"Trojan:Win32/Sirefef.O" à l'aide !

Question

Bonjour, 
J'ai remarqué que mon pc fixe avait de gros problème de ram et que j'étais infecté par le virus de redirection des moteurs de recherche, j'ai essayer de corriger le problème avec Windows Defender mais impossible de le supprimer, il m'affiche ce code d'erreur quand je clique sur "Supprimer le fichier infecté" :  
"Erreur rencontrée : 
Code 0x80508017. Certaines actions n'ont pas pu s'appliquer à des éléments potentiellement dangereux. Ces éléments peuvent être stockés dans un emplacement en lecture seule. Supprimez les fichiers ou dossiers contenant les éléments ou, pour plus d'informations sur la suppression des autorisations de lecture seule des fichiers et des dossiers, voir Aide et support." 
Mon problème c'est que je n'arrive pas à le supprimer !  
Windows Defender m'indique ce virus : 
Trojan:Win32/Sirefef.O 

J'ai vu sur des autres sujets, que beaucoup d'Helpers demandés une analyse du systeme grâce à ZHPDiag.  
Je vous poste le rapport ci dessous :  
http://www.cijoint.fr/cjlink.php?file=cj201110/cijxZx8Y1f.txt

J'attend vos réponses.  
Réponses utiles sinon s'abstenir 

Configuration: Windows Vista / Firefox 7.0.1

Malekal_morte- · Answer

Salut,

J'arrive pas à télécharger ton fichier.
T'es en Windows 32 ou 64 bits ?

amaury59 · Answer

Je re-poste le fichier : (Analyse ZHP Diag)  
http://www.cijoint.fr/cjlink.php?file=cj201110/cijxZx8Y1f.txt 

Je suis en 32bits

Malekal_morte- · Answer

Tu peux essayer ces deux programmes dans l'ordre voir ce que ça donne, redémarre après le premier s'il détecte qq chose :
https://forum.malekal.com/viewtopic.php?t=34542&start=

puis : https://www.malekal.com/zeroaccesssirefef-remover/  

Poste les rapports, ensuite.

amaury59 · Answer

Merci beaucoup, je posterais les rapports ce soir en rentrant.
je dois aller au boulot.

amaury59 · Answer

Après avoir telecharger le 1er logiciel 
J'obtien sa :  
Rootkit Remover v0.1 
Mc Afee Labs. 
-=*FOR LIMITED DISTRIBUTION ONLY*=- 

Initializing ... 
Initialization complete! 

Now Scanning... 
    Scan Result -> ZeroAccess Trojan detected!!! 

Now Cleanning 
    The Trojan was cleanned successfully ! 
   Please reboot immediately to complete the cleanning 

Press any key to exit. 

Et après avoir redemarrer mon PC, Windows Defender me signale toujours la présence du Trojan ..

et le 2eme logiciel, j'obtien sa : 
Webroot ZeroAccess Remover
Copyright(c) 2011 Webroot
    www.webroot.com

