Cheval de troie TR / Agent.11216

marmar45 -  
 gen-hackman -
Bonjour,
j'ai un message de antivir qui ne cesse de s'afficher.
c:\WINDOWS\winnt.exe is the TR/Agent.11216 Trojan
et rien n'y fait ni la mise en quarantaine, ni la suppression ni rien du tout
Merci beaucoup d'avance pour votre aide.
Configuration: Windows XP mozilla firefox

8 réponses

  1. brahim33 Messages postés 6827 Statut Membre 1 166
     
    salut
    essaie de le suprimer en mode sans echec
    0
    1. marmar45
       
      Merci brahim pour ta réponse rapide. Mais je fais comment pour le supprimer en mode sans échec ? je suis plutot du genre novice en fait.
      0
  2. gen-hackman
     
    salut j' aimerais bien voir hijackthis fonctionner :

    Pour voir ce qu'il en est,avoir un diagnostic et repérer les infections possibles et les neutraliser:

    Télécharges et installes le logiciel de diagnostic :

    ici Hijackthis
    ou ici Hijackthis
    ou ici Hijackthis

    1- Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation .
    A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge .
    Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
    "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

    tuto pour utilisation :(merci balltrap34)
    Regardes ici, c'est parfaitement expliqué en images ,

    2- !! Déconnectes toi et fermes toute tes applications en cours !!

    Cliques sur le raccourci du bureau pour lancer le prg :

    S'il ne se lance pas clique ici

    fais un scan HijackThis en cliquant sur : "Do a system scan and save a logfile"

    --->copies-colles le rapport généré pour analyse
    0
    1. marmar45
       
      Merci Gen-jackman pour ta réponse.
      Voilà le rapport de hijackthis

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 00:08:49, on 11/06/2009
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
      C:\Program Files\Logitech\QuickCam\Quickcam.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Documents and Settings\marseille.UNICORNI-F59530\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
      C:\Program Files\LG Electronics\Modem USB LG Electronics\UMAService.exe
      C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\WINDOWS\system32\winfiles.exe
      C:\WINDOWS\system32\winfiles.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\WINDOWS\winnt.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
      C:\Program Files\Skype\Plugin Manager\skypePM.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.files-ftp.com/~unicorni/phpBB2/index.php
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Menara
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      F2 - REG:system.ini: Shell=Explorer.exe winfiles.exe
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
      O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
      O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\kamsoft.exe
      O4 - HKCU\..\Run: [vamsoft] C:\WINDOWS\system32\vamsoft.exe
      O4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe
      O4 - HKCU\..\Run: [Microsoft Visual Debuger] C:\WINDOWS\system32\mdm.exe
      O4 - HKCU\..\Run: [Control Panel Application] C:\RECYCLER\S-1-5-21-1704474050-5933632731-275548154-6701\nvapbar.exe
      O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\marseille.UNICORNI-F59530\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
      O4 - HKCU\..\Run: [UMService] C:\Program Files\LG Electronics\Modem USB LG Electronics\UMAService.exe
      O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [Yahoo Messengger] C:\WINDOWS\system32\winfiles.exe
      O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
      O17 - HKLM\System\CCS\Services\Tcpip\..\{5B6FD2A5-7BBC-416F-A0D5-ED7BECC337B3}: NameServer = 212.217.0.12,212.217.0.1
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
      O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

      End of file - 7337 bytes
      0
  3. marmar45
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 00:08:49, on 11/06/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Documents and Settings\marseille.UNICORNI-F59530\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
    C:\Program Files\LG Electronics\Modem USB LG Electronics\UMAService.exe
    C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\winfiles.exe
    C:\WINDOWS\system32\winfiles.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\WINDOWS\winnt.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.files-ftp.com/~unicorni/phpBB2/index.php
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Menara
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    F2 - REG:system.ini: Shell=Explorer.exe winfiles.exe
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
    O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\kamsoft.exe
    O4 - HKCU\..\Run: [vamsoft] C:\WINDOWS\system32\vamsoft.exe
    O4 - HKCU\..\Run: [cdoosoft] C:\WINDOWS\system32\olhrwef.exe
    O4 - HKCU\..\Run: [Microsoft Visual Debuger] C:\WINDOWS\system32\mdm.exe
    O4 - HKCU\..\Run: [Control Panel Application] C:\RECYCLER\S-1-5-21-1704474050-5933632731-275548154-6701\nvapbar.exe
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\marseille.UNICORNI-F59530\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [UMService] C:\Program Files\LG Electronics\Modem USB LG Electronics\UMAService.exe
    O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Yahoo Messengger] C:\WINDOWS\system32\winfiles.exe
    O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
    O17 - HKLM\System\CCS\Services\Tcpip\..\{5B6FD2A5-7BBC-416F-A0D5-ED7BECC337B3}: NameServer = 212.217.0.12,212.217.0.1
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
    0
  4. gen-hackman
     
