AU SECOURS !!! Voir rapport hijackthis

Résolu
matduchesne -  
fix200 Messages postés 3365 Statut Contributeur sécurité -
Bonjour,

On me donne un PC à mettre à jour pour cause de non ADSL et je me rends compte à force de rien pouvoir faire ni installer qu'il est bien infecté. Impossible d'installer un antivirus, WIndows Installer plante, impossible de faire windows update etc... Impossible egalement de faire une restauration usine.
J'ai vu que le fichier hosts était complétement vérolé, mais j'arrive pas à le modifier.
Voici le rapport hijackthis, merci d'avance pour votre aide :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:03:31, on 16/07/2009
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\reader_s.exe
C:\windows\ld12.exe
C:\Documents and Settings\Propriétaire\reader_s.exe
C:\WINDOWS\System32\dllcache\Rtsecar.exe
C:\WINDOWS\System32\dllcache\wintcps.exe
C:\WINDOWS\System32\irdvxc.exe
C:\WINDOWS\System32\urdvxc.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\sySTEM32\SvchoSt.ExE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\websrvx\websrvx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Propriétaire\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr9.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O2 - BHO: C:\WINDOWS\System32\grffr83hn.dll - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} - C:\WINDOWS\System32\grffr83hn.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [reader_s] C:\WINDOWS\System32\reader_s.exe
O4 - HKLM\..\Run: [sysldtray] C:\windows\ld12.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [reader_s] C:\Documents and Settings\Propriétaire\reader_s.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [reader_s] C:\Documents and Settings\Propriétaire\reader_s.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [A00F49D94.exe] C:\WINDOWS\TEMP\_A00F49D94.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [A00FC4991.exe] C:\WINDOWS\TEMP\_A00FC4991.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [A00F12D598.exe] C:\WINDOWS\TEMP\_A00F12D598.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [reader_s] C:\Documents and Settings\Propriétaire\reader_s.exe (User 'Default user')
O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O20 - Winlogon Notify: __c00DD8A4 - C:\WINDOWS\System32\__c00DD8A4.dat
O22 - SharedTaskScheduler: rtasgvfu76ew8ndkfno94 - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} - C:\WINDOWS\System32\grffr83hn.dll
O23 - Service: Microsoft Media - Unknown owner - C:\WINDOWS\System32\dllcache\Rtsecar.exe
O23 - Service: Microsoft Windows TCP Protocol - Unknown owner - C:\WINDOWS\System32\dllcache\wintcps.exe
O23 - Service: Network helper Service (MSDisk) - Unknown owner - C:\WINDOWS\System32\irdvxc.exe
O23 - Service: Network Windows Service (MSWindows) - Unknown owner - C:\WINDOWS\System32\urdvxc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: websrvx - Unknown owner - C:\Program Files\websrvx\websrvx.exe

--
End of file - 13491 bytes

--
Quel bonheur de se faire aider par les membres actifs des forums de CommentCaMarche !
Configuration: Windows XP Internet Explorer 6.0

64 réponses

  • 1
  • 2
  • 3
  • 4
Résumé de la discussion

Un ordinateur isolé d'internet et fortement infecté par un virus empêche l'installation d'un antivirus, empêche les mises à jour et laisse le fichier hosts compromis avec de nombreuses traces de HijackThis. Plusieurs conseils proposent de nettoyer le système: vider les quarantaines, puis utiliser CCleaner pour nettoyer le registre et les fichiers temporaires, afin de réduire l'infection et restaurer les fonctions basiques. En parallèle, DrWeb CureIt! et Malwarebytes sont recommandés pour supprimer les composants résiduels et éviter une réinfection, puis envisager une purge ou une réinstallation si les dommages persistent. Enfin, il est nécessaire de purger le fichier hosts et de vérifier que les entrées malveillantes ont été supprimées, puis de reconstruire une configuration système propre avant toute manipulation ou restauration.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. kalenwed Messages postés 1813 Date d'inscription   Statut Contributeur Dernière intervention   170
     
    peut tu sauvegarder les fichiers qui sont dessus ?
    0
  2. matduchesne
     
    Oui j'ai fait une sauvegarde des fichiers avant de tenter la restauration usine. Si je comprends bien le sens de la question ?
    0
  3. kalenwed Messages postés 1813 Date d'inscription   Statut Contributeur Dernière intervention   170
     
    oui tu as bien compris
    alors pourquoi tu ne le formate pas puisque tu as sauvegarder les fichiers ?
    0
    1. Utilisateur anonyme
       
