Security alert:NetWorm-i.Virus@fp

sined -  
ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   -
Bonjour à tous,
J'ai besoin d'un bon coup de main
Niveau : débutant
windows XP antivirus Norton

le problème : triangle jaune avec ! security Alert: Networm-i.Virus@fp
Norton m'envoie 2 alertes :
DOWNLOADER.MisleadApp. C:\Documents..\installer_en[1].exe
Backdoor.IRC.Bot C:\Docume~1\HP_PRO...\Crack.exe

Je suis passé en mode sans echec et j'ai scanné avec A-SQUARED. Toutes les menaces ont été supprimées à la fin du scan long. J'ai redémarré. Je suis toujours infecté. Qu'est -ce que je peux faire ?
Configuration: Windows XP
Internet Explorer 6.0

19 réponses

  1.
    ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    Bonjour sined,

    on va essayer de t'aider

    Télécharge sur le bureau [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip]SmitfraudFix.zip[/url]
    => Double clic sur SmitfraudFix.zip
    => Extraire tout
    => Double clic sur SmitfraudFix
    => Double Clic sur SmitfraudFix.cmd
    => Choisir Option 1
    => poste le rapport

    ensuite

    Télécharge sur le bureau

    ftp://ftp.commentcamarche.com/download/HJTInstall.exe

    = Double-clic dessus pour l'installer
    = Clic Do a system scan and save the log
    =coller le rapport
    si problème voir l'aide
    http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

    @+
    0
    1. sined
       
      poste le rapport Smitfraud ? Je te le communique ?
      0
  2. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    oui tu fait un copier coller sur le forum (tu le poste)
    0
    1. sined
       
      SmitFraudFix v2.296

      Rapport fait à 13:04:04,34, 27/02/2008
      Executé à partir de C:\Documents and Settings\HP_Propri‚taire\Bureau\SmitfraudFix\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode normal

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
      c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      c:\Program Files\Norton Internet Security\ISSVC.exe
      c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
      c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
      c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
      c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\a-squared Anti-Malware\a2service.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      C:\WINDOWS\system32\PnkBstrA.exe
      C:\WINDOWS\system32\svchost.exe
      c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\NetProject\scit.exe
      C:\Program Files\NetProject\sbmntr.exe
      C:\Program Files\NetProject\scm.exe
      C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\Program Files\NetProject\sbsm.exe
      C:\WINDOWS\system32\hphmon06.exe
      C:\HP\KBD\KBD.EXE
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\WINDOWS\ALCXMNTR.EXE
      C:\Program Files\QuickTime\qttask.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts


      »»»»»»»»»»»»»»»»»»»»»»»» C:\


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\HP_Propri‚taire


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\HP_Propri‚taire\Application Data


      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\HP_PRO~1\Favoris


      »»»»»»»»»»»»»»»»»»»»»»»» Bureau


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

      C:\Program Files\NetProject\ PRESENT !

      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Ma page d'accueil"


      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      IEDFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri


      »»»»»»»»»»»»»»»»»»»»»»»» VACFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      VACFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri


      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}"="djuka"

      [HKEY_CLASSES_ROOT\CLSID\{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}\InProcServer32]
      @="C:\WINDOWS\system32\wbchha.dll"

      [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}\InProcServer32]
      @="C:\WINDOWS\system32\wbchha.dll"



      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Rustock



      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: Realtek RTL8139/810x Family Fast Ethernet NIC - Miniport d'ordonnancement de paquets
      DNS Server Search Order: 192.168.30.1
      DNS Server Search Order: 0.0.0.0

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0


      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


      »»»»»»»»»»»»»»»»»»»»»»»» Fin
      0
      1. sined > sined
         
        rapport Hijackthis
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 13:30:31, on 27/02/2008
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
        c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
        c:\Program Files\Norton Internet Security\ISSVC.exe
        c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
        c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
        c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
        c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\a-squared Anti-Malware\a2service.exe
        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        C:\Program Files\Bonjour\mDNSResponder.exe
        C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
        C:\WINDOWS\system32\PnkBstrA.exe
        C:\WINDOWS\system32\svchost.exe
        c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\NetProject\scit.exe
        C:\Program Files\NetProject\sbmntr.exe
        C:\Program Files\NetProject\scm.exe
        C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        C:\windows\system\hpsysdrv.exe
        C:\WINDOWS\AGRSMMSG.exe
        C:\Program Files\NetProject\sbsm.exe
        C:\WINDOWS\system32\hphmon06.exe
        C:\HP\KBD\KBD.EXE
        C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\WINDOWS\ALCXMNTR.EXE
        C:\Program Files\QuickTime\qttask.exe
        C:\WINDOWS\system32\LVCOMSX.EXE
        C:\Program Files\Logitech\Video\LogiTray.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\Program Files\Logitech\Video\FxSvr2.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe
        C:\WINDOWS\system32\notepad.exe
        C:\WINDOWS\system32\notepad.exe
        C:\WINDOWS\system32\notepad.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: e404 helper - {A3D76B96-30B9-4DCC-9B3D-D12E31280D29} - C:\Program Files\Helper\1203874509.dll (file missing)
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
        O2 - BHO: (no name) - {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383} - C:\Program Files\NetProject\sbmdl.dll
        O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
        O3 - Toolbar: Web Application - {81705D67-3F73-4983-859B-97D0922E5ABE} - C:\Program Files\NetProject\wamdl.dll
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
        O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
        O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
        O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
        O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
        O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
        O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
        O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
        O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
        O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\NetProject\scit.exe
        O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\NetProject\sbmntr.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - S-1-5-18 Startup: AutoTBar.exe (User 'SYSTEM')
        O4 - .DEFAULT Startup: AutoTBar.exe (User 'Default user')
        O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
        O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
        O4 - Global Startup: Audible Download Manager.lnk = C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.explorertool.net/redirect.php (file missing)
        O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.explorertool.net/redirect.php (file missing)
        O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
        O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O22 - SharedTaskScheduler: djuka - {ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c} - C:\WINDOWS\system32\wbchha.dll (file missing)
        O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
        O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
        O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
        O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
        O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
        O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
        O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
        O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
        O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
        O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
        0
  3. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    * Redémarre l'ordinateur en mode sans échec
    (tapoter F8 au boot pour obtenir le menu de démarrage ou http://service1.symantec.com/

