[virus] trojan.wintrim.bh et trojan.dialer.eg Fermé

Question

bonjour a tous j'ai un serieux probleme 2 virus m'attaquent Trojan.WINTRIM.BH et trojan.Dialer.Egroup.Q ils attaquent mon systeme windows et j'ai peur de les supprimes. est ce dangereux de les supprimer pour le bon fonctionnement de mon ordinateur . ou bien comment les supprimes sans affecter mon ordi   merci pour votre aide je suis desesperee

^^Marie^^ · Answer

BonjourPlutot faire ceci avant :  dans L'ORDRE .. MERCIEwido (download)- gratuit même après 14 jours d’essaihttp://perso.wanadoo.fr/entraide-hijackthis/Ewido/Copie/COLLE le rapport généré sur ce forumPour certaines versions de Windows antérieures à XP, Ewido peut ne pas être compatibleDans ce cas, il te faudra utiliser a-squared free et demander une clef pour son usage gratuithttps://www.emsisoft.com/fr/Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)Télécharge ici :https://www.ccleaner.com/ccleaner/downloadTutorial ici:https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.phpScan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)https://assiste.com/404_La_page_demandee_n_existe_pas.phphttp://www.bitdefender.fr/scan8/ie.htmlCopie/COLLE le rapport entierHijackthis - Outil de diagnostic et réparationlire démohttp://pageperso.aol.fr/balltrap34/Hijenr.gifhttp://pageperso.aol.fr/balltrap34/demohijack.htmTélécharge version française icihttp://telechargement.zebulon.fr/160-patch-francais-pour-hijackthis-1991.htmlCopie/colle le rapportA+

eli39 · Answer

Logfile of HijackThis v1.99.1Scan saved at 15:05:48, on 2006-05-15Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeC:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeC:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\htpatch.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exeC:\Program Files\Friendly Technologies\BroadbandAccess\fts.exeC:\Program Files\WinAntiVirus Pro 2006\winav.exeC:\WINDOWS\system32undll32.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\Program Files\WinAntiVirus Pro 2006\FWSvc.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Norton AntiVirus
avapsvc.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\ewido anti-malware\securitysuite.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXEC:\WINDOWS\system32\dumprep.exeC:\WINDOWS\system32\dumprep.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.f260.mail.yahoo.com/dc/launch?action=welcome&YY=1490712884&.rand=0ahbrq...R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - (no file)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: CIEIntegrator Object - {2178F3FB-2560-458f-BDEE-631E2FE0DFE4} - C:\Program Files\WinAntiVirus Pro 2006\winpgi.dllO2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dllO2 - BHO:   - {F90539A7-A9AD-4C7B-977F-89BAEE9D485A} - C:\WINDOWS\lbbho.dll (file missing)O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dllO3 - Toolbar: (no name) - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - (no file)O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exeO4 - HKLM\..\Run: [Windows 32 Update] Windows-Update.exeO4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exeO4 - HKLM\..\Run: [Microsoft Services] lssrv.exeO4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exeO4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:AO4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exeO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [%FP%Friendly fts.exe] "C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe"O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [WinAntiVirusPro2006] C:\Program Files\WinAntiVirus Pro 2006\winav.exe /minO4 - HKLM\..\RunServices: [Windows 32 Update] Windows-Update.exeO4 - HKLM\..\RunServices: [Microsoft Services] lssrv.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Chercher avec Copernic Agent - C:\Program Files\Copernic Agent\Web\SearchExt.htmO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Web Rebates. - file://C:\Program Files\WebRebates4\websrebates\webtrebates	oprC0.htmO9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: PICgrabber - {4964E240-D53C-11D5-BDA9-444553540000} - C:\Program Files\PICgrabber\PICGRABBER.EXE (file missing) (HKCU)O9 - Extra 'Tools' menuitem: PICgrabber - Movie&Image Search/Download Software - {4964E240-D53C-11D5-BDA9-444553540000} - C:\Program Files\PICgrabber\PICGRABBER.EXE (file missing) (HKCU)O10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dllO10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dllO10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dllO10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dllO10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dllO10 - Unknown file in Winsock LSP: c:\program files\winantivirus pro 2006\mailscan.dllO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {2A3DFC59-8A87-49A1-85D1-42903410911F} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1058_XP.cabO16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cabO16 - DPF: {31DDC1FD-CEA3-4837-A6DC-87E67015ADC9} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {39EA2F6F-3F50-4F58-9C63-4B3D53B0926E} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-24.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1059_XP.cabO16 - DPF: {8B3B8135-9DAA-40E7-8941-962795F9C1CB} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {8D8BAF56-B581-4B90-A549-C4AC6B03F1BB} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {BFC9677B-8006-4336-9D49-2C797AEFCB9E} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://game19.zylom.m6game.m6.fr/activex/zylomloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{ADF34A61-6AC2-4475-8D4C-963CDE5318F1}: NameServer = 84.103.237.144 86.64.145.144O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXEO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: Firewall service (FWSvc) - WinSoftware, Ltd. - C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exeO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exeO23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeO23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