      Bonjour,
      C:\WINDOWS\System32\reader_s.exe
      C:\Documents and Settings\Propriétaire\reader_s.exe
      regardez, c'est le virut le plus redoutable, et je ne montre pas tout, infection sévère
      0
      1. matduchesne > Utilisateur anonyme
         
        Je me doutais, mais que faire pour l'éradiquer ?
        0
  4. matduchesne
     
    Je ne veux pas formater car la licence orignale de Windows est incluse dans la restauration systeme, et comme indiqué précédemment la restauration plante au demarrage.
    0
    1. Utilisateur anonyme
       
      sauvegardes tous tes documents sauf les exe, rar, src, et html, car tu as le Virut
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Nic00 Messages postés 1751 Statut Membre 95
     
    Salut nathandre,

    Avant d'essayer le reformatage fais lui passer Dr.Web CureIt! :)
    0
  7. Utilisateur anonyme
     
    http://www.commentcamarche.net/faq/sujet 16138 comment supprimer virut

    Ne perds pas de temps, clique sue ce liens et fais les 3 premières méthodes, lit bien les procédures, imprimes les
    0
  8. matduchesne
     
    Merci pour vos conseils, en faisant des recherches avant vos réponses j'ai commencé la deuxième méthode : AVPTool, ca a de l'importance si je fais pas le DrWeb CureIt en premier ?
    0
  9. Nic00 Messages postés 1751 Statut Membre 95
     
    Non de toute façon il faut en faire qu'une seule pour le moment...
    Mais Dr.Web CureIt! est plus simple d'utilisation que AVPTool
    Enfin... c'est toi qui voit ^^
    0
  10. matduchesne
     
    Scan
    ----
    Scanned: 908891
    Detected: 5747
    Untreated: 0
    Start time: 16/07/2009 18:39:56
    Duration: 08:25:04
    Finish time: 17/07/2009 03:05:00