    * Double clique sur smitfraudfix.cmd

    * Sélectionne 2 pour supprimer les fichiers responsables de l'infection.

    A la question Voulez-vous nettoyer le registre ? répondre O (oui) afin de débloquer le fond d'écran et supprimer les clés de démarrage automatique de l'infection.

    A la question Corriger le fichier infecté ? répondre O (oui) pour remplacer le fichier corrompu.

    * Redémarre en mode normal et poste le rapport ici

    N.B.: Cette étape élimine les fichiers infectieux détectés à l'étape #1
    Attention que l'option 2 de l'outil supprime le fond d'écran !

    reposte un nouveau rapport hijackthis à l'issu stp
    0
  4. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    il faut le rapport de smitfraudfix en option 2 que tu as du faire en mode sans echec
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. sined
     
    de retour
    mitFraudFix v2.296

    Rapport fait à 15:32:23,04, 27/02/2008
    Executé à partir de C:\Documents and Settings\HP_Propri‚taire\Bureau\SmitfraudFix\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    "{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}"="djuka"

    [HKEY_CLASSES_ROOT\CLSID\{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}\InProcServer32]
    @="C:\WINDOWS\system32\wbchha.dll"

    [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}\InProcServer32]
    @="C:\WINDOWS\system32\wbchha.dll"

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

    S!Ri's WS2Fix: LSP not Found.

    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

    C:\Program Files\NetProject\ supprimé

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0

    »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

    »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

    Nettoyage terminé.

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll
    0
  7. sined
     
    et enfin le drenier rapport hijackthis
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:48:15, on 27/02/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
    c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton Internet Security\ISSVC.exe
    c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\a-squared Anti-Malware\a2service.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\system32\hphmon06.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\ALCXMNTR.EXE
    c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Logitech\Video\FxSvr2.exe
    C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
    C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - S-1-5-18 Startup: AutoTBar.exe (User 'SYSTEM')
    O4 - .DEFAULT Startup: AutoTBar.exe (User 'Default user')
    O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
    O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
    O4 - Global Startup: Audible Download Manager.lnk = C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
    0
  8. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    Télécharge:
    http://www.grisoft.cz/filedir/inst/avgas-setup-7.5.1.43.exe AVG-AntiSpyware
    = Installer
    = Le lancer
    = Clic : Mise à jour
    ------
    = Redémarre en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
    Attention, pas d’accès à internet dans ce mode. Enregistre ou imprime les consignes.

    Relance le Pc et tapote la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
    Avec les touches « flèches », sélectionne Mode sans échec ==> entrée ==>nom utilisateur habituel
    -------
    = Dans ANALYSE ( en forme de loupe )
    ==> Paramètres ==> sous COMMENT REAGIR==>clic sur Actions recommandées ==>Quarantaine
    ==> Clic : Analyse complète du système
    En fin de scan ( qui est assez long)
    ==> Clic Appliquer toutes les actions <== ceci Très important
    ==> Clic Sauvegarder rapport puis Enregistrer sous et choisir bureau
    -------
    En mode normal
    colle le rapport
    0
    1. sined
       
      ---------------------------------------------------------
      AVG Anti-Spyware - Rapport d'analyse
      ---------------------------------------------------------

      + Créé à: 22:25:55 27/02/2008

      + Résultat de l'analyse:



      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@shopping.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@waterfrontmedia.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
      C:\Documents and Settings\Sylvie\Cookies\sylvie@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@adbrite[3].txt -> TrackingCookie.Adbrite : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@ads.adbrite[3].txt -> TrackingCookie.Adbrite : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@adrevolver[1].txt -> TrackingCookie.Adrevolver : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
      C:\Documents and Settings\Sylvie\Cookies\sylvie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@estat[2].txt -> TrackingCookie.Estat : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
      C:\Documents and Settings\Sylvie.NOM-EB85C523610\Cookies\sylvie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
      C:\Documents and Settings\Sylvie\Cookies\sylvie@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
      C:\Documents and Settings\Sylvie.NOM-EB85C523610\Cookies\sylvie@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@web-stat[1].txt -> TrackingCookie.Web-stat : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
      C:\Documents and Settings\Boris\Cookies\boris@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
      C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@zedo[2].txt -> TrackingCookie.Zedo : Nettoyé.
      C:\Documents and Settings\Boris\Shared\01 Track 1.wma -> Trojan.Wimad.a : Nettoyé.


