Virus Bagle.Gen.b

Résolu
miotype -  
Bonjour,
voila mon pc est contaminé
virusscan ne marchais plus, J'ai donc supprimmer virus scan et j'ai installé antivir
mais impossible a eradiquer
antivir me vois une mence de type TR/Bagle.Gen.B
mais a chaque fois que je supprime ca reviens
voila mon rapport HijacktHis dessous :
dans l'attente de vos nouvelles.
Il ne m'es impossible de démarrer en sans echec
--------------------------------------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:59:20, on 15/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\System32\svchost.exe
c:\program files\avira\antivir personaledition classic\avscan.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: SYSTRAN Web Translator 5.0 - {A5899B52-3AF9-4F56-85FE-AD7B3BE8490F} - C:\Program Files\SYSTRAN\5.0\Personal\IEPlugIn.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Upsagent - UPS Monitor (Upsagent) - Unknown owner - C:\Program Files\Upsmon\Upsag_nt.exe

--
End of file - 5861 bytes
Configuration: Windows XP
Internet Explorer 7.0

16 réponses

Résumé de la discussion

Un utilisateur signale une infection par Bagle et TR/Bagle.Gen.B sur Windows XP, avec suppression du logiciel antivirus et réapparition du malware après chaque tentative de nettoyage et difficulté à démarrer en mode sans échec. Plusieurs intervenants recommandent de ne pas désactiver la restauration système pendant le nettoyage et de purger les points de restauration après que le PC est propre. Le fil évoque l’usage d’outils comme HijackThis pour repérer les éléments indésirables, les mises à jour Windows et Java comme mesures complémentaires, et la prudence lors des scans en mode sans échec.

Bobot (l’IA à votre service)
  1. ^^Marie^^
    Pour INFO

    IMPORTANT :


    Ne pas désactiver la restauration système, tant que le pc n'est pas propre. Merci
    Une fois désinfecté le pc, on peut alors désactiver la restauration système pour la purger de ses m.....et repartir sur un point sain.
    2
    1. jacques.gache Contributeur sécurité
      marie bonjour, perso c'est comme cela que je fait cela évite que lors du scan ça te trouve des trucs dans "le restore" et de te dire ils sont toujours la
      0
    2. ^^Marie^^
      @jacques.gacheTu balaies d'abord et tu passes la pièce ensuite

