned : 64653
File threats detected : 118

Adware.SprtAds/AdRotator
HKLM\Software\Classes\CLSID\{4AD44D3E-7316-4251-B754-9B10EC96AF92}
HKCR\CLSID\{4AD44D3E-7316-4251-B754-9B10EC96AF92}
HKCR\CLSID\{4AD44D3E-7316-4251-B754-9B10EC96AF92}
HKCR\CLSID\{4AD44D3E-7316-4251-B754-9B10EC96AF92}\InprocServer32
HKCR\CLSID\{4AD44D3E-7316-4251-B754-9B10EC96AF92}\InprocServer32#ThreadingModel
HKCR\CLSID\{4AD44D3E-7316-4251-B754-9B10EC96AF92}\ProgID
HKCR\CLSID\{4AD44D3E-7316-4251-B754-9B10EC96AF92}\Programmable
HKCR\CLSID\{4AD44D3E-7316-4251-B754-9B10EC96AF92}\TypeLib
HKCR\CLSID\{4AD44D3E-7316-4251-B754-9B10EC96AF92}\VersionIndependentProgID
HKCR\AdPanel.Panel1.1
HKCR\AdPanel.Panel1.1\CLSID
HKCR\AdPanel.Panel1
HKCR\AdPanel.Panel1\CLSID
HKCR\AdPanel.Panel1\CurVer
HKCR\TypeLib\{FF49E1C5-DCE3-4a5e-9033-189C945D4CE5}
HKCR\TypeLib\{FF49E1C5-DCE3-4a5e-9033-189C945D4CE5}\1.0
HKCR\TypeLib\{FF49E1C5-DCE3-4a5e-9033-189C945D4CE5}\1.0\0
HKCR\TypeLib\{FF49E1C5-DCE3-4a5e-9033-189C945D4CE5}\1.0\0\win32
HKCR\TypeLib\{FF49E1C5-DCE3-4a5e-9033-189C945D4CE5}\1.0\FLAGS
HKCR\TypeLib\{FF49E1C5-DCE3-4a5e-9033-189C945D4CE5}\1.0\HELPDIR
C:\WINDOWS\SYSTEM32\SPRT_ADS.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4AD44D3E-7316-4251-B754-9B10EC96AF92}
HKU\S-1-5-21-1844237615-492894223-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4AD44D3E-7316-4251-B754-9B10EC96AF92}
HKCR\Interface\{3EB045B6-6669-4E1A-A0A9-95A6DA3C76EA}
HKCR\Interface\{3EB045B6-6669-4E1A-A0A9-95A6DA3C76EA}\ProxyStubClsid
HKCR\Interface\{3EB045B6-6669-4E1A-A0A9-95A6DA3C76EA}\ProxyStubClsid32
HKCR\Interface\{3EB045B6-6669-4E1A-A0A9-95A6DA3C76EA}\TypeLib
HKCR\Interface\{3EB045B6-6669-4E1A-A0A9-95A6DA3C76EA}\TypeLib#Version