    ######## | XP _ Instal & recherche | #######

    Telecharge et install UsbFix (de C_XX & Chiquitine29)

    Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d avoir été infectés sans les ouvrir

    # Double clic sur le raccourci UsbFix présent sur ton bureau .

    # Choisi l option 1 ( Recherche )

    # Laisse travailler l outil.

    # Ensuite post le rapport UsbFix.txt qui apparaitra.

    # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

    ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    # Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

    0
    1. marmar45
       
      Désolée hier soir j'étais trop à la masse, j'ai laissé tomber.
      J'ai télécharger Usbfix. J'ai l'icone sur le bureau mais quand je double-clic dessus il ne se passe rien. J'ai essayé en désactivant antivir mais c'est pareil.
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. gen-hackman
     
    Télécharge SDFix sur ton bureau :
    ici :SDFix
    ou ici SDFix
    ou ici SDFix

    --> Double-clique sur SDFix.exe et choisis "Install" .

    Tuto

    Puis une fois l'installe faite ,

    Impératif : Démarrer en mode sans echec .

    /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

    Comment aller en Mode sans échec :
    1) Redémarre ton ordi .
    2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
    3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage .
    4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] .
    5) Choisis ton compte habituel ( et pas Administrateur ).
    attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ...

    Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer l'outil .
    -->Tapes Y pour lancer le script ...
    Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc :
    presses une touche pour redémarrer quand il te le sera demandé .

    Le PC va mettre du temps avant de démarrer ( c'est normal ), après le chargement du Bureau presses une touche lorsque "Finished" s'affiche .

    Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier
    C:\SDFix sous le nom "Report.txt".

    Poste ce dernier dans ta prochaine réponse

    Si SDfix ne se lance pas (ça arrive!)

    * Démarrer->Exécuter

    * Copie/colle ceci :

    %systemroot%\system32\cmd.exe /K %systemdrive%\SDFix\apps\FixPath.exe

    * Clique sur ok, et valide.

    * Redémarre et essaye de nouveau de lancer SDfix.
    0
    1. marmar45
       
      runthis ne s'est pas lancé. j'ai essayé avec la commande dans "exécuter" mais meme. en mode normal il me dit que windows n'arrive pas à accéder au périphérique.
      du coup j'ai essayé de lancer un truc qui s'appelle "catchme" qui était aussi dans le dossier SDfix, mais ça a pas été concluant.
      0
  7. gen-hackman
     
    ne prends pas d'initiatives s'il te plait sinon ca chamboule tout

    -> Scan BitDefender

    Fais une analyse antivirus en ligne sur BitDefender on line avec Internet Explorer

    * Clique en bas à gauche sur Scan on line.
    * Accepte la licence et laisse-le installer l'Active x..
    * Laisse-toi guider. Colle son rapport ici.

    Aide
    0
    1. marmar45
       
      voilà finalement le résultat du scan de Bitdefender.

      BitDefender Online Scanner







      Scan report generated at: Thu, Jun 11, 2009 - 22:43:55









      Scan path: C:\;D:\;E:\;F:\;















      Statistics

      Time


      10:06:30

      Files


      186421

      Folders


      3435

      Boot Sectors


      0

      Archives


      27214

      Packed Files


      9880







      Results

      Identified Viruses


      8

      Infected Files


      237

      Suspect Files


      0

      Warnings


      0

      Disinfected


      0

      Deleted Files


      237







      Engines Info

      Virus Definitions


      3347777

      Engine build


      AVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008 17:19:14)

      Scan plugins


      17

      Archive plugins


      45

      Unpack plugins


      7

      E-mail plugins


      6

      System plugins


      4







      Scan Settings

      First Action


      Disinfect

      Second Action


      Delete

      Heuristics


      Yes

      Enable Warnings


      Yes

      Scanned Extensions


      *;