    Detected
    --------
    Status Object
    ------ ------
    will be deleted when the computer is restarted: Trojan program Trojan-Downloader.Win32.Clopack.a File: C:\WINDOWS\System32\__c00DD8A4.dat
    will be disinfected when the computer is restarted: virus Virus.Win32.Virut.n File: C:\WINDOWS\system32\svchost.exe
    will be disinfected when the computer is restarted: virus Virus.Win32.Virut.n File: C:\WINDOWS\Explorer.EXE
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\control.exe
    disinfected: virus Virus.Win32.Virut.n File: d:\info.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\mshta.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\notepad.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\regedit.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\accwiz.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\windows media player\wmplayer.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\sdbinst.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\rundll32.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\outlook express\wab.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\hh.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\clipbrd.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\fontview.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\winhlp32.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\winhlp32.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\windows nt\hypertrm.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\internet explorer\iexplore.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\intervideo\windvd4\windvd.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\java\j2re1.4.1_02\bin\javaw.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\java web start\javaws.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\wscript.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\wksproj.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\mmc.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\rasphone.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\perfmon.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\fichiers communs\microsoft shared\shoebox\piolch.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\python22\python.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\python22\pythonw.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\windows nt\accessoires\wordpad.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\arcsoft\showbiz 2\showbiz.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\notepad.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\wpnpinst.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\drwtsn32.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\userinit.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system\hpsysdrv.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\hkcmd.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\unload\hpqcmon.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\{45b6180b-dcab-4093-8ee8-6164457517f0}\hphupd05.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\hphmon05.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\hp\kbd\kbd.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\fichiers communs\sonic\update manager\sgtray.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\sminst\recguard.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\vttimer.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\nwiz.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\ati2mdxx.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\ati technologies\ati control panel\atiptaxx.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\multimedia card reader\shwicon2k.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\alcxmntr.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\ps2.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\wanadoo\cnxmon.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\wanadoo\watch.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\wanadoo\taskbaricon.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\fichiers communs\microsoft shared\works shared\wkufind.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hp\hp software update\hpwuschd2.exe
    deleted: Trojan program Backdoor.Win32.Small.idl File: c:\windows\system32\reader_s.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\ld12.exe
    deleted: Trojan program Backdoor.Win32.Small.idl File: c:\documents and settings\propriétaire\reader_s.exe
    deleted: Trojan program Trojan-Downloader.Win32.Wzhyk.ea File: c:\windows\temp\unuubbhvoj.exe
    deleted: Trojan program Trojan-Downloader.Win32.Clopack.a File: c:\windows\temp\_a00f49d94.exe
    deleted: Trojan program Trojan-Downloader.Win32.Clopack.a File: c:\windows\temp\_a00fc4991.exe
    deleted: Trojan program Trojan-Downloader.Win32.Clopack.a File: c:\windows\temp\_a00f12d598.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\bin\backupnotify.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\alg.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\cisvc.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\clipsrv.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\dllhost.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\dmadmin.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\fxssvc.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\imapi.exe
    deleted: Trojan program Backdoor.Win32.IRCBot.aid File: c:\windows\system32\dllcache\rtsecar.exe
    deleted: Trojan program Backdoor.Win32.VanBot.is File: c:\windows\system32\dllcache\wintcps.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\mnmsrvc.exe
    deleted: Trojan program Backdoor.Win32.Rbot.adqd File: c:\windows\system32\irdvxc.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\msdtc.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\msiexec.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: c:\windows\system32\urdvxc.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\netdde.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\nvsvc32.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\hpzipm12.exe
    deleted: Trojan program Rootkit.Win32.Agent.jj File: c:\windows\system32\drivers\protect.sys
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\sessmgr.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\locator.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\rsvp.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\scardsvr.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\spoolsv.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\smlogsvc.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\ups.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\vssvc.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\wbem\wmiapsrv.exe
    deleted: Trojan program Rootkit.Win32.Agent.lsj File: c:\windows\system32\drivers\zvvwptwrf7.sys//PE_Patch
    deleted: Trojan program Rootkit.Win32.Small.adn File: c:\program files\sfx\sfx.sys
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\websrvx\websrvx.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\inf\unregmp2.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\shmgrate.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\regsvr32.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\outlook express\setup50.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\ie4uinit.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\progman.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\logon.scr
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft autoroute\autorout.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\picture package applications\autoslide.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\picture package applications\autovideo.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\msn gaming zone\windows\bckgzm.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\capturingtool\capturingtool.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\picture package applications\cdbackup.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\msn gaming zone\windows\chkrzm.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\netmeeting\conf.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\windows nt\dialer.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\dxdiag.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\wanadoo\espacewanadoo.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\pchealth\helpctr\binaries\helpctr.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\bin\hpdstb01.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\unload\hpqapkil.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\album\hpqaprnt.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\unload\hpqdia.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\unload\hpqdias.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\bin\hpqgalry.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\unload\hpqphunl.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\unload\hpqpsmon.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\bin\hpqthb08.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\unload\hpqunset.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\bin\hpqvpswp.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\easy internet signup\hpsdpapp.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\msn gaming zone\windows\hrtzzm.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\internet explorer\connection wizard\icwconn1.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\internet explorer\connection wizard\icwconn2.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\internet explorer\connection wizard\inetwiz.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\internet explorer\connection wizard\isignup.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\easy internet signup\ispsignup.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\memmiximagetool\memmiximagetool.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\usmt\migwiz.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\movie maker\moviemk.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\windows media player\mplayer2.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\pchealth\helpctr\binaries\msconfig.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\outlook express\msimn.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\fichiers communs\microsoft shared\msinfo\msinfo32.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft money\system\msmoney.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\messenger\msmsgs.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\msn\msncorefiles\msn6.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\msworks.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\mspaint.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\windows nt\pinball\pinball.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft picture it! 7\pip.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\python22\lib\site-packages\pythonwin\pythonwin.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\recordnow!\recordnow.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\msn gaming zone\windows\rvsezm.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\msn gaming zone\windows\shvlzm.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\picture package menu\sonycopy.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\picture package menu\sonypotl.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\picture package menu\sonytray.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\usbstrtool\usbstrtool.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\picture package applications\vcdmaker.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\sony corporation\picture package\picture package viewer\viewerapp.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\outlook express\wabmig.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\wkplmstp.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\wksab.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\fichiers communs\microsoft shared\works shared\wkscal.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\wksdb.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\wkssb.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\wksss.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\wkswp.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\wkwcestp.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\microsoft works\wkwdstub.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\ntsd.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\windows\system32\java.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\program files\hewlett-packard\digital imaging\bin\hpqtra08.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\documents and settings\administrateur\bureau\virus removal tool\is-8tssv\startup.exe
    will be disinfected when the computer is restarted: virus Virus.Win32.Virut.n File: c:\documents and settings\administrateur\bureau\virus removal tool\is-8tssv\is-8tssv.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\hp\bin\cloaker.exe
    disinfected: virus Virus.Win32.Virut.n File: c:\hp\bin\commands.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\Documents and Settings\Administrateur\Bureau\Virus Removal Tool\is-8TSSV\minst.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\Documents and Settings\Administrateur\Bureau\Virus Removal Tool\is-8TSSV\drivers\drvins32.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2010 9.0.0.459\French\ewtstlvv.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2010 9.0.0.459\French\release_notes_kis9.0_fr.html
