A L AIDE virus win32/BACKDOOR Fermé

Question

Bonjour,

Bonjour a toutes et a tous, 

depuis un certain moment je suis envahi de virus /vers WIN32 et backdoor, mon ordinateur rame a un point que je n arive meme plus a me connecter car sa coupe sa me di aussi a chaque fois ressources systemes insuffisantes pour terminer le service demender et apres tout bloque et je suis alors obliger de redemarrer mon micro ...

 je ne sais pas du tout quoi faire sachant que je suis nul en informatique. 

j ai avast comme antivirus avec un ordinateur hp de 256mo de ram 

merci de m aidez tres vite 

a bientot 

je vous laisse mon Hijackthis 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:05:36, on 14/12/2007
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\dllcache\windmns.exe
C:\WINDOWS\System32\dllcache\wintcpack.exe
C:\WINDOWS\System32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\load.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\System32\eXtream.exe
C:\WINDOWS\System32\kdjfsdklfjsl.exe
C:\WINDOWS\System32\Srb0ty.exe
C:\WINDOWS\System32\Syst3m32.exe
C:\WINDOWS\System32\Gothic.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Microsoft Works\WksSb.exe
C:\WINDOWS\System32\pctspk.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32undll32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [kiss] C:\Program Files\sdfhfgd\pingy.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\Run: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKLM\..\Run: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\Run: [smsger] C:\WINDOWS\System32\Win.exe
O4 - HKLM\..\Run: [MicroSoft Visual Framwork] MS32.exe
O4 - HKLM\..\Run: [WinDLL (Wseclayer.exe)] rundll32.exe C:\WINDOWS\System32\Wseclayer.exe,start
O4 - HKLM\..\Run: [Windows Secure Update] load.exe
O4 - HKLM\..\Run: [HOT FIX] Gothic.exe
O4 - HKLM\..\Run: [Internet] C:\WINDOWS\System32\l1nksys.exe
O4 - HKLM\..\RunServices: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\RunServices: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\RunServices: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKLM\..\RunServices: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\RunServices: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\RunServices: [smsger] C:\WINDOWS\System32\Win.exe
O4 - HKLM\..\RunServices: [MicroSoft Visual Framwork] MS32.exe
O4 - HKLM\..\RunServices: [Windows Secure Update] load.exe
O4 - HKLM\..\RunServices: [HOT FIX] Gothic.exe
O4 - HKLM\..\RunServices: [Internet] C:\WINDOWS\System32\l1nksys.exe
O4 - HKLM\..\RunOnce: [Windows Secure Update] load.exe
O4 - HKLM\..\RunOnce: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKLM\..\RunOnce: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKLM\..\RunOnce: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKLM\..\RunOnce: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKLM\..\RunOnce: [HOT FIX] Gothic.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ErrorSafeFree] "C:\Program Files\ErrorSafe Free\uers.exe" /min
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKCU\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKCU\..\Run: [MicroSoft Getway mqbol] xbvuxowlewiv.exe
O4 - HKCU\..\Run: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKCU\..\Run: [Windows Secure Update] load.exe
O4 - HKCU\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [HOT FIX] Gothic.exe
O4 - HKCU\..\RunOnce: [MicroSoft ssadsadas3s1] eXtream.exe
O4 - HKCU\..\RunOnce: [Windows Secure Update] load.exe
O4 - HKCU\..\RunOnce: [HOT FIX] Gothic.exe
O4 - HKCU\..\RunOnce: [MicroSoft Legal Service] Srb0ty.exe
O4 - HKCU\..\RunOnce: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe
O4 - HKCU\..\RunOnce: [MicroSoft Legal Syst3m32] Syst3m32.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft ssadssjdhasjadas3s1] kdjfsdklfjsl.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft sys3s1] h4ckn3t.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Getway mqbol] qrcffqqysayn.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Critical Error Safe32] C:\WINDOWS\System32\GetWaylayer32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Legal Service] Srb0ty.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Secure Update] load.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Legal Syst3m32] Syst3m32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MicroSoft Visual Framwork] MS32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [MicroSoft sys3s1] h4ckn3t.exe (User 'Default user')
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://www.securite.neuf.fr/Ols/fscax.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Microsoft Windows DNS Manager - Unknown owner - C:\WINDOWS\System32\dllcache\windmns.exe
O23 - Service: Microsoft Windows TCP Ack Timing - Unknown owner - C:\WINDOWS\System32\dllcache\wintcpack.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe

Utilisateur anonyme · Answer

Bonjour

C'est ça de pas mettre son PC à jour et de mal le protéger, il est cracké ton windows ? T'as pas de licence ? 
Vu la tronche de ton rapport et sachant que l'on voit pas tout .. si tu veux retrouver un PC propre, j'te conseille de formater ton nids à virus.
Si tu ne peux pas fais le savoir ;-)

scoubidoubidou · Answer

re,

mais si il a une licence.

mais si je le protege avec avast et je met windows update a jour a chaque fois 

par contre j ai pas de cd windows XP vu qu il etait preinstalle a l achat.

scoubidoubidou · Answer

ya quelqun

Utilisateur anonyme · Answer

Ton Windows n'est pas à jour :

- Windows XP (WinNT 5.01.2600) 
- Internet Explorer v6.00 (6.00.2600.0000)
- Pas de pare-feu 

En effet c'est super bien protégé ;-)


Si ton Windows était préinstallé tu dois avoir des CD de restauration que tu as du créer ? Ou alors as-tu essayé en tapotant la touche F10 voire F12 si il te proposait de réinstaller Windows ?

scoubidoubidou · Answer

bonjour,

ya quelques mois de sa j ai apeler hp car javais des souci avec mon micro et alors la personne de chez hp ma dit de tapoter a laide de la touche F10 et apres tout avait refonctionner.

tu peux m aide stp a regler mon gros probleme?

merci d avance

Utilisateur anonyme · Answer

Bien, donc redémarre ton PC et laisse ton doigt appuyer sur la touche F10 tu verras ce que cela donne, il devrait te proposer de réinstaller Windows donc accepte parce que là ton PC est pourri de virus.

scoubidoubidou · Answer

bonjour boulepate,

et apres je fais quoi apres avoir fait F10?

antivirus? 

parefeu? normalement je dois avoir le parefeu de chez neuf??? 

Ton Windows n'est pas à jour : 

- Windows XP (WinNT 5.01.2600) 
- Internet Explorer v6.00 (6.00.2600.0000) 
- Pas de pare-feu 

comment mettre tout sa a jour? moi d habitude je me rend sur windows update et je telecharge les mises a jour sauf le sp2

jsuis desole jsuis pas doué du tout en informatique.

MERCI DE TON AIDE BOULEPATE

scoubidoubidou · Answer

bonjour,

c est bon j ai fais avec la touche F10 sa a marché

que dois je faire maintenant pour tou mettre a jour ? 
_Windows XP (WinNT 5.01.2600) 
- Internet Explorer v6.00 (6.00.2600.0000) 
- Pas de pare-feu 
antivirus recommande et tou le reste pour eviter les virus




merci mais je mis connais pas du tout en informatique

Utilisateur anonyme · Answer

* Réinstalle Avast si tu ne l'as pas fait.



* Installe cet anti-spywares

Télécharge et installe AVG anti-spyware : mets le à jour
Tu fais un scan complet de ton système, dès qu'il a fini.
Si il te trouve des espions,supprime les. Enregistre le rapport et colle le ici stp 

AVG anti-spyware : reste gratuit après la période d'essai en français
---->http://www.infos-du-net.com/telecharger/Anti-Spyware-AVG,0301-7063.html

Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
--> https://kerio.probb.fr/t387-tuto-avg-anti-spyware-anti-spyware



* Ensuite, pour mettre à jour Windows ; clic sur démarrer, tous les programmes, (tout en haut) Windows Update, puis fais la recherche rapide et installe tout ce qu'il te trouvera.



