[trojan] infecté par dialer.trojan
stephami
Messages postés
20
Statut
Membre
-
blondin777 Messages postés 6162 Statut Contributeur -
blondin777 Messages postés 6162 Statut Contributeur -
bonjour,
Mon ordinateur est infecté par dialer.trojan.
Quel est la marche à suivre pour l'éliminer car mon antivirus Avast n'y parvient pas.
Merci pour votre aide
Stéphane
Mon ordinateur est infecté par dialer.trojan.
Quel est la marche à suivre pour l'éliminer car mon antivirus Avast n'y parvient pas.
Merci pour votre aide
Stéphane
A voir également:
- [trojan] infecté par dialer.trojan
- Trojan remover - Télécharger - Antivirus & Antimalwares
- Trojan sms-par google - Accueil - Virus
- Google Messages va mieux vous protéger des liens dangereux - Accueil - Messagerie instantanée
- Anti trojan - Télécharger - Antivirus & Antimalwares
- Virus trojan al11 ✓ - Forum Virus
4 réponses
Salut.
Suis cette procedure:
télécharges « Hijackthis »:
https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
*Installes-le dans un dossier créé spécialement à la racine de ta partition principale (généralement c:\).
Donc tu l'installes dans C:\ et pas dans C: \.........\........\.
*Renommes le en hij.exe par exemple
*Double cliques sur hij.exe
*Cliques sur le fichier > « exécute » > « do a scan and save a logfile ».
*Une fois fini tu vas avoir un « rapport.txt » (dans le dossier où tu l’as installé)
*Postes ici ce rapport
Démo pour cocher et fixer les lignes:
http://pageperso.aol.fr/balltrap34/Hijenr.gif
http://pageperso.aol.fr/balltrap34/demohijack.htm
>>> note très importante:
1°) ce qui suit doit être imprimé ou enregistré dans un fichier texte sur le bureau pour utilisation en "mode sans échec (donc forum inaccessible)
2°) les utilitaires indiqués doivent être téléchargés, installés et mis à jour en "mode normal" avant toute utilisation.
3°) démarrer en mode sans échec et utiliser les utilitaires dans l'ordre.
** télécharges « CCleaner »:
https://www.01net.com/404/
après l’install. lances-le et
Clic sur "Options" > "Avancé" et décoches la case "Effacer uniquement ...que 48 heures".
clic sur « erreurs » (à gauche) coches toutes les cases (sauf la dernière), puis
clic sur « chercher des erreurs » une fois fini,
clic sur « réparer les erreurs »
au message pour sauvegarder la base de registre clic « oui »
dans la fenêtre qui apparaît clic sur « corriger toutes les erreurs » puis sur « ok »
recommencer jusqu’a ce qu’il n’y aie plus d’erreurs.
dans la colonne de gauche clic sur « nettoyeur »puis « analyse ».
attendre la fin et clic sur « lancer le nettoyage » autant de fois que nécessaire.
** télécharges « spybot »: https://www.01net.com/
lances le apres install. >
dans « langue » choisis « fr » (si besoin est)
dans « mode » choisir « mode avancé »
clic sur « réglages » (à gauche) >> « modules add. », coches toutes les cases sauf la dernière (traceur...)
reviens sur l'onglet "spybot-S&D" (à gauche) cliques sur "vérif tout"
quand c'est fini supprimes tt ce q’il trouve en cliquant sur "corriger..."
(s'il te propose de redémarrer le pc pour finir le nettoyage acceptes et laisses-le faire, (mais dès que c'est fini redémarres en mode sans echec et continues les étapes)
utilises la rubrique "aide" si nécssaire
**Télécharge la version d'essai d'AVG Anti-Spyware 7.5 ici :
https://www.avg.com/en-ww/free-antivirus-download
et l'installer.
Son tuto (merci malekal_morte) : https://www.malekal.com/avg-antivirus-free-antivirus-gratuit-pour-proteger-son-pc-des-virus/
Démarrer AVG antispyware. Cliquer sur "mise à jour", cliquer sur le bouton "Commencer la mise à jour" et attendre la fin de cette mise à jour puis, fermer le programme.
Redemarrer en mode sans échec, relancer AVG AS et cliquer sur l'onglet "scanner" puis sur "Analyse complète du système".
Une fois le scan terminé, il t'affiche un rapport. Cliquer sur "configurer..." en bas a gauche et choisir "supprimer". Ensuite cliquer sur "Appliquer toutes les actions ", ca va supprimer toutes les infections détectées.