      Exclude Extensions




      Scan Emails


      Yes

      Scan Archives


      Yes

      Scan Packed


      Yes

      Scan Files


      Yes

      Scan Boot


      Yes








      Scanned File


      Status

      C:\Program Files\Ahead\Ahead.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Ahead.exe


      Deleted

      C:\Program Files\Ahead\CoverDesigner\CoverDesigner.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\CoverDesigner\CoverDesigner.exe


      Deleted

      C:\Program Files\Ahead\CoverDesigner\LSTemplates\LSTemplates.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\CoverDesigner\LSTemplates\LSTemplates.exe


      Deleted

      C:\Program Files\Ahead\CoverDesigner\Templates\Templates.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\CoverDesigner\Templates\Templates.exe


      Deleted

      C:\Program Files\Ahead\ImageDrive\ImageDrive.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\ImageDrive\ImageDrive.exe


      Deleted

      C:\Program Files\Ahead\Nero\CDI\CDI.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Nero\CDI\CDI.exe


      Deleted

      C:\Program Files\Ahead\Nero\Nero.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Nero\Nero.exe


      Deleted

      C:\Program Files\Ahead\Nero\Uninstall\Uninstall.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Nero\Uninstall\Uninstall.exe


      Deleted

      C:\Program Files\Ahead\Nero BackItUp\Nero BackItUp.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Nero BackItUp\Nero BackItUp.exe


      Deleted

      C:\Program Files\Ahead\Nero SoundTrax\Nero SoundTrax.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Nero SoundTrax\Nero SoundTrax.exe


      Deleted

      C:\Program Files\Ahead\Nero StartSmart\Nero StartSmart.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Nero StartSmart\Nero StartSmart.exe


      Deleted

      C:\Program Files\Ahead\Nero Toolkit\Nero Toolkit.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Nero Toolkit\Nero Toolkit.exe


      Deleted

      C:\Program Files\Ahead\Nero Wave Editor\Nero Wave Editor.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Nero Wave Editor\Nero Wave Editor.exe


      Deleted

      C:\Program Files\Ahead\Nero Wave Editor\Presets\Presets.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\Nero Wave Editor\Presets\Presets.exe


      Deleted

      C:\Program Files\Ahead\WMPBurn\WMPBurn.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Ahead\WMPBurn\WMPBurn.exe


      Deleted

      C:\Program Files\Avira\AntiVir PersonalEdition Classic\AntiVir PersonalEdition Classic.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Avira\AntiVir PersonalEdition Classic\AntiVir PersonalEdition Classic.exe


      Deleted

      C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\FAILSAFE.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Avira\AntiVir PersonalEdition Classic\FAILSAFE\FAILSAFE.exe


      Deleted

      C:\Program Files\Avira\Avira.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Avira\Avira.exe


      Deleted

      C:\Program Files\ComPlus Applications\ComPlus Applications.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\ComPlus Applications\ComPlus Applications.exe


      Deleted

      C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_266D&SUBSYS_107D1734\CNXT_MODEM_PCI_VEN_8086&DEV_266D&SUBSYS_107D1734.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_266D&SUBSYS_107D1734\CNXT_MODEM_PCI_VEN_8086&DEV_266D&SUBSYS_107D1734.exe


      Deleted

      C:\Program Files\CONEXANT\CONEXANT.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\CONEXANT\CONEXANT.exe


      Deleted

      C:\Program Files\Fichiers communs\Adobe\Adobe.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Adobe\Adobe.exe


      Deleted

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\TypeSpt.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\TypeSpt.exe


      Deleted

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\ICU\ICU.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\ICU\ICU.exe


      Deleted

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Adobe\Adobe.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Adobe\Adobe.exe


      Deleted

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\Mac.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mac\Mac.exe


      Deleted

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mappings.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\Mappings.exe


      Deleted

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\win.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Mappings\win\win.exe


      Deleted

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Unicode.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Adobe\TypeSpt\Unicode\Unicode.exe


      Deleted

      C:\Program Files\Fichiers communs\Ahead\Ahead.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Ahead\Ahead.exe


      Deleted

      C:\Program Files\Fichiers communs\Ahead\AudioPlugins\AudioPlugins.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Ahead\AudioPlugins\AudioPlugins.exe


      Deleted

      C:\Program Files\Fichiers communs\Ahead\DSFilter\DSFilter.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Ahead\DSFilter\DSFilter.exe


