Vie Russe

Alors...personne pour m'aider ?

ça le fait aussi depuis un autre pc :/

Bonjour, Ce matin en voulant accéder à mon blog et à son administration sur WP, j'obtiens une page rouge qui m'avertis que mon blog est piraté :/ J'ai lu les recommandations de Google, mais je ne comprends pas la marche à suivre :/ Pouvez-vous m'aider et me dire ce qu'il faut faire... Merci d'avance

Voici le rapport : Analyse automatique: terminée : il y a 16 minutes(évênements : 10, objets : 363778, durée : 05:14:11) 15/10/2010 11:31:19 Lancement de la tâche 15/10/2010 13:05:26 Détectés: Viruslist.com - Adobe Reader / Acrobat SING "uniqueName" Buffer Overflow Vulnerability C:\Program Files\Adobe\Reader 9.0\Reader\RdLang32.FRA 15/10/2010 13:21:35 Détectés: Viruslist.com - Sun Java JDK / JRE / SDK Multiple Vulnerabilities C:\Program Files\Java\jre1.6.0_07\bin\java.exe 15/10/2010 13:22:21 Détectés: Viruslist.com - Sun Java JDK / JRE / SDK Multiple Vulnerabilities C:\Program Files\Java\jre6\bin\java.exe 15/10/2010 13:29:21 Détectés: Viruslist.com - Mozilla Firefox Multiple Vulnerabilities C:\Program Files\Mozilla Firefox\firefox.exe 15/10/2010 13:43:02 Détectés: Viruslist.com - HTTrack Long URLs Buffer Overflow Vulnerability C:\Program Files\WinHTTrack\WinHTTrack.exe 15/10/2010 13:43:08 Détectés: Viruslist.com - XnView MBM Processing Buffer Overflow Vulnerability C:\Program Files\XnView\xnview.exe 15/10/2010 16:39:20 Détectés: Viruslist.com - Mozilla Firefox Multiple Vulnerabilities C:\Program Files\Mozilla Firefox\firefox.exe 15/10/2010 16:39:29 Détectés: Viruslist.com - Apple QuickTime QTPlugin.ocx Input Validation Vulnerability C:\Program Files\QuickTime\QuickTimePlayer.exe 15/10/2010 16:45:30 Fin de la tâche Recherche de virus: terminée : il y a 4 heures (évênements : 2, objets : 5, durée : 00:00:01) 15/10/2010 12:22:17 Lancement de la tâche 15/10/2010 12:22:18 Fin de la tâche

Ok, je suis en train de transférer mes comptes mails sur gmail...comme ça plus d'emails sur mon pc, ils resteront sur le serveur. Je vais désinstaller Thunderbird et supprimer tous les dossiers qui apparaissent dans le scan ensuite je vais refaire un scan Kapersky...j'espère que cette fois ça sera moins long et que j'arriverai à récupérer le rapport Merci a+

Bonjour Pear, En fait à la fin du scan kapersky j'ai pas trop compris ce que je devais faire...je suis pas sure d'avoir supprimer les lignes :/ Si je désinstalle thunderbird, je vais pas perdre tous mes mails classés dans la messagerie ?

Bonjour, Bon ben voilà...comme écrit dans mon dernier message, j'ai pas réussi à copier le rapport :/ Je ne sais pas quoi faire avec les dossiers Thunderbird infectés... J'ai fais une capture, voila à quoi ça ressemble : Merci de m'aider

Pfff je viens de me taper plus de 12 h de scan et pas moyen d'enregistrer le rapport ! J'suis verte :/

Bonsoir Cette fenêtre vient de s'ouvrir...je fais quoi ? Merci...

Bonsoir, 9h de scan...je suis à seulement 60% du scan...il doit y avoir pas loin de 100 lignes ! elles contiennent toutes "thunderburd" ! c'est dingue :/ D'ailleurs, plus dans mes messages j'avais un scan qui était resté bloqué sur le répertoire thunderbird :/

hello, je suis en train de faire le scan...c'est super long, j'ai du l'arrêter hier soir... Je l'ai remis il y a 3h et je suis toujours à 9%... Ce qui m'inquiète, c'est que j'ai déjà plus de 30 lignes rouges :/ Toutes les lignes commencent pareil : C:\Users\Famille\AppData\Roaming\Thunderbird\Profiles\7m4wm47n.default\pop.neuf.fr\...ect Vous avez déjà eu ce genre d'infection ? ça vient d'où ? Merci d'avance Je poste le rapport dès que ça se termine...

Ok, je fais ça ce soir, car je bosse sur mon pc la journée Merci !

