Troj dloader , worm rbot, sdbot etc...

dlvt -

Bonjour,

en faisant un scan sur secuser.com, l'antivirus online a détecté plusieurs virus (troj dloader.f, worm rbot.hj, worm sdbot.gen, worm sdbot.ft, etc.)

j'ai pourtant en permanence un antivirus symantec corporate qui n'a rien détecté. j'ai installé par ailleurs avast qui lui détecte également des virus mais ne peut les réparer. il me propose de déplacer des fichiers dans windows et ça m'effraie un peu...

que me conseillez vous ?

merci !

Afficher la suite

51 réponses

Résumé de la discussion

Un scan sur secuser.com signale plusieurs virus (trojans et worms) alors que l’antivirus Symantec corporate ne détecte rien et Avast détecte aussi des menaces mais ne peut pas les réparer. Plusieurs conseils insistent sur l’usage simultané d’outils supplémentaires comme Spybot S&D et Ad-Aware, et certains évoquent le recours à un formatage pour repartir sur une installation propre. D’autres échanges évoquent des problèmes de configuration et des pistes techniques (panneau de configuration, accès, registre), mais peu de solutions concrètes permettent d’éliminer les menaces détectées. Une information utile est que les avertissements en ligne peuvent différer des détections locales et qu’un nettoyage en profondeur et des sauvegardes sont recommandés avant toute réinstallation.

Réponse 1 / 51
christelle14
Bonjour,

En faisant un scan sur secuser.com, l'antivirus online a détecté plusieurs virus .... troj istbar.du troj istbar.po troj istbar.pb troj dloeder.rs et troj generic
J' ai Avast comme antivirus, a-square, et spybot... mais rien n'y fait... pouvez vous m'aider? merci

voici le raport que j'ai fais avec ewido anti spyware---------------------------------------------------------
ewido anti-spyware - Scan Report ---------------------------------------------------------

+ Created at: 16:10:03 14/08/2006

+ Scan result:

C:\Program Files\a-squared Anti-Malware\Quarantine\0cb713fbaebb08806a19b53eaeb69d4e.a2q/WINDOWS/temp/altnet/dmfiles.cab/AltnetUninstall.exe -> Adware.Altnet : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\0cb713fbaebb08806a19b53eaeb69d4e.a2q/WINDOWS/temp/altnet/pmexe.cab/Points Manager.exe -> Adware.Altnet : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AltnetDM -> Adware.Altnet : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\0cb713fbaebb08806a19b53eaeb69d4e.a2q/WINDOWS/temp/altnet/pmfiles.cab/sysdetect.dll -> Adware.BrilliantDigital : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\2fb949d0a1b592987e9eaf38781bb161.a2q/Program Files/newdotnet/uninstall7_22.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
HKU\S-1-5-21-583907252-261903793-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\0b5307514b1cee38acd4ba434f90ff83.a2q/WINDOWS/downloaded program files/webp2pinstaller.dll -> Adware.PeerNet : Cleaned with backup (quarantined).
HKU\S-1-5-21-583907252-261903793-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Cleaned with backup (quarantined).
C:\Program Files\Alcohol Soft\Alcohol 120% Toolbar\a120_tb.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\d28ad87cc4c0a22901fd84e1dc5da673.a2q/Program Files/surfaccuracy/SAccU.exe -> Adware.SurfAccuracy : Cleaned with backup (quarantined).
C:\Hitmobile\Num.exe -> Heuristic.Win32.Dialer : Ignored.
C:\Documents and Settings\xxx\Mes documents\Downloads\!!!!! quoi que je fasse nouvelle version 52.zip/install.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).
C:\Documents and Settings\xxx\Mes documents\Downloads\(full version) quoi que je fasse remix 58.zip/setup.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).
C:\Documents and Settings\xxx\Mes documents\Downloads\enlightment @ quoi que je fasse remix 55.zip/setup.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).
C:\Documents and Settings\xxx\Mes documents\Downloads\je ne t'oublierai jamais 00.zip/install.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).
C:\Documents and Settings\xxx\Local Settings\Temp\ICD1.tmp\UERSV_0001_LPNetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.d : Ignored.
:mozilla.7:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.8:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.9:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.25:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.26:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\xxx\Local Settings\Temp\Cookies\xxx@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.64:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.65:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.66:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.62:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
C:\Documents and Settings\xxx\Local Settings\Temp\Cookies\xxx@estat[1].txt -> TrackingCookie.Estat : Cleaned.
:mozilla.33:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.34:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.35:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.36:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.37:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.38:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.172:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.134:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.135:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.136:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.137:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.112:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.126:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.53:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.54:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.154:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.157:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.158:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\xxx\Local Settings\Temp\Cookies\xxx@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.162:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.163:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.164:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@weborama[1].txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.18:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.21:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.22:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.23:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\xxx\Local Settings\Temp\Cookies\xxx@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.