Ensuite cliquer sur "Enregistrer le rapport d'analyse" -> "enregistrer sous" et enregistrer le rapport où bon te semble, afin de me l'envoyer dans ta prochaine réponse.
Pour vérifier, scanne ton PC avec cet antivirus en ligne (sous IE et accepte l’activX) :
http://www.bitdefender.fr/bd/site/search.php#
Clique sur « Bitdefender scan on line » suis les instructions.
Suis cette procedure:
télécharges « Hijackthis »:
https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html
*Installes-le dans un dossier créé spécialement à la racine de ta partition principale (généralement c:\).
Donc tu l'installes dans C:\ et pas dans C: \.........\........\.
*Renommes le en hij.exe par exemple
*Double cliques sur hij.exe
*Cliques sur le fichier > « exécute » > « do a scan and save a logfile ».
*Une fois fini tu vas avoir un « rapport.txt » (dans le dossier où tu l’as installé)
*Postes ici ce rapport
Démo pour cocher et fixer les lignes:
http://pageperso.aol.fr/balltrap34/Hijenr.gif
http://pageperso.aol.fr/balltrap34/demohijack.htm
>>> note très importante:
1°) ce qui suit doit être imprimé ou enregistré dans un fichier texte sur le bureau pour utilisation en "mode sans échec (donc forum inaccessible)
2°) les utilitaires indiqués doivent être téléchargés, installés et mis à jour en "mode normal" avant toute utilisation.
3°) démarrer en mode sans échec et utiliser les utilitaires dans l'ordre.
** télécharges « CCleaner »:
https://www.01net.com/404/
après l’install. lances-le et
Clic sur "Options" > "Avancé" et décoches la case "Effacer uniquement ...que 48 heures".
clic sur « erreurs » (à gauche) coches toutes les cases (sauf la dernière), puis
clic sur « chercher des erreurs » une fois fini,
clic sur « réparer les erreurs »
au message pour sauvegarder la base de registre clic « oui »
dans la fenêtre qui apparaît clic sur « corriger toutes les erreurs » puis sur « ok »
recommencer jusqu’a ce qu’il n’y aie plus d’erreurs.
dans la colonne de gauche clic sur « nettoyeur »puis « analyse ».
attendre la fin et clic sur « lancer le nettoyage » autant de fois que nécessaire.
** télécharges « spybot »: https://www.01net.com/
lances le apres install. >
dans « langue » choisis « fr » (si besoin est)
dans « mode » choisir « mode avancé »
clic sur « réglages » (à gauche) >> « modules add. », coches toutes les cases sauf la dernière (traceur...)
reviens sur l'onglet "spybot-S&D" (à gauche) cliques sur "vérif tout"
quand c'est fini supprimes tt ce q’il trouve en cliquant sur "corriger..."
(s'il te propose de redémarrer le pc pour finir le nettoyage acceptes et laisses-le faire, (mais dès que c'est fini redémarres en mode sans echec et continues les étapes)
utilises la rubrique "aide" si nécssaire
**Télécharge la version d'essai d'AVG Anti-Spyware 7.5 ici :
https://www.avg.com/en-ww/free-antivirus-download
et l'installer.
Son tuto (merci malekal_morte) : https://www.malekal.com/avg-antivirus-free-antivirus-gratuit-pour-proteger-son-pc-des-virus/
Démarrer AVG antispyware. Cliquer sur "mise à jour", cliquer sur le bouton "Commencer la mise à jour" et attendre la fin de cette mise à jour puis, fermer le programme.
Redemarrer en mode sans échec, relancer AVG AS et cliquer sur l'onglet "scanner" puis sur "Analyse complète du système".
Une fois le scan terminé, il t'affiche un rapport. Cliquer sur "configurer..." en bas a gauche et choisir "supprimer". Ensuite cliquer sur "Appliquer toutes les actions ", ca va supprimer toutes les infections détectées.
Ensuite cliquer sur "Enregistrer le rapport d'analyse" -> "enregistrer sous" et enregistrer le rapport où bon te semble, afin de me l'envoyer dans ta prochaine réponse.
