total security

Question

salut a tous,j'ai moi aussi un petit probleme avec ce fameux total security
J'ai le cadenas qui apparait  en bas a doite de mon ecran et qui me dit toutes les 5 minutes que je suis infecté
Quelqu'un pourrait m'aider a l'enlever ? je vous remercie d'avance !!

lisandro1991 · Answer

############################## | UsbFix V6.023 |

User : lannier (Administrateurs) # ACER-3FAFADAADF
Update on 25/08/09 by Chiquitine29
Start at: 22:47:25 | 26/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

AMD Turion(tm) 64 X2 Mobile Technology TL-50
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 6.0.2900.5512
Windows Firewall Status : Disabled
AV : AntiVirus Firewall 8.01 8.01 [ Enabled | (!) Outdated ]
FW : AntiVirus Firewall 8.01[ Enabled ]8.01

C:\ -> Disque fixe local # 43,88 Go (23,34 Go free) [ACER] # FAT32
D:\ -> Disque fixe local # 44,37 Go (44,36 Go free) [ACERDATA] # FAT32
E:\ -> Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\WANADOO\TaskBarIcon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\mset.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Temp\_ex-08.exe
C:\Documents and Settings\All Users\Application Data\17325934\17325934.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\program files\orange\player orange\Orange Player.exe
C:\documents and settings\lannier\local settings\application data\ykwbtfqb.exe
C:\Documents and Settings\lannier\mset.exe
C:\Documents and Settings\lannier\mset.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Controle Parental\bin\splash.exe
C:\Program Files\Office-Web\Office-Web Center\panel.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\AntivirusFirewall\FSAUA\program\fsaua.exe
C:\Program Files\AntivirusFirewall\ORSP Client\fsorsp.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\fsus.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\PROGRA~1\WANADOO\WOOBrowser\WOOBrowser.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe

################## | Fichiers # Dossiers infectieux |

Présent ! C:\WINDOWS\antiv.exe  
Présent ! D:\autorun.inf  

################## | Suspect ! ... | https://www.virustotal.com/gui/ |


################## | Registre # Clés Run infectieuses |

Présent ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "MSN"  
Présent ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "PromoReg"  
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )  
Présent ! HKLM\software\microsoft\security center "AntiVirusOverride" ( 0x1 )  
Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 )  
Présent ! HKLM\software\microsoft\security center "UpdatesDisableNotify" ( 0x1 )  

################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{c8195295-9c18-11db-91c3-806d6172696f}
Shell\AutoRun\command =D:\setupSNK.exe 

################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # UsbFix V6.023 ! |

Xplode · Answer

Passes à l'option 2 ( Supression )

lisandro1991 · Answer

ça risque rien ? et c'est pas censé supprimer les infections des medias amovibles ?

Xplode · Answer

Si, mais la en l'occurence ca va supprimer les infections que tu auras si tu branches une clé USB ou un disque dur externe sur ton PC.

J'attend le log de l'option n°2

lisandro1991 · Answer

voila c'est fait,ils mettent :veuillez envoyer le fichier :C:/...zip mais j'ai pas de "log"

Xplode · Answer

Il se trouve à la racine système ( C:\USBfix.txt )

lisandro1991 · Answer

############################## | UsbFix V6.023 |

User : lannier (Administrateurs) # ACER-3FAFADAADF
Update on 25/08/09 by Chiquitine29
Start at: 23:06:03 | 26/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

AMD Turion(tm) 64 X2 Mobile Technology TL-50
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 6.0.2900.5512
Windows Firewall Status : Enabled
AV : AntiVirus Firewall 8.01 8.01 [ Enabled | (!) Outdated ]
FW : AntiVirus Firewall 8.01[ Enabled ]8.01

C:\ -> Disque fixe local # 43,88 Go (23,3 Go free) [ACER] # FAT32
D:\ -> Disque fixe local # 44,37 Go (44,36 Go free) [ACERDATA] # FAT32
E:\ -> Disque CD-ROM

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
C:\WINDOWS\eHome\ehRec.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
C:\Program Files\VeriSign\NAVI
aviagent.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Controle Parental\bin\splash.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\AntivirusFirewall\ORSP Client\fsorsp.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\fsaua.exe
C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\licmgr.exe
C:\Program Files\AntivirusFirewall\FSAUA\program\ih8.exe

################## | Fichiers # Dossiers infectieux |

Supprimé ! C:\WINDOWS\antiv.exe 
Supprimé ! D:\autorun.inf 

################## | Autres |


################## | Suspect ! ... | https://www.virustotal.com/gui/ |


################## | Registre # Clés Run infectieuses |

Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "MSN"  
Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "PromoReg"  
# HKLM\software\microsoft\security center "AntiVirusDisableNotify" # -> Reset sucessfully !  
# HKLM\software\microsoft\security center "AntiVirusOverride" # -> Reset sucessfully !  
# HKLM\software\microsoft\security center "FirewallDisableNotify" # -> Reset sucessfully !  
# HKLM\software\microsoft\security center "UpdatesDisableNotify" # -> Reset sucessfully !  

