Sujet Précédent Sujet Suivant

Infécté par Win32 trojan

Fermé
anubis3 - 22 oct. 2008 à 13:32
 anubis3 - 22 oct. 2008 à 15:23
Bonjour,

Voici mon probleme: après avoir télécharger et ouvert un petit logiciel, mon antivirus, avast 4.8 m'a detecté plusieurs virus présent sur mon ordinateur. Dans la continuité, j'ai fait une analyse où avast m'a indiqué les fichiers inféctés que j'ai voulu supprimer mais impossible : "une erreur s'est produite..."

Quelques instants plus tard, mon fond d'ecran du bureau à disparu pour laisser place à un fond blanc. Puis plusieurs messages sont apparus, des logiciels permettant soit disant de supprimer des virus. Enfin, plusieurs icones du bureau ont disparu et d'autres sont apparus comme: Walware Difender ou Protect Your Privacy. Je n'ai plus accés dans Démarrer à la liste de mes programmes.
J'ai fait une analyse avec le logiciel AVG antirootkit qui m'a detecté des fichiers inféctés que j'ai supprimé et j'ai redémarrer mon PC.

En clair je suis dans la galère et n'étant pas un expert en informatique, je demande de l'aide.
A voir également:

23 réponses

  • 1
  • 2
Réponse 1 / 23
georges86400 Messages postés 1750 Date d'inscription jeudi 2 octobre 2008 Statut Membre Dernière intervention 17 février 2013 143
22 oct. 2008 à 14:56
Non tu peux supprimer.
Tu avais un fameux paquets de saloperies
1
Réponse 2 / 23
georges86400 Messages postés 1750 Date d'inscription jeudi 2 octobre 2008 Statut Membre Dernière intervention 17 février 2013 143
22 oct. 2008 à 14:57
Je me sers souvent de malwarebytes et je n'ai jamais eu de problemes
1
Réponse 3 / 23
Utilisateur anonyme
22 oct. 2008 à 14:59
oui vire tous !!
1
Réponse 4 / 23
anubis3
22 oct. 2008 à 13:39
Salut,

Non c'est toujours pareil. Aucun changement.

Merci pour ta rapidité.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 23
anubis3
22 oct. 2008 à 13:46
Non j'ai rien désinstaller, j'ai simplement redémarrer le pc pour que AVG antirootkit supprime les fichiers inféctés. Maintenant je ne vois pas vraiment ce que je peux faire pour améliorer la situation. A la place de l'heure en bas à droite j'ai: "virus alerte".
0
Réponse 6 / 23
anubis3
22 oct. 2008 à 13:51
Ouais aucun changement. De plus avast refuse de supprimer les fichiers infectés ( Win32 trojan) qu'il a detecté.
0
Réponse 7 / 23
anubis3
22 oct. 2008 à 13:54
Pourrais-tu m'expliquer la marche à suivre stp. Je n'ai jamais fait cela auparavant. Merci
0
Réponse 8 / 23
anubis3
22 oct. 2008 à 13:59
J'ai essayé de telecharger Malwarebytes mais mon firefox me demande de choisir une application pour l'ouvrir sauf qu'il m'est impossible de choisir. Je clique sur "choisir" mais rien ne se passe. Pour info, j'ai aussi IE mais il ne fonctionne plus du tout maintenant.
0
Réponse 9 / 23
anubis3
22 oct. 2008 à 14:05
J'ai lancé l'analyse avec Malwarebytes. Je vous tiens au courant.
0
Réponse 10 / 23
anubis3
22 oct. 2008 à 14:54
Voila, l'analyse est terminéeet il m'a detecté 127 elements. Dois-je supprimer tout les éléments? Cela n'entrainera pas de probleme au niveau de l'ensemeble du systeme de windows?
0
Réponse 11 / 23
anubis3
22 oct. 2008 à 14:58
Voila le rapport après suppression. Certains éléments n'ont pas été supprimés. Comment faire?