Pour vérifier, scanne ton PC avec cet antivirus en ligne (sous IE et accepte l’activX) :
http://www.bitdefender.fr/bd/site/search.php#
Clique sur « Bitdefender scan on line » suis les instructions.
salut
voici le log de hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 09:34:47, on 23/03/2007
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\DOCUME~1\isabelle\LOCALS~1\Temp\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {549B00D8-E746-ADE4-7169-0889E5195AF9} - C:\WINNT\system32\iqmcbwe.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKLM\..\Run: [hbnsfvd.dll] C:\WINNT\system32\rundll32.exe "C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll",jghozdf
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = paris.amifrance.org
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = paris.amifrance.org
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = paris.amifrance.org
O20 - Winlogon Notify: NavLogon - C:\WINNT\System32\NavLogon.dll
O20 - Winlogon Notify: winwea32 - C:\WINNT\SYSTEM32\winwea32.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\System32\HPZipm12.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)
a+
voici le log de hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 09:34:47, on 23/03/2007
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\DOCUME~1\isabelle\LOCALS~1\Temp\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {549B00D8-E746-ADE4-7169-0889E5195AF9} - C:\WINNT\system32\iqmcbwe.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKLM\..\Run: [hbnsfvd.dll] C:\WINNT\system32\rundll32.exe "C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll",jghozdf
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = paris.amifrance.org
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = paris.amifrance.org
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = paris.amifrance.org
O20 - Winlogon Notify: NavLogon - C:\WINNT\System32\NavLogon.dll
O20 - Winlogon Notify: winwea32 - C:\WINNT\SYSTEM32\winwea32.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\System32\HPZipm12.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)
a+
voici le rapport AVG:
VG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 12:39:30 23/03/2007
+ Résultat de l'analyse:
C:\Documents and Settings\isabelle\Mes documents\Dicos\CAMBRIDGE\setup\view\IEHelp.dll -> Adware.BHO : Nettoyé.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Nettoyé.
C:\WINNT\Temp\win23.tmp.exe -> Downloader.Agent.bdr : Nettoyé.
C:\WINNT\Temp\win26.tmp.exe -> Downloader.PurityScan.dc : Nettoyé.
C:\Documents and Settings\isabelle\Application Data\ѕуstem32\dllhost.exe -> Downloader.PurityScan.dt : Nettoyé.
C:\Documents and Settings\isabelle\Cookies\isabelle@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@www.adobe[1].txt -> TrackingCookie.Adobe : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\isabelle\Cookies\isabelle@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\isabelle\Cookies\isabelle@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\WINNT\Temp\win1E.tmp.exe -> Trojan.Agent.qt : Nettoyé.
C:\WINNT\system32\wnstssv.exe -> Trojan.Small : Nettoyé.
C:\Documents and Settings\isabelle\Mes documents\Palu\Temp.Htt -> Worm.VB.nei : Nettoyé.
Fin du rapport
je n'arrive pas à utiliser bitdefender (je ne trpuve pas scan on line)
Aprés tout ça symantec contineu à se battrre contre dialer.trojan.
J'espére que l'on va trouver une solution
merci
A+
VG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 12:39:30 23/03/2007
+ Résultat de l'analyse:
C:\Documents and Settings\isabelle\Mes documents\Dicos\CAMBRIDGE\setup\view\IEHelp.dll -> Adware.BHO : Nettoyé.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Nettoyé.
C:\WINNT\Temp\win23.tmp.exe -> Downloader.Agent.bdr : Nettoyé.
C:\WINNT\Temp\win26.tmp.exe -> Downloader.PurityScan.dc : Nettoyé.
C:\Documents and Settings\isabelle\Application Data\ѕуstem32\dllhost.exe -> Downloader.PurityScan.dt : Nettoyé.
C:\Documents and Settings\isabelle\Cookies\isabelle@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@www.adobe[1].txt -> TrackingCookie.Adobe : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\isabelle\Cookies\isabelle@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\isabelle\Cookies\isabelle@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\logistique\Cookies\logistique@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\WINNT\Temp\win1E.tmp.exe -> Trojan.Agent.qt : Nettoyé.
C:\WINNT\system32\wnstssv.exe -> Trojan.Small : Nettoyé.
C:\Documents and Settings\isabelle\Mes documents\Palu\Temp.Htt -> Worm.VB.nei : Nettoyé.
Fin du rapport
je n'arrive pas à utiliser bitdefender (je ne trpuve pas scan on line)
Aprés tout ça symantec contineu à se battrre contre dialer.trojan.
J'espére que l'on va trouver une solution
merci
A+
Voici le rapport du Bitdefender... l'ordi est encore infecté ! ne sais plus quoi faire !