################## | Registre # Mountpoints2 |


################## | Listing des fichiers présent |

[08/12/2008 19:48|--ah-----|232] -> C:\sqmdata00.sqm 
[10/08/2004 20:00|-rahs----|4952] -> C:\Bootfont.bin 
[15/11/2008 23:40|-rahs----|252240] -> C:
tldr 
[10/08/2004 20:00|-rahs----|47564] -> C:\NTDETECT.COM 
[21/06/2006 11:45|--a------|0] -> C:\CONFIG.SYS 
[21/06/2006 12:16|--a------|50] -> C:\AUTOEXEC.BAT 
[21/06/2006 11:45|-rahs----|0] -> C:\IO.SYS 
[21/06/2006 11:45|-rahs----|0] -> C:\MSDOS.SYS 
[04/01/2007 18:36|--a------|559] -> C:\RHDSetup.log 
[04/01/2007 18:34|-rahs----|221] -> C:\boot.ini 
[21/06/2006 15:23|--a------|80] -> C:\Preload.aaa 
[11/11/1999 00:17|--a------|49] -> C:\MCE.TAG 
[?|?|?] -> C:\pagefile.sys 
[12/12/2007 21:11|--a------|74] -> C:\CMLoader.log 
[08/12/2008 19:48|--ah-----|244] -> C:\sqmnoopt00.sqm 
[23/01/2008 20:52|--a------|90] -> C:\Setup.log 
[26/08/2009 23:12|--a------|4486] -> C:\UsbFix.txt 
[26/08/2009 23:05|--a------|504176] -> C:\error.log 
[?|?|?] -> C:\hiberfil.sys 
[13/04/2008 19:34|--a------|28672] -> D:\setupSNK.exe 

################## | Cracks / Keygens / Serials |

Xplode · Answer

Parfait, tu peux désinstaller USBfix avec l'option n°5.

Maintenant fait ça :

Ad-Remover ---->

[x] Si tu es sous vista : Désactive l'UAC (Menu Démarrer \ Panneau de Configuration \ Comptes d'utilisateurs et protection des utilisateurs \ Comptes d'utilisateurs \ Activer ou désactiver le contrôle des comptes d'utilisateurs \ décoche la case Utiliser le contrôle ... et valide par OK , il te sera demandé de redémarrer, fais le)

[x] Télécharge Ad-remover (de C_XX) sur ton bureau : http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

[x] Lance l'installation avec les paramètres par défaut..

 ! Déconnecte toi et ferme toutes applications en cours ! 

[x] Double-clique sur le raccourci Ad-Remover sur ton Bureau.(Clic droit -> "Exécuter en tant qu'administrateur". ( Pour Vista)

[x] Séléctionne l'option F pour français

[x] A la fenêtre qui s'affiche clique sur " oui "

[x] Séléctionne l'option S

[x] Laisse l'outil travailler.

[x] Une fois le scan fini, appuie sur une touche, le rapport s'ouvre

[x] Copie/colle le dans ton prochain post

lisandro1991 · Answer

j'ai lancé le scan mais il s'est arrété pendant 20 minutes et ensuite mon ordinateur s'est eteint..je le relance ?c'est normal qu'il reste arrété aussi longtemps ?

Xplode · Answer

Essaye de le lancer en mode sans echec :

https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php

Albator · Answer

Vous devriez lancer combofix au plus vite.. !

lisandro1991 · Answer

le scan d'ad remover ne fonctionne pas,comment je fais pr lancer combofix ?

mickael zenn38 · Answer

Bonjour, Comme beaucoup de personne j'ai aussi un problème avec Total security

Xplode · Answer

@ Lisandro --->

Malwarebyte's anti-malware ----->

[x] Télécharge Malwarebyte's anti-malware (MBAM) à cette adresse : http://www.malwarebytes.org/mbam/program/mbam-setup.exe

[x] Installe le

[x] Un tutoriel pour son utilisation est disponible ici : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

