PC infecté: virtumonde, rootkit etc...

Résolu

botcaryo Messages postés 104 Statut Membre -
botcaryo Messages postés 104 Statut Membre - 31 déc. 2007 à 14:14

Bonjour,
j'ai récupéré un pc infecté. Je sollicite votre aide pour le soigner

j'ai très peu d'expérience en info mais je vous ai posté le log de hijackthis

pouvez vous me dire quelles sont les prochines étapes

merci

log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:50:23, on 30/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Apoint\Apntex.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\DOCUME~1\GRGORY~1\LOCALS~1\Temp\Répertoire temporaire 1 pour HiJackThis.zip\HijackThis.exe
C:\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=4070123
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=4070123
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {2AE4005E-689F-4FB9-8C3D-D2B8B58AC072} - C:\WINDOWS\system32\nnnonml.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6D718998-4BAF-405C-A450-4BC6EB6D2C82} - C:\WINDOWS\system32\vtsqq.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {86FF02E0-EB53-4DA7-90BD-DA0FD39E54DA} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {9CF1FF21-9927-4170-B19C-64DFC68D909C} - (no file)
O2 - BHO: (no name) - {a4f25d6c-6930-45e9-894f-0fb3b4b06c26} - C:\WINDOWS\system32\jdfrdqoq.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {C84BC267-145C-42BC-AEB4-86640A7D819A} - (no file)
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: (no name) - {11A69AE4-FBED-4832-A2BF-45AF82825583} - (no file)
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?836641679c094e5f9143343be21f7840
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?836641679c094e5f9143343be21f7840
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.free.fr/freebox/index.html
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070501/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: nnnonml - C:\WINDOWS\SYSTEM32\nnnonml.dll
O20 - Winlogon Notify: pmnklig - C:\WINDOWS\
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

Afficher la suite

A voir également:

PC infecté: virtumonde, rootkit etc...
Reinitialiser pc - Guide
Pc lent - Guide
Downloader for pc - Télécharger - Téléchargement & Transfert
Forcer demarrage pc - Guide
Double ecran pc - Guide

70 réponses

Réponse 41 / 70

botcaryo Messages postés 104 Statut Membre 2

voici:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:17:53, on 30/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\HiJackThis\sanner.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=4070123
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?836641679c094e5f9143343be21f7840
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?836641679c094e5f9143343be21f7840
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.free.fr/freebox/index.html
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070501/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

Réponse 42 / 70

botcaryo Messages postés 104 Statut Membre 2

Merci encore pour le temps consacré à mes soucis: sonny1024, carrosier13 et fillCPA pour votre bienveillance

J'attends vos instruction quand vous serez dispo, n'hésitez pas je ne suis pas couché lol

Réponse 43 / 70

FillPCA Messages postés 2264 Statut Contributeur sécurité 123

Salut,

Le rapport est propre, sauf que tu as 2 antivirus actifs. Il faut en désinstaller un.
Carrosser et sonny vont achever le nettoyage.

FillPCA

Réponse 44 / 70

botcaryo Messages postés 104 Statut Membre 2

salut fillCPA

quels sont les 2 AV? vu que ce n'est pas mon pc je ne sais pas trop....

il y a Avast et?

et lequel conseilles tu de garder?

merci

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question

Réponse 45 / 70

FillPCA Messages postés 2264 Statut Contributeur sécurité 123

Re,

Il y a une entrée d'AVG antivirus, mais pas les services. La désinstallation a sans doute été incomplète.

Réponse 46 / 70

botcaryo Messages postés 104 Statut Membre 2

effectivement il y avait avg antivirus
je croyais l'avoir désinstallé....

bref je ne vois pas de trace de cet antivirus dans ajout/suppression des prog ni dans cette fonction de ccleaner

comment puis je terminer sa desinstallation?

Réponse 47 / 70

FillPCA Messages postés 2264 Statut Contributeur sécurité 123

Re,

Ouvre Hijackthis>"Do a scan only" et coche ceci :
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
Clique sur fix/réparer.

Supprime le dossier d'AVGantivirus. IL se trouve ici :
C:\PROGRA~1\Grisoft\AVGFRE~1

Ne confonds pas AVGantispyware. Je ne connais pas son nom exact.