* Pour le pare-feu tu peux installer Kerio ou autre, là tu auras directement de l'aide si besoin

Désactive le pare-feu de Windows(SP2) il ne sert à rien puis installe celui ci pour plus de sécurité 

Kerio (pare-feu) : reste gratuit après la période d'essai en français
----> http://www.infos-du-net.com/telecharger/Firewall-Kerio-Personal,0301-390.html

Regarde ce tutoriel si tu as besoin d'aide pour l'installation et la configuration de Kerio
--> http://kerio.probb.fr/logiciels-et-tutoriels-gratuits-tries-par-categorie-f6/tutoriel-sunbelt-personal-firewall-45916-ex-kerio-t248.htm

Plus d'info :
->https://kerio.probb.fr/



* Dès que tu as fait tout cela, réenvoie un rapport hijackthis. Pour voir si tout est correct, puis je t'indiquerai d'autre chose pour mieux sécuriser ton ordi ;)

scoubidoubidou · Answer

bonjour boulepate,

ok je vais faire ce que tu m as dit.

MERCI DE TON AIDE

scoubidoubidou · Answer

ok

scoubidoubidou · Answer

bonjour 

voici le rapport avg as que tu ma demande

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	17:23:47 20/12/2007

 + Résultat de l'analyse:	



C:\qoobox\Quarantine\C\Program Files\Starware370\Starware370Uninstall.exe.vir -> Adware.Comet : Ignoré.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
HKU\S-1-5-21-3894602836-359561344-2389969595-1003\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
C:\WINDOWS\SYSTEM32\d4rky[x] -> Backdoor.Flood : Ignoré.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP2\A0000173.exe/colfld.dll -> Backdoor.Mox.a : Ignoré.
C:\WINDOWS\SYSTEM32\fvist.com.exe/colfld.dll -> Backdoor.Mox.a : Ignoré.
C:\WINDOWS\SYSTEM32\jdjsdsj.exe/colfld.dll -> Backdoor.Mox.a : Ignoré.
C:\WINDOWS\SYSTEM32\ksxchii.exe/colfld.dll -> Backdoor.Mox.a : Ignoré.
C:\WINDOWS\SYSTEM32	estmangerx.exe/colfld.dll -> Backdoor.Mox.a : Ignoré.
C:\dfsd.exe/colfld.dll -> Backdoor.Mox.a : Ignoré.
C:\sfsdfsda.exe -> Backdoor.Rbot.ebp : Ignoré.
C:\SDFix\backups\backups.zip/backups/SADASDA.exe -> Backdoor.Rbot.eix : Ignoré.
C:\WINDOWS\SYSTEM32\SADASDA.exe -> Backdoor.Rbot.eix : Ignoré.
C:\SDFix\backups\backups.zip/backups/Gothic.exe -> Backdoor.Rbot.esx : Ignoré.
C:\WINDOWS\SYSTEM32\Gothic.exe -> Backdoor.Rbot.esx : Ignoré.
C:\WINDOWS\system.1	imer.txt -> Backdoor.Sliv.a : Ignoré.
C:\WINDOWS\ime\bear.txt -> Backdoor.Small.i : Ignoré.
C:\Documents and Settings\Propriétaire\Local Settings\Temp\_avast4_\unp116970518.tmp -> Backdoor.Zapchast : Ignoré.
C:\Program Files\killSh\aliases.ini -> Backdoor.Zapchast : Ignoré.
C:\Sh.exe/aliases.ini -> Backdoor.Zapchast : Ignoré.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP2\A0000172.pif/aliases.ini -> Backdoor.Zapchast : Ignoré.
C:\WINDOWS\SYSTEM32\Sh.exe/aliases.ini -> Backdoor.Zapchast : Ignoré.
C:\WINDOWS\SYSTEM32\cg.pif/aliases.ini -> Backdoor.Zapchast : Ignoré.
C:\WINDOWS\SYSTEM32\guygay.exe/aliases.ini -> Backdoor.Zapchast : Ignoré.
C:\WINDOWS\SYSTEM32\sex.exe/aliases.ini -> Backdoor.Zapchast : Ignoré.
C:\WINDOWS\SYSTEM32	estooo.exe/aliases.ini -> Backdoor.Zapchast : Ignoré.
C:\WINDOWS\system.1	imer2.txt -> Backdoor.Zapchast : Ignoré.
C:\_OTMoveIt\MovedFiles\WINDOWS\SYSTEM32\CHII.EXE/aliases.ini -> Backdoor.Zapchast : Ignoré.
C:\WINDOWS\SYSTEM32\fvist.com.exe/cl.dll -> Dropper.LowJones : Ignoré.
C:\WINDOWS\SYSTEM32\jdjsdsj.exe/cl.dll -> Dropper.LowJones : Ignoré.
C:\WINDOWS\SYSTEM32\ksxchii.exe/cl.dll -> Dropper.LowJones : Ignoré.
C:\WINDOWS\SYSTEM32	estmangerx.exe/cl.dll -> Dropper.LowJones : Ignoré.
C:\Documents and Settings\Propriétaire\Local Settings\Temp\_avast4_\unp100733060.tmp -> Not-A-Virus.PSWTool.Win32.PassView.162 : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@advertising[2].txt -> TrackingCookie.Advertising : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@fastclick[1].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@searchportal.information[2].txt -> TrackingCookie.Information : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@overture[1].txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@revenue[2].txt -> TrackingCookie.Revenue : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Default User\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\WINDOWS\SYSTEM32
dafs\v1rg1n -> Trojan.Cloner.ba : Ignoré.
C:\WINDOWS\system.1\Swfwin32.dll -> Trojan.Flood : Ignoré.
C:\Program Files\killSh\ksat.bat -> Trojan.Small : Ignoré.
C:\cg.pif/ksat.bat -> Trojan.Small : Ignoré.
C:\WINDOWS\SYSTEM32\kuki.bat -> Trojan.Starter.o : Ignoré.
C:\Documents and Settings\Propriétaire\Local Settings\Temp\_avast4_\unp102390793.tmp -> Worm.Randon : Ignoré.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP2\A0000173.exe/cnick.dll -> Worm.Randon.ao : Ignoré.
C:\WINDOWS\SYSTEM32\cnick.dll -> Worm.Randon.ao : Ignoré.
C:\WINDOWS\SYSTEM32\fvist.com.exe/cnick.dll -> Worm.Randon.ao : Ignoré.
C:\WINDOWS\SYSTEM32\jdjsdsj.exe/cnick.dll -> Worm.Randon.ao : Ignoré.
C:\WINDOWS\SYSTEM32\ksxchii.exe/cnick.dll -> Worm.Randon.ao : Ignoré.
C:\WINDOWS\SYSTEM32	estmangerx.exe/cnick.dll -> Worm.Randon.ao : Ignoré.
C:\dfsd.exe/cnick.dll -> Worm.Randon.ao : Ignoré.