::Report end

maintenant le raport que j'ai fais avec bitdefender online, j'ai eu plusieurs trojan qu'il m'a mis en quarantaine je crois....je vais faire HijackThis maintenant.....>

BitDefender Online Scanner -Scan Report<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<meta name="generator" content="Namo WebEditor v5.0(Trial)">
</HEAD>
<BODY BGCOLOR=#FFFFFF leftmargin="10" marginwidth="0" topmargin="20" marginheight="0" >

<table align="center" border="0" cellpadding="0" cellspacing="0" width="90%">
<tr>
<td width="458">
BitDefender
Online Scanner
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>
<tr>
<td colspan="3" width="912">
Scan report generated
at: Mon, Aug 14, 2006 - 17:46:04
</td>
</tr>

<tr>
<td width="458">
 
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
Scan
path: A:\;C:\;D:\;E:\;F:\;G:\;
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
 
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
Statistics
</td>
</tr>
<tr>
<td width="57%">
Time
</td>
<td width="43%" align="right">
01:21:38
</td>
</tr>
<tr>
<td width="57%">
Files
</td>
<td width="43%" align="right">
510057
</td>
</tr>
<tr>
<td width="57%">
Folders
</td>
<td width="43%" align="right">
6643
</td>
</tr>
<tr>
<td width="57%">
Boot Sectors
</td>
<td width="43%" align="right">
2
</td>
</tr>
<tr>
<td width="57%">
Archives
</td>
<td width="43%" align="right">
3692
</td>
</tr>
<tr>
<td width="57%">
Packed Files
</td>
<td width="43%" align="right">
63900
</td>
</tr>
</table>
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
Results
</td>
</tr>
<tr>
<td width="57%">
Identified Viruses 
</td>
<td width="43%" align="right">
8
</td>
</tr>
<tr>
<td width="57%">
Infected Files 
</td>
<td width="43%" align="right">
10
</td>
</tr>
<tr>
<td width="57%">
Suspect Files 
</td>
<td width="43%" align="right">
0
</td>
</tr>
<tr>
<td width="57%">
Warnings
</td>
<td width="43%" align="right">
0
</td>
</tr>
<tr>
<td width="57%">
Disinfected
</td>
<td width="43%" align="right">
0
</td>
</tr>
<tr>
<td width="57%">
Deleted Files
</td>
<td width="43%" align="right">
15
</td>
</tr>
</table>
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
Engines Info
</td>
</tr>
<tr>
<td width="57%">
Virus Definitions
</td>
<td width="43%" align="right">
444449
</td>
</tr>
<tr>
<td width="57%">
Engine build
</td>
<td width="43%" align="right">
AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)
</td>
</tr>
<tr>
<td width="57%">
Scan plugins
</td>
<td width="43%" align="right">
13
</td>
</tr>
<tr>
<td width="57%">
Archive plugins
</td>
<td width="43%" align="right">
39
</td>
</tr>
<tr>
<td width="57%">
Unpack plugins
</td>
<td width="43%" align="right">
5
</td>
</tr>
<tr>
<td width="57%">
E-mail plugins
</td>
<td width="43%" align="right">
6
</td>
</tr>
<tr>
<td width="57%">
System plugins
</td>
<td width="43%" align="right">
1
</td>
</tr>
</table>
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
Scan Settings
</td>
</tr>
<tr>
<td width="57%">
First Action
</td>
<td width="43%" align="right">
Disinfect
</td>
</tr>
<tr>
<td width="57%">
Second Action
</td>
<td width="43%" align="right">
Delete
</td>
</tr>
<tr>
<td width="57%">
Heuristics
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Enable Warnings
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scanned Extensions
</td>
<td width="43%" align="right">
*;
</td>
</tr>

