Virus Bagle.Gen.b

Résolu
miotype -  
Bonjour,
voila mon pc est contaminé
virusscan ne marchais plus, J'ai donc supprimmer virus scan et j'ai installé antivir
mais impossible a eradiquer
antivir me vois une mence de type TR/Bagle.Gen.B
mais a chaque fois que je supprime ca reviens
voila mon rapport HijacktHis dessous :
dans l'attente de vos nouvelles.
Il ne m'es impossible de démarrer en sans echec
--------------------------------------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:59:20, on 15/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\System32\svchost.exe
c:\program files\avira\antivir personaledition classic\avscan.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: SYSTRAN Web Translator 5.0 - {A5899B52-3AF9-4F56-85FE-AD7B3BE8490F} - C:\Program Files\SYSTRAN\5.0\Personal\IEPlugIn.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Upsagent - UPS Monitor (Upsagent) - Unknown owner - C:\Program Files\Upsmon\Upsag_nt.exe

--
End of file - 5861 bytes
Configuration: Windows XP
Internet Explorer 7.0

16 réponses

Résumé de la discussion

Un utilisateur signale une infection par Bagle et TR/Bagle.Gen.B sur Windows XP, avec suppression du logiciel antivirus et réapparition du malware après chaque tentative de nettoyage et difficulté à démarrer en mode sans échec. Plusieurs intervenants recommandent de ne pas désactiver la restauration système pendant le nettoyage et de purger les points de restauration après que le PC est propre. Le fil évoque l’usage d’outils comme HijackThis pour repérer les éléments indésirables, les mises à jour Windows et Java comme mesures complémentaires, et la prudence lors des scans en mode sans échec.

Bobot (l’IA à votre service)
  1. ^^Marie^^
    Pour INFO

    IMPORTANT :


    Ne pas désactiver la restauration système, tant que le pc n'est pas propre. Merci
    Une fois désinfecté le pc, on peut alors désactiver la restauration système pour la purger de ses m.....et repartir sur un point sain.
    2
    1. jacques.gache Contributeur sécurité
      marie bonjour, perso c'est comme cela que je fait cela évite que lors du scan ça te trouve des trucs dans "le restore" et de te dire ils sont toujours la
      0
    2. ^^Marie^^
      @jacques.gacheTu balaies d'abord et tu passes la pièce ensuite

      Une fois que le PC est clean

      -- en fin de désinfection --

      tu crées un nouveau point de resto

      Mais surtout pas avant

      0
  2. Tiekanyk
    Bonjour tous le monde !

    J'ai également un soucis avec cette saletée de bagle qui a viré le Nod32 ainsi que le spybot de mon pc.

    J'ai suivi pas mal de vos recommandations, et à chaque fois que j'utilise un autre système de scan il y a encore des fichiers infectés... A croire que cette cochonnerie se multiplie à la vitesse grand V !

    Je voudrais juste savoir si je dois commencer à désespérer, parce que pour voir dire la vérité, je suis nulle en informatique et que tout doucement j'en viens à râler ^^

    En tous les cas déjà un grand merci pour les infos que j'ai trouvées ici qui sont pour des néophytes tels que moi expliquées de façon super compréhensibles.
    0
    1. ^^Marie^^
      Bonjour,

      CREER SON PROPRE TOPIK

      Il serait préférable que tu crées ton propre « topik » message personnel. Cela rendra le poste (ici) plus compréhensible, et nous pourrons traiter ton soucis avec plus d’efficacité.
      Donc
      Fais ce qui suit, SVP
      http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm
      Merci
      A++
      http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm

      A++

      0
  4. miotype Auteur
    ok donc je refait la manip
    oui j'avais bien desactiver durant le scan donc la je remet
    merci encore
    0
    2. jacques.gache Contributeur sécurité
      bonjour, je t'avais mis de désactiver le temps du scan et de la réactiver après fais le
      0
      1. miotype Auteur
        oupsss
        on a bien fait de me le dire car la restauration est desactivé
        et est tjs desactiver
        donc maintenant que dois je faire??
        dois je le reactiver??
        0
        1. jacques.gache Contributeur sécurité
          bonjour, heureux pour toi si j'ai pu d'aider @+
          0
          1. miotype Auteur
            salut jacques
            merci pour ton aide precieuse
            en tout pour tout j'ai eu droit a 251 virus (malware..) qui ont tous apparemment été eradiquer car ce matin j'ai relancé un par un
            antivir, adware, spybot, ccleaner, elibagle, malwarebytes, et analyse en ligne et rien de detecter
            je suis enfin tranquille
            merci encore et a + sur un autre sujet alors ;)
            0
            1. miotype Auteur
              Malwarebytes' Anti-Malware 1.08
              Version de la base de données: 495

              Type de recherche: Examen complet (C:\|)
              Eléments examinés: 92492
              Temps écoulé: 23 minute(s), 43 second(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 0
              Valeur(s) du Registre infectée(s): 2
              Elément(s) de données du Registre infecté(s): 0
              Dossier(s) infecté(s): 1
              Fichier(s) infecté(s): 201

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              (Aucun élément nuisible détecté)

              Valeur(s) du Registre infectée(s):
              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\www.host-domain-lookup.com (Malware.Trace) -> Quarantined and deleted successfully.

              Elément(s) de données du Registre infecté(s):
              (Aucun élément nuisible détecté)

              Dossier(s) infecté(s):
              C:\WINDOWS\system32\drivers\down (Trojan.Downloader) -> Quarantined and deleted successfully.

              Fichier(s) infecté(s):
              C:\WINDOWS\system32\drivers\down\102132078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102151015.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102154515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102160828.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102191921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102201093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102204109.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102207750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102210406.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102223031.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102224468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102227890.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102231218.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102275078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\102281875.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\107140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\113250.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\115734.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\116765.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\117328.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\118625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\121562.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\122984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\124140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\125625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\127109.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\129109.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\130000.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\131515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\133796.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\134093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\135171.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\136625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\138046.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\138828.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\139437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\141453.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\141671.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\142578.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\146234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14786546.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14789921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14791093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14791750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14793359.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14794000.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14800171.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14806406.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14824250.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14828156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14831328.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14834390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14839859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\148671.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14873750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14874984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14876203.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14878578.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14887421.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14892812.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14895031.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14897531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14909890.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14913484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14914718.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14915406.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14917109.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14918421.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14923390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\149359.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14956843.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\14963234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\153203.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\154453.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\156765.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\157000.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\160500.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\162484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\163156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\167140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\187171.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\193859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\197500.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\198578.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\204375.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\205937.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\212859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\239656.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\241718.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\247484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\272843.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\280484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\282750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29335593.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29345609.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29349828.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29363796.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29398390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29402828.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29404687.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29407703.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29410734.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29421156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29424437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29425687.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29426750.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29428921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29476390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\29482515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\306890.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\310234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\317234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\321437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\322562.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\326062.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\329468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\367515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\370718.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\374156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\377453.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43893375.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43896531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43899359.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43930312.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43953609.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43959234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43961375.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43963468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43966468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43980015.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43983234.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43984015.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43984562.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\43986796.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\44024734.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\44031281.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58442531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58445968.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58447281.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58449515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58453140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58479187.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58482625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58484484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58486875.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58492015.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58497640.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58500921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58503671.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58503953.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58506062.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58543078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\58549140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\62953.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\67546.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\70484.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\72156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\72959937.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\72962390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\72964984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\72970390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73018375.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73023546.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73025437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73037078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73039421.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73077000.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73082078.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73082921.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73086218.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73089984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73128859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\73135031.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\75343.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\75859.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\76656.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\78765.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\79531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\82359.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\82531.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\82703.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\86468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87546468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87553656.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87555875.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87573296.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87633156.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87641984.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87644625.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87647437.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87650453.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87658140.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87661812.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87663515.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87665593.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87668500.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87707468.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\87714390.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\88093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\91093.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\drivers\down\92781.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

