Problème lsass.exe ? : Arrêt système + Erreu

Résolu
Ferno Messages postés 15 Statut Membre -  
 dasdasd -
Bonjour ,

Quelqu'un peut m'aider svp ?

Voici Mon problème :
Mon ordinateur redémarre
Configuration: Athlon 3000+

27 réponses

  • 1
  • 2
  1. Kristopher Messages postés 3752 Statut Contributeur 106
     
    Bonjour Ferno,

    Pour commencer, rends toi sur cette page :

    virus methode preliminaire de desinfection version fr

    Prends bien le temps de tout lire et n'oublie pas les 3 rapports à la fin ;)

    a+
    0
    1. katiap
       
      j ai un gros probleme avec lsass peu tu m aider
      0
    2. katiap
       
      au secour c est urgent, l infection est imminente
      0
    3. katiap
       
      j ai deja tout fait,j ai meme brancher le disque dur en esclave sur un autre pc la desinfection a ete faite. Quand j ai remis le disque dur dans la machine d origine l erreur lsass.exe reaparait. Mais si je le met dans une autre tour cela fonctionne
      0
    4. katiap Messages postés 1 Date d'inscription   Statut Membre
       
      j ai deja tout fait,j ai meme brancher le disque dur en esclave sur un autre pc la desinfection a ete faite. Quand j ai remis le disque dur dans la machine d origine l erreur lsass.exe reaparait. Mais si je le met dans une autre tour cela fonctionne
      0
  2. Ferno Messages postés 15 Statut Membre
     
    Désolé j'ai pas pu écrire la fin de mon message car justement le compte à rebours qui me pose problème s'est déclenché. Je vais suivre la procédure indiquée et je reposte , merci
    0
  3. aranjuez31 Messages postés 8161 Date d'inscription   Statut Contributeur 354
     
    hello
    avide d'explication........
    ""Mon ordinateur redémarre""
    pcq tu clic sur redémarrer ??
    0
  4. Kristopher Messages postés 3752 Statut Contributeur 106
     
    Re Ferno,

    Arrives-tu à opérer normalement ou veux-tu une astuce pour bloquer le compte à rebours ?
    0
    1. Ferno Messages postés 15 Statut Membre
       
      Ca va car ça me le fait pas tout le temps, sinon oui j'ai lu sur un forum qu'on peut feinter en changeant l'heure... merci
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Ferno Messages postés 15 Statut Membre
     
    Désolé , je m'explique :

    * D'abord j'ai une fenêtre qui s'affiche:

    "lsass.exe Erreur d'application
    L'instruction à "0x000cfac8" emploie l'adresse mémoire "0x90000e98. La mémoire ne peut pas être "read".
    Cliquer sur Ok pour terminer le programme."


    * Puis j'ai ceci :
    " Arrêt du système. Veuillez enregistrer tous les travaux en cours et quitter votre session....Cet arrêt a été initié par AUTORITE NT\SYSTEM
    ....
    Message ... LE processus système " C:\WINDOWS\system32\lsass.exe" s'est terminé de manière inattendue avec le code d'état -2147483641. Le système va s'éteindre et redémarrer."
    0
  7. Ferno Messages postés 15 Statut Membre
     
    Voila le premier rapport :

    ewido anti-spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 14:19:56 07/07/2006

    + Scan result:

    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Menu Démarrer\Programmes\WhenU -> Adware.SaveNow : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Menu Démarrer\Programmes\WhenU\Learn More About WhenU Save.url -> Adware.SaveNow : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Menu Démarrer\Programmes\WhenU\Learn More About WhenU SaveNow.url -> Adware.SaveNow : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Menu Démarrer\Programmes\WhenU\Uninstall.lnk -> Adware.SaveNow : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Menu Démarrer\Programmes\WhenU\WhenU Help Desk.lnk -> Adware.SaveNow : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Menu Démarrer\Programmes\WhenU\WhenU.com Website.url -> Adware.SaveNow : No action taken.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhenUSaveMsg -> Adware.SaveNow : No action taken.
    C:\WINDOWS\system32\mssvcc.exe -> Backdoor.Rbot.aeu : No action taken.
    C:\WINDOWS\system32\hxvzysgciqzm.exe -> Backdoor.Rbot.bbs : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Cookies\fernando@247realmedia[2].txt -> TrackingCookie.247realmedia : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Cookies\fernando@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Cookies\fernando@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Cookies\fernando@estat[1].txt -> TrackingCookie.Estat : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Cookies\fernando@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Cookies\fernando@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : No action taken.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Cookies\fernando@weborama[2].txt -> TrackingCookie.Weborama : No action taken.

