Sujet Précédent Sujet Suivant

Cywin

estica Messages postés 3 Statut Membre -  
 estica -
Bonjour a tous ,tout d'abord je suis yper novice en informatique et je ne sais pas si je suis dans la bonne rubrique,alors je m'escuse aupres des "admin".
Voici mon probleme chaque fois que j'allume mon ordinateur un message d'erreur s'ouvre avec ceci:
"cywin.exe" information
signature
szAppName
sz AppVer 0.0.0.0
sz ModName:onKnown
szModVer0.0.0.0
offset00000000
info technique
c:document~1thierry\locals~temp\Wer 2D.tmp.dir00\
cywin.exemdmp.
appcomat.txt

Il m'est deja arriver d'avoir l'ecran bleu avec un message d'erreur fatal.
Ps:c'est un ordi que j'ai recuperer chez un amis et je ne sais pas du tout ce qu'il y a a l'interieur.

Je vous remercie d'avance pour me venir en aide.

14 réponses

Réponse 1 / 14
Utilisateur anonyme
 
Salut,

ce PC semble infecté d'un joli virus ;-)
0
Réponse 2 / 14
poupou02 Messages postés 52 Statut Membre 9
 
Bonjour

Ton erreur ne serait plutôt pas cygwin.exe que cywin.exe ?
0
Réponse 3 / 14
estica Messages postés 3 Statut Membre
 
Voila apres avoir lu vos reponse j'ai fait une analyse de mon pc et effectivement il y a un virus qu'il a renomer et il s'agit bien de ""cywin.exe"" et non "cygwin.exe"" apres tout ça le message d'erreur aparais toujours .Merci a vous
0
Réponse 4 / 14
poupou02 Messages postés 52 Statut Membre 9
 
Rebonsoir

Effectivement il s'agir de cywin, il s'agirai plutôt d'un spyware iu d'un
Hijack plus que d'un virus. Pour ça il faut télécharger le logiciel Hijackthis et faire une analyse
le log qui en sortira il faudra le faire analyser sur le forum par quelqu'un de compétent en la matière
Bonne soirée
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 14
Utilisateur anonyme
 
Je confirme un vers ou trojan :-) est non un spyware ^^
0
Réponse 6 / 14
estica
 
Merci pour vos reponse; apres avoir fait ce que vous m'avez demander voila ce qui en resort.

Logfile of HijackThis v1.99.1
Scan saved at 02:43:58, on 24/11/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\AVENGINE.EXE
c:\program files\panda software\panda antivirus + firewall 2007\firewall\PNMSRV.EXE
C:\WINDOWS\System32\Lssass.exe
C:\windows_e57.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\APVXDWIN.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\psimsvc.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
c:\program files\panda software\panda antivirus + firewall 2007\WebProxy.exe
C:\Program Files\Antipub\antipub.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\thierry\Mes documents\telechargement\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3123f068-aad8-4258-a533-308d55243c89} - C:\WINDOWS\system32\cismsg.dll (file missing)
O2 - BHO: (no name) - {3304ABF0-AE08-436D-9172-0DBBFEB1081B} - C:\Program Files\Fichiers communs\hore.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [Windows Network Firewall] C:\WINDOWS\System32\firewall.exe
O4 - HKLM\..\Run: [Microsoft (R) Windows Update Manager] C:\WINDOWS\update\updmgr.exe
O4 - HKLM\..\Run: [Winsockett] udpdtflov.exe
O4 - HKLM\..\Run: [Ms System Config] Mscfg.exe
O4 - HKLM\..\Run: [Managments Service] gvwuwtl.exe
O4 - HKLM\..\Run: [DLL execute] Lssass.exe
O4 - HKLM\..\Run: [windows] C:\\windows_e57.exe
O4 - HKLM\..\Run: [uwa6pcw] "C:\Program Files\WinAntiVirus Pro 2006\uwa6pcw.exe" -c
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [PopUp Destroy] C:\Program Files\PopUp Destroy\Popup-Destroy.exe
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunServices: [Winsockett] udpdtflov.exe
O4 - HKLM\..\RunServices: [Ms System Config] Mscfg.exe
O4 - HKLM\..\RunServices: [Managments Service] gvwuwtl.exe
O4 - HKLM\..\RunServices: [DLL execute] Lssass.exe
O4 - HKLM\..\RunServices: [TPSRV9x] "C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe"
O4 - HKCU\..\Run: [Ms System Config] Mscfg.exe
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DLL execute] Lssass.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunServices: [Ms System Config] Mscfg.exe
O4 - HKCU\..\RunServices: [DLL execute] Lssass.exe
O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {00330010-0000-0000-0000-000020160026} - http://207.234.185.217/installer/ABoxInst_int26.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: dxclib303562752.dll
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O20 - Winlogon Notify: cismsg - cismsg.dll (file missing)
O20 - Winlogon Notify: Nls - C:\WINDOWS\system32\ixlogmsg.dll (file missing)
O23 - Service: Print Spooler Service (ilai4abo65tw) - Unknown owner - c:\windows\cywin.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software International - c:\program files\panda software\panda antivirus + firewall 2007\firewall\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\psimsvc.exe
O23 - Service: Remote TCP Services - Unknown owner - C:\WINDOWS\system32\vcmon.exe (file missing)
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe
O23 - Service: Windows Update Manager (UpdateManager) - Unknown owner - C:\WINDOWS\update\updmgr.exe (file missing)
0
Réponse 7 / 14
Utilisateur anonyme
 