<tr>
<td width="57%">
Exclude Extensions
</td>
<td width="43%" align="right">
 
</td>
</tr>
<tr>
<td width="57%">
Scan Emails
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scan Archives
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scan Packed
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scan Files
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scan Boot
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
</table>
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td colspan=2>
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="252" bgcolor="#CCCCCC">
Scanned File
</td>
<td width="195" bgcolor="#CCCCCC" align="right">
 Status
</td>
</tr>
<tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0016
</td>
<td width="43%" align="left">
Detected with: Application.Adware.NewDotNet.B.Dropper
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0016
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe
</td>
<td width="43%" align="left">
Update failed
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0017
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Small.BKE
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0017
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0017
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe
</td>
<td width="43%" align="left">
Update failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\2ac605ba8af5b39a832aa16bfb3f24b3.a2q=>Program Files/Adverts/uninst.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Swizzor.EM
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\2ac605ba8af5b39a832aa16bfb3f24b3.a2q=>Program Files/Adverts/uninst.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\2ac605ba8af5b39a832aa16bfb3f24b3.a2q=>Program Files/Adverts/uninst.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\2ac605ba8af5b39a832aa16bfb3f24b3.a2q
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\34164f3ff7e2d39c44b88157c2b3599b.a2q=>Program Files/sidefind/update/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Istbar.JM
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\34164f3ff7e2d39c44b88157c2b3599b.a2q=>Program Files/sidefind/update/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\34164f3ff7e2d39c44b88157c2b3599b.a2q=>Program Files/sidefind/update/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\34164f3ff7e2d39c44b88157c2b3599b.a2q
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\39929f27f875d333d1a46a19fe48fd5a.a2q=>Documents and Settings/xxx/Local Settings/temp/sta6.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Infected with: GenPack:Trojan.Swizzor.LZ
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\39929f27f875d333d1a46a19fe48fd5a.a2q=>Documents and Settings/xxx/Local Settings/temp/sta6.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\39929f27f875d333d1a46a19fe48fd5a.a2q=>Documents and Settings/xxx/Local Settings/temp/sta6.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\39929f27f875d333d1a46a19fe48fd5a.a2q
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\990af65ef01013b05510f383f10017f7.a2q=>Documents and Settings/xxx/Local Settings/temp/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Istbar.JM
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\990af65ef01013b05510f383f10017f7.a2q=>Documents and Settings/xxx/Local Settings/temp/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\990af65ef01013b05510f383f10017f7.a2q=>Documents and Settings/xxx/Local Settings/temp/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\990af65ef01013b05510f383f10017f7.a2q
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0022
</td>
<td width="43%" align="left">
Detected with: Application.Adware.Gator
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0022
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0022
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe
</td>
<td width="43%" align="left">
Update failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0027
</td>
<td width="43%" align="left">
Detected with: Application.Adware.Gator
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0027
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0027
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe
</td>
<td width="43%" align="left">
Update failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Kazaa\My Shared Folder\tombe raider.RB0=>setup.exe
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Istbar.LU
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Kazaa\My Shared Folder\tombe raider.RB0=>setup.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Kazaa\My Shared Folder\tombe raider.RB0=>setup.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Kazaa\My Shared Folder\tombe raider.RB0
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Norton AntiVirus\Quarantine\2B197CE7=>(Quarantine-2)
</td>
<td width="43%" align="left">
Infected with: Trojan.Clicker.VB.L
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Norton AntiVirus\Quarantine\2B197CE7=>(Quarantine-2)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Norton AntiVirus\Quarantine\2B197CE7=>(Quarantine-2)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr>
</table>
</td>

