Virer Think Point de mon PC

Résolu
Paul_77120 -  
moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   -
Bonjour,

J'ai depuis 2 jours ce virus qui se nomme Think point et j'ai fait comme quelqu'un m'a dit de faire avec List_Kill'em et D'après la démarche :
Pour List\'em.txt , j'ai http://www.cijoint.fr/cjlink.php?file=cj201011/cijRmyyBh6.txt
Et pour More.txt , http://www.cijoint.fr/cjlink.php?file=cj201011/cijnzDe4zd.txt

Qu'est-ce qu'il faut que je fasses maintenant, merci de votre aide ?

5 réponses

  1.
    moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    bonjour

    commence par ceci stp

    * Télécharge sur le bureau RogueKiller (par tigzy)
    https://www.luanagames.com/index.fr.html

    *( Sous Vista/Seven,clique droit, lancer en tant qu'administrateur )

    * Quitte tous tes programmes en cours
    * Lance RogueKiller.exe.
    * Lorsque demandé, tape 2 et valide
    * Un rapport (RKreport.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse
    * Si le programme a été bloqué, ne pas hésiter a essayer plusieurs fois.
    0
    1. Paul_77120
       
      RogueKiller V2.4.0 by Tigzy
      contact at www.sur-la-toile.com
      mail: tigzy44<at>hotmail<dot>fr
      Remontées: https://www.luanagames.com/index.fr.html

      Operating System: Windows Vista (6.0.6002 Service Pack 2) version 32 bits
      Mode: Remove -- Time : 03/11/2010 15:34:50

      Bad processes:

      Deregistred:
      \...\RUN\ RTHDBPL : C:\Users\Paul\AppData\Roaming\SysWin\lsass.exe
      \...\RUN\ dfrgsnapnt.exe : C:\Users\Paul\AppData\Local\Temp\dfrgsnapnt.exe
      \...\Winlogon\ Shell : C:\Users\Paul\AppData\Roaming\hotfix.exe

      Finished
      0
  2. Tigzy Messages postés 7983 Statut Contributeur sécurité 582
     
    Good,
    Télécharger sur le bureau Malwarebyte's Anti-Malware

    = double-clic sur mbam-setup pour lancer l'installation
    = Installer simplement sans rien modifier
    = Ne pas décocher "Faire la mise à jour"
    = si la mise à jour a échoué, la faire après execution du logiciel => onglet "Mise à jour"
    = Quand le programme lancé ==> cocher Exécuter un examen complet
    = Clic Rechercher
    = Eventuellement décocher les disque à ne pas analyser
    = Clic Lancer l'examen
    = En fin de scan ( 1h environ), si infection trouvée
    ==> Clic Afficher résultat
    = Fermer vos applications en cours
    = Vérifier si tout est coché et clic Supprimer la sélection

    un rapport s'ouvre le copier et le coller dans la réponse

    0
    1. Paul_77120
       
      L'analyse est partie, déjà 13 infections en 1 minutres u_u
      Merci.
      0
    2. Paul_77120
       
      Malwarebytes' Anti-Malware 1.46
      www.malwarebytes.org

      Version de la base de données: 5044

      Windows 6.0.6002 Service Pack 2
      Internet Explorer 8.0.6001.18975

      04/11/2010 19:01:29
      mbam-log-2010-11-04 (19-01-29).txt

      Type d'examen: Examen complet (C:\|)
      Elément(s) analysé(s): 333139
      Temps écoulé: 1 heure(s), 18 minute(s), 13 seconde(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 3
      Clé(s) du Registre infectée(s): 5
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 2
      Dossier(s) infecté(s): 4
      Fichier(s) infecté(s): 66

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      C:\Windows\System32\dsdmo32.dll (Trojan.Tracur) -> Delete on reboot.
      C:\Windows\System32\6FB3.tmp (Trojan.Tracur) -> Delete on reboot.
      C:\Windows\System32\asferror32.dll (Trojan.Tracur) -> Delete on reboot.

      Clé(s) du Registre infectée(s):
      HKEY_CLASSES_ROOT\CLSID\{127b0483-1079-41a5-bea2-bb7a0848483e} (Trojan.Tracur) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{127b0483-1079-41a5-bea2-bb7a0848483e} (Trojan.Tracur) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{127b0483-1079-41a5-bea2-bb7a0848483e} (Trojan.Tracur) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{127b0483-1079-41a5-bea2-bb7a0848483e} (Trojan.Tracur) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Tracur) -> Data: c:\windows\system32\dsdmo32.dll -> Delete on reboot.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Tracur) -> Data: system32\dsdmo32.dll -> Delete on reboot.