Ton anti-virus fonctionne t-il bien ? est-ce un cracké ?

Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X; la barre anti-popup du SP2 (en haut) va se mettre à clignoter, clic dessus et choisis "accepter l'active X" pour faire fonctionner le scan anti-virus.
Une fois qu'il a terminé colle le rapport ici stp

https://www.bitdefender.com/toolbox/

Telecharge, installe puis mets à jour ce logiciel(Ewido), une fois que c'est fait, fais un scan complet de ton système, supprime (delete) tout ce qu'il te trouve puis colle le rapport ici stp
Ewido: (en Anglais reste gratuit après la période d'essai)
Ewido
Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

0
Réponse 8 / 14
estica
 
Voila le rapport: petite precision je n'est pas sp2 impossible de l'insta ller il me marque toujours manque de composant impossible de poursuivre.
Merci de votre patiente

wido anti-spyware - Scan Report
+ Created at: 15:07:38 24/11/2006
+ Scan result:
C:\Program Files\DeluxeCommunications -> Adware.DeluxeCommunications : No action taken.
C:\Program Files\DeluxeCommunications\bak -> Adware.DeluxeCommunications : No action taken.
HKU\S-1-5-21-1085031214-1708537768-1957994488-1005\Software\Microsoft\Windows\CurrentVersion\Run\\DeluxeCommunications -> Adware.DeluxeCommunications : No action taken.
HKU\.DEFAULT\Software\Effective-i -> Adware.EffectiveBrandToolbar : No action taken.
HKU\.DEFAULT\Software\Effective-i\TheSearchAccelerator -> Adware.EffectiveBrandToolbar : No action taken.
HKU\.DEFAULT\Software\Effective-i\TheSearchAccelerator\IE5 -> Adware.EffectiveBrandToolbar : No action taken.
HKU\S-1-5-18\Software\Effective-i -> Adware.EffectiveBrandToolbar : No action taken.
HKU\S-1-5-18\Software\Effective-i\TheSearchAccelerator -> Adware.EffectiveBrandToolbar : No action taken.
HKU\S-1-5-18\Software\Effective-i\TheSearchAccelerator\IE5 -> Adware.EffectiveBrandToolbar : No action taken.
C:\Installer5.exe -> Adware.Look2Me : No action taken.
C:\warebundlenewer.exe -> Adware.Look2Me : No action taken.
C:\yz02.exe -> Adware.NewDotNet : No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DBTB00001.DBTB00001Deskbar -> Adware.Softomate : No action taken.
C:\WINDOWS\system32\SpOrder.dll -> Adware.WinAntiVirus : No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\vspf -> Adware.WinAntiVirus : No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\vspf\Security -> Adware.WinAntiVirus : No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk -> Adware.WinAntiVirus : No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk\Security -> Adware.WinAntiVirus : No action taken.
C:\nwnmff_e20.exe -> Downloader.Adload.fk : No action taken.
C:\nwnmff_e35.exe -> Downloader.Adload.fk : No action taken.
C:\nwnmff_e37.exe -> Downloader.Adload.fk : No action taken.
C:\nwnmff_e21.exe -> Downloader.Adload.fs : No action taken.
C:\WINDOWS\dov9.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a41.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a42.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a43.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a50.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a51.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a52.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a53.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a54.exe -> Downloader.Adload.fu : No action taken.
C:\kybrdff_e18.exe -> Downloader.Adload.fy : No action taken.
C:\kybrdff_e20.exe -> Downloader.Adload.fy : No action taken.
C:\kybrdff_e34.exe -> Downloader.Adload.fy : No action taken.
C:\kybrdff_e21.exe -> Downloader.Adload.gb : No action taken.
C:\nwnmff_e24.exe -> Downloader.Adload.gg : No action taken.
C:\nwnmff_e26.exe -> Downloader.Adload.go : No action taken.
C:\nwnmff_e34.exe -> Downloader.Adload.hb : No action taken.
C:\kybrdff_e36.exe -> Downloader.Adload.hk : No action taken.
C:\dfndrff_e36.exe -> Downloader.Adload.hl : No action taken.
C:\nwnmff_e36.exe -> Downloader.Adload.hm : No action taken.
C:\kybrdff_e48.exe -> Downloader.Adload.hw : No action taken.
C:\nwnmff_e48.exe -> Downloader.Adload.hw : No action taken.
C:\kybrdff_e45.exe -> Downloader.Adload.hx : No action taken.
C:\nwnmff_e45.exe -> Downloader.Adload.hx : No action taken.