Malwarebytes' Anti-Malware 1.29
Version de la base de données: 1305
Windows 5.1.2600 Service Pack 3

22/10/2008 14:57:09
mbam-log-2008-10-22 (14-57-09).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 145431
Temps écoulé: 49 minute(s), 18 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 8
Clé(s) du Registre infectée(s): 40
Valeur(s) du Registre infectée(s): 7
Elément(s) de données du Registre infecté(s): 17
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 47

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\opnmLExY.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\qeoajisp.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\hrvoqu.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\efcDSiFx.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\qnflkotm.dll (Trojan.Zlob) -> Delete on reboot.
C:\WINDOWS\system32\sysbase32.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Program Files\Conduit\Community Alerts\Alert.dll (Trojan.HumourCanine) -> Delete on reboot.
C:\WINDOWS\vwnskbot.dll (Trojan.Agent) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{293e6fe5-d8d8-484b-9485-0cb525cb133e} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{293e6fe5-d8d8-484b-9485-0cb525cb133e} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42ae1da1-ff60-4435-a81f-9b6538f865a6} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\efcdsifx (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{42ae1da1-ff60-4435-a81f-9b6538f865a6} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5c39c669-f3d8-469e-b2f2-a9820432e4e8} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{5c39c669-f3d8-469e-b2f2-a9820432e4e8} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{d1fe2c01-770b-45e2-8743-3e6d67851a4f} (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\lospn (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c420cf9f-d9d6-421f-958f-aa59906c2b12} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c420cf9f-d9d6-421f-958f-aa59906c2b12} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{10026069-7a5f-4531-811e-c8df20643bee} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d71c4af2-9e0d-4eb3-98a6-f542e6f360d9} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e52c17c7-8498-4d09-93b8-0c9227d10aeb} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\lsksaq.bho (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} (Trojan.HumourCanine) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\total secure 2009 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\TotalSecure2009 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{4b8fb291-c96c-436b-9308-e1c248d7c820} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webvideo (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{2a1a038e-09ab-4da4-9bd1-438e06ac2aa3} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{66d0c62c-3340-463f-aa87-6f3e39884b13} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e133a049-9d75-47f2-9e8a-b7f07d7e85da} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{b6ed8c67-9a5e-4198-a613-3d3900289d65} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{33d669b2-51a4-4f89-9313-1612699d8b1a} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{9aecc806-1424-40d5-a061-f64257c6050b} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b669a521-60f8-465c-aead-4360e4ccb2b3} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b669a521-60f8-465c-aead-4360e4ccb2b3} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\bkqxdons.bpms (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\bkqxdons.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ac4b634e (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{42ae1da1-ff60-4435-a81f-9b6538f865a6} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\qnflkotm (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\totalsecure2009 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\vwnskbot (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0\source (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{e133a049-9d75-47f2-9e8a-b7f07d7e85da} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\opnmlexy -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\opnmlexy -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.Homepage) -> Bad: (http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2 Good: (https://www.google.com/?gws_rd=ssl -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId (Trojan.FakeAlert) -> Bad: (VIRUS ALERT!) Good: (76412-OEM-0011903-00117) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat (Trojan.FakeAlert) -> Bad: (HH:mm: VIRUS ALERT!) Good: (HH:mm:ss) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowControlPanel (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowRun (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyDocs (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuMorePrograms (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoToolbarCustomize (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCPL (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Program Files\PCHealthCenter (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009 (Rogue.TotalSecure) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\hrvoqu.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\efcDSiFx.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\opnmLExY.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\YxELmnpo.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\YxELmnpo.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qeoajisp.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\psijaoeq.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\qnflkotm.dll (Trojan.Zlob) -> Delete on reboot.
C:\WINDOWS\system32\sysbase32.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Program Files\Conduit\Community Alerts\Alert.dll (Trojan.HumourCanine) -> Delete on reboot.
C:\Documents and Settings\titi\Local Settings\Temporary Internet Files\Content.IE5\8DNB9YCD\CAAZIJU9 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Local Settings\Temporary Internet Files\Content.IE5\8ZKPG9OZ\file[1].exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Local Settings\Temporary Internet Files\Content.IE5\M50ZM9CF\nd82m0[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Local Settings\Temporary Internet Files\Content.IE5\YPU18NM7\file[1].exe (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Local Settings\Temporary Internet Files\Content.IE5\YPU18NM7\upd105320[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Eurobarre\eb.exe (Adware.Eurobarre) -> Quarantined and deleted successfully.
C:\Program Files\Eurobarre\uninstall.exe (Adware.Eurobarre) -> Quarantined and deleted successfully.
C:\WINDOWS\easp.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\fsvtrrlu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nnnNebcA.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\0.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\1.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\1.ico (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\2.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\2.ico (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\3.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\5.exe (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\foo.txt (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\sc.html (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009\scan.exe (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009\totalsecure.s2 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009\totalsecure.s3 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009\totalsecure.s6 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009\uninstall.exe (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\WINDOWS\vwnskbot.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\woprdagt.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\bkqxdons.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\aetlsrkntlr.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\k.txt (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Program Files\setup.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Application Data\TmpRecentIcons\Total Secure 2009.lnk (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Bureau\Protect Your Privacy.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Bureau\Malware Defender.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Bureau\System Error Fixer.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Local Settings\Temp\pwrmgr.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\titi\Local Settings\Temp\sft_ver1.1454.0.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
0
Réponse 12 / 23
georges86400 Messages postés 1750 Date d'inscription jeudi 2 octobre 2008 Statut Membre Dernière intervention 17 février 2013 143
22 oct. 2008 à 15:02
C'est marqué, delete on reboot
ce sera enleve lors d'un reboot
He ben !!!!
la prochaine fois fait attention,
0
Réponse 13 / 23
anubis3
22 oct. 2008 à 15:17
voila j'ai fait un reboot donc normalement tout devrait avoir disparu. Je fait de nouvelles analyses pour être sur. On ne sait jamais. De plus mon bureau est toujours avec un fond blanc et certains de mes raccourcis ont disparus.