      Dossier(s) infecté(s):
      C:\ProgramData\1683917633 (Rogue.Multiple) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\SysWin (Trojan.Agent) -> Quarantined and deleted successfully.
      C:\Windows\System32\LocalService (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32 (Worm.Archive) -> Quarantined and deleted successfully.

      Fichier(s) infecté(s):
      C:\Windows\System32\dsdmo32.dll (Trojan.Tracur) -> Delete on reboot.
      C:\Windows\System32\6FB3.tmp (Trojan.Tracur) -> Delete on reboot.
      C:\Windows\System32\asferror32.dll (Trojan.Tracur) -> Delete on reboot.
      C:\ProgramData\cmdial3232.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\d3dxof32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\dbgeng32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\dciman3232.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\devenum32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\diagperf32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\difxapi32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\diskcopy32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\dmdskres32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\dmocx32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\dxmasf32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\ezEMail732.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\ProgramData\BitDefender\Desktop\Quarantine\2332.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\AnVi\avtext.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\AnVi\avthook.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\SysWin\lsass.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\Windows\System32\DDB3.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\Windows\System32\dsdmo32.dll.bdren (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\Windows\System32\F395.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\Windows\System32\FD60.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\Windows\System32\9DD5.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\Windows\System32\EFA0.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
      C:\Windows\System32\EFCA.tmp (Worm.P2P) -> Quarantined and deleted successfully.
      C:\Windows\System32\LocalService\8B91.tmp (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\@u204912252v0 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\@u204912252v1 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\@u204912252v2 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\@u204912252v3 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\@u204912252v4 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\@u204912252v5 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\@u204912252v6 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\@u204912252v7 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\mu204912252v2.kwd (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\mu204912252v4 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\mu204912252v4.kwd (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\mu204912252v5 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\mu204912252v5.kwd (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\mu204912252v6 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\mu204912252v6.kwd (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\mu204912252v7 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\mu204912252v7.kwd (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\wu204912252v0 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\wu204912252v0.kwd (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\wu204912252v1 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\wu204912252v1.kwd (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\wu204912252v2 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\wu204912252v3 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\wu204912252v3.kwd (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\_u204912252v0 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\_u204912252v1 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\_u204912252v2 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\_u204912252v3 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\_u204912252v4 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\_u204912252v5 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\_u204912252v6 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Windows\System32\SysWoW32\_u204912252v7 (Worm.Archive) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\dkfjasdfshd.bat (Malware.Trace) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Antivirus.lnk (Rogue.AntiVirus) -> Quarantined and deleted successfully.
      C:\Windows\GnuHashes.ini (Malware.Trace) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\0200000017f85b72691C.manifest (Malware.Trace) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\0200000017f85b72691O.manifest (Malware.Trace) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\0200000017f85b72691P.manifest (Malware.Trace) -> Quarantined and deleted successfully.
      C:\Users\Paul\AppData\Roaming\0200000017f85b72691S.manifest (Malware.Trace) -> Quarantined and deleted successfully.
      0
  3. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    (re bonjour Tigzy)

    @paul

    on va finir avant killem et MBAM ensuite

    1)

    Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
    mais cette fois-ci :

    choisis l'option CLEAN

    laisse travailler l'outil.

    en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau ,

    colle le contenu dans ta reponse

    ............

    2)

    MBAM en suivant les bonnes explication d'ici https://forums.commentcamarche.net/forum/affich-19705277-virer-think-point-de-mon-pc#3

    0
    1. Tigzy Messages postés 7983 Statut Contributeur sécurité 582
       
      C'toi l'chef! :)
      0
    2. Paul_77120
       
      Merci a vous j'ai réussi à le virer ! :D
      0
    3. Paul_77120
       
      Heureusement qu'il y a des gens qui s'y connaissent <3
      0
  4. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    tant mieux...mais il nous faudrait des rapports stp

    à savoir Killem et MBAM
    0
    1. Paul_77120
       
      Killem ne marche pas lorsque je fais search une fenêtre noir s'ouvre mais brièvement.
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. moment de grace Messages postés 29099 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 274
     
    ok

    vide la quarantaine de MBAM

    puis pour killem

    va dans son dossier d'intallation (programme files) cherche et clique sur del_reg
    0

Discussions similaires

Snapchat que veux dire le petit point vert
Anna_6260 -
Anna_6260 -

2 réponses