              voila le rapport
              je pene tenter de refaire la manip sous mode sans echec si ca marche.
              vous en pensez quoi??
              0
              1. jacques.gache Contributeur sécurité
                tu peux la faire en normal et si il en reste tu le referas en mode sans echec
                0
            2. miotype Auteur
              sp2
              je suis du coup entrain de faire les mises a jour de windows updates aussi
              0
              1. miotype Auteur
                je viens d'installer la nouvelle version de java ;)
                edit :
                tout c'est bien passé
                je n'avais pas java
                ou du moins c'été celui installé lors de l'achat du pc si il y est d'origine et le pc n'est pas jeune
                je suis sous xp et c'est un athlon 64 3200+
                0
                1. jacques.gache Contributeur sécurité
                  xp sp1 ou sp2
                  0
              2. miotype Auteur
                merci en tout cas de ton aide car depuis hier je suis entrain de perdre mon week end pour un virus
                la restauration a été desactivé;)
                antispaware a presque fini
                comment voir la mise a jour??
                je vais sur le site de java??
                edit :
                https://www.java.com/fr/download/
                0
                1. jacques.gache Contributeur sécurité
                  oui ,tu verifis dans le panneau de configuration tu cliques sur java /ouvrir/général/ a propo de, moi j'ai la version 6 mise à jour 5 note ta version car après il faudra la désinstaller de tes programme pour ne garder que la dernière pour info j'ai eu un mal de chien pour l'installer il a fallu que je clique au moins 5 ou 6 fois sur recommencer pour que ça finisse par ce faire
                  0
              3. miotype Auteur
                Tjs ds le meme repoertoire j'ai un tas de virus
                c:\System Volume Information\...\A0039947.exe
                celui ci c'est Dldr.Swizzor.Gen
                voila j'en ai un tas qui apparait
                je fait toujours tourné AVG Antispaware
                por le moment il m'a trouvé 5 menace mais faible risque
                j'ai fait tourner adware, spybot, ccleaner, virus scan, antivir, elibagle, hijackthis
                la je fais tourner avg
                0
                1. jacques.gache Contributeur sécurité
                  surtout pas en même temps
                  0
                2. miotype Auteur
                  @jacques.gachenon je ne l'ai pas fait en mm temps ;)
                  un aprés l'autre
                  j'avais meme fait une analyse en ligne sur secuser.com
                  sinon AVG anti spaware pour le moment m'a trouvé
                  Heristic.Win32.AVkiller
                  TrackingCookie.Advertising
                  TrackingCookie.2o7
                  TrackingCookie.Webtrendslive
                  TrackingCookie.Weborama
                  Not-a-virus.Hacktool.EviD
                  0
              4. miotype Auteur
                autant pour moi j'y cours de suite
                bon mon antivir n'arrete pas
                el me repaire un tas de virus et toujours localiser ds le meme endroit
                j'arrive mm pas a acceder manuellement
                ds c:\System Volume Information\...\A0038527.exe
                0
                1. jacques.gache Contributeur sécurité
                  "String.fromCharCode" serait lié à java il faudra voir si tu es à jour de ce coté
                  0
              5. miotype Auteur
                ccleaner j'ai deja fait
                analyse en ligne deja fait
                je teste malwarebytes bitdefender
                comment on annule la restauration systeme?
                0
                1. jacques.gache Contributeur sécurité
                  pour annuler la restauration je t'avais mis ce tutoriel http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fdocid/20020830101856924
                  0
              6. jacques.gache Contributeur sécurité
                bonsoir, essais de paser malwarebytes https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ suivi de ccleaner dans ses deux modes nettoyeur et registre https://www.malekal.com/tutoriel-ccleaner/ et fais un scan anti-virus en ligne en désactivant la restauration système tu redémarre avant de scaner et tu la réactiveras une fois le scan fini http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fdocid/20020830101856924
                pour le scan anti-virus utilise IE http://www.commentcamarche.net/faq/sujet 8872 scanner en ligne avec bitdefender tiens nous au courant si il est toujours la on passera autre chose
                0

                Discussions similaires

                Softonic,est-ce un virus ?
                techmel1

                6 réponses
                Chrome://newtab
                Nova

                14 réponses
                Désinstaller Softonic
                Diguimette

                5 réponses
                Supprimer New Tab
                tysaozon

                8 réponses
                Virus dans filezilla
                balnelius10

                9 réponses