This program will scan and remove any form of ZeroAccess Rootkit.
Would you like to perform a System Scan? [Y/N] Y
Check rootkit device: Found!
System Disk class driver state: Infected!!!
Current analysis path: C:\Windows\system32\Drivers\
Check file "1394bus.sys"...  Clean!
Check file "acpi.sys"...  Clean!
Check file "adp94xx.sys"...  Clean!
Check file "adpahci.sys"...  Clean!
Check file "adpu160m.sys"...  Clean!
Check file "adpu320.sys"...  Clean!
Check file "afd.sys"...  Clean!
Check file "AGP440.sys"...  Clean!
Check file "aliide.sys"...  Clean!
Check file "AMDAGP.SYS"...  Clean!
Check file "amdide.sys"...  Clean!
Check file "amdk7.sys"...  Clean!
Check file "amdk8.sys"...  Clean!
Check file "arc.sys"...  Clean!
Check file "arcsas.sys"...  Clean!
Check file "asyncmac.sys"...  Clean!
Check file "atapi.sys"...  Clean!
Check file "ataport.sys"...  Clean!
Check file "battc.sys"...  Clean!
Check file "bdasup.sys"...  Clean!
Check file "beep.sys"...  Clean!
Check file "blbdrive.sys"...  Clean!
Check file "bowser.sys"...  Clean!
Check file "BrFiltLo.sys"...  Clean!
Check file "BrFiltUp.sys"...  Clean!
Check file "bridge.sys"...  Clean!
Check file "BrSerId.sys"...  Clean!
Check file "BrSerWdm.sys"...  Clean!
Check file "BrUsbMdm.sys"...  Clean!
Check file "BrUsbSer.sys"...  Clean!
Check file "bthmodem.sys"...  Clean!
Check file "cdfs.sys"...  Clean!
Check file "cdrom.sys"...  Clean!
Check file "circlass.sys"...  Clean!
Check file "Classpnp.sys"...  Clean!
Check file "CmBatt.sys"...  Clean!
Check file "cmdide.sys"...  Clean!
Check file "compbatt.sys"...  Clean!
Check file "crashdmp.sys"...  Clean!
Check file "crcdisk.sys"...  Clean!
Check file "crusoe.sys"...  Clean!
Check file "dfsc.sys"...  Clean!
Check file "disk.sys"...  Clean!
Check file "Diskdump.sys"...  Clean!
Check file "djsvs.sys"...  Clean!
Check file "drmk.sys"...  Clean!
Check file "drmkaud.sys"...  Clean!
Check file "Dumpata.sys"...  Clean!
Check file "dxapi.sys"...  Clean!
Check file "dxg.sys"...  Clean!
Check file "dxgkrnl.sys"...  Clean!
Check file "E1G60I32.sys"...  Clean!
Check file "ecache.sys"...  Clean!
Check file "elxstor.sys"...  Clean!
Check file "errdev.sys"...  Clean!
Check file "exfat.sys"...  Clean!
Check file "fastfat.sys"...  Clean!
Check file "fdc.sys"...  Clean!
Check file "fileinfo.sys"...  Clean!
Check file "filetrace.sys"...  Clean!
Check file "flpydisk.sys"...  Clean!
Check file "fltMgr.sys"...  Clean!
Check file "fs_rec.sys"...  Clean!
Check file "FWPKCLNT.SYS"...  Clean!
Check file "GAGP30KX.SYS"...  Clean!
Check file "hdaudbus.sys"...  Clean!
Check file "HdAudio.sys"...  Clean!
Check file "hidbth.sys"...  Clean!
Check file "hidclass.sys"...  Clean!
Check file "hidir.sys"...  Clean!
Check file "hidparse.sys"...  Clean!
Check file "hidusb.sys"...  Clean!
Check file "HpCISSs.sys"...  Clean!
Check file "http.sys"...  Clean!
Check file "i2omgmt.sys"...  Clean!
Check file "i2omp.sys"...  Clean!
Check file "i8042prt.sys"...  Clean!
Check file "iaStorV.sys"...  Clean!
Check file "iirsp.sys"...  Clean!
Check file "intelide.sys"...  Clean!
Check file "intelppm.sys"...  Clean!
Check file "ipfltdrv.sys"...  Clean!
Check file "IPMIDrv.sys"...  Clean!
Check file "ipnat.sys"...  Clean!
Check file "irda.sys"...  Clean!
Check file "irenum.sys"...  Clean!
Check file "isapnp.sys"...  Clean!
Check file "iteatapi.sys"...  Clean!
Check file "iteraid.sys"...  Clean!
Check file "kbdclass.sys"...  Clean!
Check file "kbdhid.sys"...  Clean!
Check file "ks.sys"...  Clean!
Check file "ksecdd.sys"...  Clean!
Check file "lltdio.sys"...  Clean!
Check file "lsi_fc.sys"...  Clean!
Check file "lsi_sas.sys"...  Clean!