FillPCA

Réponse 48 / 70

botcaryo Messages postés 104 Statut Membre 2

ok merci je le fais de suite

Réponse 49 / 70

botcaryo Messages postés 104 Statut Membre 2

j'ai fais via hijackthis

parce que pas moyen de trouver C:\PROGRA~1\Grisoft\AVGFRE~1

ca a du le supprimer

bon encore merci Fill

tu parlais de finir le nettoyage

peux tu m'en dire plus ou peut etre que j'en demande trop , il se fait tard...je voudrais pas abuser quand même

Réponse 50 / 70

FillPCA Messages postés 2264 Statut Contributeur sécurité 123

Re,

1/ Lance AVG Anti-Spyware
Clique sur le bouton Analyse (de la barre d'outils)
Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.
Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas.
Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

2/ * Fais un scan en ligne en cliquant ici : https://www.bitdefender.com/toolbox/
* Tu dois réaliser le scan en utilisant Internet explorer. Une information apparait en haut, près de la barre d'état. Tu dois accepter et installer l'activeX proposé. La mise à jour de l'antivirus se lance.
* Réalise un scan complet du système.
* Sauvegarde le rapport en mode texte à l'issue du scan.

Edite ces 2 rapports et dis-nous comment le pc se porte.

FillPCA

Réponse 51 / 70

botcaryo Messages postés 104 Statut Membre 2

oki doki

je poste cela des que possible

soit dans environ 35minutes

Réponse 52 / 70

botcaryo Messages postés 104 Statut Membre 2

rapport avg:
*
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 23:21:53 30/12/2007

+ Résultat de l'analyse:

C:\Documents and Settings\Grégory Even\Cookies\grégory_even@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Grégory Even\Cookies\grégory_even@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Grégory Even\Cookies\grégory_even@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.

Fin du rapport

Réponse 53 / 70

botcaryo Messages postés 104 Statut Membre 2

voila la suite mais je crois que c'est pas bon

BitDefender Online Scanner - Real Time Virus Report

Generated at: Mon, Dec 31, 2007 - 00:02:16

--------------------------------------------------------------------------------

Scan Info

Scanned Files
171699

Infected Files
285

Virus Detected

Trojan.Vundo.DRP
8

Trojan.Vundo.DSA
4

Trojan.Vundo.DRT
25

Trojan.Fotomoto.H
3

Trojan.Vundo.DSF
2

Adware.Virtumonde.GGZ
2

Trojan.Vundo.DSI
56

Trojan.Vundo.DTJ
104

Trojan.Vundo.DSJ
28

Trojan.Kobcka.BY
20

Backdoor.SDBot.DFCW
33

--------------------------------------------------------------------------------

This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.

Réponse 54 / 70

botcaryo Messages postés 104 Statut Membre 2

c bizarre c'est vundo qui m'a mis ces virus?

Réponse 55 / 70

botcaryo Messages postés 104 Statut Membre 2

aprés un deuxieme scan: c mieux!!!

BitDefender Online Scanner

Scan report generated at: Mon, Dec 31, 2007 - 00:54:39

Scan path: C:\;D:\;

Statistics

Time
00:30:20

Files
166501

Folders
3719

Boot Sectors
3

Archives
3563

Packed Files
12760

Results

Identified Viruses
0

Infected Files
0

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
0

Engines Info

Virus Definitions
884790

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
14

Archive plugins
38

Unpack plugins
7

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

No virus found.

Réponse 56 / 70

FillPCA Messages postés 2264 Statut Contributeur sécurité 123

Salut,

Comment le pc se porte-t-il ? Tu n'as pas le chemin des fichiers infectés du 1er rapport ?

FillPCA

Réponse 57 / 70

botcaryo Messages postés 104 Statut Membre 2

le pc a l'air mieux

qu'est ce que le chemin des fichiers infectés?, leur localisation?

je te mets un truc en html , désolé c'est peut etre cela dont tu parles (1er rapport)

je te mets le début car il y en a un paquet!!!!!