    ::Report end
    0
  8. Kristopher Messages postés 3752 Statut Contributeur 106
     
    Oui pas mal, mais tu peux également atermoyer en faisant ceci :

    Cliquez sur le bouton "Démarrer", sélectionnez "Exécuter...", entrez " shutdown -a " puis cliquez "Ok".

    Pour Ewido, ton scan ne sert absolument à rien.

    Dis moi, à quoi ça sert de faire un scan sans désinfecter le PC ?

    No action taken = pas d'action entreprise.

    Refais un scan en profondeur avec Ewido et copie/colle le bon rapport, suivi subséquemment des deux autres.

    a+
    0
  9. aranjuez31 Messages postés 8161 Date d'inscription   Statut Contributeur 354
     
    hello jack

    quel type d action se déclenche qd tu fais
    ""Cliquez sur le bouton "Démarrer", sélectionnez "Exécuter...", entrez " shutdown -a " puis cliquez "Ok" ""

    merci pour ma vieille lanterne
    0
  10. Kristopher Messages postés 3752 Statut Contributeur 106
     
    Hello Paul ;)

    Théoriquement, ça stoppe le compte à rebours et annule le redémarrage automatique.

    Je vais te poster une autre astuce sur un autre poste ;)

    a+
    0
    1. aranjuez31 Messages postés 8161 Date d'inscription   Statut Contributeur 354
       
      ok
      gratias amigo
      0
  11. Ferno Messages postés 15 Statut Membre
     
    Voici le premier rapport , les autres arrivent...
    Merci pour l'aide !

    Logfile of HijackThis v1.99.1
    Scan saved at 14:32:23, on 07/07/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\sstray.exe
    C:\WINDOWS\System32\carpserv.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\WINDOWS\System32\RUNDLL32.EXE
    C:\Program Files\Messenger\MSMSGS.EXE
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\wanmpsvc.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\Program Files\ewido anti-spyware 4.0\ewido.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CARPService] carpserv.exe
    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
    O4 - HKLM\..\Run: [NAV CfgWiz] C:\PROGRA~1\NORTON~1\Cfgwiz.exe /R
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
    O4 - Global Startup: AOL 8.0 Icône AOL.lnk = C:\Program Files\AOL 8.0\aoltray.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
    0
  12. Ferno Messages postés 15 Statut Membre
     
    Et voila le 2eme !

    ---------------------------------------------------------
    ewido anti-spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 14:43:55 07/07/2006

    + Scan result:

    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Cookies\fernando@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.
    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Cookies\fernando@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned.

    ::Report end
    0
  13. Ferno Messages postés 15 Statut Membre
     
    Et, enfin , le dernier , qui est très long.
    Si quelqu'un peut y jeter un oeil ça serait sympa .
    C'est pas urgent mais c'est désaggréable comme problème !
    Merci d'avance...

    BitDefender Online Scanner

    Scan report generated at: Fri, Jul 07, 2006 - 14:47:32

    Scan path: A:\;C:\;D:\;E:\;F:\;G:\;H:\;

    Statistics

    Time
    00:24:03

    Files
    147582

    Folders
    1933

    Boot Sectors
    4

    Archives
    6353

    Packed Files
    11107

    Results

    Identified Viruses
    2

    Infected Files
    220

    Suspect Files
    0

    Warnings
    0

    Disinfected
    0

    Deleted Files
    219

    Engines Info

    Virus Definitions
    406503

    Engine build
    AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

    Scan plugins
    13

    Archive plugins
    39

    Unpack plugins
    5

    E-mail plugins
    6

    System plugins
    1

    Scan Settings

    First Action
    Disinfect

    Second Action
    Delete

    Heuristics
    Yes

    Enable Warnings
    Yes

    Scanned Extensions
    *;