Voila le rapport : SysProt AntiRootkit v1.0.1.0 by swatkat ****************************************************************************************** ****************************************************************************************** No Hidden Processes found ****************************************************************************************** ****************************************************************************************** Kernel Modules: Module Name: \SystemRoot\system32\drivers\lklztg.sys Service Name: --- Module Base: 881B6000 Module End: 881C5000 Hidden: Yes Module Name: \SystemRoot\System32\Drivers\dump_dumpata.sys Service Name: --- Module Base: 8DEFA000 Module End: 8DF05000 Hidden: Yes Module Name: \SystemRoot\System32\Drivers\dump_atapi.sys Service Name: --- Module Base: 8DF05000 Module End: 8DF0D000 Hidden: Yes ****************************************************************************************** ****************************************************************************************** SSDT: Function Name: ZwAlpcConnectPort Address: 8DD98570 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwAlpcCreatePort Address: 8DD98E46 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwConnectPort Address: 8DD97FC6 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwCreateFile Address: AB3C636A Driver Base: AB3C2000 Driver End: AB3C9000 Driver Name: \??\C:\Windows\system32\windrvNT.sys Function Name: ZwCreateKey Address: 8DDB2FA8 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwCreatePort Address: 8DD98AD0 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwCreateProcess Address: 8DDACE42 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwCreateProcessEx Address: 8DDAD26A Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwCreateSection Address: 8DDB76FE Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwCreateThread Address: AC6950F4 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwCreateWaitablePort Address: 8DD98C2E Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwDeleteFile Address: 8DD925B4 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwDeleteKey Address: 8DDB4A50 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwDeleteValueKey Address: 8DDB4346 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwDuplicateObject Address: 8DDABC26 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwLoadKey Address: 8DDB541A Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwLoadKey2 Address: 8DDB5658 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwLoadKeyEx Address: 8DDB5B0A Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwOpenFile Address: AB3C6CD8 Driver Base: AB3C2000 Driver End: AB3C9000 Driver Name: \??\C:\Windows\system32\windrvNT.sys Function Name: ZwOpenProcess Address: AC6950E0 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwOpenThread Address: AC6950E5 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwQueryDirectoryFile Address: AB3C6842 Driver Base: AB3C2000 Driver End: AB3C9000 Driver Name: \??\C:\Windows\system32\windrvNT.sys Function Name: ZwQueryInformationProcess Address: AB3C31E0 Driver Base: AB3C2000 Driver End: AB3C9000 Driver Name: \??\C:\Windows\system32\windrvNT.sys Function Name: ZwRenameKey Address: 8DDB64E0 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwReplaceKey Address: 8DDB5DD4 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwRequestWaitReplyPort Address: 8DD97B5E Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwRestoreKey Address: 8DDB6F40 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwSecureConnectPort Address: 8DD98292 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwSetInformationFile Address: AB3C7142 Driver Base: AB3C2000 Driver End: AB3C9000 Driver Name: \??\C:\Windows\system32\windrvNT.sys Function Name: ZwSetSecurityObject Address: 8DDB6A68 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwSetValueKey Address: 8DDB3A6A Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwSystemDebugControl Address: 8DDADF66 Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys Function Name: ZwTerminateProcess Address: AC6950EF Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwCreateUserProcess Address: 8DDAD6DE Driver Base: 8DD6C000 Driver End: 8DDF7000 Driver Name: \SystemRoot\system32\DRIVERS\vsdatant.sys ****************************************************************************************** ****************************************************************************************** No Kernel Hooks found ****************************************************************************************** ****************************************************************************************** No IRP Hooks found ****************************************************************************************** ****************************************************************************************** Ports: Local Address: PC-MAISON:64784 Remote Address: 208.43.202.42-STATIC.REVERSE.SOFTLAYER.COM:HTTP Type: TCP Process: C:\Users\Famille\AppData\Roaming\Dropbox\bin\Dropbox.exe State: ESTABLISHED Local Address: PC-MAISON:56333 Remote Address: EC2-184-73-211-238.COMPUTE-1.AMAZONAWS.COM:HTTPS Type: TCP Process: C:\Users\Famille\AppData\Roaming\Dropbox\bin\Dropbox.exe State: CLOSE_WAIT Local Address: PC-MAISON:56323 Remote Address: 174.36.30.65-STATIC.REVERSE.SOFTLAYER.COM:HTTPS Type: TCP Process: C:\Users\Famille\AppData\Roaming\Dropbox\bin\Dropbox.exe State: CLOSE_WAIT Local Address: PC-MAISON:50170 Remote Address: 8.128.17-93.REV.GAOLAND.NET:POP3 Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: PC-MAISON:50169 Remote Address: POP.ORANGE.FR:POP3 Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: PC-MAISON:50166 Remote Address: 188-165-55-133.OVH.NET:HTTP Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: PC-MAISON:50165 Remote Address: POP.ORANGE.FR:POP3 Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: PC-MAISON:50163 Remote Address: POP.ORANGE.FR:POP3 Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: PC-MAISON:50162 Remote Address: 8.128.17-93.REV.GAOLAND.NET:POP3 Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: PC-MAISON:50154 Remote Address: POP.ORANGE.FR:POP3 Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: PC-MAISON:50144 Remote Address: POP.ORANGE.FR:POP3 Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: PC-MAISON:50143 Remote Address: POP.ORANGE.FR:POP3 Type: TCP Process: [system Idle Process] State: TIME_WAIT Local Address: PC-MAISON:NETBIOS-SSN Remote Address: 0.0.0.0:0 Type: TCP Process: System State: LISTENING Local Address: PC-MAISON:49685 Remote Address: LOCALHOST:49684 Type: TCP Process: C:\Program Files\Mozilla Thunderbird\thunderbird.exe State: ESTABLISHED Local Address: PC-MAISON:49684 Remote Address: LOCALHOST:49685 Type: TCP Process: C:\Program Files\Mozilla Thunderbird\thunderbird.exe State: ESTABLISHED Local Address: PC-MAISON:49682 Remote Address: LOCALHOST:49681 Type: TCP Process: C:\Program Files\Mozilla Thunderbird\thunderbird.exe State: ESTABLISHED Local Address: PC-MAISON:49681 Remote Address: LOCALHOST:49682 Type: TCP Process: C:\Program Files\Mozilla Thunderbird\thunderbird.exe State: ESTABLISHED Local Address: PC-MAISON:49184 Remote Address: LOCALHOST:19872 Type: TCP Process: C:\Users\Famille\AppData\Roaming\Dropbox\bin\Dropbox.exe State: ESTABLISHED Local Address: PC-MAISON:27015 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe State: LISTENING Local Address: PC-MAISON:19872 Remote Address: LOCALHOST:49184 Type: TCP Process: C:\Users\Famille\AppData\Roaming\Dropbox\bin\Dropbox.exe State: ESTABLISHED Local Address: PC-MAISON:49157 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Windows\System32\services.exe State: LISTENING Local Address: PC-MAISON:49156 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Windows\System32\svchost.exe State: LISTENING Local Address: PC-MAISON:49155 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Windows\System32\svchost.exe State: LISTENING Local Address: PC-MAISON:49154 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Windows\System32\lsass.exe State: LISTENING Local Address: PC-MAISON:49153 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Windows\System32\svchost.exe State: LISTENING Local Address: PC-MAISON:49152 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Windows\System32\wininit.exe State: LISTENING Local Address: PC-MAISON:17500 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Users\Famille\AppData\Roaming\Dropbox\bin\Dropbox.exe State: LISTENING Local Address: PC-MAISON:5357 Remote Address: 0.0.0.0:0 Type: TCP Process: System State: LISTENING Local Address: PC-MAISON:MICROSOFT-DS Remote Address: 0.0.0.0:0 Type: TCP Process: System State: LISTENING Local Address: PC-MAISON:EPMAP Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Windows\System32\svchost.exe State: LISTENING Local Address: PC-MAISON:57433 Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:SSDP Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:138 Remote Address: NA Type: UDP Process: System State: NA Local Address: PC-MAISON:NETBIOS-NS Remote Address: NA Type: UDP Process: System State: NA Local Address: PC-MAISON:61434 Remote Address: NA Type: UDP Process: C:\Program Files\Windows Sidebar\sidebar.exe State: NA Local Address: PC-MAISON:57434 Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:51072 Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:SSDP Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:57430 Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:17500 Remote Address: NA Type: UDP Process: C:\Users\Famille\AppData\Roaming\Dropbox\bin\Dropbox.exe State: NA Local Address: PC-MAISON:LLMNR Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:IPSEC-MSFT Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:UPNP-DISCOVERY Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:UPNP-DISCOVERY Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:500 Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA Local Address: PC-MAISON:123 Remote Address: NA Type: UDP Process: C:\Windows\System32\svchost.exe State: NA ****************************************************************************************** ****************************************************************************************** Hidden files/folders: Object: C:\sccfg.sys Status: Hidden Object: C:\System Volume Information\DFSR Status: Access denied Object: C:\System Volume Information\MountPointManagerRemoteDatabase Status: Access denied Object: C:\System Volume Information\SPP Status: Access denied Object: C:\System Volume Information\SystemRestore Status: Access denied Object: C:\System Volume Information\tracking.log Status: Access denied Object: C:\System Volume Information\Windows Backup Status: Access denied Object: C:\System Volume Information\{0c48e1a1-d244-11df-b4ea-001b381b3df7}{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\System Volume Information\{2eb75517-d4f9-11df-b71b-001b381b3df7}{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\System Volume Information\{6b5a438c-d375-11df-bb3f-001b381b3df7}{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\System Volume Information\{a256b778-d456-11df-b399-001b381b3df7}{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\System Volume Information\{a256b785-d456-11df-b399-001b381b3df7}{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\System Volume Information\{a256b790-d456-11df-b399-001b381b3df7}{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\System Volume Information\{a51dd07a-d487-11df-b81b-001b381b3df7}{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\System Volume Information\{c4a3738d-d29e-11df-8507-001b381b3df7}{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\System Volume Information\{c4a373b1-d29e-11df-8507-001b381b3df7}{3808876b-c176-4e48-b7ae-04046e6cc752} Status: Access denied Object: C:\Users\Famille\AppData\Local\FLVService\YouTube - LEXUS IS-F full attack!_(2).bin Status: Hidden Object: C:\Users\Famille\AppData\Local\FLVService\YouTube - LEXUS IS-F full attack!_.bin Status: Hidden Object: C:\Users\Famille\AppData\Local\Microsoft\Messenger\demo@hotmail.fr\SharingMetadata\nounou@hotmail.fr\DFSR\Staging\CS{2A3F26EF-70E7-6B46-221F-4C027EBED9B9}\01\10-{2A3F26EF-70E7-6B46-221F-4C027EBED9B9}-v1-{F9E9B0D0-8250-41E2-986E-1C72AF87C282} Status: Hidden Object: C:\Users\Famille\AppData\Local\Microsoft\Messenger\demo@hotmail.fr\SharingMetadata\christine@hotmail.fr\DFSR\Staging\CS{E419866A-53EA-CB7E-1B18-F46B63A96356}\01\11-{E419866A-53EA-CB7E-1B18-F46B63A96356}-v1-{F9E9B0D0-8250-41E2-986E-1C72AF87C Status: Hidden Object: C:\Users\Famille\AppData\Local\Microsoft\Messenger\demo@hotmail.fr\SharingMetadata\christine@hotmail.fr\DFSR\Staging\CS{E419866A-53EA-CB7E-1B18-F46B63A96356}\12\12-{F9E9B0D0-8250-41E2-986E-1C72AF87C282}-v12-{F9E9B0D0-8250-41E2-986E-1C72AF87 Status: Hidden Object: C:\Users\Famille\AppData\Local\Microsoft\Messenger\demo@hotmail.fr\SharingMetadata\christine@hotmail.fr\DFSR\Staging\CS{E419866A-53EA-CB7E-1B18-F46B63A96356}\16\16-{F9E9B0D0-8250-41E2-986E-1C72AF87C282}-v16-{F9E9B0D0-8250-41E2-986E-1C72AF87 Status: Hidden Object: C:\Users\Famille\AppData\Local\Microsoft\Messenger\demo@hotmail.fr\SharingMetadata\christine@hotmail.fr\DFSR\Staging\CS{E419866A-53EA-CB7E-1B18-F46B63A96356}\55\1755-{6532417D-4975-446F-A3F7-80DBC8F483F0}-v1755-{6532417D-4975-446F-A3F7-80DB Status: Hidden Object: C:\Users\Famille\AppData\Local\Microsoft\Messenger\demo@hotmail.fr\SharingMetadata\christine@hotmail.fr\DFSR\Staging\CS{E419866A-53EA-CB7E-1B18-F46B63A96356}\62\1862-{6532417D-4975-446F-A3F7-80DBC8F483F0}-v1862-{6532417D-4975-446F-A3F7-80DB Status: Hidden Object: C:\Users\Famille\AppData\Local\Microsoft\Messenger\demo@hotmail.fr\SharingMetadata\christine@hotmail.fr\DFSR\Staging\CS{E419866A-53EA-CB7E-1B18-F46B63A96356}\74\1774-{6532417D-4975-446F-A3F7-80DBC8F483F0}-v1774-{6532417D-4975-446F-A3F7-80DB Status: Hidden Object: C:\Users\Famille\Favorites\Links\Ciné\Restaurants Status: Hidden Object: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl Status: Access denied Object: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl Status: Access denied Object: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl Status: Access denied Object: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl Status: Access denied Object: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl Status: Access denied