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\backuphelp.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\bdgtwlcm.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\bxnebtqk.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\crqjsevs.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\cthltxxt.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\cwlrkllb.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\debtwlcm.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defenrll.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\defserv.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ekjwhnhl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\hjntbvbn.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\hsvkhhql.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvestmentResearch.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\InvResearchOnline.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\jeheweht.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\jjjkljkr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\jkxklwts.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\lrbzrtls.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\lrnexhes.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelco2.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ltwelcom.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mc.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcleft.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\mcright.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\nhktqtjq.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\nkkksstj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\nnlsswex.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\ntcnnjvw.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\osudflt.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\PassportFAQsBenifit.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\PassportFAQsBkgnd.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\PassportFAQsLost.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\PassportFAQsScrty.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\plnwlcm2.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\qehjqtte.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\qsllrnxr.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Repaircorruptedfiles.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Resolving Windows Cryptography Error.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\rnjzrlwc.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\rnwlhzsb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\rtbnknsr.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\sbwelcome.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\shopping.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\snenkcsc.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\swcesrnb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\sxnjnbbs.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\taxevol.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\thrtlcjl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\tnethenl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\wxtejxsx.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\zklshtsk.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\althome.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\enjwkwke.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\guide.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\jsvjbkzh.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\jzcnceez.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\sbwbqeeh.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_althome.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\All Users\Application Data\Microsoft\Money\11.0\Webcache\Home\_altLeft.htm
    disinfected: virus Virus.Win32.Virut.n File: C:\Documents and Settings\Propriétaire\Local Settings\Temp\vcru_1247750059.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\Documents and Settings\Propriétaire\Local Settings\Temp\HPSUGS_M.KXZ\HP_RedboxHprblog.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\4HUVKXYZ\htshncte.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\8PENCP2Z\vekszlln.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\C1QF45UJ\hcnjshxh.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\G5U7KHQB\CAVYMDJV.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\G5U7KHQB\jrltzhzt.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\AddDevicePath.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\automod32.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\autorun.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\CleanRec.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\DM.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\FindWindow.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\Finis.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\FondleWindow.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\FullScreen.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\HPBI.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\HPLocale.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\HPPICT.EXE
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\HtmlMsg.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\IniMerge.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\IsRunning.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\KillIt.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\KillWind.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\Locale.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\MsgAction.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\OSType.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\PartLog.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\ProcessLogger.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\Progress.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\PwrMgt.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\RefCount.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\RPCOPY.EXE
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\SendKey.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\SetIni.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\SetRes.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\Sleep.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\Spawn.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\Terminator.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\TransientMessage.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\UIni.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\bin\USBPwrMGMT.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\audio\Realtek\Alcxmntr.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\Setup.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZarp01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZchk01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZddv01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZdui01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZmsi01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZnet01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZnfx01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZpnp01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZprl01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZpsc01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZpui01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZrcv01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZrein01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZsaf01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZscr01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZwis01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\HPZwrp01.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\usbready.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\hpimagezone\setup\CCC\HPZprs01.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\bvcltqln.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\csstletr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\ennrjjth.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\esvnbjcl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\etlrlvzt.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\etnctcvj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\eznhvelj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\hkjbtnzn.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\hsxlxsnk.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\jkkxbrcr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\jnvjhtsz.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\jtlbsjxv.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\kesqxlkz.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\khchltts.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\kjrrrbes.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\kjthvhht.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\lnhwecjr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\neewlekj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\nlnqvnhr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\nslxtshz.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\nvjthwcr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\qbnnvllq.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\qbwznkrk.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\qjqxnhnv.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\rhsljvvb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\rjktktbk.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\rkvelnvk.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\skjrlenj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\skltqtlr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\sntwzbxb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\ssxlbeel.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\stehebst.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\wbhsbsts.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\drivers\hpimagezone\setup\help\en\xcnehxts.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\keyboard\PS2.EXE
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\NIC\nforce\nvuenet.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\CopyInf.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\hpbvspst.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\hpzglu08.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\install.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\setup.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\program files\Hewlett-Packard\hp deskjet assistant\bin\browser.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\program files\Hewlett-Packard\hp deskjet assistant\bin\printpcl.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\util\common\hpfpdi08.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\util\common\hpzghl08.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\printers\deskjet\util\common\hpzpin08.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\video\ATI\CPanel\Setup.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\video\nVidia_nForce2_Gart\nvugart.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\webcam\HVideoS.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\drivers\webcam\LVComS.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\DTIcons\shortcut.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\DTIcons\warranty\hhsekvrh.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\DTIcons\warranty\splash.exe
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\KBD\HPPICT.EXE
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\KBD\KBUPDATE.EXE