      Deleted

      C:\Program Files\Fichiers communs\Ahead\Lib\Lib.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Ahead\Lib\Lib.exe


      Deleted

      C:\Program Files\Fichiers communs\DESIGNER\DESIGNER.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\DESIGNER\DESIGNER.exe


      Deleted

      C:\Program Files\Fichiers communs\Fichiers communs.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Fichiers communs.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\Engine\6\6.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\Engine\6\6.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\Intel 32.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\Engine\6\Intel 32\Intel 32.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\Engine\Engine.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\Engine\Engine.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\InstallShield.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\InstallShield.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\IScript\IScript.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\IScript\IScript.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\Professional\Professional.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\Professional\Professional.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\10.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\10.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\50\50.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\50\50.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\50\Intel32\Intel32.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\10\50\Intel32\Intel32.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\RunTime.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\RunTime.exe


      Deleted

      C:\Program Files\Fichiers communs\InstallShield\UpdateService\UpdateService.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\InstallShield\UpdateService\UpdateService.exe


      Deleted

      C:\Program Files\Fichiers communs\Java\Java.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Java\Java.exe


      Deleted

      C:\Program Files\Fichiers communs\Java\Update\Base Images\Base Images.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Java\Update\Base Images\Base Images.exe


      Deleted

      C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.5.0.b64\jre1.5.0.b64.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.5.0.b64\jre1.5.0.b64.exe


      Deleted

      C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_06.b05\patch-jre1.5.0_06.b05.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.5.0.b64\patch-jre1.5.0_06.b05\patch-jre1.5.0_06.b05.exe


      Deleted

      C:\Program Files\Fichiers communs\Java\Update\Update.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Java\Update\Update.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\CacheMSI\CacheMSI.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\CacheMSI\CacheMSI.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\CacheMSI\{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}\{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\CacheMSI\{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}\{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\KAudP\KAudP.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\KAudP\KAudP.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LComMgr.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LComMgr.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\LogiDriverStore.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\LogiDriverStore.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\11.50.1145.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\11.50.1145.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\ELCH\ELCH.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\ELCH\ELCH.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\IM2\IM2.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\IM2\IM2.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\PRO5\PRO5.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\PRO5\PRO5.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\lvdrivers.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\lvdrivers.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LogiShrd.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LogiShrd.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LQCVFX\LQCVFX.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LQCVFX\LQCVFX.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LQCVFX\VideoEffects\VideoEffects.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LQCVFX\VideoEffects\VideoEffects.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LQCVFX\VideoEffects\XmlSchemas\XmlSchemas.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LQCVFX\VideoEffects\XmlSchemas\XmlSchemas.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LvApi11\LvApi11.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LvApi11\LvApi11.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVMVFM.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVMVFM.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\MV\MV.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\MV\MV.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\WUApp\LogiShrd\LogiShrd.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\WUApp\LogiShrd\LogiShrd.exe


