Security alert:NetWorm-i.Virus@fp
Bonjour à tous,
J'ai besoin d'un bon coup de main
Niveau : débutant
windows XP antivirus Norton
le problème : triangle jaune avec ! security Alert: Networm-i.Virus@fp
Norton m'envoie 2 alertes :
DOWNLOADER.MisleadApp. C:\Documents..\installer_en[1].exe
Backdoor.IRC.Bot C:\Docume~1\HP_PRO...\Crack.exe
Je suis passé en mode sans echec et j'ai scanné avec A-SQUARED. Toutes les menaces ont été supprimées à la fin du scan long. J'ai redémarré. Je suis toujours infecté. Qu'est -ce que je peux faire ?
J'ai besoin d'un bon coup de main
Niveau : débutant
windows XP antivirus Norton
le problème : triangle jaune avec ! security Alert: Networm-i.Virus@fp
Norton m'envoie 2 alertes :
DOWNLOADER.MisleadApp. C:\Documents..\installer_en[1].exe
Backdoor.IRC.Bot C:\Docume~1\HP_PRO...\Crack.exe
Je suis passé en mode sans echec et j'ai scanné avec A-SQUARED. Toutes les menaces ont été supprimées à la fin du scan long. J'ai redémarré. Je suis toujours infecté. Qu'est -ce que je peux faire ?
Configuration: Windows XP Internet Explorer 6.0
19 réponses
Résumé de la discussion
Problème récurrent lié à Windows XP et Norton : des alertes de sécurité affichent un avertissement triangulaire et signalent des malwares tels que DOWNLOADER.MisleadApp et Backdoor.IRC.Bot, sans que l’infection soit éradiquée. Plusieurs réponses proposent des étapes variées : exécution d’outils comme OAD pour repérer RavMon.exe, analyse avec HijackThis, puis utilisation de SmitfraudFix en mode sans échec pour nettoyer les éléments persistants. Des rapports HijackThis détaillent des services variés, des barres d’outils et des éléments de démarrage, indiquant des pistes de nettoyage, de suppression des clés de registre et de remplacement de fichiers infectés. Des éléments supplémentaires indiquent des programmes légitimes cohabitant avec des composants malveillants et soulignent que le nettoyage peut nécessiter plusieurs redémarrages et une vérification des composants de démarrage.
-
ContributeurBonjour sined,
on va essayer de t'aider
Télécharge sur le bureau [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip]SmitfraudFix.zip[/url]
=> Double clic sur SmitfraudFix.zip
=> Extraire tout
=> Double clic sur SmitfraudFix
=> Double Clic sur SmitfraudFix.cmd
=> Choisir Option 1
=> poste le rapport
ensuite
Télécharge sur le bureau
ftp://ftp.commentcamarche.com/download/HJTInstall.exe
= Double-clic dessus pour l'installer
= Clic Do a system scan and save the log
=coller le rapport
si problème voir l'aide
http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm
@+ -
Contributeuroui tu fait un copier coller sur le forum (tu le poste)
-
SmitFraudFix v2.296
Rapport fait à 13:04:04,34, 27/02/2008
Executé à partir de C:\Documents and Settings\HP_Propri‚taire\Bureau\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal
»»»»»»»»»»»»»»»»»»»»»»»» Process
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NetProject\scit.exe
C:\Program Files\NetProject\sbmntr.exe
C:\Program Files\NetProject\scm.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\NetProject\sbsm.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\cmd.exe
»»»»»»»»»»»»»»»»»»»»»»»» hosts
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\HP_Propri‚taire
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\HP_Propri‚taire\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\HP_PRO~1\Favoris
»»»»»»»»»»»»»»»»»»»»»»»» Bureau
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
C:\Program Files\NetProject\ PRESENT !
»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues
»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}"="djuka"
[HKEY_CLASSES_ROOT\CLSID\{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}\InProcServer32]
@="C:\WINDOWS\system32\wbchha.dll"
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}\InProcServer32]
@="C:\WINDOWS\system32\wbchha.dll"
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Rustock
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Realtek RTL8139/810x Family Fast Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.30.1
DNS Server Search Order: 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll
»»»»»»»»»»»»»»»»»»»»»»»» Fin -
@sinedrapport Hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:30:31, on 27/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NetProject\scit.exe
C:\Program Files\NetProject\sbmntr.exe
C:\Program Files\NetProject\scm.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\NetProject\sbsm.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q105&bd=pavilion&pf=desktop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: e404 helper - {A3D76B96-30B9-4DCC-9B3D-D12E31280D29} - C:\Program Files\Helper\1203874509.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383} - C:\Program Files\NetProject\sbmdl.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Web Application - {81705D67-3F73-4983-859B-97D0922E5ABE} - C:\Program Files\NetProject\wamdl.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\NetProject\scit.exe
O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\NetProject\sbmntr.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: AutoTBar.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: AutoTBar.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Audible Download Manager.lnk = C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.explorertool.net/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.explorertool.net/redirect.php (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O22 - SharedTaskScheduler: djuka - {ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c} - C:\WINDOWS\system32\wbchha.dll (file missing)
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
-
-
Contributeur* Redémarre l'ordinateur en mode sans échec
(tapoter F8 au boot pour obtenir le menu de démarrage ou http://service1.symantec.com/
* Double clique sur smitfraudfix.cmd
* Sélectionne 2 pour supprimer les fichiers responsables de l'infection.