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\btnnlzbh.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\Chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\Connect.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\ehzhnnkv.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\ejbsrqnn.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\Finance.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\hqvtrjcr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\htbjrbhc.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\htjwnkbb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\llrttbtz.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\People.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\rjslbzck.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\rnhjeeqs.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\rretxqjx.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\Search.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\tjsnwqbw.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\video.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\vnsvhjrz.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_AE\weather.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\xjhnvjrt.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_AE\zcjcwtxh.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\bjtqcxve.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\Chat.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\chjkewtb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\ckjlnjrk.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\Connect.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\csetnbbk.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\Entertainment.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\etjjenhs.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\Finance.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\kklsbbhl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\ljtesxqj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\lvqtwjek.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\lvvblerk.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\nvlcctsx.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\nzevwhee.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\People.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\qkctxsje.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\Search.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_EG\sslhxesr.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\video.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_EG\weather.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\bktbhwen.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\Chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\Connect.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\Finance.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\hlbbcnbs.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\jebrwseb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\jzjtstkb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\llvznbwr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\nehkhrne.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\newlnrjj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\nhehsnjt.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\People.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\rjtkncqb.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\Search.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\sejrjjst.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\srektxhe.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\tjtlhhbl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_KW\trekhhhb.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\video.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_KW\weather.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\bjlrhsbe.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\buttonconfig.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\cehjwkks.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\Chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\Connect.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\ehhbsehj.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\Entertainment.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\eszsxnjr.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\Finance.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\hbqkrbsq.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\jnvxbtqs.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\knjrhere.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\ltjtekqe.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\nbvbrqee.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\People.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\Search.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\shjvskek.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\tblkbesj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\trekwkle.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\AR_SA\trewseej.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\video.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\AR_SA\weather.htm
    disinfected: virus Virus.Win32.Virut.n File: C:\hp\KBD\STATIC\Common\hpkey.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\Chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\Connect.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\ejenhbrj.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\Finance.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\henlknvk.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\khzwlnnl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\kzlhhjqq.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\lzqetzsh.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\nttkllnq.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\People.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\qrhlezve.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\Search.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\Shopping.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\slnnkzcv.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\srkezjcr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\trwhtekq.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DA_DK\weather.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\xktjsbrw.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DA_DK\zetentnq.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\bswsksjh.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\Connect.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\eekjtwkb.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\Finance.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\jhzwlleb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\ksvnjhhl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\ktthjbjk.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\kzcbxnkt.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\lzbrwvwq.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\People.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\qzjtwlrt.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\Search.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_AT\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\tjteslbe.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\wsjcsejz.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_AT\wwqvhhtq.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\buttonconfig.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\bwqkerke.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\Connect.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\Finance.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\jttztzbl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\ksslznlt.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\lcennrnn.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\lznjjlrh.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\nrvelxxl.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\People.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\Search.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_Ch\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\thvwhbsr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\tnjlnhhe.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\vjxktbre.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\vzljhlhz.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_Ch\zejncwbj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\btllhnec.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\chat.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\cntkhsvt.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\Connect.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\Finance.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\jbnnesbt.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\jerqbztw.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\khbrebeb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\nerkjnhx.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\People.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\qkllthqj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\rwjbwknz.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\Search.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\DE_DE\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\wnwhvrje.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\xjknhnll.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\DE_DE\zskerknt.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\bkjnesxr.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\bkrqbhch.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\Chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\Connect.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\cztwrhkj.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\ejlxxest.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\Finance.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\hjvjjbkb.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\jqslhbel.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\kkslcbnk.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\news.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\nhhlektz.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\nkbrhrts.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\People.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\rheqebbc.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\rjbvzzrq.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\Search.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\sxcrkkbh.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AU\txrhehtk.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AU\weather.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\bntejkhe.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\Chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\Connect.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\Finance.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\hlvesqjs.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\hrqvcqle.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\khnhbcxl.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\kkttlnkb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\nenrhslj.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\People.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\qjkhevrb.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\qsbltrqs.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\Search.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\shhrlnzl.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\Sports.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\srwsklbn.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\tknlttkr.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_AW\weather.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_AW\zktelbxe.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\brxecbks.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\buttonconfig.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\bzttrbsz.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\Chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\Connect.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\ejshnnew.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\ejzjqrns.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\Finance.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\hnbkrnsj.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\hrsxktkn.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\lkkxrswh.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\lnrekezv.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\lxrltctn.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\nbljxksv.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\nwsbjsjs.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\People.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\Search.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\Sports.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_bb\weather.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_bb\zltkqjrv.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\bhjjshvk.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\Chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\Connect.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\eejnvtvk.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\email.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\Entertainment.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\Finance.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\HP.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\kbqzjhjt.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\nkcjkcvx.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\nkrjczte.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\ntnknwwn.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\People.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\qrhwnvne.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\rbshheen.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\rrteljnn.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\Search.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\Shopping.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\Sports.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_BS\weather.htm
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\wjersqsv.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\wqkjbhwt.exe
    deleted: virus Net-Worm.Win32.Allaple.b File: C:\hp\KBD\STATIC\EN_BS\wrevksns.exe
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_CA\buttonconfig.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_CA\Chat.htm
    disinfected: virus Net-Worm.Win32.Allaple.a File: C:\hp\KBD\STATIC\EN_CA\Connect.ht
    0
  11. Nic00 Messages postés 1751 Statut Membre 95
     
