

nanox
Membres-
Compteur de contenus
6 -
Inscription
-
Dernière visite
nanox's Achievements

Junior Member (3/12)
0
Réputation sur la communauté
-
Antimalware Doctor [Résolu]
nanox a répondu à un(e) sujet de nanox dans Analyses et éradication malwares
Ok je prends note des remarques et j édite le post. Merci beaucoup ++ -
Antimalware Doctor [Résolu]
nanox a répondu à un(e) sujet de nanox dans Analyses et éradication malwares
Bonjour,merci pour l'aide, je vais formater prochainement dans ce cas. ++ Nanox -
Antimalware Doctor [Résolu]
nanox a répondu à un(e) sujet de nanox dans Analyses et éradication malwares
J'ai pas pu poster le rapport, je sais pas trop pourquoi donc voila le fichier otl.txt Mon lien Et Extras.txt OTL Extras logfile created on: 01/12/2010 18:45:39 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\ludovic\Desktop Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 77,00% Memory free 6,00 Gb Paging File | 6,00 Gb Available in Paging File | 91,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 298,08 Gb Total Space | 33,39 Gb Free Space | 11,20% Space Free | Partition Type: NTFS Drive F: | 1,93 Gb Total Space | 1,21 Gb Free Space | 62,75% Space Free | Partition Type: FAT32 Computer Name: LUDOVIC-PC | User Name: ludovic | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- "%1" %* inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 ========== Authorized Applications List ========== ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "$NtUninstallMTF197$" = Street-Ads Browser Enhancer "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2 "{0B1C0E32-0589-49BE-AFEE-6888ED4A4FF4}" = Analyseur XML Microsoft "{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer "{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up "{14574B7F-75D1-4718-B7F2-EBF6E2862A35}" = Company of Heroes - FAKEMSI "{199E6632-EB28-4F73-AECB-3E192EB92D18}" = Company of Heroes - FAKEMSI "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{25724802-CC14-4B90-9F3B-3D6955EE27B1}" = Company of Heroes - FAKEMSI "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java 6 Update 17 "{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper "{32C4A4EB-C97D-414E-99C5-38F8DFD31D5D}" = Company of Heroes - FAKEMSI "{33cf58f5-48d8-4575-83d6-96f574e4d83a}" = Nero DriveSpeed "{359cfc0a-beb1-440d-95ba-cf63a86da34f}" = Nero Recode "{3CDF9C0F-6C77-4307-80A6-0A9D47C174D8}_is1" = Call of Duty Modern Warfare 2 "{3F290582-3F4E-4B96-009C-E0BABAA40C42}" = La Bataille pour la Terre du Milieu "{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live "{50193078-F553-4EBA-AA77-64C9FAA12F98}" = Company of Heroes - FAKEMSI "{51D718D1-DA81-4FAD-919F-5C1CE3C33379}" = Company of Heroes - FAKEMSI "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{595a3116-40bb-4e0f-a2e8-d7951da56270}" = NeroExpress "{66F78C51-D108-4F0C-A93C-1CBE74CE338F}" = Company of Heroes - FAKEMSI "{6D8DDB4A-C263-40DE-BA16-AFDAD159D59A}" = Tom Clancy's Splinter Cell Conviction "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger "{7748ac8c-18e3-43bb-959b-088faea16fb2}" = Nero StartSmart "{7F4B1592-222F-4E5F-A100-E5AFD61A0BB3}" = Company of Heroes - FAKEMSI "{80D03817-7943-4839-8E96-B9F924C5E67D}" = Company of Heroes - FAKEMSI "{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II "{869200db-287a-4dc0-b02b-2b6787fbcd4c}" = Nero DiscSpeed "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{90024193-9F13-4877-89D5-A1CDF0CBBF28}" = Feedback Tool "{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007 "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007 "{90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007 "{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007 "{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007 "{90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007 "{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007 "{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007 "{90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007 "{90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007 "{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007 "{90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2) "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{97E5205F-EA4F-438F-B211-F1846419F1C1}" = Company of Heroes - FAKEMSI "{99A7722D-9ACB-43F3-A222-ABC7133F159E}" = Company of Heroes - FAKEMSI "{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT "{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress "{AC76BA86-7AD7-1036-7B44-A94000000001}" = Adobe Reader 9.4.0 - Français "{AEC81925-9C76-4707-84A9-40696C613ED3}" = Dragon Age: Origins "{b1adf008-e898-4fe2-8a1f-690d9a06acaf}" = DolbyFiles "{b2ec4a38-b545-4a00-8214-13fe0e915e6d}" = Advertising Center "{B4F3A360-E1E2-479D-ADE7-9BE3B07F4539}" = NVIDIA PhysX "{b78120a0-cf84-4366-a393-4d0a59bc546c}" = Menu Templates - Starter Kit "{BA801B94-C28D-46EE-B806-E1E021A3D519}" = Company of Heroes - FAKEMSI "{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}" = Nero ControlCenter "{c30ba277-578c-48da-8174-727e131bd017}" = Nero 9 "{d025a639-b9c9-417d-8531-208859000af8}" = NeroBurningROM "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D4D244D1-05E0-4D24-86A2-B2433C435671}" = Company of Heroes - FAKEMSI "{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live "{e8a80433-302b-4ff1-815d-fcc8eac482ff}" = Nero Installer "{EAF636A9-F664-4703-A659-85A894DA264F}" = Company of Heroes - FAKEMSI "{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint "{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729) "{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01 "8461-7759-5462-8226" = Vuze "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Ask Toolbar_is1" = Vuze Toolbar "avast!" = avast! Antivirus "BShooter5_is1" = Bubble Shooter v5.02 "CDisplay_is1" = CDisplay 1.8 "Company of Heroes" = Company of Heroes "DAEMON Tools Toolbar" = DAEMON Tools Toolbar "eMule" = eMule "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Messenger Plus! Live" = Messenger Plus! Live "Mozilla Firefox (3.5.15)" = Mozilla Firefox (3.5.15) "NVIDIA Display Control Panel" = NVIDIA Display Control Panel "NVIDIA Drivers" = NVIDIA Drivers "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "PROPLUS" = Microsoft Office Professional Plus 2007 "Revo Uninstaller" = Revo Uninstaller 1.90 "Star Wars: Le Pouvoir de la Force_is1" = Star Wars: Le Pouvoir de la Force "Steam App 10" = Counter-Strike "Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2 "TeamSpeak 3 Client" = TeamSpeak 3 Client "VLC media player" = VLC media player 1.1.4 "WinLiveSuite_Wave3" = Installation Windows Live "WinRAR archiver" = Logiciel d'archivage WinRAR "World of Warcraft" = World of Warcraft ========== Last 10 Event Log Errors ========== [ Antivirus Events ] Error - 04/12/2009 17:57:10 | Computer Name = ludovic-PC | Source = avast! | ID = 33554522 Description = AAVM - scanning error: x_AavmCheckFileDirectEx: avfilesScanReal of http://r13.vip-file.com/downloadp/7365.72e10000d8f7c40d2f405db867_dtjmjir8w474tb3g/1157208/vip-file.com/Dragon.Age.Origins_SKIDROW_derinport.in_devrimow.iso failed, 00000084. [ Application Events ] Error - 01/12/2010 11:01:52 | Computer Name = ludovic-PC | Source = Winlogon | ID = 4103 Description = Échec de l’activation de la licence Windows. Erreur 0x80070005. Error - 01/12/2010 11:04:41 | Computer Name = ludovic-PC | Source = Winlogon | ID = 4103 Description = Échec de l’activation de la licence Windows. Erreur 0x80070005. Error - 01/12/2010 11:10:00 | Computer Name = ludovic-PC | Source = Winlogon | ID = 4103 Description = Échec de l’activation de la licence Windows. Erreur 0x80070005. Error - 01/12/2010 11:15:47 | Computer Name = ludovic-PC | Source = Winlogon | ID = 4103 Description = Échec de l’activation de la licence Windows. Erreur 0x80070005. Error - 01/12/2010 11:19:06 | Computer Name = ludovic-PC | Source = System Restore | ID = 8193 Description = Error - 01/12/2010 11:21:14 | Computer Name = ludovic-PC | Source = Winlogon | ID = 4103 Description = Échec de l’activation de la licence Windows. Erreur 0x80070005. Error - 01/12/2010 11:23:07 | Computer Name = ludovic-PC | Source = Winlogon | ID = 4103 Description = Échec de l’activation de la licence Windows. Erreur 0x80070005. Error - 01/12/2010 11:25:39 | Computer Name = ludovic-PC | Source = Winlogon | ID = 4103 Description = Échec de l’activation de la licence Windows. Erreur 0x80070005. Error - 01/12/2010 11:40:28 | Computer Name = ludovic-PC | Source = Winlogon | ID = 4103 Description = Échec de l’activation de la licence Windows. Erreur 0x80070005. Error - 01/12/2010 11:44:42 | Computer Name = ludovic-PC | Source = Winlogon | ID = 4103 Description = Échec de l’activation de la licence Windows. Erreur 0x80070005. [ System Events ] Error - 08/08/2010 10:55:51 | Computer Name = ludovic-PC | Source = volsnap | ID = 393252 Description = Les clichés instantanés du volume C: ont été annulés car le stockage du cliché instantané n’a pas pu s’agrandir en raison d’une limite utilisateur. Error - 08/08/2010 11:01:29 | Computer Name = ludovic-PC | Source = Service Control Manager | ID = 7023 Description = Le service Service de notification SPP s’est arrêté avec l’erreur : %%5 Error - 08/08/2010 12:01:29 | Computer Name = ludovic-PC | Source = Service Control Manager | ID = 7023 Description = Le service Service de notification SPP s’est arrêté avec l’erreur : %%5 Error - 08/08/2010 13:01:29 | Computer Name = ludovic-PC | Source = Service Control Manager | ID = 7023 Description = Le service Service de notification SPP s’est arrêté avec l’erreur : %%5 Error - 08/08/2010 14:01:29 | Computer Name = ludovic-PC | Source = Service Control Manager | ID = 7023 Description = Le service Service de notification SPP s’est arrêté avec l’erreur : %%5 Error - 08/08/2010 15:01:29 | Computer Name = ludovic-PC | Source = Service Control Manager | ID = 7023 Description = Le service Service de notification SPP s’est arrêté avec l’erreur : %%5 Error - 08/08/2010 16:01:29 | Computer Name = ludovic-PC | Source = Service Control Manager | ID = 7023 Description = Le service Service de notification SPP s’est arrêté avec l’erreur : %%5 Error - 08/08/2010 17:01:29 | Computer Name = ludovic-PC | Source = Service Control Manager | ID = 7023 Description = Le service Service de notification SPP s’est arrêté avec l’erreur : %%5 Error - 08/08/2010 18:01:29 | Computer Name = ludovic-PC | Source = Service Control Manager | ID = 7023 Description = Le service Service de notification SPP s’est arrêté avec l’erreur : %%5 Error - 08/08/2010 19:01:29 | Computer Name = ludovic-PC | Source = Service Control Manager | ID = 7023 Description = Le service Service de notification SPP s’est arrêté avec l’erreur : %%5 < End of report > -
Antimalware Doctor [Résolu]
nanox a répondu à un(e) sujet de nanox dans Analyses et éradication malwares
Bonsoir, Le rapport de ESET Online Scanner: C:\ludovic\partage\Nero 9 multilangue.rar multiple threats deleted - quarantined C:\ludovic\programmes\Nero 9 multilangue.rar multiple threats deleted - quarantined C:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\ubiorbitapi_r2.dll a variant of Win32/Packed.VMProtect.AAA trojan cleaned by deleting - quarantined C:\Users\ludovic\AppData\Local\144267646.exe a variant of Win32/Kryptik.HHB trojan cleaned by deleting - quarantined C:\Users\ludovic\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AI3VUBFF\bootsecurity700rst[2].exe a variant of Win32/Kryptik.INR trojan cleaned by deleting - quarantined C:\Users\ludovic\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VDOZBBP4\syncsetup700max[1].exe a variant of Win32/Kryptik.INR trojan cleaned by deleting - quarantined