Fin du rapport

scoubidoubidou · Answer

bonjour boulepate62,

tu as vu le rapport alors?

MERCI

scoubidoubidou · Answer

re,

en haut juste au dessus j ai mis le rapport AVGAS tu verras.

Par contre quand je veux faire les mises a jour de windows sa me met ceci et je nai rien :

Recherche sur votre ordinateur de la toute dernière version du logiciel de mise à jour de Windows permettant d'utiliser le site Web...

Le site Web utilise des contrôles ActiveX pour déterminer la version du logiciel exécuté par votre ordinateur. Si vous obtenez un avertissement relatif aux contrôles ActiveX, vérifiez que ceux-ci sont signés numériquement par Microsoft avant de les installer ou d'autoriser leur exécution. 

sa veut dire quoi stp???

et apres je mettrai le pare feu kerio que tu m as dit.

merci d avance de ton aide jsui trop nul...

scoubidoubidou · Answer

re,

coucou juste te souhaiter de bonnes fetes de fin d annees et merci de ton aide et pour tout

je t envoie le hijackthis que tu m as demander 

j ai installer le pare feu et avg as

tu m as dit que tu allait me montrer d autres chozes pour mieux securiser mon ordi apres avoir fait installer le pare feu

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:21:16, on 25/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\system32\pctspk.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr3.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr3.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.hpe.com/h41271/404D.aspx?cc=us&ll=en&url=http://domainredirects.ext.hpe.com/fr3.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Reference 2001\EROProj.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

scoubidoubidou · Answer

Bonsoir boulepate62

Voici alors mon scan avg as que tu m as demander

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	20:50:14 25/12/2007

 + Résultat de l'analyse:	