    Exclude Extensions

    Scan Emails
    Yes

    Scan Archives
    Yes

    Scan Packed
    Yes

    Scan Files
    Yes

    Scan Boot
    Yes

    Scanned File
    Status

    C:\Documents and Settings\All Users\Menu Démarrer\PowerDVD.lnk=>C:\Program Files\CyberLink Media Carnival\PowerDVD\PowerDVD.exe
    Infected with: Win32.Sality.E

    C:\Documents and Settings\All Users\Menu Démarrer\PowerDVD.lnk=>C:\Program Files\CyberLink Media Carnival\PowerDVD\PowerDVD.exe
    Disinfection failed

    C:\Documents and Settings\All Users\Menu Démarrer\PowerDVD.lnk=>C:\Program Files\CyberLink Media Carnival\PowerDVD\PowerDVD.exe
    Deleted

    C:\Documents and Settings\All Users\Menu Démarrer\PowerDVD.lnk
    Update failed

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Picture It! Photo Premium 9.lnk=>C:\Program Files\Microsoft Picture It! 9\pi.exe
    Infected with: Win32.Sality.E

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Picture It! Photo Premium 9.lnk=>C:\Program Files\Microsoft Picture It! 9\pi.exe
    Disinfection failed

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Picture It! Photo Premium 9.lnk=>C:\Program Files\Microsoft Picture It! 9\pi.exe
    Deleted

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Picture It! Photo Premium 9.lnk
    Update failed

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\MSN Explorer.lnk=>C:\Program Files\MSN\MSNCoreFiles\msn6.exe
    Infected with: Win32.Sality.E

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\MSN Explorer.lnk=>C:\Program Files\MSN\MSNCoreFiles\msn6.exe
    Disinfection failed

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\MSN Explorer.lnk=>C:\Program Files\MSN\MSNCoreFiles\msn6.exe
    Deleted

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\MSN Explorer.lnk
    Update failed

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Pinnacle Hollywood FX\Easy FX Editor.lnk=>C:\Program Files\Pinnacle\Hollywood FX 4.6\Easy_FX.exe
    Infected with: Win32.Sality.E

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Pinnacle Hollywood FX\Easy FX Editor.lnk=>C:\Program Files\Pinnacle\Hollywood FX 4.6\Easy_FX.exe
    Disinfection failed

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Pinnacle Hollywood FX\Easy FX Editor.lnk=>C:\Program Files\Pinnacle\Hollywood FX 4.6\Easy_FX.exe
    Deleted

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Pinnacle Hollywood FX\Easy FX Editor.lnk
    Update failed

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Real\RealPlayer\Programme de désinstallation de RealPlayer.lnk=>C:\Program Files\Fichiers communs\Real\Update\rnuninst.exe
    Infected with: Win32.Sality.E

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Real\RealPlayer\Programme de désinstallation de RealPlayer.lnk=>C:\Program Files\Fichiers communs\Real\Update\rnuninst.exe
    Disinfection failed

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Real\RealPlayer\Programme de désinstallation de RealPlayer.lnk=>C:\Program Files\Fichiers communs\Real\Update\rnuninst.exe
    Deleted

    C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Real\RealPlayer\Programme de désinstallation de RealPlayer.lnk
    Update failed

    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Local Settings\Temporary Internet Files\Content.IE5\CHSZAJUB\HijackThis[1].exe
    Infected with: Win32.Sality.E

    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Local Settings\Temporary Internet Files\Content.IE5\CHSZAJUB\HijackThis[1].exe
    Disinfection failed

    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Local Settings\Temporary Internet Files\Content.IE5\CHSZAJUB\HijackThis[1].exe
    Deleted

    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Local Settings\Temporary Internet Files\Content.IE5\CHSZAJUB\stng260[1].exe
    Infected with: Win32.Sality.E

    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Local Settings\Temporary Internet Files\Content.IE5\CHSZAJUB\stng260[1].exe
    Disinfection failed

    C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Local Settings\Temporary Internet Files\Content.IE5\CHSZAJUB\stng260[1].exe
    Deleted

    C:\Program Files\ASUS\ASUS Remote Master\Remote Master.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\ASUS Remote Master\Remote Master.exe
    Disinfection failed

    C:\Program Files\ASUS\ASUS Remote Master\Remote Master.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\ArpPair.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\ArpPair.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\ArpPair.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\InstDrv.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\InstDrv.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\InstDrv.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\Launcher.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\Launcher.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\Launcher.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\Mobile.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\Mobile.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\Mobile.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\Remove.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\Remove.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\Remove.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\Resume.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\Resume.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\Resume.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\StMonitor.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\StMonitor.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\StMonitor.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\TShoot.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\TShoot.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\TShoot.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\winFlash.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\winFlash.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\winFlash.exe
    Deleted