      Fin du rapport
      0
  9. sined
     
    Est -ce que tu penses que le pc est propre maintenant ?
    A ton avis je dois laisser Norton en anti virus ou en choisir un autre ?
    Et encore une dernière question si tu le permets : la fonction restauration automatique de Windows doit - elle être cochée ou décochée (dans système) ?
    Merci de ta gentillesse.
    0
  10. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    Bonsoir

    pour vérif
    fait un scan en ligne

    avec bitdefender et colle le rapport

    https://www.bitdefender.com/toolbox/

    un tuto
    http://pageperso.aol.fr/rginformatique/mapage/defender.htm

    plus un nouveau rapport hijack stp

    @+
    0
    1. sined
       
      rapport bitdefender :
      0
      1. sined > sined
         
        rapport bitdefender : je n'arrive pas à le poster


        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 09:50:15, on 29/02/2008
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
        c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
        c:\Program Files\Norton Internet Security\ISSVC.exe
        c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
        c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
        c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
        c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\a-squared Anti-Malware\a2service.exe
        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        C:\windows\system\hpsysdrv.exe
        C:\WINDOWS\AGRSMMSG.exe
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        C:\WINDOWS\system32\hphmon06.exe
        C:\HP\KBD\KBD.EXE
        C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
        C:\Program Files\Bonjour\mDNSResponder.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
        C:\WINDOWS\system32\PnkBstrA.exe
        C:\WINDOWS\ALCXMNTR.EXE
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\WINDOWS\system32\LVCOMSX.EXE
        C:\Program Files\Logitech\Video\LogiTray.exe
        c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
        C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\Program Files\Logitech\Video\FxSvr2.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
        C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
        C:\Program Files\iPod\bin\iPodService.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
        C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
        C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
        C:\Program Files\BitDefender\BitDefender 2008\seccenter.exe
        C:\WINDOWS\system32\DllHost.exe
        C:\Program Files\BitDefender\BitDefender 2008\uiscan.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
        O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
        O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
        O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
        O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
        O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
        O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
        O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
        O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
        O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
        O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
        O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
        O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - S-1-5-18 Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe (User 'SYSTEM')
        O4 - .DEFAULT Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe (User 'Default user')
        O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
        O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
        O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
        O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
        O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
        O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
        O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
        O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
        O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
        O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
        O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
        O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
        O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
        O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
        O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
        O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
        0
      2. sined > sined
         
        le rapport bitdefender ( scan full system) est trop lourd. Il détecte encore des infections.
        Je t'envoie quand même le rapport du scan bref.

        nouveau message de norton security :
        virus W32.rajump C:\WINDOWS\TEM...\tmp 0025076b




        <?xml version="1.0" encoding="utf-8"?>
        <?xml-stylesheet type="text/xsl" href="C:\Program Files\BitDefender\BitDefender 2008\Lang\log_format.xsl"?>
        <ScanSession creator="BitDefender Total Security 2008" version="BitDefender UIScanner v.11" creationDate="10:51:52 29/02/2008" originalPath="C:\Documents and Settings\HP_Propriétaire\Application Data\BitDefender\Desktop\Profiles\Logs\my_documents\1204278712_1_00.xml">
        <ScanOptions
        showWarnings="1" >
        <ScanPaths>
        <path id="0000">C:\Documents and Settings\HP_Propriétaire\Mes documents</path>
        <path id="0001">C:\Documents and Settings\HP_Propriétaire\Bureau</path>
        <path id="0002">C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Démarrage</path>
        </ScanPaths>
        <ScanObjects
        scanViruses="1"
        scanAddware="1"
        scanSpyware="1"
        scanApplications="1"
        scanDialers="1"
        scanRootkits="0"
        />
        <TargetSelection
        heuristicScan="1"
        scanArchives="1"
        scanRegistryKeys="1"
        scanRegistry="1"
        scanCookies="1"
        memoryProcesses="1"
        scanBootSectors="0"
        scanEmail="1"
        scanAllFiles="1"
        scanPackedFiles="1"
        scanSubfolders="1"
        includeExtensions=""
        excludeExtensions=""
        />
        <TargetProcessing
        infectedAction="3"
        suspiciousAction="1"
        hiddenAction="1"
        />
        </ScanOptions>
        <EngineSummary
        archivePlugins="41"
        mailPlugins="6"
        scanPlugins="12"
        totalSignatures="963363"
        systemPlugins="4"
        unpackPlugins="7"
        />
        <ScanSummary
        scannedItems="45684"
        infectedItems="0"
        suspiciousItems="0"
        resolvedItems="0"
        scannedArchives="443"
        bootSectorCount="0"
        scannedDirectories="34"
        inputOutputErrors="0"
        virusesNumber="0"
        scanTime="00:00:03:01"
        filesPerSecond="251"
        >
        <FileSummary
        scanned="45283"
        archives="443"
        packed="61"
        infected="0"
        suspicious="0"
        resolved="0"
        deleted="0"
        moved="0"
        copied="0"
        />
        <RegistryKeySummary
        scanned="343"
        infected="0"
        suspicious="0"
        />
        <CookieSummary
        scanned="0"
        infected="0"
        suspicious="0"
        />
        <ProcessSummary
        scanned="58"
        infected="0"
        suspicious="0"
        />
        <MailSummary
        scanned="0"
        infected="0"
        suspicious="0"
        />
        </ScanSummary>
        <ScanDetails>
        </ScanDetails>
        </ScanSession>
        0
  11. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    Bonsoir,

    Télécharge OAD http://sosvirus.changelog.fr/OAD.exe
    - Enregistre le sur ton bureau

    Double clique sur le OAD pour le lancer

    - nom de fichier à rechercher tape ou fais un copier coller de : RavMon.exe
    - Type de recherche : sélectionne l'option 6 puis valide [entree]

    OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé.
    Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé.