BitDefender Online Scanner
Scan report generated at: Fri, Mar 23, 2007 - 15:42:48
Scan path: A:\;C:\;D:\;
Statistics
Time
01:45:27
Files
300208
Folders
1851
Boot Sectors
3
Archives
87133
Packed Files
15466
Results
Identified Viruses
14
Infected Files
53
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
83
Engines Info
Virus Definitions
407086
Engine build
AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)
Scan plugins
14
Archive plugins
38
Unpack plugins
6
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280002.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280002.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280002.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEE.VBN=>(Quarantine-PE)
Detected with: Adware.Purityscan.F
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEE.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEE.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEF.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.BKK
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEF.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEF.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0000.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.Matcash.B
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0002.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0002.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0002.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0003.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0003.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0003.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0004.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0004.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0004.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0005.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.Small.EFH
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0005.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0005.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05040000\45FD087D.VBN=>(Quarantine-PE)
Infected with: Trojan.Multidropper.H
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05040000\45FD087D.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05040000\45FD087D.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40002.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40002.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40002.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40003.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40003.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40003.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40004.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.Small.EFH
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40004.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40004.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40005.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40005.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40005.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7BC4.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.AQI
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7BC4.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7BC4.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7C05.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.AQI
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7C05.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7C05.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE8296.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.AQI
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE8296.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE8296.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE82DF.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.AQI
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE82DF.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE82DF.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05F00001\45F91572.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0001
Infected with: Trojan.Downloader.BKK
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05F00001\45F91572.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0001
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05F00001\45F91572.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0001
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05F00001\45F91572.VBN=>(Quarantine-PE)=>(NSIS o)
Update failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340002.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.Small.EFH
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340002.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340002.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340003.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340003.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340003.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06900000\4693AAC8.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.BKK
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06900000\4693AAC8.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06900000\4693AAC8.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll
Infected with: Trojan.Obfus.Gen
C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll
Disinfection failed
C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll
Delete failed
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst=>[Subject: Merry Christmas!][From: Directeur Asrames]=>link.postcard.index.gif5727.zip=>giftcard.id2634.pif
Infected with: Win32.Zafi.D@mm
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst=>[Subject: Merry Christmas!][From: Directeur Asrames]=>link.postcard.index.gif5727.zip=>giftcard.id2634.pif
Deleted
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst=>[Subject: Merry Christmas!][From: Directeur Asrames]=>link.postcard.index.gif5727.zip
Updated
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst
Update failed
C:\Documents and Settings\isabelle\Mes documents\Palu\desktop.ini