<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
 
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
 
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

</table>
 

et alors voici le rapport avec :
Logfile of HijackThis v1.99.1
Scan saved at 18:47:55, on 14/08/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\VeriSign\NAVI\naviagent.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\VeriSign\NAVI\NAVICL~1.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Startup Mechanic\StartupMonitor.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\CTFMON.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par Planet Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: i-Nav IDN SearchHook - {CE000994-A58C-4441-8938-744CD72AB27F} - C:\Program Files\VeriSign\i-Nav\i-nav_4_2_1.dll
R3 - URLSearchHook: (no name) - _{CE000994-A58C-4441-8938-744CD72AB27F} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr-ch\msntb.dll
O2 - BHO: i-Nav IDN Resolver - {CE000992-A58C-4441-8938-744CD72AB27F} - C:\Program Files\VeriSign\i-Nav\i-nav_4_2_1.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr-ch\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Startup Manager Scanner] C:\Program Files\Startup Mechanic\StartupMonitor.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Registration Myst V
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm763YYBE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Aide i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing)
O9 - Extra 'Tools' menuitem: Aide i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing)
O9 - Extra button: (no name) - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Program Files\VeriSign\i-Nav\i-nav_4_2_1.dll
O9 - Extra 'Tools' menuitem: Options i-Nav - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Program Files\VeriSign\i-Nav\i-nav_4_2_1.dll
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mpga: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr/
O15 - Trusted Zone: http://www.hamoir-foot.be
O16 - DPF: FortisCzPc - https://www.fortisbanking.be/FortisCzPC.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://christchristellelouvrier.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/30f969366abd4da4d314/netzip/RdxIE601_fr.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_sit...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - https://www.photolitto.com/
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by24fd.bay24.hotmail.msn.com/activex/HMAtchmt.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{5863C78B-8E71-4A32-A8DA-C08BF5879E04}: NameServer = 195.238.2.21 195.238.2.22
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - (no file)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: VeriSign Updater (navi) - VeriSign, Inc. - C:\Program Files\VeriSign\NAVI\naviagent.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

0

Réagir
Réponse 2 / 51
christelle14
et voici le raport fait avec bitdefender online, j'ai eu plusieurs trojan qu'il m'a mis en quarantaine je crois....je vais faire HijackThis maintenant.....>

BitDefender Online Scanner -Scan Report<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<meta name="generator" content="Namo WebEditor v5.0(Trial)">
</HEAD>
<BODY BGCOLOR=#FFFFFF leftmargin="10" marginwidth="0" topmargin="20" marginheight="0" >

<table align="center" border="0" cellpadding="0" cellspacing="0" width="90%">
<tr>
<td width="458">
BitDefender
Online Scanner
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>
<tr>
<td colspan="3" width="912">
Scan report generated
at: Mon, Aug 14, 2006 - 17:46:04
</td>
</tr>

<tr>
<td width="458">
 
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
Scan
path: A:\;C:\;D:\;E:\;F:\;G:\;
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
 
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
Statistics
</td>
</tr>
<tr>
<td width="57%">
Time
</td>
<td width="43%" align="right">
01:21:38
</td>
</tr>
<tr>
<td width="57%">
Files
</td>
<td width="43%" align="right">
510057
</td>
</tr>
<tr>
<td width="57%">
Folders
</td>
<td width="43%" align="right">
6643
</td>
</tr>
<tr>
<td width="57%">
Boot Sectors
</td>
<td width="43%" align="right">
2
</td>
</tr>
<tr>
<td width="57%">
Archives
</td>
<td width="43%" align="right">
3692
</td>
</tr>
<tr>
<td width="57%">
Packed Files
</td>
<td width="43%" align="right">
63900
</td>
</tr>
</table>
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
Results
</td>
</tr>
<tr>
<td width="57%">
Identified Viruses 
</td>
<td width="43%" align="right">
8
</td>
</tr>
<tr>
<td width="57%">
Infected Files 
</td>
<td width="43%" align="right">
10
</td>
</tr>
<tr>
<td width="57%">
Suspect Files 
</td>
<td width="43%" align="right">
0
</td>
</tr>
<tr>
<td width="57%">
Warnings
</td>
<td width="43%" align="right">
0
</td>
</tr>
<tr>
<td width="57%">
Disinfected
</td>
<td width="43%" align="right">
0
</td>
</tr>
<tr>
<td width="57%">
Deleted Files
</td>
<td width="43%" align="right">
15
</td>
</tr>
</table>
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
Engines Info
</td>
</tr>
<tr>
<td width="57%">
Virus Definitions
</td>
<td width="43%" align="right">
444449
</td>
</tr>
<tr>
<td width="57%">
Engine build
</td>
<td width="43%" align="right">
AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)
</td>
</tr>
<tr>
<td width="57%">
Scan plugins
</td>
<td width="43%" align="right">
13
</td>
</tr>
<tr>
<td width="57%">
Archive plugins
</td>
<td width="43%" align="right">
39
</td>
</tr>
<tr>
<td width="57%">
Unpack plugins
</td>
<td width="43%" align="right">
5
</td>
</tr>
<tr>
<td width="57%">
E-mail plugins
</td>
<td width="43%" align="right">
6
</td>
</tr>
<tr>
<td width="57%">
System plugins
</td>
<td width="43%" align="right">
1
</td>
</tr>
</table>
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="451" colspan="2" bgcolor="#CCCCCC">
Scan Settings
</td>
</tr>
<tr>
<td width="57%">
First Action
</td>
<td width="43%" align="right">
Disinfect
</td>
</tr>
<tr>
<td width="57%">
Second Action
</td>
<td width="43%" align="right">
Delete
</td>
</tr>
<tr>
<td width="57%">
Heuristics
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Enable Warnings
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scanned Extensions
</td>
<td width="43%" align="right">
*;
</td>
</tr>