    - Fais un copier / coller de ce rapport dans ton prochain post.
    0
    1. sined
       
      01/03/2008 ---- 19:32:15,76

      ----------------------------------
      §§§§§§ [RavMon.exe] §§§§§§
      ----------------------------------
      [X] Registre

      -------------- [ ] rapide
      -- Fichier --- [ ] disque systeme
      ------------- [X] complete


      ********************
      [Registre]
      ********************

      Aucune entrée détectée

      *******************
      [Fichier]
      *******************



      *********************
      [Même date]
      *********************

      Aucun fichier créé à la même date détecté


      Outil Aide Diagnostic By !aur3n7 Version 1.1
      ----------------------------------
      §§§§§ Fin Rapport §§§§§
      ----------------------------------
      0
  12. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    Télécharge Combofix sUBs : http://download.bleepingcomputer.com/sUBs/Combo-Fix.exe
    et sauvegarde le sur ton bureau et pas ailleurs!

    Double-clic sur combofix,
    Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.
    0
    1. sined
       
      Bonjour !

      ComboFix 08-03-01.3 - HP_Propriétaire 2008-03-02 11:41:01.2 - NTFSx86
      Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.177 [GMT 1:00]
      Endroit: C:\Documents and Settings\HP_Propriétaire\Bureau\Combo-Fix.exe
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      ---- Previous Run -------
      .
      C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk
      C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk
      C:\Documents and Settings\Boris\Bureau\Live Safety Center.lnk
      C:\Documents and Settings\Boris\Bureau\Online Security Guide.lnk
      C:\Documents and Settings\Boris\Favoris\Online Security Guide.lnk
      C:\Documents and Settings\Sylvie\Bureau\Live Safety Center.lnk
      C:\Documents and Settings\Sylvie\Bureau\Online Security Guide.lnk
      C:\Documents and Settings\Sylvie\Favoris\Online Security Guide.lnk
      C:\Program Files\Temporary
      C:\Program Files\WinAble
      C:\WINDOWS\cookies.ini
      C:\WINDOWS\Fonts\'
      C:\WINDOWS\Fonts\a.zip
      C:\WINDOWS\system\msn.dat
      C:\x.dat
      C:\z.dat
      D:\Autorun.inf

      .
      ((((((((((((((((((((((((((((( Fichiers créés 2008-02-02 to 2008-03-02 ))))))))))))))))))))))))))))))))))))
      .

      2008-03-01 18:56 . 2008-03-02 11:12 54,156 --ah----- C:\WINDOWS\QTFont.qfn
      2008-03-01 18:56 . 2008-03-01 18:56 1,409 --a------ C:\WINDOWS\QTFont.for
      2008-02-29 15:56 . 2008-02-29 16:01 4,566 --a------ C:\WINDOWS\imsins.BAK
      2008-02-29 14:17 . 2008-03-01 12:11 121 --a------ C:\WINDOWS\bdagent.INI
      2008-02-29 14:14 . 2008-02-29 14:14 <REP> d-------- C:\Documents and Settings\Sylvie.NOM-EB85C523610\Application Data\Grisoft
      2008-02-28 22:50 . 2008-03-01 19:00 <REP> d-------- C:\Program Files\Fichiers communs\BitDefender
      2008-02-28 16:34 . 2008-02-28 16:34 <REP> d-------- C:\Program Files\CCleaner
      2008-02-27 18:05 . 2008-02-27 18:05 <REP> d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Grisoft
      2008-02-27 18:04 . 2008-02-27 18:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
      2008-02-27 18:04 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
      2008-02-27 13:26 . 2008-02-27 13:26 <REP> d-------- C:\Program Files\Trend Micro
      2008-02-27 13:04 . 2008-02-27 15:32 3,102 --a------ C:\WINDOWS\system32\tmp.reg
      2008-02-27 13:02 . 2008-02-27 13:01 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
      2008-02-27 13:02 . 2008-02-27 13:01 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
      2008-02-27 13:02 . 2008-02-27 13:01 86,016 --a------ C:\WINDOWS\system32\VACFix.exe
      2008-02-27 13:02 . 2008-02-27 13:01 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
      2008-02-27 13:02 . 2008-02-27 13:01 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
      2008-02-27 13:02 . 2008-02-27 13:01 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
      2008-02-27 10:12 . 2008-02-27 10:36 <REP> d-------- C:\Program Files\AntiSpyKit 5.3
      2008-02-26 12:17 . 2008-02-26 14:14 <REP> d-------- C:\Program Files\a-squared Anti-Malware
      2008-02-26 09:47 . 1996-08-20 20:37 15,840 --a------ C:\WINDOWS\system32\Machnm1.exe
      2008-02-26 09:47 . 2005-09-25 16:37 5,632 --a------ C:\WINDOWS\system32\Machnm64.sys
      2008-02-26 09:47 . 2008-02-26 09:47 3,120 --a------ C:\WINDOWS\system32\118290.54
      2008-02-26 09:47 . 2008-02-26 09:47 3,120 --a------ C:\WINDOWS\118294.78
      2008-02-26 09:47 . 2003-08-13 00:27 2,304 --a------ C:\WINDOWS\system32\Machnm32.sys
      2008-02-25 18:58 . 2008-02-25 18:58 <REP> d-------- C:\Program Files\XoftSpySE
      2008-02-15 23:01 . 2008-02-15 23:01 <REP> d-------- C:\Program Files\Bonjour
      2008-02-15 22:49 . 2008-02-15 22:49 <REP> d-------- C:\Program Files\Fichiers communs\Macrovision Shared
      2008-02-13 14:08 . 2008-02-13 14:45 <REP> d-------- C:\Program Files\SopCast
      2008-02-13 13:47 . 2008-02-13 13:48 <REP> d-------- C:\Program Files\TVAnts
      2008-02-13 11:57 . 2008-02-13 11:57 682,496 --a------ C:\WINDOWS\system32\CDUninst.exe