    L'outil a bien travaillé en tout cas ^^
    Il y en avait un sacré paquet.

    Colle un nouveau rapport Hijackthis stp.
    0
  12. Utilisateur anonyme
     
    sinon formate tout et va dans un magasin informatique et demande qui te le réinstalle avec ta clé normalement c'est gratuit
    0
    1. Utilisateur anonyme
       
      Bonjour,
      A Nic00,
      Tu as vu, j'avais raison , il y a bien le virut, et des vers en grande quantité

      A Matdushène
      Tu fais un élevage de nuisibles, ton PC est sévèrement infecté
      Il faudrai reposter un nouveau rapport hijackthis
      Ensuite faire DR Web
      Surtout, n'utilise ton PC que pour les manips que l'on te demande, sinon, le virut va réinfecter les fichiers exe si tu les utilises
      Il faut éviter les téléchargements par le P2P, et les téléchargements de cracks, car c'est comme cela qu'on attrape le virut
      0
  13. Utilisateur anonyme
     
    c'est quoi 'virut' ?
    0
    1. Utilisateur anonyme
       
      C'est un des virus les plus redoutables, il injecte dans les fichiers exe qu'on utilise, son code malveillant à une vitesse élevée, il peut détruire le système en 2H, c'est pour cela qu'il ne faut pas perdre de temps pour éviter le formatage du PC
      0
  14. Nic00 Messages postés 1751 Statut Membre 95
     
    A nathandre,

    yes, j'avais bien vu qu'il y avait virut puisque j'ai préconisé Dr.Web CureIt!.
    Il a choisis AVPTool, c'est pareil...
    Maintenant il nous faut un nouveau Hijackthis.