Réponse 58 / 70

botcaryo Messages postés 104 Statut Membre 2

C:\qoobox\Quarantine\catchme2007-12-30_195701.62.zip=>Tah53.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\qoobox\Quarantine\catchme2007-12-30_195701.62.zip=>Tah53.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\qoobox\Quarantine\catchme2007-12-30_195701.62.zip=>Tah53.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\qoobox\Quarantine\catchme2007-12-30_195701.62.zip
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\qoobox\Quarantine\catchme2007-12-30_195701.62.zip=>Tah53.sys.1
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\qoobox\Quarantine\catchme2007-12-30_195701.62.zip=>Tah53.sys.1
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\qoobox\Quarantine\catchme2007-12-30_195701.62.zip=>Tah53.sys.1
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\qoobox\Quarantine\catchme2007-12-30_195701.62.zip
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP201\A0026510.dll
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DRT
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP201\A0026510.dll
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP201\A0026510.dll
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP203\A0028008.exe
</td>
<td width="43%" align="left">
Infected with: Trojan.Fotomoto.H
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP203\A0028008.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP203\A0028008.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP203\A0028015.dll
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DRT
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP203\A0028015.dll
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP203\A0028015.dll
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP203\A0028016.dll
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DRT
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP203\A0028016.dll
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP203\A0028016.dll
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP204\A0028058.dll
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DRT
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP204\A0028058.dll
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP204\A0028058.dll
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP204\A0028082.dll
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP204\A0028082.dll
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP204\A0028082.dll
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP213\A0031479.exe
</td>
<td width="43%" align="left">
Infected with: Trojan.Fotomoto.H
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP213\A0031479.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP213\A0031479.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP213\A0031518.dll
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DRT
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP213\A0031518.dll
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP213\A0031518.dll
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP217\A0035775.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP217\A0035775.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP217\A0035775.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP217\A0035800.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP217\A0035800.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP217\A0035800.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035847.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035847.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035847.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035848.dll
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DRT
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035848.dll
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035848.dll
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035872.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035872.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035872.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035901.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035901.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035901.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035902.dll
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DRT
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035902.dll
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP218\A0035902.dll
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0036924.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0036924.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0036924.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0036991.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0036991.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0036991.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0037043.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0037043.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0037043.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0037084.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0037084.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0037084.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0039113.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0039113.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0039113.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0039134.exe
</td>
<td width="43%" align="left">
Infected with: Trojan.Fotomoto.H
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0039134.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0039134.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0039138.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0039138.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP220\A0039138.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0039176.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0039176.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0039176.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0039191.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0039191.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0039191.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042320.sys
</td>
<td width="43%" align="left">
Infected with: Trojan.Kobcka.BY
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042320.sys
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042320.sys
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042339.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042339.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042339.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042340.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042340.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042340.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042341.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042341.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042341.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042342.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042342.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042342.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042343.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042343.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042343.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042344.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042344.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042344.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042345.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042345.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042345.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042346.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042346.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042346.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042347.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042347.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042347.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042348.dll
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042348.dll
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042348.dll
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042349.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042349.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042349.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042350.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042350.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042350.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042351.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042351.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042351.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042352.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042352.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042352.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042353.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042353.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042353.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042354.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042354.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042354.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042355.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042355.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042355.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042356.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042356.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042356.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042357.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042357.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042357.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042358.exe
</td>
<td width="43%" align="left">
Infected with: Backdoor.SDBot.DFCW
</td>
</tr><tr>
<td width="57%">
C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP221\A0042358.exe
</td>
<td width="43%" align="left">
<font face="Arial"

Réponse 59 / 70

botcaryo Messages postés 104 Statut Membre 2

aprés c'est encore system et restore....et au aussi des lignes avec les bacup de vundofix

Réponse 60 / 70

botcaryo Messages postés 104 Statut Membre 2

C:\VundoFix Backups\fccyayy.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DSI
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\fccyayy.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\fccyayy.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\foiledcg.exe.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DRP
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\foiledcg.exe.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\foiledcg.exe.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\fpyobsrx.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DSJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\fpyobsrx.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\fpyobsrx.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\gebcywu.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\gebcywu.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\gebcywu.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\gebxxwx.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\gebxxwx.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\gebxxwx.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hkrnhayq.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DSA
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hkrnhayq.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hkrnhayq.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hlwgiphr.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DSJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hlwgiphr.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hlwgiphr.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hvhjlrid.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DSJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hvhjlrid.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hvhjlrid.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hvunlwqt.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DRT
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hvunlwqt.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\hvunlwqt.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\iifdeeb.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\iifdeeb.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\iifdeeb.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jagq.exe.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jagq.exe.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jagq.exe.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jdfrdqoq.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DSJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jdfrdqoq.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jdfrdqoq.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jkkhecc.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jkkhecc.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jkkhecc.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jkkkkjj.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DSI
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jkkkkjj.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jkkkkjj.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jkklllj.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jkklllj.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\jkklllj.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfcawt.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfcawt.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfcawt.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfcdba.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DSI
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfcdba.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfcdba.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfecay.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DSI
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfecay.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfecay.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfgeee.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfgeee.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\khfgeee.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjhfca.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjhfca.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjhfca.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjhfec.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjhfec.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjhfec.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjigfg.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjigfg.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjigfg.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjigge.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjigge.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\ljjigge.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\mljhiig.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\mljhiig.dll.bad
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\mljhiig.dll.bad
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\VundoFix Backups\mljjgda.dll.bad
</td>
<td width="43%" align="left">
Infected with: Trojan.Vundo.DTJ

un apercu

PC infecté: virtumonde, rootkit etc...

70 réponses

Votre réponse

Newsletters