Unclassified.Unknown Origin
HKLM\Software\Classes\CLSID\{8E015787-B1E3-404a-95DE-3E71E1FA0305}
HKCR\CLSID\{8E015787-B1E3-404A-95DE-3E71E1FA0305}
HKCR\CLSID\{8E015787-B1E3-404A-95DE-3E71E1FA0305}
HKCR\CLSID\{8E015787-B1E3-404A-95DE-3E71E1FA0305}\InprocServer32
HKCR\CLSID\{8E015787-B1E3-404A-95DE-3E71E1FA0305}\InprocServer32#ThreadingModel
HKCR\CLSID\{8E015787-B1E3-404A-95DE-3E71E1FA0305}\ProgID
HKCR\CLSID\{8E015787-B1E3-404A-95DE-3E71E1FA0305}\Programmable
HKCR\CLSID\{8E015787-B1E3-404A-95DE-3E71E1FA0305}\TypeLib
HKCR\CLSID\{8E015787-B1E3-404A-95DE-3E71E1FA0305}\VersionIndependentProgID
HKCR\Rotator.Gizmo3.1
HKCR\Rotator.Gizmo3.1\CLSID
HKCR\Rotator.Gizmo3
HKCR\Rotator.Gizmo3\CLSID
HKCR\Rotator.Gizmo3\CurVer
HKCR\TypeLib\{2A52F970-1166-437b-8BC7-79D03CF1492C}
HKCR\TypeLib\{2A52F970-1166-437b-8BC7-79D03CF1492C}\1.0
HKCR\TypeLib\{2A52F970-1166-437b-8BC7-79D03CF1492C}\1.0\0
HKCR\TypeLib\{2A52F970-1166-437b-8BC7-79D03CF1492C}\1.0\0\win32
HKCR\TypeLib\{2A52F970-1166-437b-8BC7-79D03CF1492C}\1.0\FLAGS
HKCR\TypeLib\{2A52F970-1166-437b-8BC7-79D03CF1492C}\1.0\HELPDIR
C:\WINDOWS\SYSTEM32\SPADS.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E015787-B1E3-404a-95DE-3E71E1FA0305}
HKU\S-1-5-21-1844237615-492894223-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6FC3C36D-7635-4D43-BA62-0D9D2F2CD06E}
HKU\S-1-5-21-1844237615-492894223-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E015787-B1E3-404A-95DE-3E71E1FA0305}
HKCR\Interface\{3786A03B-108D-48F4-B09C-60262531E895}
HKCR\Interface\{3786A03B-108D-48F4-B09C-60262531E895}\ProxyStubClsid
HKCR\Interface\{3786A03B-108D-48F4-B09C-60262531E895}\ProxyStubClsid32
HKCR\Interface\{3786A03B-108D-48F4-B09C-60262531E895}\TypeLib
HKCR\Interface\{3786A03B-108D-48F4-B09C-60262531E895}\TypeLib#Version