A la question Voulez-vous nettoyer le registre ? répondre O (oui) afin de débloquer le fond d'écran et supprimer les clés de démarrage automatique de l'infection.
A la question Corriger le fichier infecté ? répondre O (oui) pour remplacer le fichier corrompu.
* Redémarre en mode normal et poste le rapport ici
N.B.: Cette étape élimine les fichiers infectieux détectés à l'étape #1
Attention que l'option 2 de l'outil supprime le fond d'écran !
reposte un nouveau rapport hijackthis à l'issu stp -
Contributeuril faut le rapport de smitfraudfix en option 2 que tu as du faire en mode sans echec
-
de retour
mitFraudFix v2.296
Rapport fait à 15:32:23,04, 27/02/2008
Executé à partir de C:\Documents and Settings\HP_Propri‚taire\Bureau\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}"="djuka"
[HKEY_CLASSES_ROOT\CLSID\{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}\InProcServer32]
@="C:\WINDOWS\system32\wbchha.dll"
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ee9f7cf5-cd49-4cd8-8ba6-1514e7a5c22c}\InProcServer32]
@="C:\WINDOWS\system32\wbchha.dll"
»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus
»»»»»»»»»»»»»»»»»»»»»»»» hosts
127.0.0.1 localhost
»»»»»»»»»»»»»»»»»»»»»»»» VACFix
VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix
S!Ri's WS2Fix: LSP not Found.
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés
C:\Program Files\NetProject\ supprimé
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» DNS
HKLM\SYSTEM\CCS\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{5E46B348-CFD3-4E49-AD61-DAC5C8F6952A}: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.30.1 0.0.0.0
»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
Nettoyage terminé.
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll -
et enfin le drenier rapport hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:48:15, on 27/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: AutoTBar.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: AutoTBar.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Audible Download Manager.lnk = C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
-
ContributeurTélécharge:
http://www.grisoft.cz/filedir/inst/avgas-setup-7.5.1.43.exe AVG-AntiSpyware
= Installer
= Le lancer
= Clic : Mise à jour
------
= Redémarre en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
Attention, pas d’accès à internet dans ce mode. Enregistre ou imprime les consignes.
Relance le Pc et tapote la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
Avec les touches « flèches », sélectionne Mode sans échec ==> entrée ==>nom utilisateur habituel
-------
= Dans ANALYSE ( en forme de loupe )
==> Paramètres ==> sous COMMENT REAGIR==>clic sur Actions recommandées ==>Quarantaine
==> Clic : Analyse complète du système
En fin de scan ( qui est assez long)
==> Clic Appliquer toutes les actions <== ceci Très important
==> Clic Sauvegarder rapport puis Enregistrer sous et choisir bureau
-------
En mode normal
colle le rapport-
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 22:25:55 27/02/2008
+ Résultat de l'analyse:
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@shopping.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@waterfrontmedia.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Sylvie\Cookies\sylvie@2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@adbrite[3].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@ads.adbrite[3].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@adrevolver[1].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Sylvie\Cookies\sylvie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@estat[2].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Sylvie.NOM-EB85C523610\Cookies\sylvie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Sylvie\Cookies\sylvie@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Sylvie.NOM-EB85C523610\Cookies\sylvie@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@web-stat[1].txt -> TrackingCookie.Web-stat : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Boris\Cookies\boris@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\HP_Propriétaire\Cookies\hp_propriétaire@zedo[2].txt -> TrackingCookie.Zedo : Nettoyé.
C:\Documents and Settings\Boris\Shared\01 Track 1.wma -> Trojan.Wimad.a : Nettoyé.
Fin du rapport
-
-
Est -ce que tu penses que le pc est propre maintenant ?
A ton avis je dois laisser Norton en anti virus ou en choisir un autre ?
Et encore une dernière question si tu le permets : la fonction restauration automatique de Windows doit - elle être cochée ou décochée (dans système) ?