Check file "lsi_scsi.sys"...  Clean!
Check file "luafv.sys"...  Clean!
Check file "lvcd.sys"...  Clean!
Check file "LVUSBSta.sys"...  Clean!
Check file "mcd.sys"...  Clean!
Check file "megasas.sys"...  Clean!
Check file "MegaSR.sys"...  Clean!
Check file "modem.sys"...  Clean!
Check file "monitor.sys"...  Clean!
Check file "mouclass.sys"...  Clean!
Check file "mouhid.sys"...  Clean!
Check file "mountmgr.sys"...  Clean!
Check file "mpio.sys"...  Clean!
Check file "mpsdrv.sys"...  Clean!
Check file "Mraid35x.sys"...  Clean!
Check file "mrxdav.sys"...  Clean!
Check file "mrxsmb.sys"...  Clean!
Check file "mrxsmb10.sys"...  Clean!
Check file "mrxsmb20.sys"...  Clean!
Check file "msahci.sys"...  Clean!
Check file "msdsm.sys"...  Clean!
Check file "msfs.sys"...  Clean!
Check file "msisadrv.sys"...  Clean!
Check file "msiscsi.sys"...  Clean!
Check file "mskssrv.sys"...  Clean!
Check file "mspclock.sys"...  Clean!
Check file "mspqm.sys"...  Clean!
Check file "msrpc.sys"...  Clean!
Check file "mssmbios.sys"...  Clean!
Check file "mstee.sys"...  Clean!
Check file "mup.sys"...  Clean!
Check file "ndis.sys"...  Clean!
Check file "ndistapi.sys"...  Clean!
Check file "ndisuio.sys"...  Clean!
Check file "ndiswan.sys"...  Clean!
Check file "ndproxy.sys"...  Clean!
Check file "netbios.sys"...  Clean!
Check file "netbt.sys"...  Clean!
Check file "netio.sys"...  Clean!
Check file "netr28.sys"...  Clean!
Check file "netr73.sys"...  Clean!
Check file "nfrd960.sys"...  Clean!
Check file "npfs.sys"...  Clean!
Check file "nsiproxy.sys"...  Clean!
Check file "ntfs.sys"...  Clean!
Check file "NTIDrvr.sys"...  Clean!
Check file "ntrigdigi.sys"...  Clean!
Check file "null.sys"...  Clean!
Check file "nvlddmkm.sys"...  Clean!
Check file "nvraid.sys"...  Clean!
Check file "nvstor.sys"...  Clean!
Check file "NV_AGP.SYS"...  Clean!
Check file "nwifi.sys"...  Clean!
Check file "ohci1394.sys"...  Clean!
Check file "pacer.sys"...  Clean!
Check file "parport.sys"...  Clean!
Check file "partmgr.sys"...  Clean!
Check file "parvdm.sys"...  Clean!
Check file "pci.sys"...  Clean!
Check file "pciide.sys"...  Clean!
Check file "pciidex.sys"...  Clean!
Check file "pcmcia.sys"...  Clean!
Check file "PEAuth.sys"...  Clean!
Check file "portcls.sys"...  Clean!
Check file "processr.sys"...  Clean!
Check file "psdfilter.sys"...  Clean!
Check file "ql2300.sys"...  Clean!
Check file "ql40xx.sys"...  Clean!
Check file "qwavedrv.sys"...  Clean!
Check file "rasacd.sys"...  Clean!
Check file "rasl2tp.sys"...  Clean!
Check file "raspppoe.sys"...  Clean!
Check file "raspptp.sys"...  Clean!
Check file "rassstp.sys"...  Clean!
Check file "rdbss.sys"...  Clean!
Check file "RDPCDD.sys"...  Clean!
Check file "rdpdr.sys"...  Clean!
Check file "RDPENCDD.sys"...  Clean!
Check file "rdpwd.sys"...  Clean!
Check file "rmcast.sys"...  Clean!
Check file "RNDISMP.sys"...  Clean!
Check file "rootmdm.sys"...  Clean!
Check file "rspndr.sys"...  Clean!
Check file "RtHDMIV.sys"...  Clean!
Check file "RTKVHDA.sys"...  Clean!
Check file "RTSTOR.sys"...  Clean!
Check file "sbp2port.sys"...  Clean!
Check file "scsiport.sys"...  Clean!
Check file "secdrv.sys"...  Clean!
Check file "serenum.sys"...  Clean!
Check file "serial.sys"...  Clean!
Check file "sermouse.sys"...  Clean!
Check file "sfdrv01.sys"...  Clean!
Check file "sffdisk.sys"...  Clean!
Check file "sffp_mmc.sys"...  Clean!
Check file "sffp_sd.sys"...  Clean!
Check file "sfhlp02.sys"...  Clean!
Check file "sfloppy.sys"...  Clean!
Check file "sfsync02.sys"...  Clean!
Check file "SISAGP.SYS"...  Clean!
Check file "sisraid2.sys"...  Clean!
Check file "sisraid4.sys"...  Clean!
Check file "smb.sys"...  Clean!
Check file "smclib.sys"...  Clean!