eli39 · Answer

pour ewido je ne peut pas voir le rapport mais detectent 29 menaces

eli39 · Answer

------ ewido anti-malware - Rapport des processus--------------------------------------------------------- + Créé le:		15:38:31, 2006-05-15 + Somme de contrôle:	B2DAF3E1       0: System Process       4: System Process     248: C:\WINDOWS\system32undll32.exe     268: C:\WINDOWS\system32\ctfmon.exe     272: C:\Program Files\Norton AntiVirus
avapsvc.exe     284: C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe     340: C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe     468: C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe     528: \SystemRoot\System32\smss.exe     620: \??\C:\WINDOWS\system32\csrss.exe     644: \??\C:\WINDOWS\system32\winlogon.exe     688: C:\WINDOWS\system32\services.exe     700: C:\WINDOWS\system32\lsass.exe     808: C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe     852: C:\WINDOWS\system32\svchost.exe     908: C:\WINDOWS\system32\svchost.exe     988: C:\WINDOWS\System32\svchost.exe    1040: C:\WINDOWS\System32\svchost.exe    1096: C:\WINDOWS\System32\svchost.exe    1316: C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe    1332: C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe    1412: C:\WINDOWS\system32\wdfmgr.exe    1420: C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe    1548: C:\WINDOWS\system32\spoolsv.exe    1640: C:\WINDOWS\System32\svchost.exe    1680: C:\WINDOWS\system32\NOTEPAD.EXE    1804: C:\WINDOWS\Explorer.EXE    1864: C:\WINDOWS\htpatch.exe    1888: C:\Program Files\QuickTime\qttask.exe    1900: C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe    1920: C:\WINDOWS\system32\drivers\CDAC11BA.EXE    1972: C:\WINDOWS\system32\svchost.exe    2004: C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe    2008: C:\Program Files\Friendly Technologies\BroadbandAccess\fts.exe    2452: C:\WINDOWS\System32\alg.exe    2636: C:\Program Files\Internet Explorer\iexplore.exe    2772: C:\Program Files\ewido anti-malware\securitysuite.exe    2796: C:\WINDOWS\system32\NOTEPAD.EXE    2844: C:\WINDOWS\system32\NOTEPAD.EXE    3028: C:\Program Files\ewido anti-malware\ewidoctrl.exe    3636: C:\Program Files\ewido anti-malware\ewidoguard.exe