Le scan n'a rien donné...c'est bizarre non ?

Voilà : Logfile of The Avenger Version 2.0, © by Swandog46 Swandog46's Public Anti-Malware Tools Platform: Windows Vista ******************* Script file opened successfully. Script file read successfully. Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: Rootkit scan active. No rootkits found! Completed script processing. ******************* Finished! Terminate.

Bonjour, oup's oui je vais le faire...

Au fait... Je fais quoi avec la quarantaine ? je peux supprimer les lignes ?

Ok, je lance la recherche de Rookit...

Ok j'ai trouvé un autre lien pour rkill voici le rapport : This log file is located at C:\rkill.log. Please post this only if requested to by the person helping you. Otherwise you can close this log when you wish. Ran as Maison on 10/10/2010 at 16:18:17. Services Stopped: Processes terminated by Rkill or while it was running: C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe Rkill completed on 10/10/2010 at 16:18:24. Voici celui de TDSSKiller : 2010/10/10 16:03:53.0867 TDSS rootkit removing tool 2.4.4.0 Oct 4 2010 09:06:59 2010/10/10 16:03:53.0867 ================================================================================ 2010/10/10 16:03:53.0867 SystemInfo: 2010/10/10 16:03:53.0867 2010/10/10 16:03:53.0867 OS Version: 6.0.6002 ServicePack: 2.0 2010/10/10 16:03:53.0868 Product type: Workstation 2010/10/10 16:03:53.0868 ComputerName: PC-MAISON 2010/10/10 16:03:53.0868 UserName: Maison 2010/10/10 16:03:53.0868 Windows directory: C:\Windows 2010/10/10 16:03:53.0868 System windows directory: C:\Windows 2010/10/10 16:03:53.0868 Processor architecture: Intel x86 2010/10/10 16:03:53.0868 Number of processors: 2 2010/10/10 16:03:53.0868 Page size: 0x1000 2010/10/10 16:03:53.0868 Boot type: Normal boot 2010/10/10 16:03:53.0868 ================================================================================ 2010/10/10 16:03:54.0534 Initialize success 2010/10/10 16:04:23.0137 ================================================================================ 2010/10/10 16:04:23.0138 Scan started 2010/10/10 16:04:23.0138 Mode: Manual; 2010/10/10 16:04:23.0138 ================================================================================ 2010/10/10 16:04:23.0872 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 2010/10/10 16:04:23.0971 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys 2010/10/10 16:04:24.0088 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys 2010/10/10 16:04:24.0250 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys 2010/10/10 16:04:24.0375 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys 2010/10/10 16:04:24.0534 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys 2010/10/10 16:04:24.0739 AgereSoftModem (ce91b158fa490cf4c4d487a4130f4660) C:\Windows\system32\DRIVERS\AGRSM.sys 2010/10/10 16:04:24.0951 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys 2010/10/10 16:04:25.0121 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 2010/10/10 16:04:25.0237 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys 2010/10/10 16:04:25.0311 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys 2010/10/10 16:04:25.0379 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys 2010/10/10 16:04:25.0529 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys 2010/10/10 16:04:25.0613 AmdK8 (0ca0071da4315b00fc1328ca86b425da) C:\Windows\system32\drivers\amdk8.sys 2010/10/10 16:04:25.0752 ApfiltrService (7c2f57bce81fa74933f0e1c84a97c9db) C:\Windows\system32\DRIVERS\Apfiltr.sys 2010/10/10 16:04:25.0958 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys 2010/10/10 16:04:26.0036 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys 2010/10/10 16:04:26.0148 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 2010/10/10 16:04:26.0229 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 2010/10/10 16:04:26.0397 athr (999eff35b4c6d969b232bf575972f86f) C:\Windows\system32\DRIVERS\athr.sys 2010/10/10 16:04:26.0621 avgio (f1d43170fdd7399ee17ea32d4f868b0c) C:\Program Files\Avira\AntiVir Desktop\avgio.sys 2010/10/10 16:04:26.0894 avgntflt (14fe36d8f2c6a2435275338d061a0b66) C:\Windows\system32\DRIVERS\avgntflt.sys 2010/10/10 16:04:26.0964 avipbb (ad9bd66a862116e79cb45bb6be46055f) C:\Windows\system32\DRIVERS\avipbb.sys 2010/10/10 16:04:27.0061 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 2010/10/10 16:04:27.0266 bowser (74b442b2be1260b7588c136177ceac66) C:\Windows\system32\DRIVERS\bowser.sys 2010/10/10 16:04:27.0366 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 2010/10/10 16:04:27.0463 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 2010/10/10 16:04:27.0545 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 2010/10/10 16:04:27.0684 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 2010/10/10 16:04:27.0795 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 2010/10/10 16:04:27.0857 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 2010/10/10 16:04:27.0973 BthEnum (6d39c954799b63ba866910234cf7d726) C:\Windows\system32\DRIVERS\BthEnum.sys 2010/10/10 16:04:28.0108 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys 2010/10/10 16:04:28.0223 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys 2010/10/10 16:04:28.0378 BTHPORT (5a3abaa2f8eece7aefb942773766e3db) C:\Windows\system32\Drivers\BTHport.sys 2010/10/10 16:04:28.0575 BTHUSB (94e2941280e3756a5e0bcb467865c43a) C:\Windows\system32\Drivers\BTHUSB.sys 2010/10/10 16:04:29.0093 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 2010/10/10 16:04:29.0160 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 2010/10/10 16:04:29.0281 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys 2010/10/10 16:04:29.0455 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 2010/10/10 16:04:29.0570 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys 2010/10/10 16:04:29.0664 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys 2010/10/10 16:04:29.0817 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys 2010/10/10 16:04:29.0891 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys 2010/10/10 16:04:29.0952 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys 2010/10/10 16:04:30.0070 CrystalSysInfo (f054744f67576a01139885173392502b) C:\Program