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-03-02 10:15 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\OpenOffice.org2
      2008-02-29 20:26 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
      2008-02-29 11:36 3,120 ----a-w C:\Documents and Settings\HP_Propriétaire\Application Data\wklnhst.dat
      2008-02-28 21:44 --------- d-----w C:\Program Files\Norton Internet Security
      2008-02-27 14:54 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\AdobeUM
      2008-02-27 09:36 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
      2008-02-26 20:04 --------- d-----w C:\Program Files\AxBx
      2008-02-26 20:03 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
      2008-02-26 12:35 --------- d-----w C:\Program Files\MSN Messenger
      2008-02-26 08:47 --------- d--h--w C:\Program Files\InstallShield Installation Information
      2008-02-24 22:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
      2008-02-24 21:13 --------- d-----w C:\Documents and Settings\LocalService\Application Data\Sect mags fork
      2008-02-15 22:01 --------- d-----w C:\Program Files\Fichiers communs\Adobe
      2008-02-14 06:26 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
      2008-02-14 06:25 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
      2008-02-04 19:40 --------- d-----w C:\Program Files\GUILD WARS
      2008-02-02 14:49 --------- d-----w C:\Program Files\Easy Internet signup
      2008-01-30 15:04 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
      2008-01-30 14:40 --------- d-----w C:\Program Files\Activision
      2008-01-05 11:27 --------- d-----w C:\Program Files\Samsung
      2008-01-03 12:19 --------- d-----w C:\Program Files\DivX
      2008-01-02 17:35 --------- d-----w C:\Program Files\Microsoft AutoRoute
      2008-01-02 17:30 --------- d-----w C:\Program Files\microsoft money 2005
      2008-01-02 17:26 --------- d-----w C:\Program Files\Microsoft Works
      2007-11-20 18:48 36,864 ----a-w C:\Documents and Settings\Boris\services.exe
      2007-11-20 09:19 5,563 ----a-w C:\Documents and Settings\Sylvie\x.dat
      2007-11-20 09:18 208,456 ----a-w C:\Documents and Settings\Sylvie\z.dat
      2007-11-18 12:13 11,276 ---ha-w C:\Documents and Settings\Boris\x.dat
      2007-11-18 12:12 10,822 ---ha-w C:\Documents and Settings\Boris\z.dat
      2007-10-12 04:39 4,006 ----a-w C:\Documents and Settings\Boris\Application Data\wklnhst.dat
      2007-09-01 14:50 4,990 ----a-w C:\Documents and Settings\Sylvie\Application Data\wklnhst.dat
      2007-08-26 15:26 78,520 ----a-w C:\Documents and Settings\Sylvie\Application Data\GDIPFONTCACHEV1.DAT
      2007-03-15 06:29 262,032 ----a-w C:\Program Files\emoticones.exe
      2007-03-07 13:10 65,568 ----a-w C:\Documents and Settings\Boris\Application Data\GDIPFONTCACHEV1.DAT
      2006-07-06 19:28 218,112 ----a-w C:\Program Files\HijackThis.exe
      .

      ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "msnmsgr"="C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe" [ ]
      "Configuration de la C-BOX"="C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe" [2004-12-21 18:17 395264]
      "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-13 13:18 68856]
      "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [ ]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2005-01-01 23:09 32881]
      "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 17:04 52736]
      "AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 18:06 88363 C:\WINDOWS\AGRSMMSG.exe]
      "HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 19:53 49152]
      "HPHmon06"="C:\WINDOWS\system32\hphmon06.exe" [2004-06-07 19:43 659456]
      "KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 20:02 61440]
      "Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 21:43 233472]
      "ccApp"="c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-02-21 16:29 58984]
      "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-11-04 04:10 344064]
      "AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 21:47 57344 C:\WINDOWS\ALCXMNTR.EXE]
      "PS2"="C:\WINDOWS\system32\ps2.exe" [2004-10-25 22:17 90112]
      "LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 22:54 253952]
      "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-11-14 23:43 286720]
      "LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 11:52 221184]
      "LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2004-10-08 12:31 458752]
      "LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2004-10-08 12:24 217088]
      "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-15 13:11 267048]
      "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]

      C:\Documents and Settings\Sylvie\Menu D‚marrer\Programmes\D‚marrage\
      WKCALREM.LNK - C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe [2004-07-12 01:54:26 15360]

      C:\Documents and Settings\HP_Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
      OpenOffice.org 2.2.lnk - C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe [2007-02-02 16:54:56 393216]

      C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
      HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-05 02:28:24 258048]
      Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-02-20 18:15:04 450560]
      Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 08:01:04 83360]

      [HKEY_LOCAL_MACHINE\software\microsoft\security center]
      "AntiVirusDisableNotify"=dword:00000001

      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
      "DisableMonitoring"=dword:00000001

      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
      "DisableMonitoring"=dword:00000001

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
      "EnableFirewall"= 0 (0x0)

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "%windir%\\system32\\sessmgr.exe"=
      "C:\\Program Files\\Messenger\\msmsgs.exe"=
      "C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
      "C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
      "C:\\WINDOWS\\system32\\PnkBstrA.exe"=
      "C:\\WINDOWS\\system32\\PnkBstrB.exe"=
      "C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
      "C:\\Program Files\\iTunes\\iTunes.exe"=

      R2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique;"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" [2006-08-03 17:29]
      R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]
      S3 CoachUsb;Coach Digital Camera on USB;C:\WINDOWS\system32\DRIVERS\CoachUsb.sys [2004-01-22 12:41]
      S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]

      .
      Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
      "2008-02-19 21:43:08 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
      - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
      "2008-02-02 14:49:15 C:\WINDOWS\Tasks\Connexion facile à Internet.job"
      - C:\Program Files\Easy Internet signup\HPSdpApp.exe
      "2008-02-15 19:00:00 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - Denis.job"
      - C:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exeh/task:
      "2008-02-29 20:04:13 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - HP_Propriétaire.job"
      - c:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exeh/task:
      .
      **************************************************************************

      catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-03-02 11:43:42
      Windows 5.1.2600 Service Pack 2 NTFS

      Balayage processus cachés ...