      Une fois que le PC est clean

      -- en fin de désinfection --

      tu crées un nouveau point de resto

      Mais surtout pas avant

      0
  2. jacques.gache Contributeur sécurité
    bonsoir, essais de paser malwarebytes https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ suivi de ccleaner dans ses deux modes nettoyeur et registre https://www.malekal.com/tutoriel-ccleaner/ et fais un scan anti-virus en ligne en désactivant la restauration système tu redémarre avant de scaner et tu la réactiveras une fois le scan fini http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fdocid/20020830101856924
    pour le scan anti-virus utilise IE http://www.commentcamarche.net/faq/sujet 8872 scanner en ligne avec bitdefender tiens nous au courant si il est toujours la on passera autre chose
    0
    1. miotype Auteur
      ccleaner j'ai deja fait
      analyse en ligne deja fait
      je teste malwarebytes bitdefender
      comment on annule la restauration systeme?
      0
      1. jacques.gache Contributeur sécurité
        pour annuler la restauration je t'avais mis ce tutoriel http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fdocid/20020830101856924
        0
    2. miotype Auteur
      autant pour moi j'y cours de suite
      bon mon antivir n'arrete pas
      el me repaire un tas de virus et toujours localiser ds le meme endroit
      j'arrive mm pas a acceder manuellement
      ds c:\System Volume Information\...\A0038527.exe
      0
      1. jacques.gache Contributeur sécurité
        "String.fromCharCode" serait lié à java il faudra voir si tu es à jour de ce coté
        0
    4. miotype Auteur
      Tjs ds le meme repoertoire j'ai un tas de virus
      c:\System Volume Information\...\A0039947.exe
      celui ci c'est Dldr.Swizzor.Gen
      voila j'en ai un tas qui apparait
      je fait toujours tourné AVG Antispaware
      por le moment il m'a trouvé 5 menace mais faible risque
      j'ai fait tourner adware, spybot, ccleaner, virus scan, antivir, elibagle, hijackthis
      la je fais tourner avg
      0
      1. jacques.gache Contributeur sécurité
        surtout pas en même temps
        0
      2. miotype Auteur
        @jacques.gachenon je ne l'ai pas fait en mm temps ;)
        un aprés l'autre
        j'avais meme fait une analyse en ligne sur secuser.com
        sinon AVG anti spaware pour le moment m'a trouvé
        Heristic.Win32.AVkiller
        TrackingCookie.Advertising
        TrackingCookie.2o7
        TrackingCookie.Webtrendslive
        TrackingCookie.Weborama
        Not-a-virus.Hacktool.EviD
        0
    5. miotype Auteur
      merci en tout cas de ton aide car depuis hier je suis entrain de perdre mon week end pour un virus
      la restauration a été desactivé;)
      antispaware a presque fini
      comment voir la mise a jour??
      je vais sur le site de java??
      edit :
      https://www.java.com/fr/download/
      0
      1. jacques.gache Contributeur sécurité
        oui ,tu verifis dans le panneau de configuration tu cliques sur java /ouvrir/général/ a propo de, moi j'ai la version 6 mise à jour 5 note ta version car après il faudra la désinstaller de tes programme pour ne garder que la dernière pour info j'ai eu un mal de chien pour l'installer il a fallu que je clique au moins 5 ou 6 fois sur recommencer pour que ça finisse par ce faire
        0
    6. miotype Auteur
      je viens d'installer la nouvelle version de java ;)
      edit :
      tout c'est bien passé
      je n'avais pas java
      ou du moins c'été celui installé lors de l'achat du pc si il y est d'origine et le pc n'est pas jeune
      je suis sous xp et c'est un athlon 64 3200+
      0
      1. jacques.gache Contributeur sécurité
        xp sp1 ou sp2
        0
    7. miotype Auteur
      sp2
      je suis du coup entrain de faire les mises a jour de windows updates aussi
      0
      1. miotype Auteur
        Malwarebytes' Anti-Malware 1.08
        Version de la base de données: 495

        Type de recherche: Examen complet (C:\|)
        Eléments examinés: 92492
        Temps écoulé: 23 minute(s), 43 second(s)

        Processus mémoire infecté(s): 0
        Module(s) mémoire infecté(s): 0
        Clé(s) du Registre infectée(s): 0
        Valeur(s) du Registre infectée(s): 2
        Elément(s) de données du Registre infecté(s): 0
        Dossier(s) infecté(s): 1
        Fichier(s) infecté(s): 201

        Processus mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Module(s) mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Clé(s) du Registre infectée(s):
        (Aucun élément nuisible détecté)

        Valeur(s) du Registre infectée(s):
        HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.

        Elément(s) de données du Registre infecté(s):
        (Aucun élément nuisible détecté)

        Dossier(s) infecté(s):
        C:\WINDOWS\system32\drivers\down (Trojan.Downloader) -> Quarantined and deleted successfully.