Merci de ta gentillesse. -
ContributeurBonsoir
pour vérif
fait un scan en ligne
avec bitdefender et colle le rapport
https://www.bitdefender.com/toolbox/
un tuto
http://pageperso.aol.fr/rginformatique/mapage/defender.htm
plus un nouveau rapport hijack stp
@+-
-
@sinedrapport bitdefender : je n'arrive pas à le poster
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:50:15, on 29/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\BitDefender\BitDefender 2008\seccenter.exe
C:\WINDOWS\system32\DllHost.exe
C:\Program Files\BitDefender\BitDefender 2008\uiscan.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - S-1-5-18 Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
-
@sinedle rapport bitdefender ( scan full system) est trop lourd. Il détecte encore des infections.
Je t'envoie quand même le rapport du scan bref.
nouveau message de norton security :
virus W32.rajump C:\WINDOWS\TEM...\tmp 0025076b
<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet type="text/xsl" href="C:\Program Files\BitDefender\BitDefender 2008\Lang\log_format.xsl"?>
<ScanSession creator="BitDefender Total Security 2008" version="BitDefender UIScanner v.11" creationDate="10:51:52 29/02/2008" originalPath="C:\Documents and Settings\HP_Propriétaire\Application Data\BitDefender\Desktop\Profiles\Logs\my_documents\1204278712_1_00.xml">
<ScanOptions
showWarnings="1" >
<ScanPaths>
<path id="0000">C:\Documents and Settings\HP_Propriétaire\Mes documents</path>
<path id="0001">C:\Documents and Settings\HP_Propriétaire\Bureau</path>
<path id="0002">C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Démarrage</path>
</ScanPaths>
<ScanObjects
scanViruses="1"
scanAddware="1"
scanSpyware="1"
scanApplications="1"
scanDialers="1"
scanRootkits="0"
/>
<TargetSelection
heuristicScan="1"
scanArchives="1"
scanRegistryKeys="1"
scanRegistry="1"
scanCookies="1"
memoryProcesses="1"
scanBootSectors="0"
scanEmail="1"
scanAllFiles="1"
scanPackedFiles="1"
scanSubfolders="1"
includeExtensions=""
excludeExtensions=""
/>
<TargetProcessing
infectedAction="3"
suspiciousAction="1"
hiddenAction="1"
/>
</ScanOptions>
<EngineSummary
archivePlugins="41"
mailPlugins="6"
scanPlugins="12"
totalSignatures="963363"
systemPlugins="4"
unpackPlugins="7"
/>
<ScanSummary
scannedItems="45684"
infectedItems="0"
suspiciousItems="0"
resolvedItems="0"
scannedArchives="443"
bootSectorCount="0"
scannedDirectories="34"
inputOutputErrors="0"
virusesNumber="0"
scanTime="00:00:03:01"
filesPerSecond="251"
>
<FileSummary
scanned="45283"
archives="443"
packed="61"
infected="0"
suspicious="0"
resolved="0"
deleted="0"
moved="0"
copied="0"
/>
<RegistryKeySummary
scanned="343"
infected="0"
suspicious="0"
/>
<CookieSummary
scanned="0"
infected="0"
suspicious="0"
/>
<ProcessSummary
scanned="58"
infected="0"
suspicious="0"
/>
<MailSummary
scanned="0"
infected="0"
suspicious="0"
/>
</ScanSummary>
<ScanDetails>
</ScanDetails>
</ScanSession>
-
-
ContributeurBonsoir,
Télécharge OAD http://sosvirus.changelog.fr/OAD.exe
- Enregistre le sur ton bureau
Double clique sur le OAD pour le lancer
- nom de fichier à rechercher tape ou fais un copier coller de : RavMon.exe
- Type de recherche : sélectionne l'option 6 puis valide [entree]
OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé.
Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé.
- Fais un copier / coller de ce rapport dans ton prochain post.-
01/03/2008 ---- 19:32:15,76
----------------------------------
§§§§§§ [RavMon.exe] §§§§§§
----------------------------------
[X] Registre
-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete
********************
[Registre]
********************
Aucune entrée détectée
*******************
[Fichier]
*******************
*********************
[Même date]
*********************
Aucun fichier créé à la même date détecté
Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------
-
-
ContributeurTélécharge Combofix sUBs : http://download.bleepingcomputer.com/sUBs/Combo-Fix.exe
et sauvegarde le sur ton bureau et pas ailleurs!
Double-clic sur combofix,
Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.-
Bonjour !