      Balayage caché autostart entries ...

      Balayage des fichiers cachés ...

      Scan terminé avec succès
      Les fichiers cachés: 0

      **************************************************************************
      .
      Temps d'accomplissement: 2008-03-02 11:44:56
      ComboFix-quarantined-files.txt 2008-03-02 10:44:46
      .
      2008-01-29 11:47:52 --- E O F ---
      0
      1. sined > sined
         
        Il y a un "Hic". Après le passage de Combofix, je n'arrive plus à me connecter sur ma boîte de réception Hotmail par exemple ?
        0
      2. sined > sined
         
        Pour la connexion aux sites sécurisés : pas de souçi, c'est rétabli
        J'ai simplement désactivé/réactivé Norton
        Merci
        0
  13. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    très bien maintenant

    Télécharge sur le bureau
    http://sosvirus.changelog.fr/MSNFix.zip
    = Clic-Droit sur MSNFix.zip
    = Extraire ici ( ou extraire sans confirmation ou tout ou unzip)
    = Double-Clic sur le dossier MSNfix qui vient de se créer
    = Double-Clic MSNfix ==> Symbole roue dentée
    = Choisir R
    = Choisir ensuite N ( si infection)
    = Enregistre le rapport
    redémarre le PC et relancer MSN tu sauras ainsi si tout est supprimé

    ensuite fait un scan en ligne

    avec bitdefender et colle le rapport

    https://www.bitdefender.com/toolbox/

    un tuto
    http://pageperso.aol.fr/rginformatique/mapage/defender.htm
    avec un nouveau hijack
    @+
    0
    1. sined
       
      Bonjour,

      MSNFix 1.674

      C:\Documents and Settings\HP_Propriétaire\Bureau\MSNFix\MSNFix
      Fix exécuté le 03/03/2008 - 9:21:38,54 By HP_Propriétaire
      mode normal

      ************************ Recherche les fichiers présents

      ... C:\WINDOWS\system32\tmp.txt
      ... C:\?.bat

      ************************ Recherche les dossiers présents

      ... C:\Temp\




      ************************ Suppression des fichiers

      .. OK ... C:\WINDOWS\system32\tmp.txt
      .. OK ... C:\?.bat


      ************************ Suppression des dossiers

      /!\ ... C:\Temp\


      ************************ Nettoyage du registre



      ************************ Fichiers suspects

      Aucun Fichier trouvé


      Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 03032008_ 9224315.zip



      ------------------------------------------------------------------------
      Auteur : !aur3n7 Contact: https://www.ionos.fr/
      ------------------------------------------------------------------------

      --------------------------------------------- END ---------------------------------------------
      0
  14. sined
     
    BitDefender Online Scanner

    Scan report generated at: Mon, Mar 03, 2008 - 11:27:45

    Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;

    Statistics

    Time
    01:35:41

    Files
    577028

    Folders
    16329

    Boot Sectors
    3

    Archives
    16229

    Packed Files
    36021

    Results

    Identified Viruses
    15

    Infected Files
    245

    Suspect Files
    0

    Warnings
    0

    Disinfected
    0

    Deleted Files
    490

    Engines Info

    Virus Definitions
    984963

    Engine build
    AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

    Scan plugins
    16

    Archive plugins
    41

    Unpack plugins
    7

    E-mail plugins
    6

    System plugins
    5

    Scan Settings

    First Action
    Disinfect

    Second Action
    Delete

    Heuristics
    Yes

    Enable Warnings
    Yes

    Scanned Extensions
    *;

    Exclude Extensions

    Scan Emails
    Yes

    Scan Archives
    Yes

    Scan Packed
    Yes

    Scan Files
    Yes

    Scan Boot
    Yes

    Scanned File
    Status

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0118465C.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0118465C.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\022F0DD8.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\022F0DD8.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03407653.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03407653.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\045742F6.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\045742F6.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\057D05B2.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\057D05B2.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\06665A05.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\06665A05.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07870D20.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07870D20.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07D211F4.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07D211F4.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\08441985.exe=>(Quarantine-2)
    Infected with: GenPack:Trojan.Downloader.Swizzor.FI

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\08441985.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\08B1302C.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\08B1302C.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\09782762.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.IstBar.PJ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\09782762.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A256293.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A256293.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0B3B5361.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0B3B5361.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0C571829.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0C571829.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D7B6270.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D7B6270.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F6A5FF5.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F6A5FF5.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F91169B.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F91169B.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10150556.EXE=>(Quarantine-2)
    Detected with: Application.Pup.A

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10150556.EXE=>(Quarantine-2)
    Disinfection failed

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10150556.EXE=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10A7076A.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10A7076A.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1161609D.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1161609D.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12A22713.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12A22713.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14462185.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14462185.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15666D42.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15666D42.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\169C1EDC.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\169C1EDC.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\17AE65AE.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\17AE65AE.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\189B28F0.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\189B28F0.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1A4206D8.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1A4206D8.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1B0232D6.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1B0232D6.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1C1250B3.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1C1250B3.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1E892D43.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1E892D43.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1F9F0EC2.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1F9F0EC2.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20570798.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20570798.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2149651C.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2149651C.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2183771D.exe=>(Quarantine-2)
    Detected with: Application.Joke.Crazymouse.A