    C:\Program Files\ASUS\WLAN Card Utilities\Wireless.exe
    Infected with: Win32.Sality.E

    C:\Program Files\ASUS\WLAN Card Utilities\Wireless.exe
    Disinfection failed

    C:\Program Files\ASUS\WLAN Card Utilities\Wireless.exe
    Deleted

    C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F00\HXFSetup.exe
    Infected with: Win32.Sality.E

    C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F00\HXFSetup.exe
    Disinfection failed

    C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F00\HXFSetup.exe
    Deleted

    C:\Program Files\CyberLink\Common\UpdateIPR.exe
    Infected with: Win32.Sality.E

    C:\Program Files\CyberLink\Common\UpdateIPR.exe
    Disinfection failed

    C:\Program Files\CyberLink\Common\UpdateIPR.exe
    Deleted

    C:\Program Files\CyberLink Media Carnival\PowerDVD\cltest.exe
    Infected with: Win32.Sality.E

    C:\Program Files\CyberLink Media Carnival\PowerDVD\cltest.exe
    Disinfection failed

    C:\Program Files\CyberLink Media Carnival\PowerDVD\cltest.exe
    Deleted

    C:\Program Files\CyberLink Media Carnival\PowerDVD\ddtester.exe
    Infected with: Win32.Sality.E

    C:\Program Files\CyberLink Media Carnival\PowerDVD\ddtester.exe
    Disinfection failed

    C:\Program Files\CyberLink Media Carnival\PowerDVD\ddtester.exe
    Deleted

    C:\Program Files\CyberLink Media Carnival\PowerDVD\dvdrgn.exe
    Infected with: Win32.Sality.E

    C:\Program Files\CyberLink Media Carnival\PowerDVD\dvdrgn.exe
    Disinfection failed

    C:\Program Files\CyberLink Media Carnival\PowerDVD\dvdrgn.exe
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\MSDraw\msdraw.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\MSDraw\msdraw.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\MSDraw\msdraw.exe
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo\OFFPRV10.EXE
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo\OFFPRV10.EXE
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\MSInfo\OFFPRV10.EXE
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\MSSearch\Bin\SrchAdmStp.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\MSSearch\Bin\SrchAdmStp.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\MSSearch\Bin\SrchAdmStp.exe
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\Office10\MSOICONS.EXE
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\Office10\MSOICONS.EXE
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\Office10\MSOICONS.EXE
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\Picture It!\ImprtWiz.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\Picture It!\ImprtWiz.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\Picture It!\ImprtWiz.exe
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2004\ENCCA.EXE
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2004\ENCCA.EXE
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2004\ENCCA.EXE
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\piolch.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\piolch.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\Shoebox\piolch.exe
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\WordArt\Wrdart32.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\WordArt\Wrdart32.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\WordArt\Wrdart32.exe
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkscal.exe
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    Deleted

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUpdat2.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUpdat2.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUpdat2.exe
    Deleted

    C:\Program Files\Fichiers communs\Real\Update\upgrdhlp.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Fichiers communs\Real\Update\upgrdhlp.exe
    Disinfection failed

    C:\Program Files\Fichiers communs\Real\Update\upgrdhlp.exe
    Deleted

    C:\Program Files\Microsoft Office\Office10\MCDLC.EXE
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Office\Office10\MCDLC.EXE
    Disinfection failed

    C:\Program Files\Microsoft Office\Office10\MCDLC.EXE
    Deleted

    C:\Program Files\Microsoft Picture It! 9\pip.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Picture It! 9\pip.exe
    Disinfection failed

    C:\Program Files\Microsoft Picture It! 9\pip.exe
    Deleted

    C:\Program Files\Microsoft Works\MsWorks.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\MsWorks.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\MsWorks.exe
    Deleted

    C:\Program Files\Microsoft Works\WkDStore.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\WkDStore.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\WkDStore.exe
    Deleted

    C:\Program Files\Microsoft Works\wkgdcach.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\wkgdcach.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\wkgdcach.exe
    Deleted