C:\nwnmff_e46.exe -> Downloader.Adload.hy : No action taken.
C:\dfndrff_e52.exe -> Downloader.Adload.ic : No action taken.
C:\kybrdff_e51.exe -> Downloader.Adload.ic : No action taken.
C:\nwnmff_e52.exe -> Downloader.Adload.ic : No action taken.
C:\windows_e51.exe -> Downloader.Adload.id : No action taken.
C:\nwnmff_e51.exe -> Downloader.Adload.if : No action taken.
C:\kybrdff_e55.exe -> Downloader.Adload.ij : No action taken.
C:\radicalev.exe -> Downloader.Small.duf : No action taken.
C:\syndomxx.exe -> Downloader.Small.duf : No action taken.
C:\dollarrev.exe -> Downloader.Small.dxm : No action taken.
C:\WINDOWS\docsys.exe -> Downloader.VB.apw : No action taken.
C:\WINDOWS\volt7.exe -> Downloader.VB.apw : No action taken.
C:\mc44a55.exe -> Downloader.VB.aqc : No action taken.
C:\mc44a56.exe -> Downloader.VB.aqc : No action taken.
C:\mc44a57.exe -> Downloader.VB.aqc : No action taken.
C:\Program Files\MSN Gaming Zone\howy.html -> Hijacker.Small.jf : No action taken.
C:\Program Files\Windows Media Player\kyzeweqe.html -> Hijacker.Small.jf : No action taken.
C:\bak\dfndrff_e41.exe -> Hijacker.VB.kc : No action taken.
C:\Documents and Settings\thierry\Local Settings\Temporary Internet Files\Content.IE5\4TI9K7IB\send_car_int[2].htm -> Not-A-Virus.Exploit.HTML.CodeBaseExec : No action taken.
C:\sxe4.tmp -> Proxy.Ranky : No action taken.
:mozilla.222:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.333:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.205:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.206:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.218:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.376:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.380:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@adbrite[2].txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@banner.casinoking[2].txt -> TrackingCookie.Casinoking : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@casinoking[2].txt -> TrackingCookie.Casinoking : No action taken.
:mozilla.313:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Casinopays : No action taken.
:mozilla.315:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Casinopays : No action taken.
:mozilla.344:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Casinopays : No action taken.
:mozilla.306:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.307:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.308:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.309:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.270:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Estat : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@estat[1].txt -> TrackingCookie.Estat : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@banner.goldenpalace[2].txt -> TrackingCookie.Goldenpalace : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@goldenpalace[2].txt -> TrackingCookie.Goldenpalace : No action taken.
:mozilla.351:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.371:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.372:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.373:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@i12[2].txt -> TrackingCookie.I12 : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@max.i12[1].txt -> TrackingCookie.I12 : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@creative.paypopup[2].txt -> TrackingCookie.Paypopup : No action taken.
:mozilla.219:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Realtracker : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@edge.ru4[1].txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.251:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.207:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Top-banners : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@media.top-banners[1].txt -> TrackingCookie.Top-banners : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@vegasred[1].txt -> TrackingCookie.Vegasred : No action taken.
C:\nwnmff_e27.exe -> Trojan.Agent.tx : No action taken.
C:\Documents and Settings\thierry\Local Settings\Temp\NI.UWA6PV_0001_N91M2107\setup.exe -> Trojan.Fakealert : No action taken.
C:\nwnmff_e32.exe -> Trojan.Pakes : No action taken.