    A maxime71500,

    C'est quoi 'virut' ?

    C'est expliqué au dessus...
    http://www.commentcamarche.net/forum/affich 13390686 au secours voir rapport hijackthis#17

    Virut est un virus qui infecte, entre autres, les exécutables (fichiers .exe). Il est apparu en 2006 et s'attrape via le P2P (eMule, Limewire, etc.). 
    
    Ce virus infecte les fichiers systèmes de Windows, c'est-à-dire les fichiers vitaux pour Windows. 
    
    C'est une infection très difficile à supprimer et si elle a trop d'ampleur, le formatage devient inévitable. 
    
    Il existe des variantes comme Sality, Virtob, Vitro. La dernière variante nommée Scribble n'a pas encore de solution autre que le formatage.

    0
    1. Utilisateur anonyme
       
      Justement, je suis aussi sur un cas de Sality.NAR qui a infecté de nombreux fichiers .exe
      Je m'attaque à du gros calibre
      Matdushene a aussi le Worm.Win32.Allaple et des Trojans que j'avais vu dans le rapport Hijackthis
      0
    2. Utilisateur anonyme
       
      waou sa clac (enfin pas pour ceux qui sont infécté ^^) et qui est le créateur de ce virus ?
      0
      1. Utilisateur anonyme > Utilisateur anonyme
         
        S'il te plait, tu évites de poser ce genre de question
        0
      2. Utilisateur anonyme > Utilisateur anonyme
         
        ok :D excuse moi
        0
  15. Nic00 Messages postés 1751 Statut Membre 95
     
    Ouai je viens d'aller voir le cas avec Sality.NAR, quand c'est pris à temps ça va mais défois...c'est moche ^^

    0
  16. matduchesne
     
    Bonjour,

    Voici donc le dernier rapport hijackthis puis je poste juste après le log de DrWeb

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 13:56:01, on 17/07/2009
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
    C:\WINDOWS\System32\hphmon05.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\PROGRA~1\Wanadoo\CnxMon.exe
    C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Documents and Settings\Propriétaire\reader_s.exe
    C:\WINDOWS\System32\HPZipm12.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\websrvx\websrvx.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Documents and Settings\Propriétaire\Bureau\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr9.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr9.hpwis.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr9.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O2 - BHO: C:\WINDOWS\System32\grffr83hn.dll - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} - C:\WINDOWS\System32\grffr83hn.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
    O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
    O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [reader_s] C:\WINDOWS\System32\reader_s.exe
    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [reader_s] C:\Documents and Settings\Propriétaire\reader_s.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook (User 'Default user')
    O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Picture Package Menu.lnk = ?
    O4 - Global Startup: Picture Package VCD Maker.lnk = ?
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
    O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
    O20 - Winlogon Notify: __c00DD8A4 - C:\WINDOWS\System32\__c00DD8A4.dat (file missing)
    O22 - SharedTaskScheduler: rtasgvfu76ew8ndkfno94 - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} - C:\WINDOWS\System32\grffr83hn.dll
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: websrvx - Unknown owner - C:\Program Files\websrvx\websrvx.exe
    0
    1. Utilisateur anonyme
       
      Il y a encore du virut, fait moi DR Web
      Ton Windows n'est pas du tout à jour et ton navigateur aussi, après, faut pas s'étonner d'avoir des failles de sécurité
      Il faudrai installer le SP2, puis le SP3 pour Windows, mais la priorité, c'est la désinfection du PC
      0
  17. matduchesne
     