Infected with: Win32.Worm.Vb.NEI
C:\Documents and Settings\isabelle\Mes documents\Palu\desktop.ini
Disinfection failed
C:\Documents and Settings\isabelle\Mes documents\Palu\desktop.ini
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>(MIME part)=>(message body)
Infected with: Exploit.Iframe.Vulnerability.B
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>(MIME part)=>(message body)
Disinfection failed
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>(MIME part)=>(message body)
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 0)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>message.scr
Infected with: Win32.Netsky.P@mm
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>message.scr
Disinfection failed
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>message.scr
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 0)
Updated
C:\mail-outlook\Boîte de réception.dbx
Update failed
C:\mail-outlook\Boîte de réception.dbx=>(message 7)=>[Subject: Re:][Date: Tue, 02 Aug 2005 02:35:29 +0100]=>(MIME part)=>Fish.zip=>qrzhzj.exe
Infected with: Win32.Bagle.AJ@mm
C:\mail-outlook\Boîte de réception.dbx=>(message 7)=>[Subject: Re:][Date: Tue, 02 Aug 2005 02:35:29 +0100]=>(MIME part)=>Fish.zip=>qrzhzj.exe
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 7)=>[Subject: Re:][Date: Tue, 02 Aug 2005 02:35:29 +0100]=>(MIME part)=>Fish.zip
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 7)=>[Subject: Re:][Date: Tue, 02 Aug 2005 02:35:29 +0100]=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 7)
Updated
C:\mail-outlook\Boîte de réception.dbx
Update failed
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)=>private_01.zip=>details.txt .pif
Infected with: Win32.Netsky.P@mm
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)=>private_01.zip=>details.txt .pif
Disinfection failed
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)=>private_01.zip=>details.txt .pif
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)=>private_01.zip
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 8)
Updated
C:\mail-outlook\Boîte de réception.dbx
Update failed
C:\mail-outlook\Dossiers internes.dbx=>(message 604)=>[Subject: Re: Merry Christmas!][Date: mer., 15 déc. 2004]=>(MIME part)=>link.postcard.christmas.gif2753.cmd
Infected with: Win32.Zafi.D@mm
C:\mail-outlook\Dossiers internes.dbx=>(message 604)=>[Subject: Re: Merry Christmas!][Date: mer., 15 déc. 2004]=>(MIME part)=>link.postcard.christmas.gif2753.cmd
Deleted
C:\mail-outlook\Dossiers internes.dbx=>(message 604)=>[Subject: Re: Merry Christmas!][Date: mer., 15 déc. 2004]=>(MIME part)
Updated
C:\mail-outlook\Dossiers internes.dbx=>(message 604)
Updated
C:\mail-outlook\Dossiers internes.dbx
Update failed
C:\mail-outlook\RDC.dbx=>(message 482)=>[Subject: Merry Christmas!][Date: ven., 17 déc. 2004]=>(MIME part)=>link.postcard.index.gif5727.zip=>giftcard.id2634.pif
Infected with: Win32.Zafi.D@mm
C:\mail-outlook\RDC.dbx=>(message 482)=>[Subject: Merry Christmas!][Date: ven., 17 déc. 2004]=>(MIME part)=>link.postcard.index.gif5727.zip=>giftcard.id2634.pif
Deleted
C:\mail-outlook\RDC.dbx=>(message 482)=>[Subject: Merry Christmas!][Date: ven., 17 déc. 2004]=>(MIME part)=>link.postcard.index.gif5727.zip
Updated
C:\mail-outlook\RDC.dbx=>(message 482)=>[Subject: Merry Christmas!][Date: ven., 17 déc. 2004]=>(MIME part)
Updated
C:\mail-outlook\RDC.dbx=>(message 482)
Updated
C:\mail-outlook\RDC.dbx
Update failed
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)=>[Subject: Re:][Date: Sun, 31 Jul 2005 23:55:20 +0100]=>(MIME part)=>Doll.zip=>vszqsla.exe
Infected with: Win32.Bagle.AJ@mm
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)=>[Subject: Re:][Date: Sun, 31 Jul 2005 23:55:20 +0100]=>(MIME part)=>Doll.zip=>vszqsla.exe
Deleted
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)=>[Subject: Re:][Date: Sun, 31 Jul 2005 23:55:20 +0100]=>(MIME part)=>Doll.zip
Updated
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)=>[Subject: Re:][Date: Sun, 31 Jul 2005 23:55:20 +0100]=>(MIME part)
Updated
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)
Updated
C:\mail-outlook\Éléments supprimés.dbx
Update failed
C:\mail-outlook\Éléments supprimés.dbx=>(message 5)=>[Subject: Re:][Date: Sun, 31 Jul 2005 14:29:02 +0100]=>(MIME part)=>Fish.cpl
Infected with: Win32.Bagle.AJ@mm
C:\mail-outlook\Éléments supprimés.dbx=>(message 5)=>[Subject: Re:][Date: Sun, 31 Jul 2005 14:29:02 +0100]=>(MIME part)=>Fish.cpl
Deleted
C:\mail-outlook\Éléments supprimés.dbx=>(message 5)=>[Subject: Re:][Date: Sun, 31 Jul 2005 14:29:02 +0100]=>(MIME part)
Updated
C:\mail-outlook\Éléments supprimés.dbx=>(message 5)
Updated
C:\mail-outlook\Éléments supprimés.dbx
Update failed
C:\WINNT\system32\hbnsfvd.dll
Infected with: Trojan.Obfus.Gen
C:\WINNT\system32\hbnsfvd.dll
Disinfection failed
C:\WINNT\system32\hbnsfvd.dll
Deleted
C:\WINNT\system32\iqmcbwe.dll
Infected with: Trojan.Obfus.Gen
C:\WINNT\system32\iqmcbwe.dll
Disinfection failed
C:\WINNT\system32\iqmcbwe.dll
Delete failed
C:\WINNT\system32\rnjaoik.dll
Infected with: Trojan.Obfus.Gen
C:\WINNT\system32\rnjaoik.dll
Disinfection failed
C:\WINNT\system32\rnjaoik.dll
Deleted
C:\WINNT\Temp\win16.tmp
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win16.tmp
Disinfection failed
C:\WINNT\Temp\win16.tmp
Deleted
C:\WINNT\Temp\win2F.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win2F.tmp.exe
Disinfection failed
C:\WINNT\Temp\win2F.tmp.exe
Deleted
C:\WINNT\Temp\win32.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win32.tmp.exe
Disinfection failed
C:\WINNT\Temp\win32.tmp.exe
Deleted
C:\WINNT\Temp\win47.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win47.tmp.exe
Disinfection failed
C:\WINNT\Temp\win47.tmp.exe
Deleted
C:\WINNT\Temp\win706.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win706.tmp.exe
Disinfection failed
C:\WINNT\Temp\win706.tmp.exe
Deleted
C:\WINNT\Temp\winD3.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\winD3.tmp.exe
Disinfection failed
C:\WINNT\Temp\winD3.tmp.exe
Deleted
... merci pour ton coup de main, on reste en contact.