Adware.Tracking Cookie
C:\Documents and Settings\fabrice\Cookies\fabrice@xiti[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@atdmt[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@specificclick[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@estat[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@ads.habbogroup[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@v2[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@eas.apm.emediate[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@weborama[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@audi.solution.weborama[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@www.googleadservices[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@adviva[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@notrefamille.112.2o7[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@1058566955[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@warnerbros.112.2o7[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@www.googleadservices[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@indextools[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@interhome.solution.weborama[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@1039308691[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@yourmedia[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@aimfar.solution.weborama[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@1039671459[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@fl01.ct2.comclick[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@247realmedia[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@ad.dragonstar.dmoglobal[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@1049362321[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@1071702004[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@argusauto2.solution.weborama[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@ad.caradisiac[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@intermarche2009.solution.weborama[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@mediaplex[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@adv.surinter[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@bs.serving-sys[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@ad.zanox[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@boursoramabanque.solution.weborama[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@kaspersky.122.2o7[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@ad.proxad[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@serving-sys[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@smartadserver[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@a[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@zedo[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@fr.sitestat[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@zanox[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@autoscout24.112.2o7[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@ad.yieldmanager[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@bluestreak[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@renault-group[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@media.adrevolver[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@2o7[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@statse.webtrendslive[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@m1.webstats.motigo[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@ads.us.e-planning[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@adserver.aol[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@cetelem.solution.weborama[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@zbox.zanox[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@track.effiliation[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@tracking.publicidees[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@adtech[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@adopt.euroclick[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@doubleclick[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@advertising[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@overture[2].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@mediametrics.mpsa[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@fr.sitestat[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@tradedoubler[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@renault-fr[1].txt
C:\Documents and Settings\fabrice\Cookies\fabrice@serving-sys[1].txt
C:\Documents and Settings\Fred\Cookies\fred@247realmedia[2].txt
C:\Documents and Settings\Fred\Cookies\fred@2o7[2].txt
C:\Documents and Settings\Fred\Cookies\fred@ad.caradisiac[2].txt
C:\Documents and Settings\Fred\Cookies\fred@ad.ieurop[1].txt
C:\Documents and Settings\Fred\Cookies\fred@ad.yieldmanager[2].txt
C:\Documents and Settings\Fred\Cookies\fred@ad.zanox[2].txt
C:\Documents and Settings\Fred\Cookies\fred@adrevolver[2].txt
C:\Documents and Settings\Fred\Cookies\fred@ads.canalblog[1].txt
C:\Documents and Settings\Fred\Cookies\fred@ads.createreach[2].txt
C:\Documents and Settings\Fred\Cookies\fred@ads.habbogroup[2].txt
C:\Documents and Settings\Fred\Cookies\fred@ads.sorpresor[2].txt
C:\Documents and Settings\Fred\Cookies\fred@ads.starfields[2].txt
C:\Documents and Settings\Fred\Cookies\fred@ads.us.e-planning[2].txt
C:\Documents and Settings\Fred\Cookies\fred@adserver.aol[1].txt
C:\Documents and Settings\Fred\Cookies\fred@adtech[1].txt
C:\Documents and Settings\Fred\Cookies\fred@advertising[2].txt
C:\Documents and Settings\Fred\Cookies\fred@adviva[2].txt
C:\Documents and Settings\Fred\Cookies\fred@aimfar.solution.weborama[2].txt
C:\Documents and Settings\Fred\Cookies\fred@atdmt[2].txt
C:\Documents and Settings\Fred\Cookies\fred@bluestreak[2].txt
C:\Documents and Settings\Fred\Cookies\fred@boursoramabanque.solution.weborama[2].txt
C:\Documents and Settings\Fred\Cookies\fred@bs.serving-sys[1].txt
C:\Documents and Settings\Fred\Cookies\fred@cetelem.solution.weborama[2].txt
C:\Documents and Settings\Fred\Cookies\fred@doubleclick[1].txt
C:\Documents and Settings\Fred\Cookies\fred@ehg-citenumerique.hitbox[1].txt
C:\Documents and Settings\Fred\Cookies\fred@ehg-legonewyorkinc.hitbox[2].txt
C:\Documents and Settings\Fred\Cookies\fred@hitbox[2].txt
C:\Documents and Settings\Fred\Cookies\fred@indextools[2].txt
C:\Documents and Settings\Fred\Cookies\fred@legobrandretail.112.2o7[1].txt
C:\Documents and Settings\Fred\Cookies\fred@media.adrevolver[1].txt
C:\Documents and Settings\Fred\Cookies\fred@media.funpic[1].txt
C:\Documents and Settings\Fred\Cookies\fred@media6degrees[1].txt
C:\Documents and Settings\Fred\Cookies\fred@mediaplex[2].txt
C:\Documents and Settings\Fred\Cookies\fred@msnportal.112.2o7[1].txt
C:\Documents and Settings\Fred\Cookies\fred@notrefamille.112.2o7[1].txt
C:\Documents and Settings\Fred\Cookies\fred@overture[1].txt
C:\Documents and Settings\Fred\Cookies\fred@serving-sys[2].txt
C:\Documents and Settings\Fred\Cookies\fred@smartadserver[1].txt
C:\Documents and Settings\Fred\Cookies\fred@specificclick[2].txt
C:\Documents and Settings\Fred\Cookies\fred@stats.canalblog[1].txt
C:\Documents and Settings\Fred\Cookies\fred@tradedoubler[2].txt
C:\Documents and Settings\Fred\Cookies\fred@trafficmp[1].txt
C:\Documents and Settings\Fred\Cookies\fred@ttbmanutan.solution.weborama[2].txt
C:\Documents and Settings\Fred\Cookies\fred@warnerbros.112.2o7[1].txt
C:\Documents and Settings\Fred\Cookies\fred@weborama[1].txt
C:\Documents and Settings\Fred\Cookies\fred@xiti[1].txt
C:\Documents and Settings\Fred\Cookies\fred@yourmedia[1].txt
C:\Documents and Settings\Fred\Cookies\fred@zanox[1].txt
C:\Documents and Settings\Fred\Cookies\fred@zedo[1].txt

Adware.AdRotator/SPA
HKLM\Software\Microsoft\Windows\CurrentVersion\Run#spa_start [ C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\sprt_ads.dll" DllStart ]

Adware.AdRotator/SuperiorAds
C:\WINDOWS\SYSTEM32\SUPERIORADS-UNINST.EXE
0

Discussions similaires

Signification "TR"
andromeid -
matrix4422 -

3 réponses
Signification des abréviations RE: et TR:
La Salamandre -
Iolose -

19 réponses
Sa veux dire koi??Subject: FW: Tr :FW: TR: TR
france22 -
ghano0666545160 -

12 réponses
casque sans fil Sennheiser TR 4200 ne fonctionne plus
jcb83400 -
DIY -

3 réponses
Problème casque sennheiser 4200
barbie35 -
Beenaxa -

1 réponse