<tr>
<td width="57%">
Exclude Extensions
</td>
<td width="43%" align="right">
 
</td>
</tr>
<tr>
<td width="57%">
Scan Emails
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scan Archives
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scan Packed
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scan Files
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
<tr>
<td width="57%">
Scan Boot
</td>
<td width="43%" align="right">
Yes
</td>
</tr>
</table>
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td colspan=2>
<table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
<tr>
<td width="252" bgcolor="#CCCCCC">
Scanned File
</td>
<td width="195" bgcolor="#CCCCCC" align="right">
 Status
</td>
</tr>
<tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0016
</td>
<td width="43%" align="left">
Detected with: Application.Adware.NewDotNet.B.Dropper
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0016
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe
</td>
<td width="43%" align="left">
Update failed
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0017
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Small.BKE
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0017
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe=>wise0017
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Documents and Settings\xxx\Mes documents\MES FICHIERS RECUS\54648.exe
</td>
<td width="43%" align="left">
Update failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\2ac605ba8af5b39a832aa16bfb3f24b3.a2q=>Program Files/Adverts/uninst.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Swizzor.EM
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\2ac605ba8af5b39a832aa16bfb3f24b3.a2q=>Program Files/Adverts/uninst.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\2ac605ba8af5b39a832aa16bfb3f24b3.a2q=>Program Files/Adverts/uninst.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\2ac605ba8af5b39a832aa16bfb3f24b3.a2q
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\34164f3ff7e2d39c44b88157c2b3599b.a2q=>Program Files/sidefind/update/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Istbar.JM
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\34164f3ff7e2d39c44b88157c2b3599b.a2q=>Program Files/sidefind/update/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\34164f3ff7e2d39c44b88157c2b3599b.a2q=>Program Files/sidefind/update/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\34164f3ff7e2d39c44b88157c2b3599b.a2q
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\39929f27f875d333d1a46a19fe48fd5a.a2q=>Documents and Settings/xxx/Local Settings/temp/sta6.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Infected with: GenPack:Trojan.Swizzor.LZ
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\39929f27f875d333d1a46a19fe48fd5a.a2q=>Documents and Settings/xxx/Local Settings/temp/sta6.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\39929f27f875d333d1a46a19fe48fd5a.a2q=>Documents and Settings/xxx/Local Settings/temp/sta6.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\39929f27f875d333d1a46a19fe48fd5a.a2q
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\990af65ef01013b05510f383f10017f7.a2q=>Documents and Settings/xxx/Local Settings/temp/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Istbar.JM
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\990af65ef01013b05510f383f10017f7.a2q=>Documents and Settings/xxx/Local Settings/temp/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\990af65ef01013b05510f383f10017f7.a2q=>Documents and Settings/xxx/Local Settings/temp/sidefind.exe=>(Quarantine-PE)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\a-squared Anti-Malware\Quarantine\990af65ef01013b05510f383f10017f7.a2q
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0022
</td>
<td width="43%" align="left">
Detected with: Application.Adware.Gator
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0022
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0022
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe
</td>
<td width="43%" align="left">
Update failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0027
</td>
<td width="43%" align="left">
Detected with: Application.Adware.Gator
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0027
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe=>wise0027
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\iMeshV4.exe
</td>
<td width="43%" align="left">
Update failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Kazaa\My Shared Folder\tombe raider.RB0=>setup.exe
</td>
<td width="43%" align="left">
Infected with: Trojan.Downloader.Istbar.LU
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Kazaa\My Shared Folder\tombe raider.RB0=>setup.exe
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Kazaa\My Shared Folder\tombe raider.RB0=>setup.exe
</td>
<td width="43%" align="left">
Deleted
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Kazaa\My Shared Folder\tombe raider.RB0
</td>
<td width="43%" align="left">
Updated
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Norton AntiVirus\Quarantine\2B197CE7=>(Quarantine-2)
</td>
<td width="43%" align="left">
Infected with: Trojan.Clicker.VB.L
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Norton AntiVirus\Quarantine\2B197CE7=>(Quarantine-2)
</td>
<td width="43%" align="left">
Disinfection failed
</td>
</tr><tr>
<td width="57%">
C:\Program Files\Norton AntiVirus\Quarantine\2B197CE7=>(Quarantine-2)
</td>
<td width="43%" align="left">
Deleted
</td>
</tr>
</table>
</td>