Stéph
BitDefender Online Scanner
Scan report generated at: Fri, Mar 23, 2007 - 15:42:48
Scan path: A:\;C:\;D:\;
Statistics
Time
01:45:27
Files
300208
Folders
1851
Boot Sectors
3
Archives
87133
Packed Files
15466
Results
Identified Viruses
14
Infected Files
53
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
83
Engines Info
Virus Definitions
407086
Engine build
AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)
Scan plugins
14
Archive plugins
38
Unpack plugins
6
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280002.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280002.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01280002.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEE.VBN=>(Quarantine-PE)
Detected with: Adware.Purityscan.F
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEE.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEE.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEF.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.BKK
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEF.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03180000\47F90AEF.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0000.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.Matcash.B
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\043C0001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0002.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0002.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0002.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0003.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0003.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0003.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0004.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0004.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0004.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0005.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.Small.EFH
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0005.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04BC0005.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\04CC0001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05040000\45FD087D.VBN=>(Quarantine-PE)
Infected with: Trojan.Multidropper.H
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05040000\45FD087D.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05040000\45FD087D.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40002.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40002.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40002.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40003.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40003.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40003.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40004.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.Small.EFH
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40004.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40004.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40005.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40005.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05A40005.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7BC4.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.AQI
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7BC4.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7BC4.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7C05.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.AQI
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7C05.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00000\45FE7C05.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE8296.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.AQI
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE8296.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE8296.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE82DF.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.AQI
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE82DF.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05D00001\45FE82DF.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05F00001\45F91572.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0001
Infected with: Trojan.Downloader.BKK
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05F00001\45F91572.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0001
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05F00001\45F91572.VBN=>(Quarantine-PE)=>(NSIS o)=>zlib_nsis0001
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05F00001\45F91572.VBN=>(Quarantine-PE)=>(NSIS o)
Update failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\062C0001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340000.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340000.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340000.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340001.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340001.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340001.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340002.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.Small.EFH