ComboFix 08-03-01.3 - HP_Propriétaire 2008-03-02 11:41:01.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.177 [GMT 1:00]
Endroit: C:\Documents and Settings\HP_Propriétaire\Bureau\Combo-Fix.exe
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk
C:\Documents and Settings\Boris\Bureau\Live Safety Center.lnk
C:\Documents and Settings\Boris\Bureau\Online Security Guide.lnk
C:\Documents and Settings\Boris\Favoris\Online Security Guide.lnk
C:\Documents and Settings\Sylvie\Bureau\Live Safety Center.lnk
C:\Documents and Settings\Sylvie\Bureau\Online Security Guide.lnk
C:\Documents and Settings\Sylvie\Favoris\Online Security Guide.lnk
C:\Program Files\Temporary
C:\Program Files\WinAble
C:\WINDOWS\cookies.ini
C:\WINDOWS\Fonts\'
C:\WINDOWS\Fonts\a.zip
C:\WINDOWS\system\msn.dat
C:\x.dat
C:\z.dat
D:\Autorun.inf
.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-02 to 2008-03-02 ))))))))))))))))))))))))))))))))))))
.
2008-03-01 18:56 . 2008-03-02 11:12 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-03-01 18:56 . 2008-03-01 18:56 1,409 --a------ C:\WINDOWS\QTFont.for
2008-02-29 15:56 . 2008-02-29 16:01 4,566 --a------ C:\WINDOWS\imsins.BAK
2008-02-29 14:17 . 2008-03-01 12:11 121 --a------ C:\WINDOWS\bdagent.INI
2008-02-29 14:14 . 2008-02-29 14:14 <REP> d-------- C:\Documents and Settings\Sylvie.NOM-EB85C523610\Application Data\Grisoft
2008-02-28 22:50 . 2008-03-01 19:00 <REP> d-------- C:\Program Files\Fichiers communs\BitDefender
2008-02-28 16:34 . 2008-02-28 16:34 <REP> d-------- C:\Program Files\CCleaner
2008-02-27 18:05 . 2008-02-27 18:05 <REP> d-------- C:\Documents and Settings\HP_Propriétaire\Application Data\Grisoft
2008-02-27 18:04 . 2008-02-27 18:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-02-27 18:04 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-02-27 13:26 . 2008-02-27 13:26 <REP> d-------- C:\Program Files\Trend Micro
2008-02-27 13:04 . 2008-02-27 15:32 3,102 --a------ C:\WINDOWS\system32\tmp.reg
2008-02-27 13:02 . 2008-02-27 13:01 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-02-27 13:02 . 2008-02-27 13:01 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-02-27 13:02 . 2008-02-27 13:01 86,016 --a------ C:\WINDOWS\system32\VACFix.exe
2008-02-27 13:02 . 2008-02-27 13:01 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-02-27 13:02 . 2008-02-27 13:01 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-02-27 13:02 . 2008-02-27 13:01 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-02-27 10:12 . 2008-02-27 10:36 <REP> d-------- C:\Program Files\AntiSpyKit 5.3
2008-02-26 12:17 . 2008-02-26 14:14 <REP> d-------- C:\Program Files\a-squared Anti-Malware
2008-02-26 09:47 . 1996-08-20 20:37 15,840 --a------ C:\WINDOWS\system32\Machnm1.exe
2008-02-26 09:47 . 2005-09-25 16:37 5,632 --a------ C:\WINDOWS\system32\Machnm64.sys
2008-02-26 09:47 . 2008-02-26 09:47 3,120 --a------ C:\WINDOWS\system32\118290.54
2008-02-26 09:47 . 2008-02-26 09:47 3,120 --a------ C:\WINDOWS\118294.78
2008-02-26 09:47 . 2003-08-13 00:27 2,304 --a------ C:\WINDOWS\system32\Machnm32.sys
2008-02-25 18:58 . 2008-02-25 18:58 <REP> d-------- C:\Program Files\XoftSpySE
2008-02-15 23:01 . 2008-02-15 23:01 <REP> d-------- C:\Program Files\Bonjour
2008-02-15 22:49 . 2008-02-15 22:49 <REP> d-------- C:\Program Files\Fichiers communs\Macrovision Shared
2008-02-13 14:08 . 2008-02-13 14:45 <REP> d-------- C:\Program Files\SopCast
2008-02-13 13:47 . 2008-02-13 13:48 <REP> d-------- C:\Program Files\TVAnts
2008-02-13 11:57 . 2008-02-13 11:57 682,496 --a------ C:\WINDOWS\system32\CDUninst.exe
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-02 10:15 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\OpenOffice.org2
2008-02-29 20:26 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
2008-02-29 11:36 3,120 ----a-w C:\Documents and Settings\HP_Propriétaire\Application Data\wklnhst.dat
2008-02-28 21:44 --------- d-----w C:\Program Files\Norton Internet Security
2008-02-27 14:54 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\AdobeUM
2008-02-27 09:36 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-02-26 20:04 --------- d-----w C:\Program Files\AxBx
2008-02-26 20:03 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-02-26 12:35 --------- d-----w C:\Program Files\MSN Messenger
2008-02-26 08:47 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-24 22:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-02-24 21:13 --------- d-----w C:\Documents and Settings\LocalService\Application Data\Sect mags fork
2008-02-15 22:01 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-02-14 06:26 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-02-14 06:25 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-02-04 19:40 --------- d-----w C:\Program Files\GUILD WARS
2008-02-02 14:49 --------- d-----w C:\Program Files\Easy Internet signup