<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
 
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

<tr>
<td width="458">
 
</td>
<td width="40%">
 
</td>
<td width="10%">
 
</td>
</tr>

</table>
 

</body>
</html>

0

Réagir
Réponse 3 / 51
christelle14
bonjour voici le raport fait avec ewido anti spyware---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 16:10:03 14/08/2006

+ Scan result:

C:\Program Files\a-squared Anti-Malware\Quarantine\0cb713fbaebb08806a19b53eaeb69d4e.a2q/WINDOWS/temp/altnet/dmfiles.cab/AltnetUninstall.exe -> Adware.Altnet : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\0cb713fbaebb08806a19b53eaeb69d4e.a2q/WINDOWS/temp/altnet/pmexe.cab/Points Manager.exe -> Adware.Altnet : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AltnetDM -> Adware.Altnet : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\0cb713fbaebb08806a19b53eaeb69d4e.a2q/WINDOWS/temp/altnet/pmfiles.cab/sysdetect.dll -> Adware.BrilliantDigital : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\2fb949d0a1b592987e9eaf38781bb161.a2q/Program Files/newdotnet/uninstall7_22.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
HKU\S-1-5-21-583907252-261903793-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\0b5307514b1cee38acd4ba434f90ff83.a2q/WINDOWS/downloaded program files/webp2pinstaller.dll -> Adware.PeerNet : Cleaned with backup (quarantined).
HKU\S-1-5-21-583907252-261903793-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59879FA4-4790-461C-A1CC-4EC4DE4CA483} -> Adware.RXToolbar : Cleaned with backup (quarantined).
C:\Program Files\Alcohol Soft\Alcohol 120% Toolbar\a120_tb.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\Program Files\a-squared Anti-Malware\Quarantine\d28ad87cc4c0a22901fd84e1dc5da673.a2q/Program Files/surfaccuracy/SAccU.exe -> Adware.SurfAccuracy : Cleaned with backup (quarantined).
C:\Hitmobile\Num.exe -> Heuristic.Win32.Dialer : Ignored.
C:\Documents and Settings\xxx\Mes documents\Downloads\!!!!! quoi que je fasse nouvelle version 52.zip/install.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).
C:\Documents and Settings\xxx\Mes documents\Downloads\(full version) quoi que je fasse remix 58.zip/setup.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).
C:\Documents and Settings\xxx\Mes documents\Downloads\enlightment @ quoi que je fasse remix 55.zip/setup.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).
C:\Documents and Settings\xxx\Mes documents\Downloads\je ne t'oublierai jamais 00.zip/install.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).
C:\Documents and Settings\xxx\Local Settings\Temp\ICD1.tmp\UERSV_0001_LPNetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.d : Ignored.
:mozilla.7:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.8:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.9:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.25:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.26:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\xxx\Local Settings\Temp\Cookies\xxx@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.64:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.65:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.66:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.62:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
C:\Documents and Settings\xxx\Local Settings\Temp\Cookies\xxx@estat[1].txt -> TrackingCookie.Estat : Cleaned.
:mozilla.33:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.34:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.35:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.36:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.37:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.38:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.172:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.134:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.135:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.136:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.137:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.112:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.126:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.53:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.54:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.154:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.157:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.158:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\xxx\Local Settings\Temp\Cookies\xxx@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.162:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.163:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.164:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
C:\Documents and Settings\xxx\Cookies\xxx@weborama[1].txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.18:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.21:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.22:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.23:C:\Documents and Settings\xxx\Application Data\Mozilla\Firefox\Profiles\68pm15be.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\xxx\Local Settings\Temp\Cookies\xxx@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.

