Help virus avec Norton suite
richard.r
Messages postés
109
Statut
Membre
-
TYTYTY Messages postés 22 Statut Membre -
TYTYTY Messages postés 22 Statut Membre -
Bonjour
Suite aux différentes interventions sur un virus qui occulte Norton, je viens de découvrir le même problème.
affichage ultra rapide de la fenêtre de Norton et impossibilité de l'utiliser, même problème pour Regedit et pour le gestionnaire de taches.
En mode sans echec Norton fontionne mais ne détecte rien même avec la dernière mise à jour
En mode normal Windows
Panda détecte :
W32/Gaobot.JF.worm No Désinfecté C:\WINNT\system32 mptclockvv.exe
W32/Gaobot.JF.worm No Désinfecté C:\WINNT\system32\_data_.dat
W32/Gaobot.JF.worm No Désinfecté C:\Documents and Settings\Administrateur\_data_.dat
AVG :
Spybot c:\WINNT\SYSTEM32\SVHOST32.EXE
RAVANTIVIRUS edite le rapport suivant :
Scan started at 13/03/2004 07:43:01
Scanning memory...
Scanning boot sectors...
Scanning files...
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->boot.exe-> ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\fantaporn[1].htm->(SCRIPT0003)->(OBJECT0000) - HTML/CodeBaseExec* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Program Files\WinRAR\Default.SFX - Backdoor:IRC/SdBot -> Infected
Scanned
============================
Objects: 41602
Directories: 3398
Archives: 1252
Size(Kb): -76943
Infected files: 66
Found
============================
Viruses found: 10
Suspicious files: 0
Disinfected files: 0
Mail files: 223
Merci par avance à tous ceux qui pourraient m'aider à régler ce problème.
Suite aux différentes interventions sur un virus qui occulte Norton, je viens de découvrir le même problème.
affichage ultra rapide de la fenêtre de Norton et impossibilité de l'utiliser, même problème pour Regedit et pour le gestionnaire de taches.
En mode sans echec Norton fontionne mais ne détecte rien même avec la dernière mise à jour
En mode normal Windows
Panda détecte :
W32/Gaobot.JF.worm No Désinfecté C:\WINNT\system32 mptclockvv.exe
W32/Gaobot.JF.worm No Désinfecté C:\WINNT\system32\_data_.dat
W32/Gaobot.JF.worm No Désinfecté C:\Documents and Settings\Administrateur\_data_.dat
AVG :
Spybot c:\WINNT\SYSTEM32\SVHOST32.EXE
RAVANTIVIRUS edite le rapport suivant :
Scan started at 13/03/2004 07:43:01
Scanning memory...
Scanning boot sectors...
Scanning files...
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->boot.exe-> ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\monique\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Documents and Settings\police\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\fantaporn[1].htm->(SCRIPT0003)->(OBJECT0000) - HTML/CodeBaseExec* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\Documents and Settings\staps\Local Settings\Temporary Internet Files\Content.IE5\96INK17A\nem[1].exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Program Files\WinRAR\Default.SFX - Backdoor:IRC/SdBot -> Infected
Scanned
============================
Objects: 41602
Directories: 3398
Archives: 1252
Size(Kb): -76943
Infected files: 66
Found
============================
Viruses found: 10
Suspicious files: 0
Disinfected files: 0
Mail files: 223
Merci par avance à tous ceux qui pourraient m'aider à régler ce problème.
10 réponses
-
Bonjour
tu as un sacré elevage chez toi :D
- vide ton cache IE
- agobot/goabot http://securityresponse.symantec.com/avcenter/FxGaobot.exe
et pour les autres , demarre en mode sans echec et relance ton antivirus , ca devrais allez
@+ -
Salut,
A en croire Ravantivirus, tu aurais une belle collection de virus et de troyens, mais il n'en a supprimé aucun.
Je te conseille d'aller télécharger stinger.exe (724 Ko) sur le site de McAfee.
http://vil.nai.com/vil/stinger/
Démarre ensuite en mode sans échec et exécute Stinger pour "dégager" un peu tout cela.
Stinger détecte et supprime 39 virus, troyens et variantes. Il ne devrait plus rester grand chose après son passage.
Tu pourras ensuite réinstaller Norton, s'il ne fonctionne toujours pas.
Et refaire un scan complet.
Pense aussi à télécharger les derniers correctifs de Windows 2000.
Bonne chance!
Vazkor [W2K] -
Bonjour
Suite Stinger n'a rien donné en mode sans echec !!!!!
