Virus Win32:Trojan-gen {Other} détecté !
RésoluMon antivirus avast ! vient de détecter ce Win32:Trojan-gen {Other}
Impossible de le mettre en quarantaine car, le message est : Le processus ne peut pas accéder à ce fichier car ce fichier est deja utilisé par un autre processus
Le nom du fichier infecté est : C:\WINDOWS\system32\xxyxYpnN.dll
JE ne comprends rien, j'aitrès peur, je tiens à mon ordinateur et à mes données.
J'ai installé hier microsoft office 2007 téléchargé, c'est peut etre ca ???
S'il vous plait, j'ai vraiment besoin d'aide !!
Merci d'avance !
Configuration: Windows XP Internet Explorer 6.0
57 réponses
Une alerte d Avast signale la détection de Win32:Trojan-gen {Other} sur C:\WINDOWS\system32\xxyxYpnN.dll et empêche la mise en quarantaine car le fichier est utilisé par un autre processus, lien avec l'installation d'Office 2007 sous Windows XP. Plusieurs réponses recommandent de désactiver puis réactiver la restauration système pour permettre le nettoyage, de vérifier les outils ajoutés comme des barres d’outils et d’envisager l’usage d’un antivirus différent. Des outils et procédures complémentaires, tels que SmitFraudFix en mode sans échec et des scans ciblés, sont évoqués pour supprimer les composants malveillants et nettoyer les traces dans les dossiers système et navigateurs. D'autres échanges évoquent aussi la prudence concernant les téléchargements et la nécessité de maintenir le système et les données protégés, notamment par des sauvegardes régulières et l'emploi d'un antivirus à jour.
-
ContributeurFait un scan HijackThis stp
http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis -
Salut !!
Bon je crois je que je viens de faire ce que tu m'as demandé, mais ca doit me dire koi ??
j'ai fait "do a scan only"
et apres ?? -
Contributeurtu poste le rapport
-
ok, désolée, je dois paraitre qqn qui y connait rien, mais en fait j'ai une grande liste avec des cases decochées et j'arrive pas à faire copier coller....
-
Mais ds la rapport (si ce ke je vois est bien le rapport), il a plusieurs fichiers portant le nom de C:\WINDOWS\system32\ avec quelque chose d'autre quemon fichier infesté derrière....
-
ContributeurMais tu me met tout et je vais te dire si tu es infecté!!!!
Et si tu es infecté, la marche à suivre! -
Ok
Je le refais, est ce ke je peux faire "Do a system scan and save a logfile " ??
Pace ke le résultat précédent, je peux pas te le transmettre, refuse le copier coller -
ContributeurOui, tu dois, et pour "fixer" les lignes ensuite, tu devra faire un scan seulement et cocher les lignes que je t'ai dites okay?
-
voila ce ke me sors le logfile :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:00:56, on 15/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Acer\Empowering Technology\admServ.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Acer\Acer Arcade\PCMService.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Acer\Empowering Technology\admtray.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Club-Internet\Agent Wi-Fi V2\McciTrayApp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
C:\DOCUME~1\AmAnDiNe\LOCALS~1\Temp\RtkBtMnt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\WINDOWS\system32\ToolBand.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Club-Internet_McciTrayApp] C:\Program Files\Club-Internet\Agent Wi-Fi V2\McciTrayApp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [320d18a1] rundll32.exe "C:\WINDOWS\system32\lxavnrgr.dll",b
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O20 - AppInit_DLLs: dakifd.dll
O21 - SSODL: printers - {4A232647-8B03-42E4-906D-DE0DBB168EB4} - libcintle2.dll (file missing)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
-
ContributeurFixe cela:
O4 - HKLM\..\Run: [320d18a1] rundll32.exe "C:\WINDOWS\system32\lxavnrgr.dll",b
O3 - Toolbar: Acer eDataSecurity Management - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\WINDOWS\system32\ToolBand.dll
O20 - AppInit_DLLs: dakifd.dll
O21 - SSODL: printers - {4A232647-8B03-42E4-906D-DE0DBB168EB4} - libcintle2.dll (file missing)
On dirait que le virus veut se cacher...
Fait un scan MBAM -
Je les ai coché
je fais "Fix Checked ??" -
ContributeurOui
-
Ok
Je refais le scan and save logfile?? je trouve pas ton scan MBAM -
j'ai refais pareil, voici le rapport :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:33, on 15/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Acer\Empowering Technology\admServ.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Acer\Acer Arcade\PCMService.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Acer\Empowering Technology\admtray.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Club-Internet\Agent Wi-Fi V2\McciTrayApp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
C:\DOCUME~1\AmAnDiNe\LOCALS~1\Temp\RtkBtMnt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Club-Internet_McciTrayApp] C:\Program Files\Club-Internet\Agent Wi-Fi V2\McciTrayApp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
-
ContributeurICI pour télécharger MBAM: https://www.malwarebytes.com/
-
Le MBAM plante, il se bloque au bout d'un certain temps
Je sais plus koi faire -
j'arrive pas à le fermer, il veut pas, mm en faisant fin de tache, tu coup je peux pas le relancer
-
ContributeurBizzarre....
Tu peux lancer scan rapide? -
ca yest, voicile rapport !!
Malwarebytes' Anti-Malware 1.28
Version de la base de données: 1271
Windows 5.1.2600 Service Pack 2
15/10/2008 11:21:55
mbam-log-2008-10-15 (11-21-42).txt
Type de recherche: Examen rapide
Eléments examinés: 56544
Temps écoulé: 4 minute(s), 16 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 4
Clé(s) du Registre infectée(s): 19
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 7
Fichier(s) infecté(s): 137
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
C:\WINDOWS\system32\khfFWoOH.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\swmkxnsv.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\atvrao.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\xxyxYpnN.dll (Trojan.Vundo) -> No action taken.
