Virus

Bonjour,


Je viens a vous pour m'aider à réparer mon pc infecté depuis peu. voici l'analyse avec Roguekiller par tigzy. Merci d'avance de vos réponses.


RogueKiller V6.1.10 [18/11/2011] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html
Blog: http://tigzyrk.blogspot.com
Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Mode: Suppression -- Date : 24/11/2011 17:30:16

¤¤¤ Processus malicieux: 2 ¤¤¤
[WINDOW : System Fix] UfVQTl4RY3kSyJ.exe -- C:\Documents and Settings\All Users\Application Data\UfVQTl4RY3kSyJ.exe -> KILLED [TermProc]
[SUSP PATH] rKxvcCJKbICCWeF.exe -- C:\Documents and Settings\All Users\Application Data\rKxvcCJKbICCWeF.exe -> KILLED [TermProc]

¤¤¤ Entrees de registre: 11 ¤¤¤
[SUSP PATH] HKLM\[...]\Run : rKxvcCJKbICCWeF.exe (C:\Documents and Settings\All Users\Application Data\rKxvcCJKbICCWeF.exe) -> DELETED
[HJPOL] HKCU\[...]\System : DisableTaskMgr (1) -> DELETED
[HJPOL] HKLM\[...]\System : DisableTaskMgr (1) -> DELETED
[HJPOL] HKCU\[...]\Explorer : NoDesktop (1) -> DELETED
[HJ] HKCU\[...]\Internet Settings : WarnOnHTTPSToHTTPRedirect (0) -> REPLACED (1)
[HJ] HKLM\[...]\Security Center : AntiVirusDisableNotify (1) -> REPLACED (0)
[HJ] HKLM\[...]\Security Center : FirewallDisableNotify (1) -> REPLACED (0)
[WallPP] HKCU\[...]\Desktop : Wallpaper () -> REPLACED (C:\Documents and Settings\xxxxx\Local Settings\Application Data\Microsoft\Wallpaper1.bmp)
[HJ] HKCU\[...]\Advanced : Start_ShowMyComputer (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowSearch (0) -> REPLACED (1)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤
SSDT[45] : NtCreatePagingFile @ 0x805AB9EE -> HOOKED (d347bus.sys @ 0xF7361A20)
S_SSDT[0] : -> HOOKED ( @ 0x00000000)

¤¤¤ Infection : Rogue.FakeHDD ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost


Termine : << RKreport[1].txt >>
RKreport[1].txt