      Deleted

      C:\Program Files\Fichiers communs\LogiShrd\WUApp\WUApp.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\LogiShrd\WUApp\WUApp.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\DAO\DAO.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\DAO\DAO.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\Database Replication.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\Database Replication.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\Resources\1033\1033.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\Resources\1033\1033.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\Resources\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\Resources\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\Resources\Resources.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\Resources\Resources.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\DW\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\DW\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\DW\DW.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\DW\DW.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\EQUATION\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\EQUATION\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\EQUATION\EQUATION.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\EQUATION\EQUATION.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\EURO\EURO.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\EURO\EURO.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\GRPHFLT\GRPHFLT.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\GRPHFLT\GRPHFLT.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\Information Retrieval.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\Information Retrieval.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\INK\INK.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\INK\INK.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Microsoft Office Project 11\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Microsoft Office Project 11\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Microsoft Office Project 11\Microsoft Office Project 11.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Microsoft Office Project 11\Microsoft Office Project 11.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Microsoft Shared.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Microsoft Shared.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MODI\11.0\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MODI\11.0\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MODI\11.0\11.0.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MODI\11.0\11.0.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MODI\11.0\DRIVERS\DRIVERS.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MODI\11.0\DRIVERS\DRIVERS.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MODI\MODI.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MODI\MODI.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MSClientDataMgr\MSClientDataMgr.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MSClientDataMgr\MSClientDataMgr.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MSDesigners7\MSDesigners7.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MSDesigners7\MSDesigners7.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MSDesigners7\Resources\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MSDesigners7\Resources\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MSDesigners7\Resources\Resources.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MSDesigners7\Resources\Resources.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MSENV\MSENV.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MSENV\MSENV.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo\MSInfo.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo\MSInfo.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\MSORUN\MSORUN.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\MSORUN\MSORUN.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\OFFICE11.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\OFFICE11.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Papier à lettres.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Papier à lettres\Papier à lettres.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Portal\Portal.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Portal\Portal.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1025\1025.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1025\1025.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1031\1031.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1031\1031.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1033\1033.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1033\1033.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1043\1043.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\1043\1043.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\3082\3082.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\3082\3082.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\PROOF.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\PROOF\PROOF.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\LISTS.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\LISTS\LISTS.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\Smart Tag.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Smart Tag\Smart Tag.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Snapshot Viewer\Snapshot Viewer.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Snapshot Viewer\Snapshot Viewer.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\Source Engine.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\Source Engine.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Speech\1036\1036.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Speech\1036\1036.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\Speech\Speech.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\Speech\Speech.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\TextConv\TextConv.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\TextConv\TextConv.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\AFTRNOON\AFTRNOON.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\AFTRNOON\AFTRNOON.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ARCTIC\ARCTIC.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ARCTIC\ARCTIC.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\AXIS\AXIS.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\AXIS\AXIS.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BLENDS\BLENDS.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BLENDS\BLENDS.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BLUECALM\BLUECALM.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BLUECALM\BLUECALM.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BLUEPRNT\BLUEPRNT.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BLUEPRNT\BLUEPRNT.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BOLDSTRI\BOLDSTRI.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BOLDSTRI\BOLDSTRI.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BREEZE\BREEZE.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\BREEZE\BREEZE.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CANYON\CANYON.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CANYON\CANYON.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CAPSULES\CAPSULES.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CAPSULES\CAPSULES.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CASCADE\CASCADE.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CASCADE\CASCADE.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\COMPASS\COMPASS.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\COMPASS\COMPASS.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CONCRETE\CONCRETE.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\CONCRETE\CONCRETE.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\DEEPBLUE\DEEPBLUE.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\DEEPBLUE\DEEPBLUE.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ECHO\ECHO.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ECHO\ECHO.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ECLIPSE\ECLIPSE.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ECLIPSE\ECLIPSE.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\EDGE\EDGE.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\EDGE\EDGE.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\EVRGREEN\EVRGREEN.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\EVRGREEN\EVRGREEN.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\EXPEDITN\EXPEDITN.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\EXPEDITN\EXPEDITN.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ICE\ICE.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\ICE\ICE.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\INDUST\INDUST.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\INDUST\INDUST.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\IRIS\IRIS.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\IRIS\IRIS.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\JOURNAL\JOURNAL.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\JOURNAL\JOURNAL.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\LAYERS\LAYERS.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\LAYERS\LAYERS.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\LEVEL\LEVEL.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\LEVEL\LEVEL.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\NETWORK\NETWORK.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\NETWORK\NETWORK.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\PAPYRUS\PAPYRUS.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\PAPYRUS\PAPYRUS.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\PIXEL\PIXEL.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\PIXEL\PIXEL.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\PROFILE\PROFILE.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\PROFILE\PROFILE.exe


      Deleted

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\THEMES11.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\Program Files\Fichiers communs\Microsoft Shared\THEMES11\THEMES11.exe


      Deleted

      C:\WINDOWS\system32\autorun.ini


      Infected with: Trojan.Script.56018

      C:\WINDOWS\system32\autorun.ini


      Disinfection failed

      C:\WINDOWS\system32\autorun.ini


      Deleted

      C:\WINDOWS\winfiles.exe


      Infected with: Trojan.Agent.VB.BBG

      C:\WINDOWS\winfiles.exe


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP100\A0030233.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP100\A0030233.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP102\A0030336.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP102\A0030336.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP102\A0030370.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP102\A0030370.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP104\A0030511.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP104\A0030511.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP105\A0030552.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP105\A0030552.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP105\A0030619.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP105\A0030619.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030737.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030737.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030761.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030761.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030817.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030817.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030841.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030841.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030867.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030867.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030933.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030933.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP108\A0030958.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP108\A0030958.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP109\A0031077.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP109\A0031077.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP109\A0031115.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP109\A0031115.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP110\A0031172.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP110\A0031172.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP110\A0031215.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP110\A0031215.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0031236.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0031236.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0031273.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0031273.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0031315.inf


