Virus BIZAR

rocket73 Messages postés 38 Statut Membre -  
rocket73 Messages postés 38 Statut Membre -
salut a tous , kan je fait une analyse avec counter spy , il trouve des virus bizar nomé eXact.cashback . il me dit kil se trouve dant c:\windows\downloaded program files\stup.inf , aprés je vais en mode sans echec pour le suprimé mais impossible car quand je tape cette aresse dans le poste de travaille sa marque imposible.............comment fair , pui je suprimé les fichier dans downloades programe files sachan que se sont des program active X et java runing?

ps: counterspy marque HKEY_LOCAL_MACHINE\SOFTWARE\microsoft\code store database\distribution units\{0
Configuration: windows xp

1 réponse

  1.
    rocket73 Messages postés 38 Statut Membre
     
    regarder le raport:(

    Infected registry entries detected
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\Contains\Files C:\WINDOWS\Downloaded Program Files\installer_ETE_AX.exe
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation CODEBASE http://download.bullseye-network.com/download/bargain_buddy/cab/installer_ETE_AX.cab
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation INF C:\WINDOWS\Downloaded Program Files\setup.inf
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion 0,0,0,1
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion LastModified Fri, 03 Feb 2006 15:03:10 GMT
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} SystemComponent 0
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} Installer MSICD

    eXact.BargainBuddy Adware (General) more information...
    Details: BargainBuddy is a Browser Helper Object that watches the pages your browser requests and the terms you enter into a search engine web form. If a term matches a preset list of sites or keywords, BargainBuddy will display an ad.
    Status: Quarantined

    Infected registry entries detected
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\Contains\Files C:\WINDOWS\Downloaded Program Files\installer_ETE_AX.exe
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation CODEBASE http://download.bullseye-network.com/download/bargain_buddy/cab/installer_ETE_AX.cab
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation INF C:\WINDOWS\Downloaded Program Files\setup.inf
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion 0,0,0,1
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion LastModified Fri, 03 Feb 2006 15:03:10 GMT
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} SystemComponent 0
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} Installer MSICD
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}\iexplore Type 3
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}\iexplore Count 228
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA}\iexplore Time

    eXact.Downloader Adware Downloader more information...
    Details: eXact.Downloader is a trojan downloader used by eXact Advertising to add components to the company's adware applications.
    Status: Ignored

    Infected registry entries detected
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\Contains\Files C:\WINDOWS\Downloaded Program Files\installer_ETE_AX.exe
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation CODEBASE http://download.bullseye-network.com/download/bargain_buddy/cab/installer_ETE_AX.cab
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation INF C:\WINDOWS\Downloaded Program Files\setup.inf
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion 0,0,0,1
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion LastModified Fri, 03 Feb 2006 15:03:10 GMT
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} SystemComponent 0
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} Installer MSICD

    eXact.BullseyeNetwork Adware (General) more information...
    Details: eXact.BullseyeNetwork displays popup ads.
    Status: Quarantined

    Infected registry entries detected
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\Contains\Files C:\WINDOWS\Downloaded Program Files\installer_ETE_AX.exe
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation CODEBASE http://download.bullseye-network.com/download/bargain_buddy/cab/installer_ETE_AX.cab
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation INF C:\WINDOWS\Downloaded Program Files\setup.inf
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion 0,0,0,1
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion LastModified Fri, 03 Feb 2006 15:03:10 GMT
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} SystemComponent 0
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} Installer MSICD

    eXact.NaviSearch Adware (General) more information...
    Details: Displays popup ads and hijacks Internet Explorers 404 search error page.
    Status: Quarantined

    Infected registry entries detected
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\Contains\Files C:\WINDOWS\Downloaded Program Files\installer_ETE_AX.exe
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation CODEBASE http://download.bullseye-network.com/download/bargain_buddy/cab/installer_ETE_AX.cab
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\DownloadInformation INF C:\WINDOWS\Downloaded Program Files\setup.inf
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion 0,0,0,1
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650}\InstalledVersion LastModified Fri, 03 Feb 2006 15:03:10 GMT
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} SystemComponent 0
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0878B424-1F95-4E26-B5AB-F0D349D89650} Installer MSICD
    0

Discussions similaires

Chrome://newtab
Nova -
snoopy35_ -

14 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
Virus dans filezilla
balnelius10 -
fabul -

9 réponses
impossible de terminer l’opération car virus Win 7
Slipt -
Malekal_morte- -

2 réponses