    Rebonjour Nathandre,

    Je sais que ce PC n'est pas à jour, on me l'a justement mis en pension pour y remédier. Il était plein de virus et la proprio l'avait ramené au magasin. Ils ont fait une restauration système mais sans doute que Virut était déjà présent et est resté. Vu qu'elle n'a pas l'ADSL je devais mettre à jour tout ça mais j'ai vu l'étendue des dégats. Effectivement je veux donc tout désinfecter avant les udpate, j'aurais préféré faire une restauration usine mais je crains que la partition Recovery soit touchée aussi. Enfin voilà quoi, je poste le nouveau rapport Hijackthis et je fais un lien vers le rapport DrWeb après le deuxième passage.
    0
  18. matduchesne
     
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:54:05, on 17/07/2009
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\HPZipm12.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\websrvx\websrvx.exe
    C:\windows\system\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
    C:\WINDOWS\System32\hphmon05.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\PROGRA~1\Wanadoo\CnxMon.exe
    C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\WINDOWS\System32\msiexec.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Documents and Settings\Propriétaire\Bureau\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr9.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr9.hpwis.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr9.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
    O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
    O2 - BHO: C:\WINDOWS\System32\grffr83hn.dll - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} - C:\WINDOWS\System32\grffr83hn.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
    O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
    O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [reader_s] C:\WINDOWS\System32\reader_s.exe
    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook (User 'Default user')
    O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Picture Package Menu.lnk = ?
    O4 - Global Startup: Picture Package VCD Maker.lnk = ?
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
    O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
    O20 - Winlogon Notify: __c00DD8A4 - C:\WINDOWS\System32\__c00DD8A4.dat (file missing)
    O22 - SharedTaskScheduler: rtasgvfu76ew8ndkfno94 - {D76AB2A1-00F3-42BD-F434-00BBC39C8953} - C:\WINDOWS\System32\grffr83hn.dll
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: websrvx - Unknown owner - C:\Program Files\websrvx\websrvx.exe
    0
    1. Utilisateur anonyme
       
      le rapport du DR Web ne semble pas etre le bon
      Fait la méthode 3
      Après on verra, j'essaierai quelque chose pour réparer les fichiers host
      Ne touche pas aux points de restauration, car ils sont probablement tous infecté, il faudra purger le PC pour tous les supprimer
      Pour le moment utilise le moins possible Windows, et ne touche pas aux logiciels, sauf le navigateur
      0
  19. matduchesne
     
    Le Rapport DrWeb CureIt dispo à cette adresse :

    http://matduchesne.free.fr/CureIt.log
    0
  20. fix200 Messages postés 3365 Statut Contributeur sécurité 158
     
    Plop a tous.

    Fais ça car virut peut infecter ton système depuis la résto du système :

    -> 1: Sauvegarde des donnés importants :

    Sauvegarde uniquement tes photos , tes musiques , tes vidéos ,sur un support externe,de préférence gravé.

    Toute autre sauvegarde serait fortuite à la bonne marche de la désinfection (ni programmes,cracks ou keygens,aucun exécutable).

    Ces extensions sont à proscrire : .exe, .scr, .zip, .rar, html, htm, cracks, keygens,,serial,patchs,Install , etc......(ces derniers contenant ce ver en prime)

    -> 2: Désactiver La restauration du système :

    *Désactivation:
    ▶ Cliquer droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > cocher la case "Désactiver la Restauration du système sur tous les lecteurs"
    > Appliquer patiente jusqu'a que cela soit marqué "désactivée" puis OK.

    ensuite fait ce que te dit nathandre .

    ++
    0
    1. Utilisateur anonyme
       
      Bonsoir fix200
      Merci pour ton intervention, on semble etre sur la bonne voix, il y a encore 2 lignes infectieuses, dont un trojan
      Dans le rapport hijackthis précédent virut était plus présent, il faut rester vigilent car c'est tellement sournoi ce nuisible, c'est pour cela que je lui demande d'utiliser le moins possible Windows, et de ne pas toucher aux logiciels car ils ont des fichiers exécutables
      0
  21. fix200 Messages postés 3365 Statut Contributeur sécurité 158
     
    Re ,

    Oui , tu as raison , je suis le topic.

    ++
    0
  • 1
  • 2
  • 3
  • 4