::Report end
0
Réponse 9 / 14
Utilisateur anonyme
 
Salut,

supprime tout, regarde le tutoriel si besoin.

Ton anti-virus est-il cracké ???
Car vu l'etat de ton PC ont se demande !

Pense à Bitdefender aussi ;-)

0
Réponse 10 / 14
estica
 
Voila le rapport wido,petite presicion je n'est pas sp2 impossible a l'instalation:
wido anti-spyware - Scan Report
+ Created at: 15:07:38 24/11/2006
+ Scan result:
C:\Program Files\DeluxeCommunications -> Adware.DeluxeCommunications : No action taken.
C:\Program Files\DeluxeCommunications\bak -> Adware.DeluxeCommunications : No action taken.
HKU\S-1-5-21-1085031214-1708537768-1957994488-1005\Software\Microsoft\Windows\CurrentVersion\Run\\DeluxeCommunications -> Adware.DeluxeCommunications : No action taken.
HKU\.DEFAULT\Software\Effective-i -> Adware.EffectiveBrandToolbar : No action taken.
HKU\.DEFAULT\Software\Effective-i\TheSearchAccelerator -> Adware.EffectiveBrandToolbar : No action taken.
HKU\.DEFAULT\Software\Effective-i\TheSearchAccelerator\IE5 -> Adware.EffectiveBrandToolbar : No action taken.
HKU\S-1-5-18\Software\Effective-i -> Adware.EffectiveBrandToolbar : No action taken.
HKU\S-1-5-18\Software\Effective-i\TheSearchAccelerator -> Adware.EffectiveBrandToolbar : No action taken.
HKU\S-1-5-18\Software\Effective-i\TheSearchAccelerator\IE5 -> Adware.EffectiveBrandToolbar : No action taken.
C:\Installer5.exe -> Adware.Look2Me : No action taken.
C:\warebundlenewer.exe -> Adware.Look2Me : No action taken.
C:\yz02.exe -> Adware.NewDotNet : No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DBTB00001.DBTB00001Deskbar -> Adware.Softomate : No action taken.
C:\WINDOWS\system32\SpOrder.dll -> Adware.WinAntiVirus : No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\vspf -> Adware.WinAntiVirus : No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\vspf\Security -> Adware.WinAntiVirus : No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk -> Adware.WinAntiVirus : No action taken.
HKLM\SYSTEM\CurrentControlSet\Services\vspf_hk\Security -> Adware.WinAntiVirus : No action taken.
C:\nwnmff_e20.exe -> Downloader.Adload.fk : No action taken.
C:\nwnmff_e35.exe -> Downloader.Adload.fk : No action taken.
C:\nwnmff_e37.exe -> Downloader.Adload.fk : No action taken.
C:\nwnmff_e21.exe -> Downloader.Adload.fs : No action taken.
C:\WINDOWS\dov9.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a41.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a42.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a43.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a50.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a51.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a52.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a53.exe -> Downloader.Adload.fu : No action taken.
C:\mc44a54.exe -> Downloader.Adload.fu : No action taken.
C:\kybrdff_e18.exe -> Downloader.Adload.fy : No action taken.
C:\kybrdff_e20.exe -> Downloader.Adload.fy : No action taken.
C:\kybrdff_e34.exe -> Downloader.Adload.fy : No action taken.
C:\kybrdff_e21.exe -> Downloader.Adload.gb : No action taken.
C:\nwnmff_e24.exe -> Downloader.Adload.gg : No action taken.
C:\nwnmff_e26.exe -> Downloader.Adload.go : No action taken.
C:\nwnmff_e34.exe -> Downloader.Adload.hb : No action taken.
C:\kybrdff_e36.exe -> Downloader.Adload.hk : No action taken.
C:\dfndrff_e36.exe -> Downloader.Adload.hl : No action taken.
C:\nwnmff_e36.exe -> Downloader.Adload.hm : No action taken.
C:\kybrdff_e48.exe -> Downloader.Adload.hw : No action taken.
C:\nwnmff_e48.exe -> Downloader.Adload.hw : No action taken.
C:\kybrdff_e45.exe -> Downloader.Adload.hx : No action taken.
C:\nwnmff_e45.exe -> Downloader.Adload.hx : No action taken.
C:\nwnmff_e46.exe -> Downloader.Adload.hy : No action taken.
C:\dfndrff_e52.exe -> Downloader.Adload.ic : No action taken.
C:\kybrdff_e51.exe -> Downloader.Adload.ic : No action taken.
C:\nwnmff_e52.exe -> Downloader.Adload.ic : No action taken.
C:\windows_e51.exe -> Downloader.Adload.id : No action taken.
C:\nwnmff_e51.exe -> Downloader.Adload.if : No action taken.
C:\kybrdff_e55.exe -> Downloader.Adload.ij : No action taken.
C:\radicalev.exe -> Downloader.Small.duf : No action taken.