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2183771D.exe=>(Quarantine-2)
    Disinfection failed

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2183771D.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\220A1248.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\220A1248.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2392103D.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2392103D.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\24530107.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\24530107.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\256B0890.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\256B0890.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\26955769.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\26955769.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\27991429.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\27991429.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\286F297D.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\286F297D.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\29435E9E.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\29435E9E.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2A5F2365.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2A5F2365.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2B3D4A71.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2B3D4A71.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2C691C50.DLL=>(Quarantine-2)
    Infected with: Trojan.Vundo.DQO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2C691C50.DLL=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D363DFC.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D363DFC.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D5B2FD9.exe=>(Quarantine-2)
    Infected with: GenPack:Trojan.Downloader.Swizzor.DV

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D5B2FD9.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D5E59D5.exe=>(Quarantine-2)
    Infected with: GenPack:Trojan.Downloader.Swizzor.CB

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D5E59D5.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2E2919F9.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2E2919F9.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2EFD0250.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2EFD0250.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2FDD5B10.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2FDD5B10.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\30B52E23.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\30B52E23.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\31842C06.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\31842C06.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3258249F.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3258249F.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\332F77B2.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\332F77B2.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\34050CE1.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\34050CE1.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\34FA2A38.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\34FA2A38.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\35CE5A40.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DWS

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\35CE5A40.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\361F3077.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\361F3077.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\363D31FF.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\363D31FF.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\37192070.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\37192070.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\37F70026.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\37F70026.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\38D3757D.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\38D3757D.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\39AD7A45.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\39AD7A45.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3B9361B3.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3B9361B3.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3C6D0797.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3C6D0797.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D085006.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DWS

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D085006.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D793B30.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D793B30.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3E7924FE.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3E7924FE.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3F4922A6.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3F4922A6.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3FB263A5.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3FB263A5.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\401E1F05.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\401E1F05.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\41833DCD.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\41833DCD.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\422F5EE8.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\422F5EE8.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\42C24046.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\42C24046.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\43A3114E.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\43A3114E.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4472394E.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4472394E.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4548397F.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4548397F.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\461A0976.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\461A0976.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\46EE61AF.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\46EE61AF.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\47C85EBE.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\47C85EBE.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\48343CF1.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\48343CF1.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4933132F.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4933132F.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4A127774.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4A127774.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4AE23955.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4AE23955.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4B6C1506.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4B6C1506.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4C185C7C.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4C185C7C.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4CF35B3C.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4CF35B3C.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4DDE1A0C.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4DDE1A0C.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4EA51B31.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4EA51B31.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4F3F0D41.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4F3F0D41.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\505B154F.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\505B154F.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\511670CD.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\511670CD.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5147780F.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5147780F.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\52132411.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\52132411.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\533C298D.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\533C298D.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\545316F2.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\545316F2.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54AC7CD9.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DWS

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54AC7CD9.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54B250D1.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DWS

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54B250D1.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54E32814.exe=>(Quarantine-2)
    Detected with: Application.Joke.Bugs.A

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54E32814.exe=>(Quarantine-2)
    Disinfection failed

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54E32814.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55485C2C.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DWS

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55485C2C.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EA42ED.exe=>(Quarantine-2)
    Detected with: Application.Aseye.BEK

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EA42ED.exe=>(Quarantine-2)
    Disinfection failed

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EA42ED.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EE6CEA.BAK=>(Quarantine-2)
    Detected with: Application.Aseye.BEK

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EE6CEA.BAK=>(Quarantine-2)
    Disinfection failed

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EE6CEA.BAK=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56543EE7.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56543EE7.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56DF75DE.htm=>(Quarantine-2)
    Infected with: Generic.XPL.ADODB.98A268A7

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56DF75DE.htm=>(Quarantine-2)
    Disinfection failed

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56DF75DE.htm=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\57DE51B7.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\57DE51B7.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\58F6517A.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\58F6517A.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\59B93EB4.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\59B93EB4.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5AD53B54.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5AD53B54.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C0413EC.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C0413EC.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C8F719F.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C8F719F.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5D50141B.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5D50141B.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5E4A1283.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5E4A1283.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5FC4345A.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5FC4345A.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\60D83F91.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\60D83F91.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\61A47B21.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\61A47B21.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\626E7B6B.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\626E7B6B.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\63D060CA.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\63D060CA.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\64730E92.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\64730E92.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\65CE00B9.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\65CE00B9.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\66FB1887.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\66FB1887.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\67F47EBE.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\67F47EBE.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\682D6E82.bad=>(Quarantine-2)
    Infected with: Trojan.Vundo.DWS

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\682D6E82.bad=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\693E0FEC.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\693E0FEC.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6A5A38F5.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6A5A38F5.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6B736F7F.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6B736F7F.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6C64296F.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6C64296F.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D1F6BA8.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D1F6BA8.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D2C139A.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D2C139A.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D2F3D96.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DQO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D2F3D96.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DE916C9.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DQO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DE916C9.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DF314BE.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DF314BE.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DFA68B7.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DFA68B7.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DFC018D.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DFC018D.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E003CB0.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E003CB0.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E0D64A2.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E0D64A2.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E345C76.dll=>(Quarantine-2)
    Infected with: Trojan.Dropper.Agent.TKZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E345C76.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E380673.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E380673.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6F632B6E.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6F632B6E.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6FA21B76.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DWS