au fait merci pour votre aide. C'est sympa de vous occuper de novices comme moi.
0
Réponse 14 / 23
anubis3
22 oct. 2008 à 15:20
Je viens de voir que j'ai Total Secure 2009 installé sur mon PC. Quel est ce programme?
0
Réponse 15 / 23
anubis3
22 oct. 2008 à 15:23
Après analyse avec Malwarebytes, il se trouve que j'avais encore un trojan: voila le rapport:

Malwarebytes' Anti-Malware 1.29
Version de la base de données: 1305
Windows 5.1.2600 Service Pack 3

22/10/2008 15:21:58
mbam-log-2008-10-22 (15-21-58).txt

Type de recherche: Examen rapide
Eléments examinés: 47741
Temps écoulé: 3 minute(s), 43 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\titi\Local Settings\Temp\sft_ver1.1454.0.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.


Je vois le bout du tunnel normalement.
0
Réponse 16 / 23
Utilisateur anonyme
22 oct. 2008 à 13:34
et depuis le redmarrage ca va mieux ?
-1
Réponse 17 / 23
Utilisateur anonyme
22 oct. 2008 à 13:42
mais quand tu a reinstaller ta formater ton c: ou tu as reinstaller par dessus ?
-1
Réponse 18 / 23
Utilisateur anonyme
22 oct. 2008 à 13:47
desoler je me suis tromper de personne , alors apres un netoyage antivirus c pareil ?
-1
Réponse 19 / 23
Utilisateur anonyme
22 oct. 2008 à 13:52
il faut que tu releve le chemin et les supprimer manuellement
-1
Réponse 20 / 23
georges86400 Messages postés 1750 Date d'inscription jeudi 2 octobre 2008 Statut Membre Dernière intervention 17 février 2013 143
22 oct. 2008 à 13:53
Bonjour
Avast est nul comme antivius, si tu veux un gratuit va vers AVG ou Avira.
Telecharge Malwarebytes et fait une analyse de ton pc
-1

Discussions similaires

C'est quoi "Win32:Trojan-gen {Other}"
Uzumaki -
Utilisateur anonyme -

5 réponses
Detection PUA: win32 Installcore
Nat -
bazfile -

13 réponses
Problème avec "PUADIManager:Win32/OfferCore
Knaki -
bazfile -

3 réponses
Virus : trojan:win32/wacatac.h!ml
Alky09 -
bazfile -

8 réponses
Comment supprimer le virus Trojan
vitsou -
vitsou -

18 réponses