C:\WINDOWS\SYSTEM32\d4rky[x] -> Backdoor.Flood : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000313.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000314.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000315.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000316.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000317.exe/colfld.dll -> Backdoor.Mox.a : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000318.exe -> Backdoor.Rbot.ebp : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP4\A0000335.exe -> Backdoor.Rbot.ebp : Nettoyé.
C:\WINDOWS\SYSTEM32\SADASDA.exe -> Backdoor.Rbot.eix : Nettoyé.
C:\WINDOWS\SYSTEM32\Gothic.exe -> Backdoor.Rbot.esx : Nettoyé.
C:\WINDOWS\system.1	imer.txt -> Backdoor.Sliv.a : Nettoyé.
C:\WINDOWS\ime\bear.txt -> Backdoor.Small.i : Nettoyé.
C:\Program Files\killSh\aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\Sh.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP2\A0000172.pif/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP36\A0002144.EXE/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32\Sh.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32\cg.pif/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32\guygay.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32\sex.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\SYSTEM32	estooo.exe/aliases.ini -> Backdoor.Zapchast : Nettoyé.
C:\WINDOWS\system.1	imer2.txt -> Backdoor.Zapchast : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000313.exe/cl.dll -> Dropper.LowJones : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000314.exe/cl.dll -> Dropper.LowJones : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000315.exe/cl.dll -> Dropper.LowJones : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000316.exe/cl.dll -> Dropper.LowJones : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Default User\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\WINDOWS\SYSTEM32\config\systemprofile\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\WINDOWS\SYSTEM32
dafs\v1rg1n -> Trojan.Cloner.ba : Nettoyé.
C:\WINDOWS\system.1\Swfwin32.dll -> Trojan.Flood : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000310.bat -> Trojan.Small : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000311.pif/ksat.bat -> Trojan.Small : Nettoyé.
C:\WINDOWS\SYSTEM32\kuki.bat -> Trojan.Starter.o : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000312.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000313.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000314.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000315.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000316.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.
C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP3\A0000317.exe/cnick.dll -> Worm.Randon.ao : Nettoyé.


Fin du rapport

ce soir je fais le scan avast et te renvoi un hijackthis tu me diras aussi si tout est bon???

Allez bonne soirée a toi je crois que tu es en vacances a plus

scoubidoubidou · Answer

bonjour,

le scan avast je vois que j ai toujours les virus que faire?