    C:\Program Files\Microsoft Works\wklnckml.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\wklnckml.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\wklnckml.exe
    Deleted

    C:\Program Files\Microsoft Works\wkpdfsnf.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\wkpdfsnf.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\wkpdfsnf.exe
    Deleted

    C:\Program Files\Microsoft Works\wkplmstp.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\wkplmstp.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\wkplmstp.exe
    Deleted

    C:\Program Files\Microsoft Works\wksab.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\wksab.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\wksab.exe
    Deleted

    C:\Program Files\Microsoft Works\wksdb.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\wksdb.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\wksdb.exe
    Deleted

    C:\Program Files\Microsoft Works\wkssb.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\wkssb.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\wkssb.exe
    Deleted

    C:\Program Files\Microsoft Works\wksss.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\wksss.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\wksss.exe
    Deleted

    C:\Program Files\Microsoft Works\WksWP.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\WksWP.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\WksWP.exe
    Deleted

    C:\Program Files\Microsoft Works\wkwcestp.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\wkwcestp.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\wkwcestp.exe
    Deleted

    C:\Program Files\Microsoft Works\WkWdStub.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works\WkWdStub.exe
    Disinfection failed

    C:\Program Files\Microsoft Works\WkWdStub.exe
    Deleted

    C:\Program Files\Microsoft Works Suite 2004\Setup\launcher.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works Suite 2004\Setup\launcher.exe
    Disinfection failed

    C:\Program Files\Microsoft Works Suite 2004\Setup\launcher.exe
    Deleted

    C:\Program Files\Microsoft Works Suite 2004\Setup\setups.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works Suite 2004\Setup\setups.exe
    Disinfection failed

    C:\Program Files\Microsoft Works Suite 2004\Setup\setups.exe
    Deleted

    C:\Program Files\Microsoft Works Suite 2004\Setup\unregwtr.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Microsoft Works Suite 2004\Setup\unregwtr.exe
    Disinfection failed

    C:\Program Files\Microsoft Works Suite 2004\Setup\unregwtr.exe
    Deleted

    C:\Program Files\Mozilla Thunderbird\extensions\talkback@mozilla.org\components\talkback.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Mozilla Thunderbird\extensions\talkback@mozilla.org\components\talkback.exe
    Disinfection failed

    C:\Program Files\Mozilla Thunderbird\extensions\talkback@mozilla.org\components\talkback.exe
    Deleted

    C:\Program Files\Mozilla Thunderbird\regxpcom.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Mozilla Thunderbird\regxpcom.exe
    Disinfection failed

    C:\Program Files\Mozilla Thunderbird\regxpcom.exe
    Deleted

    C:\Program Files\Mozilla Thunderbird\thunderbird.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Mozilla Thunderbird\thunderbird.exe
    Disinfection failed

    C:\Program Files\Mozilla Thunderbird\thunderbird.exe
    Deleted

    C:\Program Files\Mozilla Thunderbird\uninstall\uninstall.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Mozilla Thunderbird\uninstall\uninstall.exe
    Disinfection failed

    C:\Program Files\Mozilla Thunderbird\uninstall\uninstall.exe
    Deleted

    C:\Program Files\Mozilla Thunderbird\updater.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Mozilla Thunderbird\updater.exe
    Disinfection failed

    C:\Program Files\Mozilla Thunderbird\updater.exe
    Deleted

    C:\Program Files\MSN\MSNCoreFiles\copymar.exe
    Infected with: Win32.Sality.E

    C:\Program Files\MSN\MSNCoreFiles\copymar.exe
    Disinfection failed

    C:\Program Files\MSN\MSNCoreFiles\copymar.exe
    Deleted

    C:\Program Files\MSN\MSNCoreFiles\Setup\msnunin.exe
    Infected with: Win32.Sality.E

    C:\Program Files\MSN\MSNCoreFiles\Setup\msnunin.exe
    Disinfection failed

    C:\Program Files\MSN\MSNCoreFiles\Setup\msnunin.exe
    Deleted

    C:\Program Files\MSN\MSNCoreFiles\update.exe
    Infected with: Win32.Sality.E

    C:\Program Files\MSN\MSNCoreFiles\update.exe
    Disinfection failed

    C:\Program Files\MSN\MSNCoreFiles\update.exe
    Deleted

    C:\Program Files\Norton AntiVirus\NAVAPW32.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Norton AntiVirus\NAVAPW32.exe
    Disinfection failed

