Infécté par Win32 trojan

Question

Bonjour,

 Voici mon probleme: après avoir télécharger et ouvert un petit logiciel, mon antivirus, avast 4.8 m'a detecté plusieurs virus présent sur mon ordinateur. Dans la continuité, j'ai fait une analyse où avast m'a indiqué les fichiers inféctés que j'ai voulu supprimer mais impossible : "une erreur s'est produite..."

 Quelques instants plus tard, mon fond d'ecran du bureau à disparu pour laisser place à un fond blanc. Puis plusieurs messages sont apparus, des logiciels permettant soit disant de supprimer des virus. Enfin, plusieurs icones du bureau ont disparu et d'autres sont apparus comme: Walware Difender ou Protect Your Privacy. Je n'ai plus accés dans Démarrer à la liste de mes programmes.
 J'ai fait une analyse avec le logiciel AVG antirootkit qui m'a detecté des fichiers inféctés que j'ai supprimé et j'ai redémarrer mon PC.

 En clair je suis dans la galère et n'étant pas un expert en informatique, je demande de l'aide.

lorus · Answer

et depuis le redmarrage ca va mieux ?

anubis3 · Answer

Salut, 

 Non c'est toujours pareil. Aucun changement.

 Merci pour ta rapidité.

lorus · Answer

mais quand tu a reinstaller ta formater ton c: ou tu as reinstaller par dessus ?

anubis3 · Answer

Non j'ai rien désinstaller, j'ai simplement redémarrer le pc pour que AVG antirootkit supprime les fichiers inféctés. Maintenant je ne vois pas vraiment ce que je peux faire pour améliorer la situation. A la place de l'heure en bas à droite j'ai: "virus alerte".

lorus · Answer

desoler je me suis tromper de personne  , alors apres un netoyage antivirus c pareil ?

anubis3 · Answer

Ouais aucun changement. De plus avast refuse de supprimer les fichiers infectés ( Win32 trojan) qu'il a detecté.

lorus · Answer

il faut que tu releve le chemin et les supprimer manuellement

georges86400 · Answer

Bonjour
Avast est nul comme antivius, si tu veux un gratuit va vers AVG ou Avira.
Telecharge Malwarebytes et fait une analyse de ton pc

anubis3 · Answer

Pourrais-tu m'expliquer la marche à suivre stp. Je n'ai jamais fait cela auparavant. Merci

georges86400 · Answer

telecharge Malwarebytes, installe le, puis tu le lancess et du demande analyse de ton disque.
a la fin supprime tout ce qu'il aura trouve.

anubis3 · Answer

J'ai essayé de telecharger Malwarebytes mais mon firefox me demande de choisir une application pour l'ouvrir sauf qu'il m'est impossible de choisir. Je clique sur "choisir" mais rien ne se passe. Pour info, j'ai aussi IE mais il ne fonctionne plus du tout maintenant.

lorus · Answer

par exemple avast a detecter un virus et te dit vous etes infecter par un cheval de troie dans par exemple c:/windows/system32 tu suit ce chemin et tu supprime

anubis3 · Answer

J'ai lancé l'analyse avec Malwarebytes. Je vous tiens au courant.

lorus · Answer

ok pas de pb

anubis3 · Answer

Voila, l'analyse est terminéeet il m'a detecté 127 elements. Dois-je supprimer tout les éléments? Cela n'entrainera pas de probleme au niveau de l'ensemeble du systeme de windows?

georges86400 · Answer

Non tu peux supprimer.
Tu avais un fameux paquets de saloperies

georges86400 · Answer

Je me sers souvent de malwarebytes et je n'ai jamais eu de problemes

anubis3 · Answer

Voila le rapport après suppression. Certains éléments n'ont pas été supprimés. Comment faire?


Malwarebytes' Anti-Malware 1.29
Version de la base de données: 1305
Windows 5.1.2600 Service Pack 3

22/10/2008 14:57:09
mbam-log-2008-10-22 (14-57-09).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 145431
Temps écoulé: 49 minute(s), 18 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 8
Clé(s) du Registre infectée(s): 40
Valeur(s) du Registre infectée(s): 7
Elément(s) de données du Registre infecté(s): 17
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 47