Files\MediaCoder\SysInfo.sys 2010/10/10 16:04:30.0239 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys 2010/10/10 16:04:30.0338 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 2010/10/10 16:04:30.0448 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 2010/10/10 16:04:30.0582 DXGKrnl (5c7e2097b91d689ded7a6ff90f0f3a25) C:\Windows\System32\drivers\dxgkrnl.sys 2010/10/10 16:04:30.0735 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys 2010/10/10 16:04:30.0840 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 2010/10/10 16:04:31.0009 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys 2010/10/10 16:04:31.0270 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 2010/10/10 16:04:31.0391 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 2010/10/10 16:04:31.0532 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys 2010/10/10 16:04:31.0713 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 2010/10/10 16:04:31.0832 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 2010/10/10 16:04:31.0993 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys 2010/10/10 16:04:32.0329 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 2010/10/10 16:04:32.0544 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys 2010/10/10 16:04:32.0905 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys 2010/10/10 16:04:33.0007 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 2010/10/10 16:04:33.0227 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys 2010/10/10 16:04:33.0373 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 2010/10/10 16:04:33.0541 HidBth (fcb3f4be408f72c1bd81bcaba87fc22f) C:\Windows\system32\DRIVERS\hidbth.sys 2010/10/10 16:04:33.0710 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys 2010/10/10 16:04:33.0823 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys 2010/10/10 16:04:33.0897 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys 2010/10/10 16:04:34.0004 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys 2010/10/10 16:04:34.0215 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys 2010/10/10 16:04:34.0327 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 2010/10/10 16:04:34.0603 ialm (14f477463246e35f1dc932be6225598c) C:\Windows\system32\DRIVERS\igdkmd32.sys 2010/10/10 16:04:35.0125 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys 2010/10/10 16:04:35.0655 igfx (14f477463246e35f1dc932be6225598c) C:\Windows\system32\DRIVERS\igdkmd32.sys 2010/10/10 16:04:36.0016 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 2010/10/10 16:04:36.0482 IntcAzAudAddService (721b1a0434647418f98d034bebd4b4db) C:\Windows\system32\drivers\RTKVHDA.sys 2010/10/10 16:04:37.0169 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys 2010/10/10 16:04:37.0388 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys 2010/10/10 16:04:37.0632 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2010/10/10 16:04:38.0477 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys 2010/10/10 16:04:38.0822 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 2010/10/10 16:04:39.0242 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 2010/10/10 16:04:39.0697 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys 2010/10/10 16:04:40.0156 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys 2010/10/10 16:04:40.0918 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 2010/10/10 16:04:41.0178 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 2010/10/10 16:04:41.0754 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 2010/10/10 16:04:42.0251 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys 2010/10/10 16:04:42.0782 KR10I (a383f2cea0a8f4e76e71abc869bd5748) C:\Windows\system32\drivers\kr10i.sys 2010/10/10 16:04:43.0134 KR10N (6e9922332386c2a49936b30b2b6fd298) C:\Windows\system32\drivers\kr10n.sys 2010/10/10 16:04:43.0228 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys 2010/10/10 16:04:43.0401 LHidFilt (7f9c7b28cf1c859e1c42619eea946dc8) C:\Windows\system32\DRIVERS\LHidFilt.Sys 2010/10/10 16:04:43.0549 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 2010/10/10 16:04:43.0666 LMouFilt (ab33792a87285344f43b5ce23421bab0) C:\Windows\system32\DRIVERS\LMouFilt.Sys 2010/10/10 16:04:43.0799 LPCFilter (515fc18cabee0158a324b08b1c2667cf) C:\Windows\system32\DRIVERS\LPCFilter.sys 2010/10/10 16:04:43.0908 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys 2010/10/10 16:04:43.0996 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys 2010/10/10 16:04:44.0122 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys 2010/10/10 16:04:44.0269 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 2010/10/10 16:04:44.0640 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys 2010/10/10 16:04:44.0983 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 2010/10/10 16:04:45.0288 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 2010/10/10 16:04:45.0501 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 2010/10/10 16:04:45.0705 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys 2010/10/10 16:04:46.0058 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 2010/10/10 16:04:46.0226 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys 2010/10/10 16:04:46.0493 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 2010/10/10 16:04:46.0806 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 2010/10/10 16:04:46.0892 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 2010/10/10 16:04:47.0132 mrxsmb (454341e652bdf5e01b0f2140232b073e) C:\Windows\system32\DRIVERS\mrxsmb.sys 2010/10/10 16:04:47.0238 mrxsmb10 (2a4901aff069944fa945ed5bbf4dcde3) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2010/10/10 16:04:47.0461 mrxsmb20 (28b3f1ab44bdd4432c041581412f17d9) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2010/10/10 16:04:47.0558 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys 2010/10/10 16:04:47.0682 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys 2010/10/10 16:04:47.0840 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 2010/10/10 16:04:47.0952 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 2010/10/10 16:04:48.0059 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 2010/10/10 16:04:48.0400 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 