virus iworm svp aide / analyse hijack Fermé

Question

Logfile of HijackThis v1.99.1Scan saved at 18:03:13, on 21/06/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Norton AntiVirus
avapsvc.exeC:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXEC:\Program Files\Spyware Doctor\sdhelp.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\wdfmgr.exeC:\WINDOWS\system32\MsPMSPSv.exeC:\WINDOWS\System32\alg.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\RunDLL32.exeC:\WINDOWS\system32undll32.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\Java\j2re1.4.2_06\bin\jusched.exeC:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exeC:\WINDOWS\System32\ELAN.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\Ahead\InCD\InCD.exeC:\Program Files\HPQ\Quick Launch Buttons\EabServr.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Apoint2K\Apoint.exeC:\WINDOWS\AGRSMMSG.exeC:\Program Files\Creative\Shared Files\CamTray.exeC:\Program Files\WinZip\WZQKPICK.EXEC:\Program Files\Apoint2K\Apntex.exeC:\Program Files\Outlook Express\msimn.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\HIJACKTHIS VF\hijackthis vf.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ch/?gws_rd=sslR1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.comR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://internet.sunrise.ch/de/hom/default.aspR1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.comR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by sunrise freesurfR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - Default URLSearchHook is missingO2 - BHO: (no name) - {02889306-3C6D-4049-B636-9139437E2A6C} - C:\WINDOWS\system32\ddcyx.dll (file missing)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\SPYBOT~1\SDHelper.dllO2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2	ools\iesdsg.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2	ools\iesdpb.dllO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [VF0070 STISvc] RunDLL32.exe V0070Pin.dll,RunDLL32EP 513O4 - HKLM\..\Run: [AME_CSA] rundll32 amecsa.cpl,RUN_DLLO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXEO4 - HKLM\..\Run: [zierd32] C:\WINDOWS\System32\kolder.exe C:\WINDOWS\System32\dirote.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exeO4 - HKLM\..\Run: [spzoolxkxd] C:\WINDOWS\System32\lklz\f1ght.exe C:\WINDOWS\System32\lklz\dirote.exeO4 - HKLM\..\Run: [spoolxkxd] C:\WINDOWS\System32\bids\f1ght.exe C:\WINDOWS\System32\bids\dirote.exeO4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"O4 - HKLM\..\Run: [RemoveElanIcon] C:\WINDOWS\System32\ELAN.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXEO4 - HKLM\..\Run: [OSS] c:\windows\system32k.exe -bootO4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -sO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [Microsofts Updates] wuamgrd.exeO4 - HKLM\..\Run: [Microsoft Update Time] wuam.exeO4 - HKLM\..\Run: [Microsoft Update Machine] b0tsz.exeO4 - HKLM\..\Run: [Microsoft Update] winsyst.exeO4 - HKLM\..\Run: [Microsoft DirectX] PDSched.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exeO4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /StartO4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXEO4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [$WindowsRegKey%update] IEXPLORE.EXEO4 - HKLM\..\RunServices: [$WindowsRegKey%update] IEXPLORE.EXEO4 - HKLM\..\RunServices: [Microsoft Update Machine] b0tsz.exeO4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files\Creative\Shared Files\CamTray.exe"O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [Awss] C:\Documents and Settings\Laurent Gros\Application Data\ueoc.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXEO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin
pjpi142_06.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin
pjpi142_06.dllO9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2	ools\iesdpb.dllO9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO14 - IERESET.INF: START_PAGE_URL=http://internet.sunrise.ch/de/hom/default.aspO15 - Trusted Zone: http://*.windowsupdate.comO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cabO16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cabO16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - https://www.cult3d.com/O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{B24127A2-DC33-4365-868D-B074188589D6}: NameServer = 194.230.1.71 194.230.1.39O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O20 - AppInit_DLLs:  C:\WINDOWS\system32\dexplore.dllO20 - Winlogon Notify: ddcyx - C:\WINDOWS\system32\ddcyx.dll (file missing)O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dllO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exeO23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXEO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

^^Marie^^ · Answer

SALUT,Cela ne m'étonne pas qu'on ne te réponde  pas...MM pas foutu de dire bonjour et d'expliquer le pourquoi et le comment de ton blème !!!!!!!!C'est exaspérant quand mm.......enfin breffff......Vu tous les blèmes que tu as je te conseillerai quand mm de lire d'abord ici :  https://sebsauvage.net/safehex.htmlENSUITE :Smitfraudfix 1°/ - Télécharge le logiciel SmitfraudFix ((crée par S!Ri J) http://siri.urz.free.fr/Fix/SmitfraudFix.zip et décompresse le. - Ouvre le dossier "SmitfraudFix" qui sera apparu, double clic sur "Smitfraudfix.cmd", choisis l’option 1, un log va être généré… Tutorial imagée à lire : http://siri.urz.free.fr/Fix/SmitfraudFix.php Copie-COLLE ce dernier dans un message sur le forum.  ENSUITE2°/ - Démarre en mode sans échec : Pour cela, tu tapotes la touche F8 dès le début de l’allumage du PC sans t’arrêter Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape ‘Entrée’ sur ton clavier. Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres, c’est normal ! (Si F8 ne marche pas utilise la touche F5). 3°/ - Relance le programme Smitfraud, Cette fois choisit l’option 2, répond OUI à tout ; Sauvegarde le rapport, redémarre en mode normal,Copie-COLLE le rapport sauvegardé sur le forum.et tu refais un HitjackthisA++