C:\syndomxx.exe -> Downloader.Small.duf : No action taken.
C:\dollarrev.exe -> Downloader.Small.dxm : No action taken.
C:\WINDOWS\docsys.exe -> Downloader.VB.apw : No action taken.
C:\WINDOWS\volt7.exe -> Downloader.VB.apw : No action taken.
C:\mc44a55.exe -> Downloader.VB.aqc : No action taken.
C:\mc44a56.exe -> Downloader.VB.aqc : No action taken.
C:\mc44a57.exe -> Downloader.VB.aqc : No action taken.
C:\Program Files\MSN Gaming Zone\howy.html -> Hijacker.Small.jf : No action taken.
C:\Program Files\Windows Media Player\kyzeweqe.html -> Hijacker.Small.jf : No action taken.
C:\bak\dfndrff_e41.exe -> Hijacker.VB.kc : No action taken.
C:\Documents and Settings\thierry\Local Settings\Temporary Internet Files\Content.IE5\4TI9K7IB\send_car_int[2].htm -> Not-A-Virus.Exploit.HTML.CodeBaseExec : No action taken.
C:\sxe4.tmp -> Proxy.Ranky : No action taken.
:mozilla.222:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.333:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.205:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.206:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.218:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.376:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.380:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@adbrite[2].txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@banner.casinoking[2].txt -> TrackingCookie.Casinoking : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@casinoking[2].txt -> TrackingCookie.Casinoking : No action taken.
:mozilla.313:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Casinopays : No action taken.
:mozilla.315:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Casinopays : No action taken.
:mozilla.344:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Casinopays : No action taken.
:mozilla.306:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.307:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.308:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.309:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.270:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Estat : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@estat[1].txt -> TrackingCookie.Estat : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@banner.goldenpalace[2].txt -> TrackingCookie.Goldenpalace : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@goldenpalace[2].txt -> TrackingCookie.Goldenpalace : No action taken.
:mozilla.351:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.371:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.372:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.373:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@i12[2].txt -> TrackingCookie.I12 : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@max.i12[1].txt -> TrackingCookie.I12 : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@creative.paypopup[2].txt -> TrackingCookie.Paypopup : No action taken.
:mozilla.219:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Realtracker : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@edge.ru4[1].txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.251:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.207:C:\Documents and Settings\thierry\Application Data\Mozilla\Firefox\Profiles\iydjhjx9.default\cookies.txt -> TrackingCookie.Top-banners : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@media.top-banners[1].txt -> TrackingCookie.Top-banners : No action taken.
C:\Documents and Settings\thierry\Cookies\thierry@vegasred[1].txt -> TrackingCookie.Vegasred : No action taken.
C:\nwnmff_e27.exe -> Trojan.Agent.tx : No action taken.
C:\Documents and Settings\thierry\Local Settings\Temp\NI.UWA6PV_0001_N91M2107\setup.exe -> Trojan.Fakealert : No action taken.
C:\nwnmff_e32.exe -> Trojan.Pakes : No action taken.

::Report end
0
Réponse 11 / 14
Utilisateur anonyme
 
Salut,

regarde: No action taken il ne devrait pas y être marqué ça

Regarde le tutoriel, ou une fois que le scanne est fini clique sur "remove" "deleted" puis colle à nouveau le rapport ici stp

Pense a faire le scanne en ligne avec Bitdefender
0
Réponse 12 / 14
thierry
 
salut;Panda n'est pas un crack je l'est telecharger sur '01tele....com' il y a ~8jours.