2008-01-30 15:04 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
2008-01-30 14:40 --------- d-----w C:\Program Files\Activision
2008-01-05 11:27 --------- d-----w C:\Program Files\Samsung
2008-01-03 12:19 --------- d-----w C:\Program Files\DivX
2008-01-02 17:35 --------- d-----w C:\Program Files\Microsoft AutoRoute
2008-01-02 17:30 --------- d-----w C:\Program Files\microsoft money 2005
2008-01-02 17:26 --------- d-----w C:\Program Files\Microsoft Works
2007-11-20 18:48 36,864 ----a-w C:\Documents and Settings\Boris\services.exe
2007-11-20 09:19 5,563 ----a-w C:\Documents and Settings\Sylvie\x.dat
2007-11-20 09:18 208,456 ----a-w C:\Documents and Settings\Sylvie\z.dat
2007-11-18 12:13 11,276 ---ha-w C:\Documents and Settings\Boris\x.dat
2007-11-18 12:12 10,822 ---ha-w C:\Documents and Settings\Boris\z.dat
2007-10-12 04:39 4,006 ----a-w C:\Documents and Settings\Boris\Application Data\wklnhst.dat
2007-09-01 14:50 4,990 ----a-w C:\Documents and Settings\Sylvie\Application Data\wklnhst.dat
2007-08-26 15:26 78,520 ----a-w C:\Documents and Settings\Sylvie\Application Data\GDIPFONTCACHEV1.DAT
2007-03-15 06:29 262,032 ----a-w C:\Program Files\emoticones.exe
2007-03-07 13:10 65,568 ----a-w C:\Documents and Settings\Boris\Application Data\GDIPFONTCACHEV1.DAT
2006-07-06 19:28 218,112 ----a-w C:\Program Files\HijackThis.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe" [ ]
"Configuration de la C-BOX"="C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe" [2004-12-21 18:17 395264]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-13 13:18 68856]
"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [ ]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2005-01-01 23:09 32881]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 17:04 52736]
"AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 18:06 88363 C:\WINDOWS\AGRSMMSG.exe]
"HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 19:53 49152]
"HPHmon06"="C:\WINDOWS\system32\hphmon06.exe" [2004-06-07 19:43 659456]
"KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 20:02 61440]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 21:43 233472]
"ccApp"="c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-02-21 16:29 58984]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-11-04 04:10 344064]
"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 21:47 57344 C:\WINDOWS\ALCXMNTR.EXE]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2004-10-25 22:17 90112]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 22:54 253952]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-11-14 23:43 286720]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 11:52 221184]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2004-10-08 12:31 458752]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2004-10-08 12:24 217088]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-15 13:11 267048]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]
C:\Documents and Settings\Sylvie\Menu D‚marrer\Programmes\D‚marrage\
WKCALREM.LNK - C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe [2004-07-12 01:54:26 15360]
C:\Documents and Settings\HP_Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 2.2.lnk - C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe [2007-02-02 16:54:56 393216]
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-05 02:28:24 258048]
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-02-20 18:15:04 450560]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 08:01:04 83360]
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
"C:\\WINDOWS\\system32\\PnkBstrA.exe"=
"C:\\WINDOWS\\system32\\PnkBstrB.exe"=
"C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
R2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique;"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" [2006-08-03 17:29]
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]
S3 CoachUsb;Coach Digital Camera on USB;C:\WINDOWS\system32\DRIVERS\CoachUsb.sys [2004-01-22 12:41]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58]
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-02-19 21:43:08 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-02-02 14:49:15 C:\WINDOWS\Tasks\Connexion facile à Internet.job"
- C:\Program Files\Easy Internet signup\HPSdpApp.exe
"2008-02-15 19:00:00 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - Denis.job"
- C:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exeh/task:
"2008-02-29 20:04:13 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - HP_Propriétaire.job"
- c:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exeh/task:
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-02 11:43:42
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
Temps d'accomplissement: 2008-03-02 11:44:56
ComboFix-quarantined-files.txt 2008-03-02 10:44:46
.