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340002.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340002.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340003.VBN=>(Quarantine-PE)
Infected with: Dropped:Dialer.Udia.A
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340003.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06340003.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06900000\4693AAC8.VBN=>(Quarantine-PE)
Infected with: Trojan.Downloader.BKK
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06900000\4693AAC8.VBN=>(Quarantine-PE)
Disinfection failed
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06900000\4693AAC8.VBN=>(Quarantine-PE)
Deleted
C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll
Infected with: Trojan.Obfus.Gen
C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll
Disinfection failed
C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll
Delete failed
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst=>[Subject: Merry Christmas!][From: Directeur Asrames]=>link.postcard.index.gif5727.zip=>giftcard.id2634.pif
Infected with: Win32.Zafi.D@mm
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst=>[Subject: Merry Christmas!][From: Directeur Asrames]=>link.postcard.index.gif5727.zip=>giftcard.id2634.pif
Deleted
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst=>[Subject: Merry Christmas!][From: Directeur Asrames]=>link.postcard.index.gif5727.zip
Updated
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst
Update failed
C:\Documents and Settings\isabelle\Mes documents\Palu\desktop.ini
Infected with: Win32.Worm.Vb.NEI
C:\Documents and Settings\isabelle\Mes documents\Palu\desktop.ini
Disinfection failed
C:\Documents and Settings\isabelle\Mes documents\Palu\desktop.ini
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>(MIME part)=>(message body)
Infected with: Exploit.Iframe.Vulnerability.B
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>(MIME part)=>(message body)
Disinfection failed
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>(MIME part)=>(message body)
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 0)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>message.scr
Infected with: Win32.Netsky.P@mm
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>message.scr
Disinfection failed
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)=>message.scr
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 0)=>[Subject: Mail Delivery (failure i.bioh-johnson@][Date: Tue, 2 Aug 2005 14:13:55 +0430]=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 0)
Updated
C:\mail-outlook\Boîte de réception.dbx
Update failed
C:\mail-outlook\Boîte de réception.dbx=>(message 7)=>[Subject: Re:][Date: Tue, 02 Aug 2005 02:35:29 +0100]=>(MIME part)=>Fish.zip=>qrzhzj.exe
Infected with: Win32.Bagle.AJ@mm
C:\mail-outlook\Boîte de réception.dbx=>(message 7)=>[Subject: Re:][Date: Tue, 02 Aug 2005 02:35:29 +0100]=>(MIME part)=>Fish.zip=>qrzhzj.exe
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 7)=>[Subject: Re:][Date: Tue, 02 Aug 2005 02:35:29 +0100]=>(MIME part)=>Fish.zip
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 7)=>[Subject: Re:][Date: Tue, 02 Aug 2005 02:35:29 +0100]=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 7)
Updated
C:\mail-outlook\Boîte de réception.dbx
Update failed
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)=>private_01.zip=>details.txt .pif
Infected with: Win32.Netsky.P@mm
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)=>private_01.zip=>details.txt .pif
Disinfection failed
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)=>private_01.zip=>details.txt .pif
Deleted
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)=>private_01.zip
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 8)=>[Subject: Re: Is that your document?][Date: Tue, 2 Aug 2005 09:56:58 +0430]=>(MIME part)
Updated
C:\mail-outlook\Boîte de réception.dbx=>(message 8)
Updated
C:\mail-outlook\Boîte de réception.dbx
Update failed
C:\mail-outlook\Dossiers internes.dbx=>(message 604)=>[Subject: Re: Merry Christmas!][Date: mer., 15 déc. 2004]=>(MIME part)=>link.postcard.christmas.gif2753.cmd
Infected with: Win32.Zafi.D@mm
C:\mail-outlook\Dossiers internes.dbx=>(message 604)=>[Subject: Re: Merry Christmas!][Date: mer., 15 déc. 2004]=>(MIME part)=>link.postcard.christmas.gif2753.cmd
Deleted
C:\mail-outlook\Dossiers internes.dbx=>(message 604)=>[Subject: Re: Merry Christmas!][Date: mer., 15 déc. 2004]=>(MIME part)
Updated
C:\mail-outlook\Dossiers internes.dbx=>(message 604)
Updated
C:\mail-outlook\Dossiers internes.dbx
Update failed
C:\mail-outlook\RDC.dbx=>(message 482)=>[Subject: Merry Christmas!][Date: ven., 17 déc. 2004]=>(MIME part)=>link.postcard.index.gif5727.zip=>giftcard.id2634.pif
Infected with: Win32.Zafi.D@mm
C:\mail-outlook\RDC.dbx=>(message 482)=>[Subject: Merry Christmas!][Date: ven., 17 déc. 2004]=>(MIME part)=>link.postcard.index.gif5727.zip=>giftcard.id2634.pif
Deleted