2010/10/10 16:04:48.0430 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 2010/10/10 16:04:48.0760 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 2010/10/10 16:04:49.0022 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 2010/10/10 16:04:49.0090 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 2010/10/10 16:04:49.0179 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 2010/10/10 16:04:49.0444 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 2010/10/10 16:04:49.0571 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 2010/10/10 16:04:49.0831 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 2010/10/10 16:04:49.0953 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 2010/10/10 16:04:50.0176 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 2010/10/10 16:04:50.0358 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 2010/10/10 16:04:50.0654 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 2010/10/10 16:04:50.0814 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 2010/10/10 16:04:51.0242 NETw3v32 (a15f219208843a5a210c8cb391384453) C:\Windows\system32\DRIVERS\NETw3v32.sys 2010/10/10 16:04:51.0551 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 2010/10/10 16:04:51.0730 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 2010/10/10 16:04:51.0946 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 2010/10/10 16:04:52.0239 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 2010/10/10 16:04:52.0463 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 2010/10/10 16:04:52.0595 NuidFltr (cf7e041663119e09d2e118521ada9300) C:\Windows\system32\DRIVERS\NuidFltr.sys 2010/10/10 16:04:52.0716 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 2010/10/10 16:04:52.0977 nvlddmkm (e70d10238e1c7463728d56920d1eb186) C:\Windows\system32\DRIVERS\nvlddmkm.sys 2010/10/10 16:04:53.0540 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys 2010/10/10 16:04:53.0655 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys 2010/10/10 16:04:53.0709 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys 2010/10/10 16:04:53.0917 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys 2010/10/10 16:04:54.0054 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 2010/10/10 16:04:54.0156 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 2010/10/10 16:04:54.0205 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 2010/10/10 16:04:54.0365 PCAMp50 (1bf91f352d746ad7469fa71783b5fae8) C:\Windows\system32\Drivers\PCAMp50.sys 2010/10/10 16:04:54.0482 PCASp50 (1961590aa191b6b7dcf18a6a693af7b8) C:\Windows\system32\Drivers\PCASp50.sys 2010/10/10 16:04:54.0591 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 2010/10/10 16:04:54.0675 pciide (3b1901e401473e03eb8c874271e50c26) C:\Windows\system32\drivers\pciide.sys 2010/10/10 16:04:54.0820 pcmcia (3bb2244f343b610c29c98035504c9b75) C:\Windows\system32\DRIVERS\pcmcia.sys 2010/10/10 16:04:54.0946 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 2010/10/10 16:04:55.0334 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 2010/10/10 16:04:55.0469 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys 2010/10/10 16:04:55.0601 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 2010/10/10 16:04:55.0765 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\Windows\system32\Drivers\PxHelp20.sys 2010/10/10 16:04:55.0919 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys 2010/10/10 16:04:56.0034 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 2010/10/10 16:04:56.0233 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 2010/10/10 16:04:56.0317 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 2010/10/10 16:04:56.0417 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 2010/10/10 16:04:56.0598 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 2010/10/10 16:04:56.0745 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 2010/10/10 16:04:57.0088 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 2010/10/10 16:04:57.0206 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 2010/10/10 16:04:57.0310 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys 2010/10/10 16:04:57.0427 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 2010/10/10 16:04:57.0533 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys 2010/10/10 16:04:57.0684 RFCOMM (6482707f9f4da0ecbab43b2e0398a101) C:\Windows\system32\DRIVERS\rfcomm.sys 2010/10/10 16:04:57.0931 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\Windows\system32\DRIVERS\RimSerial.sys 2010/10/10 16:04:58.0065 ROOTMODEM (75e8a6bfa7374aba833ae92bf41ae4e6) C:\Windows\system32\Drivers\RootMdm.sys 2010/10/10 16:04:58.0193 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 2010/10/10 16:04:58.0354 RTL8169 (455f7f7974211ea11b81f0f4e528e258) C:\Windows\system32\DRIVERS\Rtlh86.sys 2010/10/10 16:04:58.0529 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 2010/10/10 16:04:58.0688 sdbus (8f36b54688c31eed4580129040c6a3d3) C:\Windows\system32\DRIVERS\sdbus.sys 2010/10/10 16:04:58.0839 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 2010/10/10 16:04:58.0996 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 2010/10/10 16:04:59.0093 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 2010/10/10 16:04:59.0243 sermouse (450accd77ec5cea720c1cdb9e26b953b) C:\Windows\system32\drivers\sermouse.sys 2010/10/10 16:04:59.0485 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\DRIVERS\sffdisk.sys 2010/10/10 16:04:59.0561 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys 2010/10/10 16:04:59.0719 sffp_sd (9f66a46c55d6f1ccabc79bb7afccc545) C:\Windows\system32\DRIVERS\sffp_sd.sys 2010/10/10 16:04:59.0809 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 2010/10/10 16:04:59.0940 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys 2010/10/10 16:05:00.0127 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys 2010/10/10 16:05:00.0216 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys 2010/10/10 16:05:00.0339 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 2010/10/10 16:05:00.0528 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 2010/10/10 16:05:00.0674 srv (96a5e2c642af8f591a7366429809506b) C:\Windows\system32\DRIVERS\srv.sys 2010/10/10 16:05:00.0769 