        Fichier(s) infecté(s):
        C:\WINDOWS\system32\drivers\down\102132078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102151015.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102154515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102160828.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102191921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102201093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102204109.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102207750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102210406.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102223031.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102224468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102227890.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102231218.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102275078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\102281875.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\107140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\113250.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\115734.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\116765.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\117328.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\118625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\121562.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\122984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\124140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\125625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\127109.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\129109.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\130000.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\131515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\133796.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\134093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\135171.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\136625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\138046.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\138828.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\139437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\141453.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\141671.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\142578.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\146234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14786546.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14789921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14791093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14791750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14793359.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14794000.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14800171.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14806406.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14824250.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14828156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14831328.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14834390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14839859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\148671.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14873750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14874984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14876203.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14878578.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14887421.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14892812.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14895031.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14897531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14909890.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14913484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14914718.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14915406.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14917109.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14918421.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14923390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\149359.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14956843.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\14963234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\153203.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\154453.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\156765.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\157000.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\160500.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\162484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\163156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\167140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\187171.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\193859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\197500.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\198578.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\204375.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\205937.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\212859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\239656.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\241718.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\247484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\272843.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\280484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\282750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29335593.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29345609.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29349828.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29363796.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29398390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29402828.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29404687.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29407703.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29410734.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29421156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29424437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29425687.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29426750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29428921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29476390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\29482515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\306890.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\310234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\317234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\321437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\322562.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\326062.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\329468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\367515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\370718.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\374156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\377453.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43893375.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43896531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43899359.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43930312.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43953609.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43959234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43961375.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43963468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43966468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43980015.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43983234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43984015.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43984562.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\43986796.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\44024734.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\44031281.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58442531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58445968.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58447281.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58449515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58453140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58479187.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58482625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58484484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58486875.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58492015.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58497640.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58500921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58503671.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58503953.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58506062.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58543078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\58549140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\62953.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\67546.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\70484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\72156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\72959937.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\72962390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\72964984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\72970390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73018375.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73023546.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73025437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73037078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73039421.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73077000.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73082078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73082921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73086218.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73089984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73128859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\73135031.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\75343.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\75859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\76656.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\78765.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\79531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\82359.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\82531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\82703.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\86468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87546468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87553656.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87555875.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87573296.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87633156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87641984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87644625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87647437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87650453.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87658140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87661812.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87663515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87665593.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87668500.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87707468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\87714390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\88093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\91093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\drivers\down\92781.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

        voila le rapport
        je pene tenter de refaire la manip sous mode sans echec si ca marche.
        vous en pensez quoi??
        0
        1. jacques.gache Contributeur sécurité
          tu peux la faire en normal et si il en reste tu le referas en mode sans echec
          0
      2. miotype Auteur
        salut jacques
        merci pour ton aide precieuse
        en tout pour tout j'ai eu droit a 251 virus (malware..) qui ont tous apparemment été eradiquer car ce matin j'ai relancé un par un
        antivir, adware, spybot, ccleaner, elibagle, malwarebytes, et analyse en ligne et rien de detecter
        je suis enfin tranquille
        merci encore et a + sur un autre sujet alors ;)
        0
        1. jacques.gache Contributeur sécurité
          bonjour, heureux pour toi si j'ai pu d'aider @+
          0
          1. miotype Auteur
            oupsss
            on a bien fait de me le dire car la restauration est desactivé
            et est tjs desactiver
            donc maintenant que dois je faire??
            dois je le reactiver??
            0
            1. jacques.gache Contributeur sécurité
              bonjour, je t'avais mis de désactiver le temps du scan et de la réactiver après fais le
              0
              1. miotype Auteur
                ok donc je refait la manip
                oui j'avais bien desactiver durant le scan donc la je remet
                merci encore
                0
                2. Tiekanyk
                  Bonjour tous le monde !

                  J'ai également un soucis avec cette saletée de bagle qui a viré le Nod32 ainsi que le spybot de mon pc.

                  J'ai suivi pas mal de vos recommandations, et à chaque fois que j'utilise un autre système de scan il y a encore des fichiers infectés... A croire que cette cochonnerie se multiplie à la vitesse grand V !

                  Je voudrais juste savoir si je dois commencer à désespérer, parce que pour voir dire la vérité, je suis nulle en informatique et que tout doucement j'en viens à râler ^^

                  En tous les cas déjà un grand merci pour les infos que j'ai trouvées ici qui sont pour des néophytes tels que moi expliquées de façon super compréhensibles.
                  0
                  1. ^^Marie^^
                    Bonjour,

                    CREER SON PROPRE TOPIK

                    Il serait préférable que tu crées ton propre « topik » message personnel. Cela rendra le poste (ici) plus compréhensible, et nous pourrons traiter ton soucis avec plus d’efficacité.
                    Donc
                    Fais ce qui suit, SVP
                    http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm
                    Merci
                    A++
                    http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm

                    A++

                    0

                Discussions similaires

                Softonic,est-ce un virus ?
                techmel1

                6 réponses
                Chrome://newtab
                Nova

                14 réponses
                Désinstaller Softonic
                Diguimette

                5 réponses
                Supprimer New Tab
                tysaozon

                8 réponses
                Virus dans filezilla
                balnelius10

                9 réponses