laurentgros · Answer

merci.sorry pour le bonjour. en fait j'ai déjà posté qqchose avant mais sans grand succès. je vais suivre tes instructions. je te remercie infiniment car je suis désespéré.CordialementLaurent

^^Marie^^ · Answer

re,Ce n'est pas parceque tu postes plusieurs fois que cela ira plus vite.Le forum est muni de bénévoles........Entre les exams, l Foot, et le reste;.........laurentgrosDonc, patience.....A++

laurentgros · Answer

ok. écoute j'ai un autre rapport si jamais. j'ai pas mal surfer surle site aujourd'hui pour voir les problèmes les problèmes similaires, sur symantec aussi et d'autres ateliers mais je n'ai pas trouver de solution on va dire clé en main... cela dit,voilà un autre rapport dont tu es peut-être familière. A te lire.ewido anti-spyware - Scan Report--------------------------------------------------------- + Created at:	20:27:39 21/06/2006 + Scan result:	C:\Documents and Settings\USer\Local Settings\Temporary Internet Files\Content.IE5\3I34JWP2\bbi8025[1].exe -> Adware.BargainBuddy : Cleaned with backup (quarantined).C:\Program Files\MediaLoads\v1\ML.exe -> Adware.DownloadWare : Cleaned with backup (quarantined).C:\Documents and Settings\USer\Local Settings\Temporary Internet Files\Content.IE5\2G4TM7B6\Installer[1].exe -> Adware.Look2Me : Cleaned with backup (quarantined).C:\System Volume Information\_restore{A28DC83C-5438-45BF-B23E-1D583ADF0879}\RP1\A0000259.exe -> Adware.MediaTickets : Cleaned with backup (quarantined).C:\WINDOWS\NDNuninstall6_38.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).C:\WINDOWS\NDNuninstall6_90.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).C:\WINDOWS\NDNuninstall6_98.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).C:\WINDOWS\NDNuninstall7_14.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).C:\WINDOWS\NDNuninstall7_22.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).C:\System Volume Information\_restore{A28DC83C-5438-45BF-B23E-1D583ADF0879}\RP1\A0000256.exe -> Adware.PurityScan : Cleaned with backup (quarantined).C:\System Volume Information\_restore{A28DC83C-5438-45BF-B23E-1D583ADF0879}\RP1\A0000258.EXE -> Adware.PurityScan : Cleaned with backup (quarantined).C:\System Volume Information\_restore{A28DC83C-5438-45BF-B23E-1D583ADF0879}\RP1\A0004525.dll -> Adware.PurityScan : Cleaned with backup (quarantined).C:\WINDOWS\system32\__delete_on_reboot__d_e_x_p_l_o_r_e_._d_l_l_ -> Adware.PurityScan : Cleaned with backup (quarantined).[1012] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1176] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1196] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1272] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1316] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1360] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1448] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1480] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1524] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1560] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1664] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1668] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1808] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1824] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[1980] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2072] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[208] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2176] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[236] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2392] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2416] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2664] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2808] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2832] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2840] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2868] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2900] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[2948] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[3004] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[3028] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[3128] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[3344] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[3396] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[3420] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[3496] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[3544] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[4088] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[424] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[492] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[524] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[540] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[604] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[660] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[704] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[876] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[924] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[936] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.[988] C:\WINDOWS\system32\dexplore.dll -> Adware.PurityScan : Error during cleaning.C:\Documents and Settings\USer\Menu Démarrer\Programmes\ClockSync -> Adware.WhenU : Cleaned with backup (quarantined).C:\WINDOWS\system32\TFTP4348 -> Backdoor.Rbot : Cleaned with backup (quarantined).C:\System Volume Information\_restore{A28DC83C-5438-45BF-B23E-1D583ADF0879}\RP1\A0000007.exe -> Dialer.Agent.d : Cleaned with backup (quarantined).C:\Documents and Settings\USer\Cookies\user@com[2].txt -> TrackingCookie.Com : Cleaned.C:\Documents and Settings\Laurent Gros\Cookies\laurent gros@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned.C:\Documents and Settings\Laurent Gros\Cookies\laurent gros@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.C:\WINDOWS\system32\1024 -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld4767.tmp -> Trojan.Small : Cleaned with backup (quarantined).::Report end

Virus iworm svp aide / analyse hijack

4 réponses

Discussions similaires