::Report end

0

Réagir
Réponse 4 / 51
christelle14
Bonjour,

En faisant un scan sur secuser.com, l'antivirus online a détecté plusieurs virus .... troj istbar.du troj istbar.po troj istbar.pb troj dloeder.rs et troj generic
J' ai Avast comme antivirus, a-square, et spybot... mais rien n'y fait... pouvez vous m'aider? merci

0

Réagir
Vous n’avez pas trouvé la réponse que vous recherchez ?

La communauté CCM répond en moyenne en moins de 2h.

Posez votre question
Réponse 5 / 51
balltrap34 Contributeur sécurité
dommage pour tes donnees
a++

0

Réagir
Réponse 6 / 51
balltrap34 Contributeur sécurité
qu est ce qui t en empeche
cela te dit quoi

0

Réagir
1. fanatik81
  
  bonjour balll trap
  en fait mon ordi s'éteins tout seul et j'arrete pas de choper des logiciels publicitaires et des logiciels espiondés norton me les analyse mais ne les supprime pas ad aware fait pareil
  j'en ai plus que marre je crois que je vais formater
  merci de ton aide
  pour les jeux un coup ce marche un coup pas il me dit erreur sur la page#stay here
  
  0
  
  Réagir
2. fanatik81
  
  j'ai aussi un message d'erreur que se met : dax error 18/03/2005 is not valid date voila ce de plus encore
  merci ball trap
  
  0
  
  Réagir
3. fanatik81
  
  en fait si je ferme cette fenetre et ce message d'erreur en cliquant sur ok mon ordi s'eteint sinon rien ne bouge.Ce message s'ouvre sur chaque page internet qui s'ouvre
  
  0
  
  Réagir
4. fanatik81
  
  c'est re moi
  voila je viens d'essayer spybot s et d il me trouve 3 host redirigé et 5 data source object exploit mais c'est quoi ces bestioles
  j'y comprend rien merci encore de ton aide
  
  0
  
  Réagir
5. fanatik81
  
  laisse tomber ball trap j'ai tout formaté. J ai mis spybot s et d et antivir mon norton et mon ad aware et j'espere etre tranquille
  encore merci pour ton aide
  
  0
  
  Réagir
Réponse 7 / 51
fanatik81
je suis toujours emmerdée
je vais sur yahoo.fr et je ne peut plus jouer aux cartes je peut faire quoi?
je suis pénible je sais

0

Réagir
Réponse 8 / 51
balltrap34 Contributeur sécurité
elle est jeune et tres craintive
mais je pense que c est du a la race
j en connait d autres et c est pareil

0

Réagir
Réponse 9 / 51
fanatik81
re moi je viens d aller sur ton site perso super sympa
il est super beau ton fauve de bretagne
on s'en ai fait piquer un il n'y pas longtemps

ca y est je suis sauver j'espere merci beaucoup

0

Réagir
Réponse 10 / 51
balltrap34 Contributeur sécurité
de rien
bonne semaine
a++

0

Réagir
Réponse 11 / 51
fanatik81
merci merci merci merci
merci beaucoup de ton dépannage en ligne ball trap

0

Réagir
Réponse 12 / 51
balltrap34 Contributeur sécurité
oki c est clean
a++

0

Réagir
Réponse 13 / 51
fanatik81
je viens d'effacer ces 2 derniers virus et je recommence et voila juste pour le plaisir

Scan started at 20/03/2005 19:40:32

Scanning memory...
Scanning boot sectors...
Scanning files...