      Infected with: Trojan.Autorun.AFP

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0031315.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0032378.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0032378.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0032475.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP111\A0032475.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP112\A0032562.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP112\A0032562.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP88\A0027575.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP88\A0027575.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP88\A0027596.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP88\A0027596.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP88\A0027644.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP88\A0027644.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP88\A0027660.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP88\A0027660.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP89\A0027678.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP89\A0027678.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP89\A0027769.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP89\A0027769.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP90\A0027786.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP90\A0027786.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP90\A0027804.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP90\A0027804.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP90\A0027833.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP90\A0027833.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027840.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027840.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027857.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027857.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027875.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027875.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027893.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027893.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027918.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP91\A0027918.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP92\A0027941.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP92\A0027941.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP93\A0027989.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP93\A0027989.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP93\A0028026.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP93\A0028026.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP93\A0028051.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP93\A0028051.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP94\A0028092.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP94\A0028092.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP94\A0028148.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP94\A0028148.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028309.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028309.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028352.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028352.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028373.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028373.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028410.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028410.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028429.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028429.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028469.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP95\A0028469.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028582.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028582.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028621.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028621.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028698.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028698.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028744.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028744.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028768.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP96\A0028768.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP98\A0028934.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP98\A0028934.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP98\A0029980.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP98\A0029980.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP98\A0030002.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP98\A0030002.inf


      Deleted

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP99\A0030065.inf


      Infected with: Trojan.AutorunINF.Gen

      D:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP99\A0030065.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP104\A0030514.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP104\A0030514.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP105\A0030554.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP105\A0030554.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP105\A0030622.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP105\A0030622.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030739.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030739.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030763.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030763.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030819.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030819.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030843.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP106\A0030843.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030896.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030896.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030899.BAT


      Infected with: Trojan.Generic.1217730

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030899.BAT


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030934.com


      Infected with: Trojan.Generic.1217730

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030934.com


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030935.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030935.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030938.bat


      Infected with: Trojan.Generic.1217730

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP107\A0030938.bat


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP108\A0030959.cmd


      Infected with: Trojan.PWS.OnlineGames.KBMH

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP108\A0030959.cmd


      Disinfection failed

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP108\A0030959.cmd


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP108\A0030960.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP108\A0030960.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP109\A0031079.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP109\A0031079.inf


      Deleted

      E:\System Volume Information\_restore{3836522D-30C1-433C-96E6-10D7EBFDF7D2}\RP109\A0031117.inf


      Infected with: Trojan.AutorunINF.Gen

      E:\System Volume Information\_restore{3836522
      0
  8. gen-hackman
     
    et bien quelle collection !

    2:> Désactive la restauration système, pour cela , suis les instructions des liens:

    Lien XP

    Lien Vista
    _________________________________________________

    >essaies de telecharger les logiciels d'un autre PC et de les graver (les cles usb s'infectant trop facilement)
    ___________________________________________________

    > Télécharge Dr Web CureIt sur ton Bureau :
    en l'occurence lancé d'un CD-RW , sinon clé usb dans l impossible...

    redemarre en mode sans échec

    - Double clique (clic droit "en tant qu'admin" sous Vista) <drweb-cureit.exe> et ensuite clique sur <Analyse>;

    - Clique <Ok> à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton <Oui>.
    Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X".
    - Lorsque le scan rapide est terminé, clique sur le menu <Options> puis <Changer la configuration> ; Choisis l'onglet <Scanner>, et décoche <Analyse heuristique>. Clique ensuite sur <Ok>.
    - De retour à la fenêtre principale : clique pour activer <Analyse complète>
    - Clique le bouton avec flèche verte sur la droite, et le scan débutera.
    - Clique <Oui> pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter".
    - Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône <Suivant>, au dessous, et choisis <Déplacer en quarantaine l'objet indésirable>.
    - Du menu principal de l'outil, au haut à gauche, clique sur le menu <Fichier> et choisis <Enregistrer le rapport>. Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv
    - Ferme Dr.Web Cureit
    - Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage).
    - Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de Dr.Web dans ta prochaine réponse.

    0