2008-01-29 11:47:52 --- E O F --- -
@sinedIl y a un "Hic". Après le passage de Combofix, je n'arrive plus à me connecter sur ma boîte de réception Hotmail par exemple ?
-
@sinedPour la connexion aux sites sécurisés : pas de souçi, c'est rétabli
J'ai simplement désactivé/réactivé Norton
Merci
-
-
Contributeurtrès bien maintenant
Télécharge sur le bureau
http://sosvirus.changelog.fr/MSNFix.zip
= Clic-Droit sur MSNFix.zip
= Extraire ici ( ou extraire sans confirmation ou tout ou unzip)
= Double-Clic sur le dossier MSNfix qui vient de se créer
= Double-Clic MSNfix ==> Symbole roue dentée
= Choisir R
= Choisir ensuite N ( si infection)
= Enregistre le rapport
redémarre le PC et relancer MSN tu sauras ainsi si tout est supprimé
ensuite fait un scan en ligne
avec bitdefender et colle le rapport
https://www.bitdefender.com/toolbox/
un tuto
http://pageperso.aol.fr/rginformatique/mapage/defender.htm
avec un nouveau hijack
@+-
Bonjour,
MSNFix 1.674
C:\Documents and Settings\HP_Propriétaire\Bureau\MSNFix\MSNFix
Fix exécuté le 03/03/2008 - 9:21:38,54 By HP_Propriétaire
mode normal
************************ Recherche les fichiers présents
... C:\WINDOWS\system32\tmp.txt
... C:\?.bat
************************ Recherche les dossiers présents
... C:\Temp\
************************ Suppression des fichiers
.. OK ... C:\WINDOWS\system32\tmp.txt
.. OK ... C:\?.bat
************************ Suppression des dossiers
/!\ ... C:\Temp\
************************ Nettoyage du registre
************************ Fichiers suspects
Aucun Fichier trouvé
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 03032008_ 9224315.zip
------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------
--------------------------------------------- END ---------------------------------------------
-
-
BitDefender Online Scanner
Scan report generated at: Mon, Mar 03, 2008 - 11:27:45
Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;
Statistics
Time
01:35:41
Files
577028
Folders
16329
Boot Sectors
3
Archives
16229
Packed Files
36021
Results
Identified Viruses
15
Infected Files
245
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
490
Engines Info
Virus Definitions
984963
Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins
16
Archive plugins
41
Unpack plugins
7
E-mail plugins
6
System plugins
5
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0118465C.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0118465C.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\022F0DD8.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\022F0DD8.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03407653.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03407653.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\045742F6.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\045742F6.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\057D05B2.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\057D05B2.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\06665A05.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\06665A05.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07870D20.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07870D20.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07D211F4.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07D211F4.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\08441985.exe=>(Quarantine-2)
Infected with: GenPack:Trojan.Downloader.Swizzor.FI
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\08441985.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\08B1302C.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\08B1302C.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\09782762.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.IstBar.PJ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\09782762.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A256293.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A256293.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0B3B5361.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0B3B5361.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0C571829.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0C571829.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D7B6270.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D7B6270.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F6A5FF5.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F6A5FF5.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F91169B.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F91169B.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10150556.EXE=>(Quarantine-2)
Detected with: Application.Pup.A
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10150556.EXE=>(Quarantine-2)
Disinfection failed
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10150556.EXE=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10A7076A.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10A7076A.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1161609D.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1161609D.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12A22713.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12A22713.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14462185.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14462185.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15666D42.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15666D42.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\169C1EDC.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\169C1EDC.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\17AE65AE.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\17AE65AE.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\189B28F0.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\189B28F0.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1A4206D8.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1A4206D8.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1B0232D6.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1B0232D6.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1C1250B3.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1C1250B3.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1E892D43.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1E892D43.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1F9F0EC2.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1F9F0EC2.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20570798.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20570798.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2149651C.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2149651C.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2183771D.exe=>(Quarantine-2)
Detected with: Application.Joke.Crazymouse.A
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2183771D.exe=>(Quarantine-2)
Disinfection failed
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2183771D.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\220A1248.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\220A1248.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2392103D.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2392103D.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\24530107.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\24530107.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\256B0890.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\256B0890.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\26955769.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\26955769.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\27991429.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\27991429.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\286F297D.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\286F297D.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\29435E9E.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\29435E9E.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2A5F2365.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2A5F2365.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2B3D4A71.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2B3D4A71.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2C691C50.DLL=>(Quarantine-2)
Infected with: Trojan.Vundo.DQO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2C691C50.DLL=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D363DFC.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D363DFC.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D5B2FD9.exe=>(Quarantine-2)
Infected with: GenPack:Trojan.Downloader.Swizzor.DV
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D5B2FD9.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D5E59D5.exe=>(Quarantine-2)
Infected with: GenPack:Trojan.Downloader.Swizzor.CB
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D5E59D5.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2E2919F9.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2E2919F9.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2EFD0250.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2EFD0250.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2FDD5B10.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2FDD5B10.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\30B52E23.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\30B52E23.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\31842C06.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\31842C06.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3258249F.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3258249F.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\332F77B2.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\332F77B2.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\34050CE1.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\34050CE1.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\34FA2A38.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\34FA2A38.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\35CE5A40.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DWS
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\35CE5A40.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\361F3077.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\361F3077.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\363D31FF.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\363D31FF.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\37192070.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\37192070.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\37F70026.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\37F70026.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\38D3757D.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\38D3757D.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\39AD7A45.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\39AD7A45.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3B9361B3.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3B9361B3.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3C6D0797.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3C6D0797.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D085006.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DWS