Scanned
============================
Objects: 14632
Directories: 1327
Archives: 563
Size(Kb): -1661275
Infected files: 0

Found
============================
Viruses found: 0
Suspicious files: 0
Disinfected files: 0
Mail files: 73

0

Réagir
Réponse 14 / 51
balltrap34 Contributeur sécurité
recycled c est ta poubelle
vide la

0

Réagir
Réponse 15 / 51
fanatik81
re moi ball trap
voila mon 2eme resultat Scan started at 20/03/2005 19:13:52

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Recycled\Dc1.dll - TrojanDownloader:Win32/Agent.BT -> Infected
C:\Recycled\Dc2.dll - TrojanDownloader:Win32/Agent.BR -> Infected

Scanned
============================
Objects: 14591
Directories: 1331
Archives: 562
Size(Kb): -1661109
Infected files: 2

Found
============================
Viruses found: 2
Suspicious files: 0
Disinfected files: 0
Mail files: 72

je refais pareil ou bien autre chose
maintenant je sais faire
merci encore une fois et pour les dernières fois

0

Réagir
Réponse 16 / 51
Billoute
salut moi g u pa mal de probleme avec les trojon et il i a un programme qi se nomme "stinger" qi ma sauver de tou sa by bon courage

0

Réagir
Réponse 17 / 51
balltrap34 Contributeur sécurité
salut
je doit le connaitre ton pere
pour le reste recommence et refait un scan
si cela ne fonctionne pas ont ferat autrement

0

Réagir
Réponse 18 / 51
fanatik81
Scan started at 20/03/2005 11:14:10

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\WINDOWS\SYSTEM32\akrules.dll - TrojanDownloader:Win32/Agent.BT -> Infected
C:\WINDOWS\SYSTEM32\aklsp.dll - TrojanDownloader:Win32/Agent.BR -> Infected
C:\WINDOWS\SYSTEM32\ppb.dll - Trojan:Win32/StartPage.IX -> Infected
C:\WINDOWS\TEMP\sp.html - Trojan:HTML/Starpage* -> Infected
C:\Documents and Settings\fafa\Local Settings\Temp\sp.html - Trojan:HTML/Starpage* -> Infected

Scanned
============================
Objects: 14543
Directories: 1333
Archives: 562
Size(Kb): -1651547
Infected files: 5

Found
============================
Viruses found: 4
Suspicious files: 0
Disinfected files: 0
Mail files: 69

j'ai fait et voila ce qu'il me dit de nouveau donc si j'ai tout compris je recommence jusqu'il n'y ait plus rien
merci ball trap
mon pere a ete champion de france de ball trap
biz merci encore pour ton aide

0

Réagir
Réponse 19 / 51
fanatik81
je vais essayer ca de suite en te remerciant beaucoup si ca marche
je vais voir merci beaucoup ball trap

0

Réagir
Réponse 20 / 51
balltrap34 Contributeur sécurité
salut
desactive ta restauration
pour ça tu fais clic droit sur poste de travail
propriété tu clique sur onglet restauration système
tu coche la case désactiver la restauration et applique
-------
ensuite utilise ceci
http://pageperso.aol.fr/Balltrap34/CleanUp312.exe
--------
et pour ceci
redemarre en mode sans echec pour cela tu tapote la touche f8
des le debut de l allumage du pc sans t arreter
une fenetre vas souvrir tute deplace avec les fleches du clavier sur demarreren mode sans echec
une fois sur le bureau il ni auras pas toutes les couleurs et autres c est normal.si f8 ne marche pas utilise la touche f5

recherche et suppr les fichiers

C:\WINDOWS\autoclk.exe
C:\WINDOWS\SYSTEM32\jmpicaaa.tmp
C:\WINDOWS\SYSTEM32\cmd32.exe
C:\WINDOWS\SYSTEM32\akupd.dll
C:\WINDOWS\SYSTEM32\aklsp.dll

------
redemarre et refait un scan pour verif

0

Réagir
- 1
- 2
- 3
Suivant

Troj dloader , worm rbot, sdbot etc...

51 réponses

Discussions similaires

Newsletters