eli39 · Answer

BitDefender Online Scanner	 	 Scan report generated at: Mon, May 15, 2006 - 15:55:48 	 	 Scan path: C:\;D:\;E:\;	 	  	 	 StatisticsBitDefender Online Scanner	 	 Scan report generated at: Mon, May 15, 2006 - 15:55:48 	 	 Scan path: C:\;D:\;E:\;	 	  	 	 StatisticsTime	00:53:52Files	268923Folders	3131Boot Sectors	2Archives	2289Packed Files	31605	 	 ResultsIdentified Viruses	3Infected Files	14Suspect Files	0Warnings	0Disinfected	0Deleted Files	18	 	 Engines InfoVirus Definitions	386864Engine build	AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)Scan plugins	13Archive plugins	40Unpack plugins	4E-mail plugins	6System plugins	1	 	 Scan SettingsFirst Action	DisinfectSecond Action	DeleteHeuristics	YesEnable Warnings	YesScanned Extensions	*;Exclude Extensions	 Scan Emails	YesScan Archives	YesScan Packed	YesScan Files	YesScan Boot	Yes	 	  Scanned File	 StatusC:\Program Files\Norton AntiVirus\Quarantine\1039480E.dll=>(Quarantine-2)	Infected with: Trojan.Dialer.PCC:\Program Files\Norton AntiVirus\Quarantine\1039480E.dll=>(Quarantine-2)	Disinfection failedC:\Program Files\Norton AntiVirus\Quarantine\1039480E.dll=>(Quarantine-2)	DeletedC:\Program Files\Norton AntiVirus\Quarantine\103C720A.dll=>(Quarantine-2)	Infected with: Trojan.Dialer.PCC:\Program Files\Norton AntiVirus\Quarantine\103C720A.dll=>(Quarantine-2)	Disinfection failedC:\Program Files\Norton AntiVirus\Quarantine\103C720A.dll=>(Quarantine-2)	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP550\A0238294.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP550\A0238294.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP550\A0238294.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239324.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239324.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239324.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239333.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239333.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239333.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP553\A0239352.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP553\A0239352.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP553\A0239352.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP555\A0239384.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP555\A0239384.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP555\A0239384.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250607.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250607.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250607.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250608.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250608.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250608.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286997.dll=>(Quarantine-2)	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286997.dll=>(Quarantine-2)	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286997.dll=>(Quarantine-2)	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286998.dll=>(Quarantine-2)	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286998.dll=>(Quarantine-2)	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286998.dll=>(Quarantine-2)	DeletedC:\WinAntiVirus Pro 2006\Quarantine\svcsysnet32_FR_XP[1].cabqhkrrixe=>svcsysnet32.dll	Infected with: Trojan.Dialer.Egroup.QC:\WinAntiVirus Pro 2006\Quarantine\svcsysnet32_FR_XP[1].cabqhkrrixe=>svcsysnet32.dll	Disinfection failedC:\WinAntiVirus Pro 2006\Quarantine\svcsysnet32_FR_XP[1].cabqhkrrixe=>svcsysnet32.dll	DeletedC:\WinAntiVirus Pro 2006\Quarantine\svcsysnet32_FR_XP[1].cabqhkrrixe	Update failedC:\WINDOWS\eg_auth_1049.dll	Infected with: Trojan.P2e.AOC:\WINDOWS\eg_auth_1049.dll	Disinfection failedC:\WINDOWS\eg_auth_1049.dll	DeletedC:\WINDOWS\system32\egaccess4_1059.dll	Infected with: Trojan.Dialer.PCC:\WINDOWS\system32\egaccess4_1059.dll	Disinfection failedC:\WINDOWS\system32\egaccess4_1059.dll	Deleted	  	 	  	 	  Time	00:53:52Files	268923Folders	3131Boot Sectors	2Archives	2289Packed Files	31605	 	 ResultsIdentified Viruses	3Infected Files	14Suspect Files	0Warnings	0Disinfected	0Deleted Files	18	 	 Engines InfoVirus Definitions	386864Engine build	AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)Scan plugins	13Archive plugins	40Unpack plugins	4E-mail plugins	6System plugins	1	 	 Scan SettingsFirst Action	DisinfectSecond Action	DeleteHeuristics	YesEnable Warnings	YesScanned Extensions	*;Exclude Extensions	 Scan Emails	YesScan Archives	YesScan Packed	YesScan Files	YesScan Boot	Yes	 	  Scanned File	 StatusC:\Program Files\Norton AntiVirus\Quarantine\1039480E.dll=>(Quarantine-2)	Infected with: Trojan.Dialer.PCC:\Program Files\Norton AntiVirus\Quarantine\1039480E.dll=>(Quarantine-2)	Disinfection failedC:\Program Files\Norton AntiVirus\Quarantine\1039480E.dll=>(Quarantine-2)	DeletedC:\Program Files\Norton AntiVirus\Quarantine\103C720A.dll=>(Quarantine-2)	Infected with: Trojan.Dialer.PCC:\Program Files\Norton AntiVirus\Quarantine\103C720A.dll=>(Quarantine-2)	Disinfection failedC:\Program Files\Norton AntiVirus\Quarantine\103C720A.dll=>(Quarantine-2)	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP550\A0238294.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP550\A0238294.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP550\A0238294.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239324.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239324.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239324.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239333.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239333.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP552\A0239333.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP553\A0239352.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP553\A0239352.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP553\A0239352.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP555\A0239384.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP555\A0239384.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP555\A0239384.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250607.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250607.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250607.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250608.dll	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250608.dll	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP578\A0250608.dll	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286997.dll=>(Quarantine-2)	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286997.dll=>(Quarantine-2)	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286997.dll=>(Quarantine-2)	DeletedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286998.dll=>(Quarantine-2)	Infected with: Trojan.Dialer.PCC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286998.dll=>(Quarantine-2)	Disinfection failedC:\System Volume Information\_restore{B111870D-0EF3-4C46-BEF9-52FD6617C564}\RP654\A0286998.dll=>(Quarantine-2)	DeletedC:\WinAntiVirus Pro 2006\Quarantine\svcsysnet32_FR_XP[1].cabqhkrrixe=>svcsysnet32.dll	Infected with: Trojan.Dialer.Egroup.QC:\WinAntiVirus Pro 2006\Quarantine\svcsysnet32_FR_XP[1].cabqhkrrixe=>svcsysnet32.dll	Disinfection failedC:\WinAntiVirus Pro 2006\Quarantine\svcsysnet32_FR_XP[1].cabqhkrrixe=>svcsysnet32.dll	DeletedC:\WinAntiVirus Pro 2006\Quarantine\svcsysnet32_FR_XP[1].cabqhkrrixe	Update failedC:\WINDOWS\eg_auth_1049.dll	Infected with: Trojan.P2e.AOC:\WINDOWS\eg_auth_1049.dll	Disinfection failedC:\WINDOWS\eg_auth_1049.dll	DeletedC:\WINDOWS\system32\egaccess4_1059.dll	Infected with: Trojan.Dialer.PCC:\WINDOWS\system32\egaccess4_1059.dll	Disinfection failedC:\WINDOWS\system32\egaccess4_1059.dll	Deleted

BmV · Answer

Salut.Merci de continuer là => infectes par de nombreux virus  et uniquement là !Multiplier les messages sur le même sujet n'apporte rien.

[virus] trojan.wintrim.bh et trojan.dialer.eg

6 réponses

Discussions similaires