26/12/2007 00:16:57	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\yes.exe\Swfwin32.dll" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\lovely.sys" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\kiss.exe" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\aliases.ini" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\ps2m.exe" file.  
26/12/2007 00:15:23	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\repcale.exe" file.  
26/12/2007 00:15:21	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:15:21	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sxfgfd.exe\hd.exe" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\lovely.sys" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\ps2m.exe" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\repcale.exe" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\aliases.ini" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\kiss.exe" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:15:18	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:15:16	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:15:16	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\Sx.exe\hd.exe" file.  
26/12/2007 00:11:00	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:11:00	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\aliases.ini" file.  
26/12/2007 00:11:00	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:11:00	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\repcale.exe" file.  
26/12/2007 00:10:59	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\kiss.exe" file.  
26/12/2007 00:10:59	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\lovely.sys" file.  
26/12/2007 00:10:59	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:10:59	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\ps2m.exe" file.  
26/12/2007 00:10:58	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\hd.exe" file.  
26/12/2007 00:10:57	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\eg.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\murdEr.sys" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\ps2m.exe" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\repcale.exe" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\kiss.exe" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:10:48	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\aliases.ini" file.  
26/12/2007 00:10:47	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\hd.exe" file.  
26/12/2007 00:10:47	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsgsf.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:10:44	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfsdfscx.exe\hd.exe" file.  
26/12/2007 00:10:44	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfsdfscx.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\aliases.ini" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\repcale.exe" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\repcale.exe\[MoleBox]" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\ps2m.exe" file.  
26/12/2007 00:10:41	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:10:40	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\kiss.exe" file.  
26/12/2007 00:10:40	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\lovely.sys" file.  
26/12/2007 00:10:39	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\hd.exe" file.  
26/12/2007 00:10:38	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dsfds.pif\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:08:16	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\kiss.exe" file.  
26/12/2007 00:08:16	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\murdEr.sys" file.  
26/12/2007 00:08:15	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\hd.exe" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\repcale.exe" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\aliases.ini" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\ps2m.exe" file.  
26/12/2007 00:08:14	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfs.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:08:10	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\kiss.exe" file.  
26/12/2007 00:08:10	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\murdEr.sys" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\repcale.exe\[MoleBox]" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\ps2m.exe" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\repcale.exe" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\hd.exe" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\aliases.ini" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\repcale.exe\[Embedded#0f338]" file.  
26/12/2007 00:08:09	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\cult.exe\[Embedded#10d38]" file.  
26/12/2007 00:08:08	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\dfgsdfcxvxs.exe\orrl.exe\[Embedded#13738]" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rky.exe" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rky[x]" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rky[2]" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "Win32:Parite" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rk.exe" file.  
26/12/2007 00:08:02	Propriétaire	3000	Sign of "IRC:LowJones [Trj]" has been found in "C:\WINDOWS\SYSTEM32\darkworlk.exe\d4rky[6]" file.  
26/12/2007 00:07:54	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\d4rk.exe" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "Win32:Parite" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rk.exe" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "IRC:LowJones [Trj]" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rky[6]" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rky[2]" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rky.exe" file.  
26/12/2007 00:01:12	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\WINDOWS\SYSTEM32\antivirusv1.exe\d4rky[x]" file.  
26/12/2007 00:00:57	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\-r" file.  
26/12/2007 00:00:56	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\WINDOWS\SYSTEM32\-r\th7ya.exe" file.  
25/12/2007 22:41:26	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\virgin.exe" file.  
25/12/2007 22:41:25	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\ps2m.exe" file.  
25/12/2007 22:41:25	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:41:24	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:41:24	Propriétaire	3000	Sign of "Win32:Trojan-gen {UPX}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\ms04.exe" file.  
25/12/2007 22:41:24	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006396.exe\nass3r.exe" file.  
25/12/2007 22:41:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006394.exe" file.  
25/12/2007 22:41:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006395.exe\[Embedded#13738]" file.  
25/12/2007 22:41:23	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006393.exe\[Embedded#10d38]" file.  
25/12/2007 22:41:19	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006392.exe\Swfwin32.dll" file.  
25/12/2007 22:41:17	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006391.exe\jinso.exe" file.  
25/12/2007 22:41:14	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006390.exe\jinso.exe" file.  
25/12/2007 22:41:11	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006389.pif\th7yax.exe" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\kiss.exe" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\aliases.ini" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\repcale.exe" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\ps2m.exe" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:41:06	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\lovely.sys" file.  
25/12/2007 22:41:05	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\hd.exe" file.  
25/12/2007 22:41:05	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006388.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:41:02	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:41:02	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\repcale.exe" file.  
25/12/2007 22:41:02	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\aliases.ini" file.  