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\opnmLExY.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\qeoajisp.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\hrvoqu.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\efcDSiFx.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\qnflkotm.dll (Trojan.Zlob) -> Delete on reboot.
C:\WINDOWS\system32\sysbase32.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Program Files\Conduit\Community Alerts\Alert.dll (Trojan.HumourCanine) -> Delete on reboot.
C:\WINDOWS\vwnskbot.dll (Trojan.Agent) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{293e6fe5-d8d8-484b-9485-0cb525cb133e} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{293e6fe5-d8d8-484b-9485-0cb525cb133e} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{42ae1da1-ff60-4435-a81f-9b6538f865a6} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\efcdsifx (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{42ae1da1-ff60-4435-a81f-9b6538f865a6} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5c39c669-f3d8-469e-b2f2-a9820432e4e8} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{5c39c669-f3d8-469e-b2f2-a9820432e4e8} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{d1fe2c01-770b-45e2-8743-3e6d67851a4f} (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\lospn (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c420cf9f-d9d6-421f-958f-aa59906c2b12} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c420cf9f-d9d6-421f-958f-aa59906c2b12} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{10026069-7a5f-4531-811e-c8df20643bee} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d71c4af2-9e0d-4eb3-98a6-f542e6f360d9} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e52c17c7-8498-4d09-93b8-0c9227d10aeb} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\lsksaq.bho (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} (Trojan.HumourCanine) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall	otal secure 2009 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\TotalSecure2009 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{4b8fb291-c96c-436b-9308-e1c248d7c820} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion	dssdata (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE	dss (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webvideo (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{2a1a038e-09ab-4da4-9bd1-438e06ac2aa3} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{66d0c62c-3340-463f-aa87-6f3e39884b13} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e133a049-9d75-47f2-9e8a-b7f07d7e85da} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{b6ed8c67-9a5e-4198-a613-3d3900289d65} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{33d669b2-51a4-4f89-9313-1612699d8b1a} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{9aecc806-1424-40d5-a061-f64257c6050b} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b669a521-60f8-465c-aead-4360e4ccb2b3} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b669a521-60f8-465c-aead-4360e4ccb2b3} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\bkqxdons.bpms (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\bkqxdons.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ac4b634e (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{42ae1da1-ff60-4435-a81f-9b6538f865a6} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\qnflkotm (Trojan.Zlob) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run	otalsecure2009 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\vwnskbot (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0\source (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{e133a049-9d75-47f2-9e8a-b7f07d7e85da} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\opnmlexy -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\opnmlexy  -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.Homepage) -> Bad: (http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2 Good: (https://www.google.com/?gws_rd=ssl -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId (Trojan.FakeAlert) -> Bad: (VIRUS ALERT!) Good: (76412-OEM-0011903-00117) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat (Trojan.FakeAlert) -> Bad: (HH:mm: VIRUS ALERT!) Good: (HH:mm:ss) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowControlPanel (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowRun (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyDocs (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuMorePrograms (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoToolbarCustomize (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCPL (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Program Files\PCHealthCenter (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009 (Rogue.TotalSecure) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\hrvoqu.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\efcDSiFx.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\opnmLExY.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\YxELmnpo.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\YxELmnpo.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qeoajisp.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\psijaoeq.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\qnflkotm.dll (Trojan.Zlob) -> Delete on reboot.
C:\WINDOWS\system32\sysbase32.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\Program Files\Conduit\Community Alerts\Alert.dll (Trojan.HumourCanine) -> Delete on reboot.
C:\Documents and Settings	iti\Local Settings\Temporary Internet Files\Content.IE5\8DNB9YCD\CAAZIJU9 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Local Settings\Temporary Internet Files\Content.IE5\8ZKPG9OZ\file[1].exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Local Settings\Temporary Internet Files\Content.IE5\M50ZM9CF
d82m0[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Local Settings\Temporary Internet Files\Content.IE5\YPU18NM7\file[1].exe (Trojan.TDSS) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Local Settings\Temporary Internet Files\Content.IE5\YPU18NM7\upd105320[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\Eurobarre\eb.exe (Adware.Eurobarre) -> Quarantined and deleted successfully.
C:\Program Files\Eurobarre\uninstall.exe (Adware.Eurobarre) -> Quarantined and deleted successfully.
C:\WINDOWS\easp.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\fsvtrrlu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32
nnNebcA.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\0.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\1.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\1.ico (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\2.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\2.ico (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\3.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\5.exe (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\foo.txt (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\sc.html (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009\scan.exe (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009	otalsecure.s2 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009	otalsecure.s3 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009	otalsecure.s6 (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\Program Files\TS-2009\uninstall.exe (Rogue.TotalSecure) -> Quarantined and deleted successfully.
C:\WINDOWS\vwnskbot.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\woprdagt.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\bkqxdons.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\aetlsrkntlr.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\k.txt (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Program Files\setup.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\WINDOWS\system32
vs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Application Data\TmpRecentIcons\Total Secure 2009.lnk (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Bureau\Protect Your Privacy.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Bureau\Malware Defender.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Bureau\System Error Fixer.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Local Settings\Temp\pwrmgr.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings	iti\Local Settings\Temp\sft_ver1.1454.0.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

lorus · Answer

oui vire tous !!

georges86400 · Answer

C'est marqué, delete on reboot
ce sera enleve lors d'un reboot
He ben !!!!
la prochaine fois fait attention,

anubis3 · Answer

voila j'ai fait un reboot donc normalement tout devrait avoir disparu. Je fait de nouvelles analyses pour être sur. On ne sait jamais. De plus mon bureau est toujours avec un fond blanc et certains de mes raccourcis ont disparus. 

 au fait merci pour votre aide. C'est sympa de vous occuper de novices comme moi.

anubis3 · Answer

Je viens de voir que j'ai Total Secure 2009 installé sur mon PC. Quel est ce programme?

anubis3 · Answer

Après analyse avec Malwarebytes, il se trouve que j'avais encore un trojan: voila le rapport:

Malwarebytes' Anti-Malware 1.29
Version de la base de données: 1305
Windows 5.1.2600 Service Pack 3

22/10/2008 15:21:58
mbam-log-2008-10-22 (15-21-58).txt

Type de recherche: Examen rapide
Eléments examinés: 47741
Temps écoulé: 3 minute(s), 43 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings	iti\Local Settings\Temp\sft_ver1.1454.0.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.


Je vois le bout du tunnel normalement.

Infécté par Win32 trojan - Page 1

Discussions similaires

Newsletters