Deux petits virus passant par la...
Bonjour,
j'ai découvert deux petits virus avec kapersky online alors que pcillin ne les avait pas retrouvé? pouvez vous me dire comment les faire disparaitre?
Win32.Blen.r
Win32.Zapchast.gm
quelques rapports
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, May 17, 2008 7:13:30 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 16/05/2008
Kaspersky Anti-Virus database records: 695606
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
Scan Statistics:
Total number of scanned objects: 156809
Number of viruses found: 3
Number of infected objects: 136
Number of suspicious objects: 0
Duration of the scan process: 03:33:19
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Aventail\nglog.lgf Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\jour\Application Data\$_hpcst$.hpc Object is locked skipped
C:\Documents and Settings\jour\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Historique\History.IE5\MSHist012008051620080517\index.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Temp\0exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\10exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\11exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\12exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\13exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\14exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\14exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\15exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\16exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\16exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\18exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\1exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\21exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\23exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\24exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\26exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\27exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\28exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\33exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\33exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\36exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\37exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\3exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\3exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\41exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\41exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\43exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\44exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\45exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\48exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\49exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\50exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\51exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\52exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\52exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\53exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\54exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\55exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\57exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\58exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\59exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\62exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\63exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\67exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\68exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\70exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\71exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\72exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\73exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\76exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\77exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\78exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\81exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\82exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\83exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\84exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\85exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\86exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\86exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\88exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\88exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\90exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\91exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\93exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\95exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\96exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\96exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\97exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\98exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\9exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\9exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\Perflib_Perfdata_274.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Temp\WCESLog.log Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\jour\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\jour\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\jour\UserData\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Trend Micro\Internet Security\Trusted.dat Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP231\A0063729.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP231\A0063730.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065083.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065084.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065085.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065086.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065087.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065088.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065089.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065090.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065091.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065092.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065093.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065094.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065095.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065096.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065097.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065098.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065099.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065100.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065101.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065102.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065103.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065104.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065105.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065106.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065107.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065108.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065109.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065110.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065111.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065112.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065113.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065114.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065115.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065116.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065117.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065118.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065119.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065120.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065121.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065122.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065123.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065124.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065125.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065126.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065127.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065128.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065129.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065130.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065131.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065132.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065133.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065134.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065135.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065136.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065137.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065138.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065139.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065140.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065141.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065142.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065143.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065144.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065145.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP237\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd6605.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
G:\laurent\pcillin\tis12fr_gm_shop.exe Object is locked skipped
G:\laurent\pcillin\tis14fr_1487_shop.exe Object is locked skipped
G:\laurent\pcillin\tis15fr_1419_shop.exe Object is locked skipped
G:\laurent\pcillin\TIS3264FR.exe Object is locked skipped
Scan process completed.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:21:39, on 17/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ngvpnmgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Pidgin\pidgin.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTCDE.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://2.255.255.254:455/postauth/pacs/AV1192190383555VL.pac
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [Pidgin] C:\Program Files\Pidgin\pidgin.exe
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE /FU "C:\WINDOWS\TEMP\E_SB3.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe
O23 - Service: PMounter - Unknown owner - C:\WINDOWS\system32\PMounter.exe
O23 - Service: Composant de commande centrale Trend Micro (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
O24 - Desktop Component 0: (no name) - About:Home
--
End of file - 7465 bytes
j'ai découvert deux petits virus avec kapersky online alors que pcillin ne les avait pas retrouvé? pouvez vous me dire comment les faire disparaitre?