    C:\Program Files\Norton AntiVirus\NAVAPW32.exe
    Deleted

    C:\Program Files\Pinnacle\Hollywood FX 4.6\InstallHFZ.exe
    Infected with: Win32.Sality.E

    C:\Program Files\Pinnacle\Hollywood FX 4.6\InstallHFZ.exe
    Disinfection failed

    C:\Program Files\Pinnacle\Hollywood FX 4.6\InstallHFZ.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000416.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000416.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000416.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000426.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000426.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000426.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000427.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000427.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000427.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000432.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000432.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000432.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000433.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000433.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0000433.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0001432.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0001432.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0001432.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0001433.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0001433.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0001433.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0002432.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0002432.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0002432.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0002433.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0002433.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0002433.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003432.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003432.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003432.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003433.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003433.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003433.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003438.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003438.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003438.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003439.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003439.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003439.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003443.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003443.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003443.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003444.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003444.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003444.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003445.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003445.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003445.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003446.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003446.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003446.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003447.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003447.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003447.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003448.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003448.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003448.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003449.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003449.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003449.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003450.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003450.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003450.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003451.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003451.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003451.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003452.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003452.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003452.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003453.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003453.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003453.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003454.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003454.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003454.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003458.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003458.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003458.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003459.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003459.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003459.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003460.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003460.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003460.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003461.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003461.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003461.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003462.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003462.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003462.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003463.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003463.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0003463.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004438.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004438.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004438.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004439.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004439.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004439.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004445.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004445.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004445.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004446.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004446.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0004446.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005445.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005445.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005445.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005446.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005446.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005446.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005450.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005450.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005450.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005451.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005451.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005451.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005457.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005457.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005457.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005458.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005458.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005458.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005459.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005459.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005459.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005460.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005460.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005460.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005461.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005461.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005461.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005462.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005462.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005462.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005463.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005463.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005463.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005464.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005464.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005464.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005465.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005465.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005465.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005466.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005466.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005466.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005467.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005467.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005467.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005468.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005468.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005468.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005472.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005472.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005472.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005473.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005473.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005473.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005474.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005474.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005474.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005475.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005475.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005475.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005476.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005476.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005476.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005477.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005477.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005477.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005497.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005497.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005497.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005498.EXE
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005498.EXE
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005498.EXE
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005499.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005499.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005499.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005502.EXE
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005502.EXE
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005502.EXE
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005503.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005503.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005503.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005504.EXE
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005504.EXE
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005504.EXE
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005505.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005505.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005505.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005506.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005506.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005506.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005508.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005508.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005508.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005509.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005509.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005509.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005510.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005510.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005510.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005511.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005511.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005511.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005512.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005512.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005512.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005514.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005514.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005514.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005591.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005591.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005591.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005592.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005592.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0005592.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006591.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006591.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006591.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006592.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006592.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006592.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006599.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006599.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006599.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006600.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006600.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006600.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006606.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006606.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006606.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006607.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006607.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006607.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006608.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006608.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006608.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006609.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006609.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006609.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006610.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006610.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006610.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006611.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006611.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006611.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006612.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006612.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006612.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006613.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006613.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006613.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006614.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006614.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006614.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006615.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006615.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006615.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006619.dll
    Infected with: Win32.Worm.Sality.A

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006619.dll
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006619.dll
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006620.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006620.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006620.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006627.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006627.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006627.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006628.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006628.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006628.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006629.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006629.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006629.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006630.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006630.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006630.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006631.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006631.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006631.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006632.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006632.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006632.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006633.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006633.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006633.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006634.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006634.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006634.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006635.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006635.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006635.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006636.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006636.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006636.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006637.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006637.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006637.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006638.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006638.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006638.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006642.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006642.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006642.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006643.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006643.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006643.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006644.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006644.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006644.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006645.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006645.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006645.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006646.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006646.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006646.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006647.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006647.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006647.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006667.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006667.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006667.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006668.EXE
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006668.EXE
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006668.EXE
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006669.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006669.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006669.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006672.EXE
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006672.EXE
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006672.EXE
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006673.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006673.exe
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006673.exe
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006674.EXE
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006674.EXE
    Disinfection failed

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006674.EXE
    Deleted

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006675.exe
    Infected with: Win32.Sality.E

    C:\System Volume Information\_restore{A35A0982-26E6-4B42-AF80-9B109E553347}\RP5\A0006675.exe
    Disinfection failed
    0
  14. aranjuez31 Messages postés 8161 Date d'inscription   Statut Contributeur 354
     
    hello
    te rends-tu compte du nbre de merdes que tu avais engrangées ??

    refais-le pour voir s il n en reste pas
    0
  15. Kristopher Messages postés 3752 Statut Contributeur 106
     
    Hey guys

    2 virus... 220 fichiers infectés...