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D085006.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D793B30.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3D793B30.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3E7924FE.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3E7924FE.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3F4922A6.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3F4922A6.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3FB263A5.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3FB263A5.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\401E1F05.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\401E1F05.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\41833DCD.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\41833DCD.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\422F5EE8.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\422F5EE8.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\42C24046.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\42C24046.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\43A3114E.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\43A3114E.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4472394E.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4472394E.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4548397F.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4548397F.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\461A0976.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\461A0976.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\46EE61AF.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\46EE61AF.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\47C85EBE.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\47C85EBE.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\48343CF1.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\48343CF1.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4933132F.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4933132F.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4A127774.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4A127774.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4AE23955.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4AE23955.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4B6C1506.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4B6C1506.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4C185C7C.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4C185C7C.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4CF35B3C.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4CF35B3C.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4DDE1A0C.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4DDE1A0C.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4EA51B31.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4EA51B31.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4F3F0D41.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4F3F0D41.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\505B154F.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\505B154F.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\511670CD.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\511670CD.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5147780F.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5147780F.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\52132411.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\52132411.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\533C298D.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\533C298D.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\545316F2.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\545316F2.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54AC7CD9.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DWS
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54AC7CD9.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54B250D1.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DWS
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54B250D1.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54E32814.exe=>(Quarantine-2)
Detected with: Application.Joke.Bugs.A
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54E32814.exe=>(Quarantine-2)
Disinfection failed
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\54E32814.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55485C2C.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DWS
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55485C2C.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EA42ED.exe=>(Quarantine-2)
Detected with: Application.Aseye.BEK
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EA42ED.exe=>(Quarantine-2)
Disinfection failed
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EA42ED.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EE6CEA.BAK=>(Quarantine-2)
Detected with: Application.Aseye.BEK
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EE6CEA.BAK=>(Quarantine-2)
Disinfection failed
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55EE6CEA.BAK=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56543EE7.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56543EE7.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56DF75DE.htm=>(Quarantine-2)
Infected with: Generic.XPL.ADODB.98A268A7
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56DF75DE.htm=>(Quarantine-2)
Disinfection failed
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\56DF75DE.htm=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\57DE51B7.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\57DE51B7.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\58F6517A.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\58F6517A.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\59B93EB4.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\59B93EB4.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5AD53B54.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5AD53B54.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C0413EC.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C0413EC.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C8F719F.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C8F719F.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5D50141B.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5D50141B.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5E4A1283.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5E4A1283.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5FC4345A.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5FC4345A.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\60D83F91.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\60D83F91.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\61A47B21.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\61A47B21.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\626E7B6B.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\626E7B6B.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\63D060CA.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\63D060CA.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\64730E92.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\64730E92.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\65CE00B9.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\65CE00B9.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\66FB1887.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\66FB1887.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\67F47EBE.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\67F47EBE.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\682D6E82.bad=>(Quarantine-2)
Infected with: Trojan.Vundo.DWS
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\682D6E82.bad=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\693E0FEC.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\693E0FEC.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6A5A38F5.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6A5A38F5.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6B736F7F.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6B736F7F.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6C64296F.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6C64296F.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D1F6BA8.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D1F6BA8.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D2C139A.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D2C139A.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D2F3D96.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DQO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D2F3D96.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DE916C9.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DQO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DE916C9.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DF314BE.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DF314BE.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DFA68B7.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DFA68B7.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DFC018D.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DFC018D.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E003CB0.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E003CB0.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E0D64A2.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E0D64A2.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E345C76.dll=>(Quarantine-2)
Infected with: Trojan.Dropper.Agent.TKZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E345C76.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E380673.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6E380673.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6F632B6E.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6F632B6E.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6FA21B76.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DWS