Win32.Blen.r
Win32.Zapchast.gm
quelques rapports
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, May 17, 2008 7:13:30 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 16/05/2008
Kaspersky Anti-Virus database records: 695606
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
Scan Statistics:
Total number of scanned objects: 156809
Number of viruses found: 3
Number of infected objects: 136
Number of suspicious objects: 0
Duration of the scan process: 03:33:19
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Aventail\nglog.lgf Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\jour\Application Data\$_hpcst$.hpc Object is locked skipped
C:\Documents and Settings\jour\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Historique\History.IE5\MSHist012008051620080517\index.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Temp\0exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\10exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\11exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\12exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\13exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\14exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\14exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\15exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\16exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\16exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\18exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\1exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\21exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\23exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\24exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\26exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\27exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\28exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\33exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\33exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\36exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\37exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\3exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\3exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\41exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\41exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\43exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\44exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\45exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\48exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\49exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\50exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\51exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\52exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\52exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\53exymupcnt7.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\54exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\55exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\57exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\58exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\59exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\62exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\63exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\67exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\68exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\70exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\71exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\72exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\73exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\76exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\77exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\78exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\81exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\82exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\83exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\84exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\85exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\86exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\86exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\88exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\88exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\90exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\91exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\93exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\95exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\96exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\96exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\97exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\98exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\9exhmunmlclr11.exe Infected: SpamTool.Win32.Blen.r skipped
C:\Documents and Settings\jour\Local Settings\Temp\9exymupcnt8.exe Infected: Trojan.Win32.Zapchast.gm skipped
C:\Documents and Settings\jour\Local Settings\Temp\Perflib_Perfdata_274.dat Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Temp\WCESLog.log Object is locked skipped
C:\Documents and Settings\jour\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\jour\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\jour\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\jour\UserData\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Trend Micro\Internet Security\Trusted.dat Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP231\A0063729.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP231\A0063730.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065083.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065084.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065085.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065086.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065087.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065088.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065089.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065090.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065091.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065092.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065093.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065094.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065095.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065096.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065097.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065098.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065099.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065100.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065101.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065102.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065103.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065104.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065105.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065106.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065107.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065108.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065109.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065110.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065111.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065112.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065113.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065114.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065115.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065116.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065117.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065118.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065119.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065120.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065121.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065122.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065123.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065124.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065125.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065126.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065127.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065128.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065129.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065130.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065131.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065132.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065133.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065134.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065135.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065136.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065137.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065138.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065139.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065140.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065141.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065142.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065143.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065144.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP232\A0065145.exe Infected: SpamTool.Win32.Blen.p skipped
C:\System Volume Information\_restore{833809C4-C6E1-4880-8E56-113637B3EC57}\RP237\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd6605.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
G:\laurent\pcillin\tis12fr_gm_shop.exe Object is locked skipped
G:\laurent\pcillin\tis14fr_1487_shop.exe Object is locked skipped
G:\laurent\pcillin\tis15fr_1419_shop.exe Object is locked skipped
G:\laurent\pcillin\TIS3264FR.exe Object is locked skipped
Scan process completed.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:21:39, on 17/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ngvpnmgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Pidgin\pidgin.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FAMTCDE.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://2.255.255.254:455/postauth/pacs/AV1192190383555VL.pac
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [Pidgin] C:\Program Files\Pidgin\pidgin.exe
O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE /FU "C:\WINDOWS\TEMP\E_SB3.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe
O23 - Service: PMounter - Unknown owner - C:\WINDOWS\system32\PMounter.exe
O23 - Service: Composant de commande centrale Trend Micro (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
O24 - Desktop Component 0: (no name) - About:Home
--
End of file - 7465 bytes
Configuration: Windows XP Firefox 2.0.0.14
1 réponse
-
Salut,
juste pour te dire que tu n'es pas le premier à avoir ces "trojan".
voir ici
http://www.commentcamarche.net/forum/affich 6424831 virus et troyen reuni
Certains logiciiels le reconnaissent comme trojan, d'autres pas
Il s'agit peut-être de faux positifs
Va sur www.virustotal.com et scanne les fichiers infectés.
Fais-toi ta propre idée.
Au sinon, tu peux appliquer le protocole de la personne qui a eu le même souci que toi
Zor