    Pas très mignon Win32.Sality.E :

    http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?ID=53386

    1/ Clique droit sur "Poste de travail" -> "Propriétés" -> onglet "Restauration du système" -> tu coches "Désactiver la Restauration du système sur tous les lecteurs" -> "Appliquer" -> "Oui".

    Ensuite, tu décoches "Désactiver la Restauration du système sur tous les lecteurs" -> "Appliquer" -> "OK".

    2/ Télécharge et nettoie ton PC avec ces deux logiciels :

    CCLEANER https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

    Utilisation : Dans l'onglet "Nettoyeur" cliquez sur "Analyse". Une fois l'analyse terminée, cliquez sur "Lancer le Nettoyage".
    Ensuite, dans l'onglet "Erreurs" cliquez sur "Chercher des erreurs" puis, avant de cliquer sur "Réparer les erreurs sélectionnées" effectuez une sauvegarde de votre registre (comme proposé).

    CleanUp40
    http://pageperso.aol.fr/Balltrap34/CleanUp40.exe
    Démo d’utilisation :
    http://pageperso.aol.fr/balltrap34/democleanup.htm

    3/ - Télécharge le logiciel SmitfraudFix crée par S!Ri :
    http://siri.urz.free.fr/Fix/SmitfraudFix.zip et décompresse le.

    - Ouvre le dossier "SmitfraudFix" qui sera apparu, double clic sur "Smitfraudfix.cmd", choisis l’option 1, un log va être généré…

    Copie et colle le rapport sur le forum.

    On verra la suite après ;)

    a+
    0
  16. Ferno Messages postés 15 Statut Membre
     
    mince c'est grave docteur?
    Je suis la procédure et je poste les rapports ...
    0
  17. Ferno Messages postés 15 Statut Membre
     
    Re, voici le rapport !
    Merci pour la rapidité et la qualité des réponses !

    SmitFraudFix v2.68b

    Rapport fait à 15:33:27,75, 07/07/2006
    Executé à partir de C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Bureau\zip\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» C:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Fernando.NOM-RFS1YUSY4D1\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\FERNAN~1.NOM\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin
    0
  18. Ferno Messages postés 15 Statut Membre
     
    Re, le voici que voila :

    ( Sinon un firewall, jusqu'à ce que je reformate (c'est a dire jusqu'a hier), j'avais celui de Norton Internet Security 2005. C 'est du bon ça ? Car j'hésite à le remplacer par quelque chose de moins lourd, car au démarage ça met des plombes à se mettre en marche ! )

    Logfile of HijackThis v1.99.1
    Scan saved at 18:51:05, on 07/07/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\sstray.exe
    C:\WINDOWS\System32\carpserv.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\WINDOWS\System32\RUNDLL32.EXE
    C:\Program Files\Messenger\MSMSGS.EXE
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\wanmpsvc.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINDOWS\System32\wuauclt.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CARPService] carpserv.exe
    O4 - HKLM\..\Run: [NAV CfgWiz] C:\PROGRA~1\NORTON~1\Cfgwiz.exe /R
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
    0
  19. aranjuez31 Messages postés 8161 Date d'inscription   Statut Contributeur 354
     
    bsr
    Un proverbe CCM dit :
    "L'ami qui te coneille Norton n'est pas un véritable ami""
    0
  20. Ferno Messages postés 15 Statut Membre
     
    Salut,
    alors j'ai installé Avast et ceclui ci me dit que je suis toujours infecté par Win32:Sality-D-DLL, sur le fichier wmimgr32.dll. Avec Avast j'arrive pas à réparer, je peux juste mettre en quarantaine.... mais Avast me signale tout le temps le virus, que dois je faire ?
    0
  • 1
  • 2