BitDefender Online Scanner
Scan report generated at: Sat, Nov 25, 2006 - 01:19:34
Scan path: A:\;C:\;D:\;E:\;
Statistics

Time
02:12:12

Files
108479

Folders
2237

Boot Sectors
2

Archives
1153

Packed Files
11404

Results

Identified Viruses
39

Infected Files
55

Suspect Files
3

Warnings
0

Disinfected
0

Deleted Files
56

Engines Info

Virus Definitions
318711

Engine build
AVCORE v1.0 (build 2368) (i386) (Nov 16 2006 11:31:19)

Scan plugins
14

Archive plugins
38

Unpack plugins
6

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Delete

Second Action
None

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\Documents and Settings\thierry\Local Settings\Temporary Internet Files\Content.IE5\4TI9K7IB\popup[2].php
Detected with: Application.JS.ForcePopup.D

C:\Documents and Settings\thierry\Local Settings\Temporary Internet Files\Content.IE5\4TI9K7IB\popup[2].php
Deleted

C:\kybrdff_e56.exe
Infected with: Trojan.Downloader.Agent.DI

C:\kybrdff_e56.exe
Deleted

C:\kybrdff_e57.exe
Infected with: Trojan.Adload.J

C:\kybrdff_e57.exe
Deleted

C:\nwnmff_e25.exe
Infected with: Trojan.Downloader.Adload.AS

C:\nwnmff_e25.exe
Deleted

C:\nwnmff_e55.exe
Infected with: Trojan.Adload.F

C:\nwnmff_e55.exe
Deleted

C:\nwnmff_e57.exe
Infected with: Trojan.Adload.J

C:\nwnmff_e57.exe
Deleted

C:\Program Files\ewido anti-spyware 4.0\Quarantine\fil20CD8909.dat=>(gzip)
Infected with: Trojan.Clicker.Small.AV

C:\Program Files\ewido anti-spyware 4.0\Quarantine\fil20CD8909.dat=>(gzip)
Deleted

C:\Program Files\ewido anti-spyware 4.0\Quarantine\fil20CD8909.dat
Update failed

C:\RDFX4.exe=>(NSIS o)=>zlib_nsis0003
Infected with: Trojan.Downloader.VB.QB

C:\RDFX4.exe=>(NSIS o)=>zlib_nsis0003
Deleted

C:\RDFX4.exe=>(NSIS o)
Update failed

C:\RDFX4.exe=>(NSIS o)=>zlib_nsis0004
Infected with: Trojan.Downloader.Small.ALG

C:\RDFX4.exe=>(NSIS o)=>zlib_nsis0004
Deleted

C:\RDFX4.exe=>(NSIS o)
Update failed

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP115\A0058370.exe
Infected with: Trojan.Proxy.Ranky.D

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP115\A0058370.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080529.exe
Infected with: Trojan.Downloader.VB.XF

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080529.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080530.exe
Infected with: Trojan.Downloader.Adload.ED

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080530.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080531.exe
Infected with: Trojan.Downloader.Adload.AQ

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080531.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080532.exe
Infected with: Trojan.Downloader.Adload.CO

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080532.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080533.exe
Infected with: Trojan.Downloader.AOV

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080533.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080534.exe
Infected with: Trojan.Downloader.DollarRevenue.AD

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080534.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080535.exe
Infected with: Trojan.Downloader.Adload.IK

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080535.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080536.exe
Infected with: Trojan.Downloader.Adload.IK

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080536.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080537.exe
Infected with: Trojan.DollarRevenue.J

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080537.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080538.exe
Infected with: Trojan.Proxy.Ranky.D

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080538.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080544.exe
Infected with: Trojan.Dropper.Small.AUC

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080544.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080545.exe
Infected with: Trojan.Downloader.Adload.DS

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080545.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080546.exe
Infected with: Trojan.Downloader.Adload.EG

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080546.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080548.exe
Infected with: Trojan.Downloader.Adload.EF

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080548.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080554.exe
Infected with: Trojan.Downloader.Adload.FY

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080554.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080555.exe
Suspected of: BehavesLike:Trojan.Downloader

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080555.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080556.exe
Infected with: Trojan.Downloader.Adload.FJ

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080556.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080557.exe
Infected with: Trojan.Downloader.Adload.FJ

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080557.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080558.exe
Infected with: Trojan.Downloader.Adload.FJ