Check file "spldr.sys"...  Clean!
Check file "spsys.sys"...  Clean!
Check file "srv.sys"...  Clean!
Check file "srv2.sys"...  Clean!
Check file "srvnet.sys"...  Clean!
Check file "Storport.sys"...  Clean!
Check file "stream.sys"...  Clean!
Check file "swenum.sys"...  Clean!
Check file "symc8xx.sys"...  Clean!
Check file "sym_hi.sys"...  Clean!
Check file "sym_u3.sys"...  Clean!
Check file "tape.sys"...  Clean!
Check file "tcpip.sys"...  Clean!
Check file "tcpipreg.sys"...  Clean!
Check file "tcusb.sys"...  Clean!
Check file "tdi.sys"...  Clean!
Check file "tdpipe.sys"...  Clean!
Check file "tdtcp.sys"...  Clean!
Check file "tdx.sys"...  Clean!
Check file "termdd.sys"...  Clean!
Check file "tssecsrv.sys"...  Clean!
Check file "TUNMP.SYS"...  Clean!
Check file "tunnel.sys"...  Clean!
Check file "UAGP35.SYS"...  Clean!
Check file "UBHelper.sys"...  Clean!
Check file "udfs.sys"...  Clean!
Check file "ULIAGPKX.SYS"...  Clean!
Check file "uliahci.sys"...  Clean!
Check file "ulsata.sys"...  Clean!
Check file "ulsata2.sys"...  Clean!
Check file "umbus.sys"...  Clean!
Check file "umpass.sys"...  Clean!
Check file "usb8023.sys"...  Clean!
Check file "USBCAMD.sys"...  Clean!
Check file "USBCAMD2.sys"...  Clean!
Check file "usbccgp.sys"...  Clean!
Check file "usbcir.sys"...  Clean!
Check file "usbd.sys"...  Clean!
Check file "usbehci.sys"...  Clean!
Check file "usbfilter.sys"...  Clean!
Check file "usbhub.sys"...  Clean!
Check file "usbohci.sys"...  Clean!
Check file "usbport.sys"...  Clean!
Check file "usbprint.sys"...  Clean!
Check file "usbscan.sys"...  Clean!
Check file "USBSTOR.SYS"...  Clean!
Check file "usbuhci.sys"...  Clean!
Check file "usbvideo.sys"...  Clean!
Check file "vga.sys"...  Clean!
Check file "vgapnp.sys"...  Clean!
Check file "VIAAGP.SYS"...  Clean!
Check file "viac7.sys"...  Clean!
Check file "viaide.sys"...  Clean!
Check file "videoprt.sys"...  Clean!
Check file "volmgr.sys"...  Clean!
Check file "volmgrx.sys"...  Clean!
Check file "volsnap.sys"...  Clean!
Check file "vsmraid.sys"...  Clean!
Check file "wacompen.sys"...  Clean!
Check file "wanarp.sys"...  Clean!
Check file "watchdog.sys"...  Clean!
Check file "wd.sys"...  Clean!
Check file "Wdf01000.sys"...  Clean!
Check file "WdfLdr.sys"...  Clean!
Check file "winbondcir.sys"...  Clean!
Check file "wmiacpi.sys"...  Clean!
Check file "wmilib.sys"...  Clean!
Check file "WpdUsb.sys"...  Clean!
Check file "ws2ifsl.sys"...  Clean!
Check file "WUDFPf.sys"...  Clean!
Check file "WUDFRd.sys"...  Clean!
Check file "yk60x86.sys"...  Clean!

Your system is not infected by ZeroAccess/Max++ Rootkit!

Execution ended.
Press any key to exit...

Bisare au début il me dis que mon Disque Dur est infecté ! Puis à la fin plus rien

Malekal_morte- · Answer

Tu as des redirections lors des recherches Google ?

amaury59 · Answer

Oui j'ai des redirections sur Google ..

Malekal_morte- · Answer

tu as vérifié après le passage des deux fix ?

amaury59 · Answer

J'ai plus de redirection ! Mais Windows Defender m'indique toujours la présence d'un Trojan. Et la le PC viens de s'éteindre avec un écran bleu ..

Malekal_morte- · Answer

OK. Repasse les deux fix et fais ça en plus : Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/  
Mets le à jour, fais un scan rapide, supprime tout et poste le rapport ici.  
!!! Malwarebyte doit être à jour avant de faire le scan !!! 
Supprime bien ce qui est détecté : bouton supprimer sélection.

Histoire de faire tout dans la foulée.
Et si ça passe pas, on fera Combofix mais bon si on peux éviter...

"Trojan:Win32/Sirefef.O" à l'aide !

10 réponses

Votre réponse

Discussions similaires

Newsletters