[aide]
Résolu
cedric
-
cedric -
cedric -
Bonjour
mon pc a été infecté depuis 1 semaine par 1 virus nommé W32.WALLZ.j'essai de me débarasser de ce truc depuis mais j'y arrive pas.j'utilise nrton antivirus et window XP.
merci de bien vouloir m'aider.
mon pc a été infecté depuis 1 semaine par 1 virus nommé W32.WALLZ.j'essai de me débarasser de ce truc depuis mais j'y arrive pas.j'utilise nrton antivirus et window XP.
merci de bien vouloir m'aider.
9 réponses
salut cedric:
lance un scan chez RAV :
http://www.ravantivirus.com/scan/
Clique sur "To continue without subscribing click here" et attends quelques minutes.
Lorsque "Ready" est affiché dans "status", coche la case "Autoclean" puis clique sur "Scan my PC"
A la fin de l'analyse, copie/colle le rapport ici
lance un scan chez RAV :
http://www.ravantivirus.com/scan/
Clique sur "To continue without subscribing click here" et attends quelques minutes.
Lorsque "Ready" est affiché dans "status", coche la case "Autoclean" puis clique sur "Scan my PC"
A la fin de l'analyse, copie/colle le rapport ici
Pour effacer w32.wallz, il faut d'abord telecharger et installer la mise a jour de wiindows MS04-011 ensuite, il faut :
soit c le fichier winPNP32.exe ou HWCLOCK.exe, donc a toi de d'adapter, ici je l'ai fais pour winpnp32.exe
desactiver la restauration du system
clik dr sur poste de travail, prop, rest. sys. puis desactiver
supprimer les clef suivantes :
en faisant demarrer, executer, puis regedit
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINPNP32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\winpnp32
pour la premiere il faut d'abord clike dessus bouton droit, puis autorisation, puis mettre controle total pour tout le monde.
redemarrer le systeme
desactiver norton
supprimer le fichier
Voila,
Bonne soiree
Seun P4
soit c le fichier winPNP32.exe ou HWCLOCK.exe, donc a toi de d'adapter, ici je l'ai fais pour winpnp32.exe
desactiver la restauration du system
clik dr sur poste de travail, prop, rest. sys. puis desactiver
supprimer les clef suivantes :
en faisant demarrer, executer, puis regedit
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINPNP32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\winpnp32
pour la premiere il faut d'abord clike dessus bouton droit, puis autorisation, puis mettre controle total pour tout le monde.
redemarrer le systeme
desactiver norton
supprimer le fichier
Voila,
Bonne soiree
Seun P4
merci de m'avoir répondu
voici le scan
Scan started at 04/05/2005 21:56:36
Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\All Users\Documents\cluster 1083570.HTML->(part0005:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083571.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083572.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083573.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083574.HTML->(part0000:)->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083575.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083576.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083577.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084494.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084501.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084508.HTML->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084513.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1090669.HTML->(part0000:)->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\Nouveau dossier1\cluster 1132672.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\Nouveau dossier1\cluster 1423477.EXE->(part0020:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1006699.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1132672.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1209598.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1371470.EXE->(part0025:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1387065.HTML->(part0009:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1569734.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1608071.HTML->(part0005:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1608072.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2132911.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2158749.XLS->(part0051:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191484.JPG->(part0004:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191485.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191486.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191487.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191488.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191492.XLS->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2393797.XLS->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2536773.HTML->(part0042:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2536774.HTML->(part0039:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1371470.EXE->(part0025:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1387065.HTML->(part0009:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1467693.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475355.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475356.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475357.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475358.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475359.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475360.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475361.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475362.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475363.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475364.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475365.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475367.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510509.HTML->(part0048:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510510.HTML->(part0045:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510511.HTML->(part0041:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510512.HTML->(part0002:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510513.HTML->(part0034:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510515.HTML->(part0027:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510516.HTML->(part0024:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510517.HTML->(part0021:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510518.HTML->(part0018:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510519.HTML->(part0015:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510520.HTML->(part0012:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510521.HTML->(part0009:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510522.HTML->(part0004:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510523.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510524.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510525.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510526.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510527.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510528.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510529.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1608072.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038186.exe - Backdoor:Win32/Rbot.KS -> Infected
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038221.exe - Worm:Win32/Francette.O -> Infected
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP77\A0041716.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP77\A0042231.EXE->(part0042:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
Scanned
============================
Objects: 53558
Directories: 3141
Archives: 6449
Size(Kb): -1383897
Infected files: 2
Found
============================
Viruses found: 2
Suspicious files: 72
Disinfected files: 0
Mail files: 1483
voici le scan
Scan started at 04/05/2005 21:56:36
Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\All Users\Documents\cluster 1083570.HTML->(part0005:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083571.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083572.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083573.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083574.HTML->(part0000:)->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083575.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083576.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083577.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084494.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084501.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084508.HTML->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084513.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1090669.HTML->(part0000:)->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\Nouveau dossier1\cluster 1132672.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\Nouveau dossier1\cluster 1423477.EXE->(part0020:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1006699.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1132672.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1209598.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1371470.EXE->(part0025:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1387065.HTML->(part0009:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1569734.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1608071.HTML->(part0005:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1608072.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2132911.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2158749.XLS->(part0051:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191484.JPG->(part0004:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191485.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191486.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191487.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191488.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191492.XLS->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2393797.XLS->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2536773.HTML->(part0042:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2536774.HTML->(part0039:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1371470.EXE->(part0025:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1387065.HTML->(part0009:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1467693.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475355.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475356.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475357.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475358.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475359.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475360.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475361.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475362.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475363.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475364.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475365.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475367.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510509.HTML->(part0048:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510510.HTML->(part0045:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510511.HTML->(part0041:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510512.HTML->(part0002:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510513.HTML->(part0034:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510515.HTML->(part0027:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510516.HTML->(part0024:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510517.HTML->(part0021:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510518.HTML->(part0018:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510519.HTML->(part0015:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510520.HTML->(part0012:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510521.HTML->(part0009:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510522.HTML->(part0004:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510523.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510524.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510525.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510526.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510527.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510528.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510529.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1608072.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038186.exe - Backdoor:Win32/Rbot.KS -> Infected
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038221.exe - Worm:Win32/Francette.O -> Infected
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP77\A0041716.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP77\A0042231.EXE->(part0042:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
Scanned
============================
Objects: 53558
Directories: 3141
Archives: 6449
Size(Kb): -1383897
Infected files: 2
Found
============================
Viruses found: 2
Suspicious files: 72
Disinfected files: 0
Mail files: 1483
Scan started at 04/05/2005 22:45:23
Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\All Users\Documents\cluster 1083570.HTML->(part0005:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083571.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083572.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083573.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083574.HTML->(part0000:)->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083575.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083576.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083577.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084494.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084501.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084508.HTML->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084513.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1090669.HTML->(part0000:)->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\Nouveau dossier1\cluster 1132672.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\Nouveau dossier1\cluster 1423477.EXE->(part0020:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1006699.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1132672.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1209598.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1371470.EXE->(part0025:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1387065.HTML->(part0009:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1569734.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1608071.HTML->(part0005:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1608072.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2132911.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2158749.XLS->(part0051:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191484.JPG->(part0004:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191485.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191486.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191487.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191488.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191492.XLS->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2393797.XLS->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2536773.HTML->(part0042:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2536774.HTML->(part0039:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1371470.EXE->(part0025:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1387065.HTML->(part0009:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1467693.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475355.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475356.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475357.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475358.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475359.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475360.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475361.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475362.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475363.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475364.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475365.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475367.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510509.HTML->(part0048:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510510.HTML->(part0045:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510511.HTML->(part0041:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510512.HTML->(part0002:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510513.HTML->(part0034:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510515.HTML->(part0027:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510516.HTML->(part0024:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510517.HTML->(part0021:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510518.HTML->(part0018:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510519.HTML->(part0015:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510520.HTML->(part0012:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510521.HTML->(part0009:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510522.HTML->(part0004:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510523.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510524.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510525.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510526.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510527.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510528.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510529.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1608072.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038186.exe - Backdoor:Win32/Rbot.KS -> Infected