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080558.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080559.exe
Infected with: Trojan.Downloader.Adload.FT

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080559.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080560.exe
Infected with: Trojan.Downloader.Adload.FT

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080560.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080561.exe
Infected with: Trojan.Downloader.Adload.FT

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080561.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080562.exe
Suspected of: BehavesLike:Trojan.Downloader

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080562.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080563.exe
Suspected of: BehavesLike:Trojan.Downloader

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080563.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080564.exe
Infected with: Trojan.Downloader.VB.HT

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080564.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080565.exe
Infected with: Trojan.Downloader.Adload.FZ

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080565.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080566.exe
Infected with: Trojan.Downloader.Adload.FZ

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080566.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080568.exe
Infected with: Trojan.Downloader.AOW

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080568.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080569.exe
Infected with: Trojan.Downloader.DollarRevenue.AD

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080569.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080570.exe
Infected with: Trojan.Downloader.Adload.EE

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080570.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080571.exe
Infected with: Trojan.Downloader.Adload.GG

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080571.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080572.exe
Infected with: Trojan.DollarRevenue.E

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080572.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080573.exe
Infected with: Trojan.DollarR.BV

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080573.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080574.exe
Infected with: Trojan.Spy.DollarRevenue.J

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080574.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080575.exe
Infected with: Trojan.Downloader.Adload.FB

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080575.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080576.exe
Infected with: Trojan.Agent.SQ

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080576.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080579.exe
Infected with: DeepScan:Generic.Malware.dld!!.017A0331

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080579.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080580.exe
Infected with: DeepScan:Generic.Malware.dld!!.017A0331

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080580.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080583.exe
Infected with: Trojan.Downloader.Adload.FV

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0080583.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084538.exe
Infected with: Trojan.Downloader.Agent.DI

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084538.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084539.exe
Infected with: Trojan.Adload.J

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084539.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084540.exe
Infected with: Trojan.Downloader.Adload.AS

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084540.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084541.exe
Infected with: Trojan.Adload.F

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084541.exe
Deleted

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084542.exe
Infected with: Trojan.Adload.J

C:\System Volume Information\_restore{B654FDAE-43BE-4A07-B328-3AEC4D152D86}\RP128\A0084542.exe
Deleted

C:\WINDOWS\cywin.exe
Infected with: Trojan.Proxy.K

C:\WINDOWS\cywin.exe
Deleted

C:\WINDOWS\system32\Lssass.exe
Infected with: Generic.Sdbot.3E964633

C:\WINDOWS\system32\Lssass.exe
Delete failed

C:\windows_e56.exe
Infected with: Trojan.Adload.G

C:\windows_e56.exe
Deleted

C:\windows_e57.exe
Infected with: Trojan.Adload.J

C:\windows_e57.exe
Delete failed
0
Réponse 13 / 14
Utilisateur anonyme
 
Salut,

j'espère pour toi que tu l'as pas acheté car c'est une vraie passoire

Alors ceci; C:\System Volume Information\_restore indique que ta restauration du systeme etait infecté ou est infecté, pour être sûr, nous allons créer un point propre.

Clic sur "demarrer", cliques droit sur "poste de travail", "propriétés", onglet "restauration du systeme"

¤ coches la case "desactiver la Restauration du systéme sur tous les lecteurs", puis clic ur "appliquer"
¤ decoches la case et clic sur "appliquer" puis "ok".

Maintenant, que l'ont à effacés les point infectés, nous allons créer un point propre:

Clic sur "demarrer", "tous les programmes", "accessoires", "outils système", "restauration du système", choisis "créer un point de restauration" nommes le " ccm" par exemple, cliques sur "créer" puis "ok".
Voilà, maintenant le point de restauration est créer si un jour tu décides tu pourra revenir en arriere à la date que tu l'as créer donc à ce jour; en fesant la marche arriére tu pourra remettre ton ordinateur à la date ou l'on à créer ce point de restauration mais tu perdra les modifications que tu aura faites entre deux.
0
Réponse 14 / 14
estica
 
salut.mille merci pour tout ,non l'antivirus je ne l'est pas acheter;ouff,et a present tout marche des nouvelles mises a jour ce sont instaler y compris sp2 que je n'arrivais pas a mettre .Juste il est un peu lent .Bref pour l'instant c'est bon si tu a un bon anti virus a me conseiller je suis preneur .Encore merci pour tout
0