C:\Users\ludovic\AppData\Local\Temp\jar_cache7047036234543250020.tmp multiple threats deleted - quarantined C:\Users\ludovic\AppData\Local\Temp\loader.exe a variant of Win32/TrojanDownloader.Unruy.CB trojan cleaned by deleting - quarantined C:\Users\ludovic\AppData\Local\Temp\NERO1004523\unit_app_75\Toolbar.exe Win32/Toolbar.AskSBar application cleaned by deleting - quarantined C:\Users\ludovic\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\35ace28a-6f2985ab probably a variant of Win32/Agent.LMMBFXF trojan cleaned by deleting - quarantined C:\Users\ludovic\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\6bafd9a6-540ae9e1 Java/TrojanDownloader.Agent.NBM trojan deleted - quarantined C:\Users\ludovic\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\40394e8-30458da3 multiple threats deleted - quarantined C:\Users\ludovic\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\472eb3f0-6a5a60fb Java/TrojanDownloader.Agent.NBK trojan deleted - quarantined C:\Users\ludovic\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\94691f5-1718dca0 a variant of Java/TrojanDownloader.OpenStream.NAU trojan deleted - quarantined C:\Users\ludovic\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\481ee53d-255c09d0 Java/TrojanDownloader.Agent.NBL trojan deleted - quarantined C:\Users\ludovic\AppData\Roaming\9C53AD52DADABE6D26C59C9FC5983DC5\bootsecurity700rst.exe a variant of Win32/Kryptik.INR trojan cleaned by deleting - quarantined C:\Users\ludovic\AppData\Roaming\9C53AD52DADABE6D26C59C9FC5983DC5\enemies-names.txt Win32/Adware.AntimalwareDoctor.AE.Gen application cleaned by deleting - quarantined C:\Users\ludovic\AppData\Roaming\9C53AD52DADABE6D26C59C9FC5983DC5\local.ini Win32/Adware.AntimalwareDoctor.AE.Gen application cleaned by deleting - quarantined C:\Users\ludovic\AppData\Roaming\9C53AD52DADABE6D26C59C9FC5983DC5\syncsetup700max.exe a variant of Win32/Kryptik.INR trojan cleaned by deleting - quarantined C:\Users\Public\Documents\Server\hlp.dat Win32/Bamital.DZ trojan cleaned by deleting (after the next restart) - quarantined C:\Windows\explorer.exe Win32/Bamital.EV trojan unable to clean C:\Windows\System32\wininit.exe Win32/Bamital.EV trojan unable to clean Operating memory Win32/Bamital.EV trojan -
Antimalware Doctor [Résolu]
nanox a répondu à un(e) sujet de nanox dans Analyses et éradication malwares
Bonjour, voici le rapport de security cheack: Results of screen317's Security Check version 0.99.6 Windows 7 (UAC is disabled!) Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: avast! Antivirus WMI entry may not exist for antivirus; attempting automatic update. avast! successfully updated! ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware Java 6 Update 17 Out of date Java installed! Adobe Flash Player 10.0.32.18 Adobe Reader 9.4.0 - Français Mozilla Firefox (3.5.15) Firefox Out of Date! ```````````````````````````````` Process Check: objlist.exe by Laurent Alwil Software Avast4 aswUpdSv.exe Alwil Software Avast4 ashServ.exe Alwil Software Avast4 ashDisp.exe ```````````````````````````````` DNS Vulnerability Check: GREAT! (Not vulnerable to DNS cache poisoning) ``````````End of Log```````````` et celui de malwarebytes: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Version de la base de données: 4785 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 30/11/2010 20:18:03 mbam-log-2010-11-30 (20-18-03).txt Type d'examen: Examen complet (C:\|) Elément(s) analysé(s): 265496 Temps écoulé: 43 minute(s), 22 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 2 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_CURRENT_USER\Software\Antimalware Doctor Inc (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) -
Bonjour à tous J'ai un problème avec Antimalware Doctor, j'ai essayer de le virer avec entre autre Malwarebytes mais sans succès. Si quelqu'un peut mon me communiquer la méthode a suivre je lui en serai très reconnaissant. Merci d avance. Nanox