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9e777fc5-208f-4091-9527-b6a6c9735a52} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{9e777fc5-208f-4091-9527-b6a6c9735a52} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{af7a0852-da86-4153-bb38-87e31c32d1a4} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{af7a0852-da86-4153-bb38-87e31c32d1a4} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fd417378-f411-4b77-bbee-4893bb670d4c} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\xxyxypnn (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{fd417378-f411-4b77-bbee-4893bb670d4c} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\udcpchk.udcpchk (Rogue.DriveCleaner) -> No action taken.
HKEY_CLASSES_ROOT\udcpchk.udcpchk.1 (Rogue.DriveCleaner) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{5954b2db-09a7-4023-847c-107539dc560d} (Rogue.DriveCleaner) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{943b96a4-9bf6-42fe-8d0b-4bca71c3632f} (Rogue.DriveCleaner) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{4f43b1f3-0ce8-493b-96d2-990cec05edbb} (Rogue.DriveCleaner) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\drivecleaner 2006 free (Rogue.DriveCleaner) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\drivecleaner 2006 free (Rogue.DriveCleaner) -> No action taken.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\320d18a1 (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{fd417378-f411-4b77-bbee-4893bb670d4c} (Trojan.Vundo) -> No action taken.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\khffwooh -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\khffwooh -> No action taken.
Dossier(s) infecté(s):
C:\Program Files\Fichiers communs\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Download (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\UpdateData (Rogue.DriveCleaner) -> No action taken.
C:\Documents and Settings\AmAnDiNe\Application Data\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> No action taken.
C:\Documents and Settings\AmAnDiNe\Application Data\DriveCleaner 2006 Free\Logs (Rogue.DriveCleaner) -> No action taken.
Fichier(s) infecté(s):
C:\WINDOWS\system32\khfFWoOH.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\HOoWFfhk.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\HOoWFfhk.ini2 (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\atvrao.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\xxyxYpnN.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\swmkxnsv.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\vsnxkmws.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\kafhejri.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\dakifd.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\yayayvtT.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\tpucwlts.dll (Trojan.Vundo.H) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\unins000.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\unins000.exe (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\UDC2006.xml (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Activate.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\up.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\pv.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\vbpv.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\lapv.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\bnlink.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\license.rtf (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\readme.rtf (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\uninstall.ico (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\UDC6.url (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\support.url (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\manual.url (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\updater.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\err.log (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\sr.log (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Schedule.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\ScanReport.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\diagnosis.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\AE_CD_Cr.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\AReadr4.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\AReadr5.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\ASDSEEpv.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\ASPack.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\Babylon.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\BDelphi5.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\CatchUp.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\CBuildr5.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\CCGA.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\CManager.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\CuteFTP4.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\CuteHTML.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\DAcceler.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\DiscJug.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\ECDCreat4.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\Far.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\FFTsks.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\FlashFXP.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\FrntPage.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\FrontPEx.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\FtpEXP.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\FtpVoya.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\GetRight.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\GoZilla.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\GravMRU.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\HomeSite.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\HotDogPr.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\H_TxtPad.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\IconExtr.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\iMesh.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\ImgReady3.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\InsShExp.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\JASC_P_P.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\KaZaA.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\LView.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MacDir.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MacDrWea.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MicAng.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MicDes.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MMUnDisk.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MM_CON.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\Morpheus.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MPaint.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MPicPub.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MPImaGal.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MSExplorer.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MSoffice.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MSRegEdit.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MSWMP.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\MSWordPad.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\Nero.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\NetShow.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\NTBackup.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\PhotShel.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\PHPCoder.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\PowerZIP.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\RapidBr.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\RealAuPl.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\RealDown.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\SecurCRT.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\SL_BlWin.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\SmartClr.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\Sonique.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\StuffIt.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\TelepPro.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\UGifAnim.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\UltraEd.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\UMedStud.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\UPhImpV.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\UPhotoEx.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\UVidStud.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\VNC.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\WebFeret.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\WebReap.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\WinACE.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\WinGate.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\WinRAR.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\WinZIP.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\WiseInst.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\YahooPl.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\ZipMagic.dat (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\pfilelst.xda (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\Appbase\wordslst.xda (Rogue.DriveCleaner) -> No action taken.
C:\Program Files\DriveCleaner 2006 Free\UpdateData\upd0818122007.dat (Rogue.DriveCleaner) -> No action taken.
C:\Documents and Settings\AmAnDiNe\Application Data\DriveCleaner 2006 Free\Logs\update.log (Rogue.DriveCleaner) -> No action taken.
C:\WINDOWS\image077.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\image035.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\images78.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\image041.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\image098.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\image074.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\images54.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photo84.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photo48.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photos2007_31.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photo_album43.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photo78.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photos2007_70.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photo39.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photo_album97.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photo_album13.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photo_album52.zip (Backdoor.Bot) -> No action taken.
C:\WINDOWS\photos2007_55.zip (Backdoor.Bot) -> No action taken.
C:\Documents and Settings\AmAnDiNe\Local Settings\Temp\svchost.exe (Trojan.Agent) -> No action taken. -
Y a t il qqn qui pourrait m'aider ???
En tout cas, merci pour celui qui l'a déjà fait !!
Mais mon soucis n'est tjs pas résolu !!
Thanks
- 1
- 2
- 3