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6FA21B76.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6FAC2CA0.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6FAC2CA0.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\71B87D02.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\71B87D02.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\73812555.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\73812555.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\74B2030E.bad=>(Quarantine-2)
    Detected with: Application.Winantivirus.F

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\74B2030E.bad=>(Quarantine-2)
    Disinfection failed

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\74B2030E.bad=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7521717A.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7521717A.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\767D0DE7.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\767D0DE7.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\79074DDB.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\79074DDB.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7BE8251E.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7BE8251E.exe=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7D0E4205.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7D0E4205.dll=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7E7273F6.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7E7273F6.tmp=>(Quarantine-2)
    Deleted

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7F870D8D.tmp=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7F870D8D.tmp=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000620.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000620.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000621.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000621.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000622.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000622.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000623.dll=>(Quarantine-2)
    Infected with: Trojan.Virtumonde.IO

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000623.dll=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000624.exe=>(Quarantine-2)
    Infected with: GenPack:Trojan.Downloader.Swizzor.FI

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000624.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000625.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000625.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000626.exe=>(Quarantine-2)
    Infected with: Trojan.Downloader.IstBar.PJ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000626.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000627.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000627.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000628.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000628.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000629.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000629.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000630.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000630.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000631.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000631.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000632.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000632.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000633.EXE=>(Quarantine-2)
    Detected with: Application.Pup.A

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000633.EXE=>(Quarantine-2)
    Disinfection failed

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000633.EXE=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000634.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000634.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000635.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000635.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000636.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000636.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000637.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000637.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000638.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000638.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000639.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000639.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000640.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000640.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000641.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000641.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000642.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000642.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000643.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000643.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000644.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000644.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000645.exe=>(Quarantine-2)
    Detected with: Application.Joke.Crazymouse.A

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000645.exe=>(Quarantine-2)
    Disinfection failed

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000645.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000646.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000646.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000647.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000647.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000648.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000648.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000649.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000649.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000650.DLL=>(Quarantine-2)
    Infected with: Trojan.Vundo.DQO

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000650.DLL=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000651.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000651.exe=>(Quarantine-2)
    Disinfection failed

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000651.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000652.exe=>(Quarantine-2)
    Infected with: GenPack:Trojan.Downloader.Swizzor.DV

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000652.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000653.exe=>(Quarantine-2)
    Infected with: GenPack:Trojan.Downloader.Swizzor.CB

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000653.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000654.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000654.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000655.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000655.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000656.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000656.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000657.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000657.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000658.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DWS

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000658.dll=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000659.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000659.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000660.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000660.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000661.dll=>(Quarantine-2)
    Infected with: Trojan.Vundo.DWS

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000661.dll=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000662.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000662.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000663.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000663.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000664.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000664.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000665.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000665.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000666.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000666.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000667.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000667.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000668.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000668.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000669.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000669.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000670.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000670.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000671.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000671.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000672.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000672.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000673.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000673.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000674.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000674.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000675.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000675.exe=>(Quarantine-2)
    Deleted

    C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000676.exe=>(Quarantine-2)
    Infected with: Trojan.Agent.AFSZ

    C:\System Volume Information\_restor
    0
  15. sined
     
    Et enfin :

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:40:29, on 03/03/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
    c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton Internet Security\ISSVC.exe
    c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\a-squared Anti-Malware\a2service.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\hphmon06.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\svchost.exe
    c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
    C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Logitech\Video\FxSvr2.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
    O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
    0
  16. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    Bonsoir

    très bien ;-)

    relance hijack et coche ceci
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
    ensuite clic sur fix checked

    redémarre ton pc et dit moi si tu as encore des soucis
    @+
    0
  17. sined
     
    Voilà, j'ai suivi tes instructions mais je n'ai plus trouvé :
    04 - .DEFAULT User Startup: AutoTBar.exe (User'Default user')

    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Logitech\Video\FxSvr2.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Symantec\LiveUpdate\AUpdate.exe
    C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    C:\Program Files\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
    O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
    0
  18. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    as tu encore des soucis ?
    0
    1. sined
       
      A prioiri, non. Et ce grâce à toi !
      L'échange a été long mais constructif.
      Merci pour tout.
      0
  19. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    Bonsoir

    Maintenant que ton PC n'est plus infecté, désactive ta "Restauration du système" puis réactive la afin de créer un point de restauration sain.

    * Désactivation :
    Cliquer droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > cocher la case "Désactiver la Restauration du système sur tous les lecteurs"
    > Appliquer patiente jusqu a que cela soit marqué "désactivée" puis Ok.

    * Activation :
    Suivre le même chemin ; décocher la case "Désactiver la Restauration du système sur tous les lecteurs"
    > Appliquer attends que cela soit a nouveau sur "surveillance" puis Ok. Redémarrer l'ordinateur..

    @+
    0
    1. sined
       
      Voilà, c'est fait.
      Merci @+
      0
  20. ep44 Messages postés 7415 Date d'inscription   Statut Contributeur Dernière intervention   3
     
    bon et bien bonne chance pour la suite
    ;-)
    0

Discussions similaires

Security boot fail lors du démarrage
Steu -
Thiecoss -

5 réponses
SecurityHealth est a désactiver ou pas au démarrage de W10 Pro 64 ?
Walti55 -
Walti55 -

2 réponses
Comment retirer le SECURE BOOT ?
Elparigo60 -
ibounwali -

10 réponses
Security Boot Fail Windows 10 Acer
benjamin5800 -
benjamin5800 -

22 réponses
Analyse de l'appli "AI SECURITY"
cl06 -
CCMBot -

1 réponse