srv2 (71da2d64880c97e5ffc3c81761632751) C:\Windows\system32\DRIVERS\srv2.sys 2010/10/10 16:05:00.0936 srvnet (0c5ab1892ae0fa504218db094bf6d041) C:\Windows\system32\DRIVERS\srvnet.sys 2010/10/10 16:05:01.0064 sscdbus (d5dffeaa1e15d4effabb9d9a3068ac5b) C:\Windows\system32\DRIVERS\sscdbus.sys 2010/10/10 16:05:01.0179 sscdmdfl (8a1be0c347814f482f493aea619d57f6) C:\Windows\system32\DRIVERS\sscdmdfl.sys 2010/10/10 16:05:01.0289 sscdmdm (5ab0b1987f682a59b15b78f84c6ad7d0) C:\Windows\system32\DRIVERS\sscdmdm.sys 2010/10/10 16:05:01.0476 ssmdrv (3ad0362cf68de3ac500e981700242cca) C:\Windows\system32\DRIVERS\ssmdrv.sys 2010/10/10 16:05:01.0639 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 2010/10/10 16:05:01.0768 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 2010/10/10 16:05:01.0884 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 2010/10/10 16:05:02.0010 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 2010/10/10 16:05:02.0162 Tcpip (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\drivers\tcpip.sys 2010/10/10 16:05:02.0306 Tcpip6 (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\DRIVERS\tcpip.sys 2010/10/10 16:05:02.0412 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 2010/10/10 16:05:02.0517 tdcmdpst (1825bceb47bf41c5a9f0e44de82fc27a) C:\Windows\system32\DRIVERS\tdcmdpst.sys 2010/10/10 16:05:02.0617 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 2010/10/10 16:05:02.0734 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 2010/10/10 16:05:02.0834 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 2010/10/10 16:05:02.0925 TermDD (2c549bd9dd091fbfaa0a2a48e82ec2fb) C:\Windows\system32\DRIVERS\termdd.sys 2010/10/10 16:05:03.0074 tifm21 (f779ba4cd37963ab4600c9871b7752a3) C:\Windows\system32\drivers\tifm21.sys 2010/10/10 16:05:03.0315 tosrfec (5c4103544612e5011ef46301b93d1aa6) C:\Windows\system32\DRIVERS\tosrfec.sys 2010/10/10 16:05:03.0568 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 2010/10/10 16:05:03.0731 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 2010/10/10 16:05:03.0830 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys 2010/10/10 16:05:03.0942 TVALZ (521c5f39829875adf5466dd94c6282c7) C:\Windows\system32\DRIVERS\TVALZ_O.SYS 2010/10/10 16:05:04.0079 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys 2010/10/10 16:05:04.0197 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 2010/10/10 16:05:04.0409 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys 2010/10/10 16:05:04.0509 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys 2010/10/10 16:05:04.0629 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 2010/10/10 16:05:04.0827 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 2010/10/10 16:05:05.0039 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 2010/10/10 16:05:05.0345 USBAAPL (4b8a9c16b6d9258ed99c512aecb8c555) C:\Windows\system32\Drivers\usbaapl.sys 2010/10/10 16:05:05.0460 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 2010/10/10 16:05:05.0542 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 2010/10/10 16:05:05.0725 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 2010/10/10 16:05:05.0837 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 2010/10/10 16:05:05.0953 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys 2010/10/10 16:05:06.0044 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys 2010/10/10 16:05:06.0182 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys 2010/10/10 16:05:06.0274 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 2010/10/10 16:05:06.0393 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys 2010/10/10 16:05:06.0516 usbvideo (0a6b81f01bc86399482e27e6fda7b33b) C:\Windows\system32\Drivers\usbvideo.sys 2010/10/10 16:05:06.0656 UVCFTR (0d09f77f46dd3be73c3e5949428d6995) C:\Windows\system32\DRIVERS\UVCFTR_S.SYS 2010/10/10 16:05:06.0808 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys 2010/10/10 16:05:06.0909 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 2010/10/10 16:05:07.0057 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys 2010/10/10 16:05:07.0176 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys 2010/10/10 16:05:07.0278 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys 2010/10/10 16:05:07.0468 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 2010/10/10 16:05:07.0577 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 2010/10/10 16:05:07.0666 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 2010/10/10 16:05:07.0763 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys 2010/10/10 16:05:07.0900 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 2010/10/10 16:05:08.0026 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2010/10/10 16:05:08.0069 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2010/10/10 16:05:08.0199 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys 2010/10/10 16:05:08.0317 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys 2010/10/10 16:05:08.0510 windrvNT (ce291805cb4cd561a5a569df4e28e41f) C:\Windows\system32\windrvNT.sys 2010/10/10 16:05:08.0682 WmiAcpi (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys 2010/10/10 16:05:08.0793 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys 2010/10/10 16:05:08.0913 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 2010/10/10 16:05:09.0103 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 2010/10/10 16:05:09.0237 ================================================================================ 2010/10/10 16:05:09.0237 Scan finished 2010/10/10 16:05:09.0237 ================================================================================ Rapport Malwarebytes Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Version de la base de données: 4790 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 10/10/2010 17:47:12 mbam-log-2010-10-10 (17-47-12).txt Type d'examen: Examen complet (C:\|E:\|) Elément(s) analysé(s): 293233 Temps écoulé: 1 heure(s), 17 minute(s), 10 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 1 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): C:\Users\Famille\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E2R0NFIZ\jjdlsnvtov[1].htm (Trojan.Downloader) -> Quarantined and deleted successfully.