[x] Suis les indications données sur le lien précédent puis copie/colle le rapport généré dans ton prochain message

@ mickael

Crée un nouveau sujet pour qu'on s'occupe de toi

lisandro1991 · Answer

Malwarebytes' Anti-Malware 1.40
Version de la base de données: 2705
Windows 5.1.2600 Service Pack 3

28/08/2009 23:14:52
mbam-log-2009-08-28 (23-14-51).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 174409
Temps écoulé: 2 hour(s), 1 minute(s), 25 second(s)

Processus mémoire infecté(s): 5
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 13
Elément(s) de données du Registre infecté(s): 6
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 53

Processus mémoire infecté(s):
C:\documents and settings\lannier\local settings\application data\ykwbtfqb.exe (Adware.Navipromo.H) -> Unloaded process successfully.
C:\Documents and Settings\All Users\Application Data\17325934\17325934.exe (Rogue.Multiple.H) -> Unloaded process successfully.
C:\WINDOWS\system32\mset.exe (Trojan.Downloader) -> Unloaded process successfully.
C:\Documents and Settings\lannier\mset.exe (Trojan.Downloader) -> Unloaded process successfully.
C:\WINDOWS\system32\braviax.exe (Trojan.FakeAlert) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DbgMgr (Malware.Trace) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MessengerSkinner.exe (Adware.EGDAccess) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ykwbtfqb (Adware.Navipromo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\17325934 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mset (Trojan.Downloader) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mset (Trojan.Downloader) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\internet connection wizard setup tool (Trojan.Downloader) -> Delete on reboot.
HKEY_CURRENT_USER\Control Panel\don't load\scui.cpl (Hijack.SecurityCenter) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Control Panel\don't load\wscui.cpl (Hijack.SecurityCenter) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceClassicControlPanel (Hijack.ControlPanelStyle) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PC Antispyware 2010 (Rogue.PC_Antispyware2010) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RList (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Regedit32 (Trojan.Agent) -> Delete on reboot.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\17325934 (Rogue.Multiple.H) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Documents and Settings\lannier\Local Settings\Application Data\ykwbtfqb_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Application Data\ykwbtfqb_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Application Data\ykwbtfqb.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Application Data\ykwbtfqb.exe (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\17325934\17325934.exe (Rogue.Multiple.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\17325934\17325934 (Rogue.Multiple.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\17325934\pc17325934ins (Rogue.Multiple.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wisdstr.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\_scui.cpl (Rogue.HomeAntiVirus) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\beep.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\figaro.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\beep.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN1.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN3.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN4.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\msupd_2.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN2.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN5.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN6.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN38.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN41.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN48.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN7.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BN9.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Local Settings\Temp\BNA.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP836\A0195485.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP836\A0195486.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP836\A0195497.cpl (Rogue.HomeAntiVirus) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP836\A0195501.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP836\A0195521.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP836\A0195525.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP835\A0193420.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP835\A0193421.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP835\A0193427.cpl (Rogue.HomeAntiVirus) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{2DB37729-7E03-4F82-ADEF-4057C22A22C7}\RP835\A0193432.sys (Trojan.KillAV) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\mset.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\mset.exe (Trojan.Downloader) -> Delete on reboot.
C:\Documents and Settings\All Users\Application Data\Microsoft\Shortcuts\icwsetup.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully.
C:\Program Files\Internet Explorer\Connection Wizard\icwsetup.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\aiujojbqz_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\aiujojbqz_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\braviax.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cru629.dat (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32
vs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\wpv371251285056.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Cookies\evyd.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Cookies\uvimemiqo.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\delself.bat (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\oashdihasidhasuidhiasdhiashdiuasdhasd (Trace.Pandex) -> Quarantined and deleted successfully.
C:\WINDOWS\braviax.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\cru629.dat (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\lannier\Menu Démarrer\Programmes\Démarrage\ikowin32.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

Xplode · Answer

Parfait !

 Plus de problèmes ?

lisandro1991 · Answer

c'est bon ya plus de problemes ?

Xplode · Answer

Ben je te demande justement si tu n'as plus de problèmes avec ton PC ?

Malwarebyte's à fait son boulot et il a viré l'infection total security.

lisandro1991 · Answer

ah oui excuse !
non ça a l'air d'être bon,j'ai plus les icones des faux anti-virus qui s'affichent...
merci mille fois et bravo !

Xplode · Answer

De rien, @+

Total security

29 réponses

Discussions similaires

Newsletters