La protection d'AVG me signale Trojan horseIRC/backDoor.flood in c:\documents and setting\administrateur\local settings\temp\b.bat
J'ai essayé de virer b.bat, il se régénère à chaque fois
Pour RUNESTAFF quelle est la signification de vide ton cache IE
Merci
rr -
Bonjour
vu que tu as beaucoup de virus dans "Temporary Internet Files\Content.IE5"
ils sont dans le cache des pages internet que tu as visitées
tu va dans "panneau de configuartion" /"options internet " / et dans le 1er onglet , tu cliques pour supprimer tes fichiers-
-
re bonjour
j'ai de l'amélioration il ne me reste plus que ces virus à supprimer
Scan started at 13/03/2004 11:56:19
Scanning memory...
Scanning boot sectors...
Scanning files...
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\teaw.exe - DoS:Win32/Delf.B -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Program Files\WinRAR\Default.SFX - Backdoor:IRC/SdBot -> Infected
Scanned
============================
Objects: 39695
Directories: 3371
Archives: 1248
Size(Kb): -108855
Infected files: 20
Found
============================
Viruses found: 9
Suspicious files: 0
Disinfected files: 0
Mail files: 224
A l'heure actuelle j'ai presque tout essayé.
rr -
re bonjour
j'ai de l'amélioration il ne me reste plus que ces virus à supprimer
Scan started at 13/03/2004 11:56:19
Scanning memory...
Scanning boot sectors...
Scanning files...
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->java.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->newuser.bat - Worm:BAT/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->regedit.dll - Worm:IRC/Randon.I* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->screen.dll - Worm:IRC/Randon.D* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->sipg.ocx - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->teaw.exe - DoS:Win32/Delf.B -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\winzxp.exe->[Instyler Ex-it!]->x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\boot.exe->(ASPack 2.12) - Backdoor:IRC/SdBot -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\empavms.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\p3n0r.exe->(ASPack 2.12) - Tool:HideWindows -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\teaw.exe - DoS:Win32/Delf.B -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\wincmd34.bat - Trojan:BAT/Passer.A* -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\wind.dll - Worm:IRC/Randon.AC* -> Infected
C:\WINNT\system32\wbem\mof\good\sure32\x.exe->(ASPack 2.12) - Flooder:Win32/Xexe -> Infected
C:\Program Files\WinRAR\Default.SFX - Backdoor:IRC/SdBot -> Infected
Scanned
============================
Objects: 39695
Directories: 3371
Archives: 1248
Size(Kb): -108855
Infected files: 20
Found
============================
Viruses found: 9
Suspicious files: 0
Disinfected files: 0
Mail files: 224
A l'heure actuelle j'ai presque tout essayé.
rr
-
-
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
Suite
Que fait cet executable : WINZXP.EXE dans C:WINNT\SYSTEM32
Merci
rr -
Salut,
J'ai pas de Winzxp.exe sur mon système.
Peux-tu vérifier ce qui est lancé automatiquement au démarrage?
Même si tu n'as pas installé msconfig, tu as déjà le gestionnaire de tâches, les outils de Spybot.
Il serait intéressant de voir ce qui régénère ton fichier b.bat.
En fonction de ce que tu verras dans le gestionnaire de tâches tu pourras chercher ce qui les lance, dans la base de registre.
@+
Vazkor [W2K] -
Installe un antivirus de comme avast , il ne doit pas etre arreter ton virus ( pas sur )
demarre en mode sans echec et fais une analyse-
Bonjour
Suite, grâce à la MàJ de norton de ce matin j'ai réussi à faire fonctionner norton, gest.de taches et regedit en mode win normal.
Mais j'ai toujours des problèmes même en essayant tous les AV trouvés sur le net.
De temps en temps et de manière aléatoire j'ai une petite fenêtre qui s'ouvre ???? (3 à 4 cm.)
Certains AV me détectent des BackDoor alors que Norton ne me signale rien.
Quoi faire ??
Si tu as une astuce je suis preneur.
merci d'avance
rr
-
-
-
bonjour
je suis pas trop doué en ce qui concerne lesvirus mais je cros que j'e ai chopé un (u plusieurs) car je narrive plus a ouvrir noton que dois je fare sachant que je narrive pasa desinstaller mon norton -
Salut pour désinstaller norton vas là:
virus desintaller proprement norton symantec
et après tu installe avast ici :
http://www.commentcamarche.net/download/telecharger-151-avast
pour les spyware : spybot : https://www.commentcamarche.net/telecharger/securite/20939-spybot-search-and-destroy/
et ad-aware http://www.commentcamarche.net/download/telecharger-83-ad-aware-free-antivirus
pour le mettre en fraçais là : https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/25543.html
pour smitfraudfix c'est la suis le tuto a la lettre
https://www.zebulon.fr/dossiers/tutoriaux/66-smitfraudfix.html
et poste tout les rapport sur ce forum : car un spécialiste pourra t'aider (enfin je pense)
