Virus trojan

wartz -  
 anonyme -
Bonjour,
Donc mon ordinateur a du etre infecté par un virus ou trojan ou tout autre type de programme.
Simptomes :

Mon bureau a un fond bleu avec des chiffres binaire 0100010000111 .... dessus avec un message en rouge est blanc par dessus disant " Warning you're in danger!Your computer is infected with spyware . All you do with computer is strored forever in your hard disk.When you visit sites ,send emails .........

Donc il en decoule l'impossibilité d'ouvrir des programmes par exemple paint,azureus et autre programme je les lance reste actif 1s et se referme...

Quelqun a t'il une solution?
Configuration: Windows XP Internet Explorer 7.0

5 réponses

  1. anonyme
     
    Telecharge antivir, malwareBytes et ccleaner. Installe-les et redémarre en mode sans echec. Fais un scan avec antivir, un scan avec malwareBytes et termine avec ccleaner. Redémarre. Conseil: Garde antivir comme antivirus. Si tu optes pour antivir, tu dois désinstaller l'autre, un seul suffit.
    0
  2. wartz
     
    Donc j'ai dl se que tu m'as dit le probleme s'est que le virus mempeche d'installé les programmes je ne peux pas lancé l'instalation.
    0
  4. wartz
     
    S'est fait avec malware je l'ai fait 2 fois une fois rapide et une foic ocmplete je te poste les deux rapport

    1er

    Malwarebytes' Anti-Malware 1.38
    Version de la base de données: 2297
    Windows 5.1.2600 Service Pack 3

    05/07/2009 17:13:28
    mbam-log-2009-07-05 (17-13-28).txt

    Type de recherche: Examen rapide
    Eléments examinés: 89296
    Temps écoulé: 4 minute(s), 20 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 11
    Valeur(s) du Registre infectée(s): 13
    Elément(s) de données du Registre infecté(s): 1
    Dossier(s) infecté(s): 2
    Fichier(s) infecté(s): 13

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{08bad461-fa53-4ca0-87fe-e3c5fbb10daf} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{08bad461-fa53-4ca0-87fe-e3c5fbb10daf} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{500bca15-57a7-4eaf-8143-8c619470b13d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\cs41275 (Malware.Trace) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\19814374 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\SSODL (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceClassicControlPanel (Hijack.ControlPanelStyle) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\BuildW (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\FirstInstallFlag (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\guid (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\i (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mms (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mso (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\uid (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Ulrn (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Update (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\UpdateNew (Malware.Trace) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Dossier(s) infecté(s):
    C:\Documents and Settings\All Users\Application Data\19814374 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
    c:\documents and settings\Z T F\Start Menu\Programs\Registry Defender (Rogue.Registry.Defender) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    c:\documents and settings\all users\application data\19814374\19814374 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
    c:\documents and settings\all users\application data\19814374\19814374.exe (Rogue.Multiple.H) -> Quarantined and deleted successfully.
    c:\WINDOWS\system32\msncache.dll (Backdoor.Bot) -> Quarantined and deleted successfully.
    c:\documents and settings\Z T F\start menu\Programs\registry defender\Customer Support.lnk (Rogue.Registry.Defender) -> Quarantined and deleted successfully.
    c:\documents and settings\Z T F\start menu\Programs\registry defender\RDP2009.lnk (Rogue.Registry.Defender) -> Quarantined and deleted successfully.
    c:\documents and settings\Z T F\start menu\Programs\registry defender\User Guide.lnk (Rogue.Registry.Defender) -> Quarantined and deleted successfully.
    c:\documents and settings\Z T F\Desktop\System Security 2009.lnk (Rogue.SystemSecurity) -> Quarantined and deleted successfully.
    c:\WINDOWS\system32\mcrh.tmp (Malware.Trace) -> Quarantined and deleted successfully.
    C:\WINDOWS\msa.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\comsa32.sys (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\FInstall.sys (Backdoor.Bot) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\tpsaxyd.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\msxml71.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    2em

    Malwarebytes' Anti-Malware 1.38
    Version de la base de données: 2297
    Windows 5.1.2600 Service Pack 3

    05/07/2009 17:45:45
    mbam-log-2009-07-05 (17-45-45).txt

    Type de recherche: Examen complet (C:\|T:\|)
    Eléments examinés: 140293
    Temps écoulé: 30 minute(s), 1 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 2

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    c:\system volume information\_restore{5c593ac0-0101-4afc-a3ab-cd54ccc2440e}\RP51\A0016031.dll (Backdoor.Bot) -> Quarantined and deleted successfully.
    t:\TITOU\Bureau\Web-MediaPlayer_setup.exe (Adware.Navipromo) -> Quarantined and deleted successfully.

    CCcleaner m'a viré 3.7go de donné.
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. anonyme
     
    Bon nettoyage de malwares. As-tu fait un scan avec antivir ?
    0

Discussions similaires

Chrome://newtab
Nova -
snoopy35_ -

14 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
Aide pour un virus
cerise92700 -
MisteryBean -

41 réponses
Trojan impossible à supprimer!
Gridouu -
Malekal_morte- -

12 réponses