Ok, le scan avec TDSSKILLER n'a rien donné (ouf) par contre pas moyen d'installer Rkill de Grinler, j'ai ça au moment de l'installation :

Salut, Le scan reste bloqué depuis plus d'une heure... Je fais quoi ? Merci

Ok...c'est en cours, maintenant c'est ma souris qui est sans arrêt déconnectée... pfff c'est pratique !

Alors je viens de faire le scan avec Malwarebyte's et le résultat est ok : Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4773 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 09/10/2010 20:15:42 mbam-log-2010-10-09 (20-15-42).txt Scan type: Full scan (C:\|E:\|) Objects scanned: 270966 Time elapsed: 1 hour(s), 16 minute(s), 11 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) Je fais quoi alors ?

Bonjour à tous, Il y a 2 jours j'ai attrapé Sécurity Tool, en redémarrant en mode sans échec et en restaurant le système à une date antérieur, il semblerait que je me sois débarrassée de cette vilaine bêbête ! par contre, je viens d'effectuer un scan en ligne avec Panda et le rapport dit que je suis infectée, je ne sais pas comment faire ? Merci d'avance Le voici : ;*********************************************************************************************************************************************************************************** ANALYSIS: 2010-10-09 17:00:20 PROTECTIONS: 1 MALWARE: 7 SUSPECTS: 4 ;*********************************************************************************************************************************************************************************** PROTECTIONS Description Version Active Updated ;=================================================================================================================================================================================== AntiVir Desktop Yes Yes ;=================================================================================================================================================================================== MALWARE Id Description Type Active Severity Disinfectable Disinfected Location ;=================================================================================================================================================================================== 00167704 Cookie/Xiti TrackingCookie No 0 Yes No c:\users\maison\appdata\roaming\microsoft\windows\cookies\demo@xiti[1].txt 00168106 Cookie/Weborama TrackingCookie No 0 Yes No c:\users\maison\appdata\roaming\microsoft\windows\cookies\demo@weborama[1].txt 00432774 Trj/Agent.KCK Virus/Trojan No 0 Yes No c:\users\famille\appdata\roaming\thunderbird\profiles\7m4wm47n.default\mail\pop.neuf-1.fr\inbox[mahnung.zip][mahnung/mahnung.pif] 00432774 Trj/Agent.KCK Virus/Trojan No 0 Yes No c:\users\famille\appdata\roaming\thunderbird\profiles\7m4wm47n.default\mail\pop.neuf-1.fr\junk[mahnung.zip][mahnung/mahnung.pif] 00462462 W32/Autorun.JCR Virus No 1 Yes No c:\users\famille\appdata\roaming\thunderbird\profiles\7m4wm47n.default\mail\pop.neuf-1.fr\junk[abrechnung.zip][scann/scann.a] 00462462 W32/Autorun.JCR Virus No 1 Yes No c:\users\famille\appdata\roaming\thunderbird\profiles\7m4wm47n.default\mail\pop.neuf-1.fr\inbox[abrechnung.zip][scann/scann.a] 03074964 Trj/CI.A Virus/Trojan No 0 Yes No c:\users\famille\appdata\local\microsoft\windows\temporary internet files\content.ie5\e2r0nfiz\jjdlsnvtov[1].htm 04444116 Adware/GoodSearchNow Adware No 1 Yes No c:\windows\system32\suppdll.dll 07462576 Trj/Downloader.XWV Virus/Trojan No 1 Yes No c:\users\famille\appdata\local\google\chrome\application\6.0.472.63\installer\setup.exe ;=================================================================================================================================================================================== SUSPECTS Sent Location ;=================================================================================================================================================================================== No c:\program files\powerbullet\powerbullet.exe No c:\users\famille\appdata\local\microsoft\windows\temporary internet files\content.ie5\0ac987gx\neipnvqx[1].htm No c:\users\famille\appdata\local\microsoft\windows\temporary internet files\content.ie5\ripitxj0\neipnvqx[1].htm No c:\windows\system32\smab.dll ;=================================================================================================================================================================================== VULNERABILITIES Id Severity Description ;=================================================================================================================================================================================== ;===================================================================================================================================================================================