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6FA21B76.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6FAC2CA0.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6FAC2CA0.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\71B87D02.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\71B87D02.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\73812555.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\73812555.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\74B2030E.bad=>(Quarantine-2)
Detected with: Application.Winantivirus.F
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\74B2030E.bad=>(Quarantine-2)
Disinfection failed
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\74B2030E.bad=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7521717A.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7521717A.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\767D0DE7.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\767D0DE7.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\79074DDB.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\79074DDB.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7BE8251E.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7BE8251E.exe=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7D0E4205.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7D0E4205.dll=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7E7273F6.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7E7273F6.tmp=>(Quarantine-2)
Deleted
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7F870D8D.tmp=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7F870D8D.tmp=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000620.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000620.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000621.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000621.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000622.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000622.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000623.dll=>(Quarantine-2)
Infected with: Trojan.Virtumonde.IO
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000623.dll=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000624.exe=>(Quarantine-2)
Infected with: GenPack:Trojan.Downloader.Swizzor.FI
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000624.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000625.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000625.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000626.exe=>(Quarantine-2)
Infected with: Trojan.Downloader.IstBar.PJ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000626.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000627.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000627.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000628.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000628.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000629.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000629.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000630.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000630.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000631.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000631.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000632.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000632.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000633.EXE=>(Quarantine-2)
Detected with: Application.Pup.A
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000633.EXE=>(Quarantine-2)
Disinfection failed
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000633.EXE=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000634.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000634.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000635.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000635.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000636.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000636.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000637.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000637.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000638.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000638.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000639.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000639.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000640.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000640.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000641.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000641.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000642.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000642.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000643.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000643.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000644.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000644.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000645.exe=>(Quarantine-2)
Detected with: Application.Joke.Crazymouse.A
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000645.exe=>(Quarantine-2)
Disinfection failed
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000645.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000646.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000646.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000647.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000647.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000648.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000648.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000649.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000649.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000650.DLL=>(Quarantine-2)
Infected with: Trojan.Vundo.DQO
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000650.DLL=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000651.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000651.exe=>(Quarantine-2)
Disinfection failed
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000651.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000652.exe=>(Quarantine-2)
Infected with: GenPack:Trojan.Downloader.Swizzor.DV
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000652.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000653.exe=>(Quarantine-2)
Infected with: GenPack:Trojan.Downloader.Swizzor.CB
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000653.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000654.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000654.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000655.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000655.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000656.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000656.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000657.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000657.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000658.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DWS
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000658.dll=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000659.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000659.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000660.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000660.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000661.dll=>(Quarantine-2)
Infected with: Trojan.Vundo.DWS
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000661.dll=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000662.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000662.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000663.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000663.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000664.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000664.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000665.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000665.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000666.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000666.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000667.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000667.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000668.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000668.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000669.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000669.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000670.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000670.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000671.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000671.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000672.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000672.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000673.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000673.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000674.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000674.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000675.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000675.exe=>(Quarantine-2)
Deleted
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP1\A0000676.exe=>(Quarantine-2)
Infected with: Trojan.Agent.AFSZ
C:\System Volume Information\_restor -
Et enfin :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:40:29, on 03/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
-
ContributeurBonsoir
très bien ;-)
relance hijack et coche ceci
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
ensuite clic sur fix checked
redémarre ton pc et dit moi si tu as encore des soucis
@+ -
Voilà, j'ai suivi tes instructions mais je n'ai plus trouvé :
04 - .DEFAULT User Startup: AutoTBar.exe (User'Default user')
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Symantec\LiveUpdate\AUpdate.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\WI1F86~1\MESSEN~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Configuration de la C-BOX] C:\Program Files\Cegetel\C-BOX\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe -
Contributeuras tu encore des soucis ?
-
ContributeurBonsoir
Maintenant que ton PC n'est plus infecté, désactive ta "Restauration du système" puis réactive la afin de créer un point de restauration sain.
* Désactivation :
Cliquer droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > cocher la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer patiente jusqu a que cela soit marqué "désactivée" puis Ok.
* Activation :
Suivre le même chemin ; décocher la case "Désactiver la Restauration du système sur tous les lecteurs"
> Appliquer attends que cela soit a nouveau sur "surveillance" puis Ok. Redémarrer l'ordinateur..
@+ -
Contributeurbon et bien bonne chance pour la suite
;-)
