Tentative d'éradication d'un trojan : VUNDO

Bonjour,
Comme préconisé, je vous transmets ci-dessous les trois rapports des diverses analyses que j'ai faites. J'ai supprimé les deux lignes incriminées, mais je ne sais pas si cela suffit. J'ai des insectes qui se balladent sur mon écran et qui dessinent des galeries bleues. De plus, le fonctionnement de mon PC est extrêmement ralenti. Est-ce l'effet de VUNDO? Lorsque je clique sur la touche Echap; tous ces insectes disparaissent. j'ai Avast comme protection résidente. J'ai aussi Ad aware, Spyboat search and destroy, mais aucun n'ont suffi. Avast me déclare que j'ai un virus, ce trojan VUNDO, je le mets en quarantaine, mais il réapparait. C'est pourquoi j'ai tenté les manoeuvres préconisées dans ce site. Merci de votre aide.
Catherine
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr


Cette inscription doit obligatoirement être effacée par Hijackthis



O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized

Sûr
BitTorrent Startup

O4 - HKCU\..\Run: [MalWarrior] "C:\Documents and Settings\All Users\Application Data\Adsl Software Limited\MalWarrior 2008\Malwarrior.exe" /autorun


Nasty (2.97 / 5.00)

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 15:11:56 23/05/2008

+ Résultat de l'analyse:



C:\Documents and Settings\catherine\Cookies\catherine@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\catherine\Cookies\catherine@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.


Fin du rapport

BitDefender Online Scanner



Scan report generated at: Fri, May 23, 2008 - 16:10:25





Scan path: A:\;C:\;D:\;E:\;F:\;







Statistics

Time
00:46:59

Files
135284

Folders
4104

Boot Sectors
3

Archives
7234

Packed Files
9570




Results

Identified Viruses
6

Infected Files
13

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
12




Engines Info

Virus Definitions
1225889

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
16

Archive plugins
42

Unpack plugins
7

E-mail plugins
6

System plugins
5




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\Documents and Settings\catherine\Local Settings\Temp\temp.dll
Detected with: Adware.BHO.WRF

C:\Documents and Settings\catherine\Local Settings\Temp\temp.dll
Deleted

C:\Program Files\AbsoluteTransfer\AbsoluteTransfer.dll
Detected with: Adware.BHO.WRF

C:\Program Files\AbsoluteTransfer\AbsoluteTransfer.dll
Disinfection failed

C:\Program Files\AbsoluteTransfer\AbsoluteTransfer.dll
Delete failed

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP332\A0064847.exe
Infected with: Trojan.Generic.241977

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP332\A0064847.exe
Deleted

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP332\A0064848.exe
Infected with: Trojan.Peed.JIK

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP332\A0064848.exe
Disinfection failed

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP332\A0064848.exe
Deleted

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP336\A0068224.exe=>(NSIS o)=>lzma_solid_nsis0002
Detected with: Adware.NaviPromo.BYC

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP336\A0068224.exe=>(NSIS o)=>lzma_solid_nsis0002
Deleted

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP336\A0068224.exe=>(NSIS o)
Update failed

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP339\A0070532.dll
Infected with: Trojan.Generic.268738

C:\System Volume Information\_restore{6A7BCA9E-423F-4363-AC4D-23E67F3366A2}\RP339\A0070532.dll
Deleted

C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0006
Detected with: Adware.NaviPromo.BYC

C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0006
Deleted

C:\WINDOWS\pack.epk=>(NSIS 2g)
Update failed

C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0008
Infected with: Trojan.Mailskinner.C

C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0008
Deleted

C:\WINDOWS\pack.epk=>(NSIS 2g)
Update failed

C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
Detected with: Adware.NaviPromo.BYC

C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
Deleted

C:\WINDOWS\pack.epk=>(NSIS 2g)=>lzma_solid_nsis0014=>(NSIS g)
Update failed

C:\WINDOWS\system32\yayYQkiG.dll.vir
Infected with: Trojan.Generic.268738

C:\WINDOWS\system32\yayYQkiG.dll.vir
Deleted

C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0006
Detected with: Adware.NaviPromo.BYC

C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0006
Deleted

C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)
Update failed

C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0008
Infected with: Trojan.Mailskinner.C

C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0008
Deleted

C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)
Update failed

C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
Detected with: Adware.NaviPromo.BYC

C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0014=>(NSIS g)=>lzma_solid_nsis0002
Deleted

C:\WINDOWS\Temp\NSIS_Install_WMP.exe=>(NSIS o)=>lzma_solid_nsis0014=>(NSIS g)
Update failed