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038221.exe - Worm:Win32/Francette.O -> Infected
Scanned
============================
Objects: 25453
Directories: 2179
Archives: 502
Size(Kb): 797701
Infected files: 2
Found
============================
Viruses found: 2
Suspicious files: 70
Disinfected files: 0
Mail files: 1461
Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\All Users\Documents\cluster 1083570.HTML->(part0005:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083571.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083572.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083573.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083574.HTML->(part0000:)->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083575.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083576.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1083577.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084494.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084501.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084508.HTML->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1084513.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\cluster 1090669.HTML->(part0000:)->(part0000:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\Nouveau dossier1\cluster 1132672.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\All Users\Documents\Nouveau dossier1\cluster 1423477.EXE->(part0020:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1006699.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1132672.HTML->(part0000:cedric.zimmankan.vcf)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1209598.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1371470.EXE->(part0025:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1387065.HTML->(part0009:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1569734.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1608071.HTML->(part0005:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 1608072.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2132911.EXE->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2158749.XLS->(part0051:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191484.JPG->(part0004:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191485.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191486.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191487.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191488.JPG->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2191492.XLS->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2393797.XLS->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2536773.HTML->(part0042:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier2\cluster 2536774.HTML->(part0039:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1371470.EXE->(part0025:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1387065.HTML->(part0009:)->(part0046:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1467693.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475355.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475356.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475357.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475358.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475359.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475360.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475361.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475362.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475363.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475364.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475365.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1475367.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510509.HTML->(part0048:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510510.HTML->(part0045:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510511.HTML->(part0041:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510512.HTML->(part0002:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510513.HTML->(part0034:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510515.HTML->(part0027:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510516.HTML->(part0024:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510517.HTML->(part0021:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510518.HTML->(part0018:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510519.HTML->(part0015:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510520.HTML->(part0012:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510521.HTML->(part0009:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510522.HTML->(part0004:)->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510523.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510524.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510525.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510526.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510527.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510528.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1510529.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\Documents and Settings\ZINMANKAN\Mes documents\Nouveau dossier4\cluster 1608072.HTML->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038186.exe - Backdoor:Win32/Rbot.KS -> Infected
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038221.exe - Worm:Win32/Francette.O -> Infected
Scanned
============================
Objects: 25453
Directories: 2179
Archives: 502
Size(Kb): 797701
Infected files: 2
Found
============================
Viruses found: 2
Suspicious files: 70
Disinfected files: 0
Mail files: 1461
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Bonjour,
*qu est ce que cluster??? si tu connais pas suis le chemin et supprime tous les noms avec cluster mentionné au dessu
tu vois?
*C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038186.exe - Backdoor:Win32/Rbot.KS -> Infected
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038221.exe - Worm:Win32/Francette.O -> Infected
ce ver et backdoor se trouve dans ta restauration systeme donc:
-clik droit sur poste de travail, propriete, onglet restauration systeme, coche desactiver, puis supprimes les points de restauration, decoche la case !
refais un scan pour verifs
a+
*qu est ce que cluster??? si tu connais pas suis le chemin et supprime tous les noms avec cluster mentionné au dessu
tu vois?
*C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038186.exe - Backdoor:Win32/Rbot.KS -> Infected
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP63\A0038221.exe - Worm:Win32/Francette.O -> Infected
ce ver et backdoor se trouve dans ta restauration systeme donc:
-clik droit sur poste de travail, propriete, onglet restauration systeme, coche desactiver, puis supprimes les points de restauration, decoche la case !
refais un scan pour verifs
a+
il y a de ce la 3 semaine j'étai obligé de formater mon disque dur a cause d'une panne.alors j'ai essayer de retrouver une partie de mes données perdues grace o logiciel pc inspector que m'a conseillé le service assistant apres vente de carrefour.alors les données qui ont été retrouvées ont été renommées automatiquement pendant la recherche pr eviter d'ecraser celles qui existaient déja.dc ces données que j'ai récuperées pertent le nom de cluster suivi du numero.
je n'ai pas encor executer les manipulations concernant le cluster car avant j'aimerais savoir si je ne vais pas perdre les données que j'ai pu récuperer sur mon disque dur?
attention les donnees cluster sont suspicieux et non infecte
si elle sont ete renemmer c est pour cela je pense qu il les detecte suspicieux
si elle sont ete renemmer c est pour cela je pense qu il les detecte suspicieux
MERCI a tous de m'avoir aidé.finanlement j'ai pu viré ce machin de mon pc.merci aussi a regis59 pour ton aide.
Finalement pour virer ce virus de mon pc j'ai redemarer mon pc en mode sans echec en tapotant sur F8 des le demarrage.afin selectionner mode sans echec avec les flèches.ensuite cliquer sur poste de travail,sur disque dur,sur window,sur système32 et afin clic droit sur hwlock et apres sur supprimer.moi j'ai supprimer hwlock car c'est ce fichier qui a été infecté.donc c'est à vous de supprimer le fichier infecté apres l'avoir déterminé.mais faite tres attention car dans le disque dur tous les fichiers sont tres importants.donc ne pas supprimer n'importe quel fichier.moi en tout cas mon pc marche tres bien pour l'instant.
Finalement pour virer ce virus de mon pc j'ai redemarer mon pc en mode sans echec en tapotant sur F8 des le demarrage.afin selectionner mode sans echec avec les flèches.ensuite cliquer sur poste de travail,sur disque dur,sur window,sur système32 et afin clic droit sur hwlock et apres sur supprimer.moi j'ai supprimer hwlock car c'est ce fichier qui a été infecté.donc c'est à vous de supprimer le fichier infecté apres l'avoir déterminé.mais faite tres attention car dans le disque dur tous les fichiers sont tres importants.donc ne pas supprimer n'importe quel fichier.moi en tout cas mon pc marche tres bien pour l'instant.