Sujet Précédent Sujet Suivant

Infecté par Email-Worm.Win32.Bagle.of

Fermé
Godzi - 24 janv. 2008 à 15:44
 godzi - 8 mars 2008 à 15:12
Bonjour,

Je suis infecté par le virus "Email-Worm.Win32.Bagle.of"
Ce virus ralentit considérablement mon PC, et surtout, il empeche de faire fonctionner tout type d'antivirus

J'ai fait un scan en ligne avec panda qui detecte le virus "bagle"

Voici le rapport Hijack

Pouvez vous m'aider?
merci!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\windows\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Aide mémoire\TrayIcon.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\Program Files\Aide mémoire\Aide mémoire.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\X-Chat 2\xchat.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\secpol.exe,
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\RunOnce: [Panda_cleaner] C:\WINDOWS\system32\ACTIVE~1\pavdr.exe C:\WINDOWS\system32\pavdr_actions.sys
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Aide mémoire.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\prxernsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase4009.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla Server.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
A voir également:

4 réponses

Réponse 1 / 4
Kristopher Messages postés 3731 Date d'inscription vendredi 18 novembre 2005 Statut Contributeur Dernière intervention 10 juillet 2009 105
24 janv. 2008 à 16:24
Salut,

Normalement, le scan en ligne avec Panda devrait te débarasser du virus, ce n'est pas le cas dis-tu?

En tout cas, bagle n'apparait pas dans ton log HijackThis !

Fais un scan en ligne ici pour voir :

https://www.bitdefender.fr/

Courage,
Kris
0
Réponse 2 / 4
Godzi
24 janv. 2008 à 21:42
Salut Kris
Le scan panda me disait:

Incident Status Location

Virus:w32/bagle.hx.worm Disinfected Operating system
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@ad.yieldmanager[1].txt
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@adtech[1].txt
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@advertising[2].txt
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@apmebf[2].txt
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@atdmt[2].txt
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@atdmt[3].txt
Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@bluestreak[1].txt
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@bs.serving-sys[1].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@com[1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@doubleclick[1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@doubleclick[2].txt
Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@fe.lea.lycos[2].txt
Spyware:Cookie/Comclick Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@fl01.ct2.comclick[1].txt
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@mediaplex[1].txt
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@mediaplex[2].txt
Spyware:Cookie/MetriWeb Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@metriweb[1].txt
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@questionmarket[1].txt
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@serving-sys[2].txt
Spyware:Cookie/Smartadserver Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@smartadserver[2].txt
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@statcounter[1].txt
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@tradedoubler[2].txt
Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@weborama[1].txt
Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@weborama[3].txt
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@xiti[1].txt
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Francois Kadziola\Cookies\francois_kadziola@xiti[2].txt
Virus:W32/Bagle.RC.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\0TEZG4V5\b64_1[1].jpg
Virus:W32/Bagle.RC.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\95IWZK1B\b64_1[1].jpg
Virus:W32/Bagle.QV.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\95IWZK1B\b64_2[1].jpg
Virus:W32/Bagle.QV.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\95IWZK1B\b64_2[2].jpg
Virus:W32/Bagle.QV.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\95IWZK1B\b64_2[3].jpg
Virus:W32/Bagle.QV.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\95IWZK1B\b64_2[4].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\95IWZK1B\b64_31[1].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\95IWZK1B\b64_31[2].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\95IWZK1B\b64_31[3].jpg
Virus:W32/Bagle.RC.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\E8UGSWV5\b64_1[1].jpg
Virus:W32/Bagle.QV.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\E8UGSWV5\b64_2[1].jpg
Virus:W32/Bagle.QV.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\E8UGSWV5\b64_2[2].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\E8UGSWV5\b64_31[1].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\E8UGSWV5\b64_31[2].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\E8UGSWV5\b64_31[3].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\E8UGSWV5\b64_31[4].jpg
Virus:W32/Bagle.RC.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\PSRATCIL\b64_1[1].jpg
Virus:W32/Bagle.RC.worm Disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\PSRATCIL\b64_1[2].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\PSRATCIL\b64_31[1].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\PSRATCIL\b64_31[2].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\PSRATCIL\b64_31[3].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\PSRATCIL\b64_31[4].jpg
Possible Virus. Not disinfected C:\Documents and Settings\Francois Kadziola\Local Settings\Temporary Internet Files\Content.IE5\PSRATCIL\b64_31[5].jpg
Hacktool:HackTool/EvID Not disinfected C:\Documents and Settings\Francois Kadziola\Mes documents\Logiciels\Proxy\EvID4226Patch.exe
Hacktool:HackTool/EvID Not disinfected C:\Documents and Settings\Francois Kadziola\Mes documents\Logiciels\Proxy\EvID4226Patch223d-en.zip[EvID4226Patch.exe]
Security Risk:HackTool/Gendel.A Not disinfected C:\gendel32.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\105078.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\14723281.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\14727250.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\14729625.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\14758890.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\14765062.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\14768453.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\14811203.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\14813093.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\14813671.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\29402171.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\29407687.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\29412687.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\29648093.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\29760843.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\29778234.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\29782640.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\3008390.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\3012578.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\3013531.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\44538437.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\44539640.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\44711734.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\44722125.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\44727265.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\46906.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\48062.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\48218.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\49531.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\49750.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\51328.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\53390.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\54625.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\56109.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\56500.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\56531.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\58078.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\58468.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\58968.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\59422906.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\59438140.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\59444937.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\59605359.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\59637781.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\59643843.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\60406.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\60734.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\62937.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\74238906.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\74252484.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\drivers\down\74256750.exe
Virus:W32/Bagle.RC.worm Disinfected C:\WINDOWS\system32\drivers\down\98281.exe
Possible Virus. Renamed C:\WINDOWS\system32\mdelk.exe
Virus:Trj/Wow.SB Disinfected C:\WINDOWS\system32\secpol.exe
Possible Virus. Renamed


En gros beaucoup de virus !
Je vais refaire un scan en ligne, mais mon PC est toujours aussi lent et les antivirus ne veulent pas s'lalumer donc je suppose tjs etre sous le joug de ce virus!

Merci encore
0
Réponse 3 / 4
Godzi
25 janv. 2008 à 20:31
VOici le rapport bitdefender online
http://rapidshare.de/files/38404748/bitdefender.txt.html

Il semblerait qu"il ai supprimé les fichier sinfectés mais le virus reste présent car les antivirus ne peuvent toujorus pas fonctionner
(je recois le message "avast n'est pas une application win32 valide")

Une idée?
0
Réponse 4 / 4
godzi
8 mars 2008 à 15:12
à l'aide
0

Discussions similaires

Compte facebook piraté, mail chngé, appareils deconnectés
SnkFan -
MPMP10 -

8 réponses
je voudrais récupérer mon adresse e mail
clobel -
Lucio -

19 réponses
compte facebook piraté et adresse email changé
keseh -
Lapourax -

2 réponses
c quoi Email ID
causette -
Wiem -

5 réponses
Supprimer email launcher
criloux -
MEGAGAMER734 -

1 réponse