25/12/2007 22:41:02	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:41:01	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\ps2m.exe" file.  
25/12/2007 22:41:01	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:41:01	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\lovely.sys" file.  
25/12/2007 22:41:01	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\kiss.exe" file.  
25/12/2007 22:41:00	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\hd.exe" file.  
25/12/2007 22:41:00	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006387.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:59	Propriétaire	3000	Sign of "Win32:Rbot-FGP [Trj]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006385.exe" file.  
25/12/2007 22:40:59	Propriétaire	3000	Sign of "IRC:Flood-B [Trj]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006386.exe\nick.txt" file.  
25/12/2007 22:40:58	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006382.dll" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\ms02.exe" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\ps2m.exe" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:53	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\repcale.exe" file.  
25/12/2007 22:40:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {UPX}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\F1NTXXXK.exe" file.  
25/12/2007 22:40:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\hd.exe" file.  
25/12/2007 22:40:52	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\lovelyx.sys" file.  
25/12/2007 22:40:51	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006381.exe\aliases.ini" file.  
25/12/2007 22:40:50	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006380.exe\kiss.exe" file.  
25/12/2007 22:40:49	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006380.exe\hd.exe" file.  
25/12/2007 22:40:49	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006380.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:48	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006380.exe\aliases.ini" file.  
25/12/2007 22:40:44	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:44	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\q8guys.exe" file.  
25/12/2007 22:40:44	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:44	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\repcale.exe" file.  
25/12/2007 22:40:43	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\ps2m.exe" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Trojan-gen {UPX}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\ms04.exe" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\lovelyx.sys" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\hd.exe" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:42	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006379.exe\aliases.ini" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\ps2m.exe" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\repcale.exe" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\kiss.exe" file.  
25/12/2007 22:40:39	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\lovely.sys" file.  
25/12/2007 22:40:37	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\aliases.ini" file.  
25/12/2007 22:40:37	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:37	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006378.pif\hd.exe" file.  
25/12/2007 22:40:34	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\repcale.exe" file.  
25/12/2007 22:40:34	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\ps2m.exe" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\lovely.sys" file.  
25/12/2007 22:40:33	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\kiss.exe" file.  
25/12/2007 22:40:31	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\aliases.ini" file.  
25/12/2007 22:40:31	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:31	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006377.exe\hd.exe" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\lovely.sys" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\kiss.exe" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\ps2m.exe" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\repcale.exe" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 22:40:28	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:40:26	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\aliases.ini" file.  
25/12/2007 22:40:26	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:40:26	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006376.exe\hd.exe" file.  
25/12/2007 22:40:22	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\System Volume Information\_restore{845A621C-47AF-4FF1-980D-74451E21E351}\RP41\A0006375.ini" file.  
25/12/2007 22:10:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\sdsdfsdf.exe\virgin.exe" file.  
25/12/2007 22:10:50	Propriétaire	3000	Sign of "Win32:Trojan-gen {UPX}" has been found in "C:\sdsdfsdf.exe\ms04.exe" file.  
25/12/2007 22:10:50	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\sdsdfsdf.exe\nass3r.exe" file.  
25/12/2007 22:10:50	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\sdsdfsdf.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:10:50	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\sdsdfsdf.exe\ps2m.exe" file.  
25/12/2007 22:10:49	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\sdsdfsdf.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 22:00:04	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Program Files\killSh\orrl.exe\[Embedded#13738]" file.  
25/12/2007 22:00:04	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Program Files\killSh\hd.exe" file.  
25/12/2007 21:59:58	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Program Files\killSh\cult.exe\[Embedded#10d38]" file.  
25/12/2007 21:50:32	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\lol1.exe\Swfwin32.dll" file.  
25/12/2007 21:50:30	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\klertf.exe\jinso.exe" file.  
25/12/2007 21:22:03	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\hjuing.exe\jinso.exe" file.  
25/12/2007 21:21:59	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\hidfdfdffdz.pif\th7yax.exe" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\gezzxa.exe\ps2m.exe" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\gezzxa.exe\lovely.sys" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\gezzxa.exe\aliases.ini" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\gezzxa.exe\repcale.exe" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 21:21:54	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\gezzxa.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 21:21:53	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\kiss.exe" file.  
25/12/2007 21:21:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\hd.exe" file.  
25/12/2007 21:21:52	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gezzxa.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:Generic-V [Wrm]" has been found in "C:\gexa.exe\aliases.ini" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:Adware-gen [Adw]" has been found in "C:\gexa.exe\ps2m.exe" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:HideWindows-B [Tool]" has been found in "C:\gexa.exe\repcale.exe\[MoleBox]" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\repcale.exe\[Embedded#0f338]" file.  
25/12/2007 21:21:49	Propriétaire	3000	Sign of "Win32:HideWindows-I [Tool]" has been found in "C:\gexa.exe\repcale.exe" file.  
25/12/2007 21:21:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\kiss.exe" file.  
25/12/2007 21:21:48	Propriétaire	3000	Sign of "Win32:Generic-W [Wrm]" has been found in "C:\gexa.exe\lovely.sys" file.  
25/12/2007 21:21:48	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\orrl.exe\[Embedded#13738]" file.  
25/12/2007 21:21:47	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\hd.exe" file.  
25/12/2007 21:21:46	Propriétaire	3000	Sign of "Win32:Trojan-gen {Other}" has been found in "C:\gexa.exe\cult.exe\[Embedded#10d38]" file.  
25/12/2007 21:21:06	Propriétaire	3000	Sign of "IRC:Flood-B [Trj]" has been found in "C:\essd.exe\nick.txt" file.

scoubidoubidou · Answer

kikou?

A L AIDE virus win32/BACKDOOR

18 réponses

Discussions similaires