C:\mail-outlook\RDC.dbx=>(message 482)=>[Subject: Merry Christmas!][Date: ven., 17 déc. 2004]=>(MIME part)=>link.postcard.index.gif5727.zip
Updated
C:\mail-outlook\RDC.dbx=>(message 482)=>[Subject: Merry Christmas!][Date: ven., 17 déc. 2004]=>(MIME part)
Updated
C:\mail-outlook\RDC.dbx=>(message 482)
Updated
C:\mail-outlook\RDC.dbx
Update failed
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)=>[Subject: Re:][Date: Sun, 31 Jul 2005 23:55:20 +0100]=>(MIME part)=>Doll.zip=>vszqsla.exe
Infected with: Win32.Bagle.AJ@mm
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)=>[Subject: Re:][Date: Sun, 31 Jul 2005 23:55:20 +0100]=>(MIME part)=>Doll.zip=>vszqsla.exe
Deleted
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)=>[Subject: Re:][Date: Sun, 31 Jul 2005 23:55:20 +0100]=>(MIME part)=>Doll.zip
Updated
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)=>[Subject: Re:][Date: Sun, 31 Jul 2005 23:55:20 +0100]=>(MIME part)
Updated
C:\mail-outlook\Éléments supprimés.dbx=>(message 2)
Updated
C:\mail-outlook\Éléments supprimés.dbx
Update failed
C:\mail-outlook\Éléments supprimés.dbx=>(message 5)=>[Subject: Re:][Date: Sun, 31 Jul 2005 14:29:02 +0100]=>(MIME part)=>Fish.cpl
Infected with: Win32.Bagle.AJ@mm
C:\mail-outlook\Éléments supprimés.dbx=>(message 5)=>[Subject: Re:][Date: Sun, 31 Jul 2005 14:29:02 +0100]=>(MIME part)=>Fish.cpl
Deleted
C:\mail-outlook\Éléments supprimés.dbx=>(message 5)=>[Subject: Re:][Date: Sun, 31 Jul 2005 14:29:02 +0100]=>(MIME part)
Updated
C:\mail-outlook\Éléments supprimés.dbx=>(message 5)
Updated
C:\mail-outlook\Éléments supprimés.dbx
Update failed
C:\WINNT\system32\hbnsfvd.dll
Infected with: Trojan.Obfus.Gen
C:\WINNT\system32\hbnsfvd.dll
Disinfection failed
C:\WINNT\system32\hbnsfvd.dll
Deleted
C:\WINNT\system32\iqmcbwe.dll
Infected with: Trojan.Obfus.Gen
C:\WINNT\system32\iqmcbwe.dll
Disinfection failed
C:\WINNT\system32\iqmcbwe.dll
Delete failed
C:\WINNT\system32\rnjaoik.dll
Infected with: Trojan.Obfus.Gen
C:\WINNT\system32\rnjaoik.dll
Disinfection failed
C:\WINNT\system32\rnjaoik.dll
Deleted
C:\WINNT\Temp\win16.tmp
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win16.tmp
Disinfection failed
C:\WINNT\Temp\win16.tmp
Deleted
C:\WINNT\Temp\win2F.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win2F.tmp.exe
Disinfection failed
C:\WINNT\Temp\win2F.tmp.exe
Deleted
C:\WINNT\Temp\win32.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win32.tmp.exe
Disinfection failed
C:\WINNT\Temp\win32.tmp.exe
Deleted
C:\WINNT\Temp\win47.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win47.tmp.exe
Disinfection failed
C:\WINNT\Temp\win47.tmp.exe
Deleted
C:\WINNT\Temp\win706.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\win706.tmp.exe
Disinfection failed
C:\WINNT\Temp\win706.tmp.exe
Deleted
C:\WINNT\Temp\winD3.tmp.exe
Infected with: Trojan.Downloader.Agent.AQG
C:\WINNT\Temp\winD3.tmp.exe
Disinfection failed
C:\WINNT\Temp\winD3.tmp.exe
Deleted
... merci pour ton coup de main, on reste en contact.
Stéph
Salut et désolé pour cette réponse un peu tardive.
Telecharges Killbox : https://www.generation-nt.com/killbox-telechargement-25430.html
Doubles clique sur killbox.exe (Pocket Killbox)
sélectionne entièrement la liste ci-dessous :
C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst
C:\mail-outlook\Boîte de réception.dbx
C:\mail-outlook\Dossiers internes.dbx
C:\mail-outlook\RDC.dbx
C:\mail-outlook\Éléments supprimés.dbx
---> et tu fais clic droit / copier
Ouvres killbox
- Sélectionne "delete on reboot"
- Clique sur le menu "File" -> "Past from clip board"
- Clique sur All Files
- Clique sur la croix rouge et et blanche
- Répond yes et laisse redémarrer ton pc.
NOTE: Si tu reçois le message "PendingFileRenameOperations Registry Data has been removed by external process!" et que l'ordinateur ne redémarre pas, redémarre le manuellement ---> Menu Démarrer / arreter / redémarrer l'ordinateur
Après redémarrage, relance Killbox puis clic sur l'onglet "fichier" -> Log -> Actions History Log
Poste le rapport ici
Repostes un log bitdefender après.
Telecharges Killbox : https://www.generation-nt.com/killbox-telechargement-25430.html
Doubles clique sur killbox.exe (Pocket Killbox)
sélectionne entièrement la liste ci-dessous :
C:\Documents and Settings\isabelle\Local Settings\Application Data\hbnsfvd.dll
C:\Documents and Settings\isabelle\Local Settings\Application Data\Microsoft\Outlook\RDC.pst
C:\mail-outlook\Boîte de réception.dbx
C:\mail-outlook\Dossiers internes.dbx
C:\mail-outlook\RDC.dbx
C:\mail-outlook\Éléments supprimés.dbx
---> et tu fais clic droit / copier
Ouvres killbox
- Sélectionne "delete on reboot"
- Clique sur le menu "File" -> "Past from clip board"
- Clique sur All Files
- Clique sur la croix rouge et et blanche
- Répond yes et laisse redémarrer ton pc.
NOTE: Si tu reçois le message "PendingFileRenameOperations Registry Data has been removed by external process!" et que l'ordinateur ne redémarre pas, redémarre le manuellement ---> Menu Démarrer / arreter / redémarrer l'ordinateur
Après redémarrage, relance Killbox puis clic sur l'onglet "fichier" -> Log -> Actions History Log
Poste le rapport ici
Repostes un log bitdefender après.
stéphane