Bonjour,
je suis sous Windows 7 et infectee par divers trojans dont smart fortress:
Mon antivirus a deja mis en quarantaine les elements suivants:
a variant of Win32/Injector.RIO trojan
Win32/PSW.Delf.OBN trojan
a variant of Adware/SystemSecurity.Ak Application
Smart fortress est encore la donc j'ai lance Rogue Killer voila les rapports: Peut-on m'indiquer si ca veut dire que tout va bien ou pas? Faut-il faire autre chose?
J'ai aussi lance Malwarebytes, ci-dessous le rapport.
J'ai aussi lance ZHPdiag, mais je ne vois pas ou poster le rapport sur le site et je ne sais pas lire ce que ca signifie, je n'y comprends pas grand chose...
Quelqu'un peut-il m'aider?
D'autant plus que Smart Fortress apparait encore dans mes Programmes malgre toutes ces manipulations. Puis le desinstaller via l'OS normal de via windows Install/Uninstall ou est-ce dangereux pour le systeme?
RogueKiller V7.4.4 [05/08/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: RogueKiller - Geeks to Go Forums
Blog: tigzy-RK
Operating System: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: Scan -- Date: 05/15/2012 03:03:03
¤¤¤ Bad processes: 0 ¤¤¤
¤¤¤ Registry Entries: 5 ¤¤¤
[RANDOMNAME] HKCU\[...]\RunOnce : FlashPlayerUpdate (C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p) -> FOUND
[RANDOMNAME] HKUS\S-1-5-21-974068335-3421125521-4278328022-500[...]\RunOnce : FlashPlayerUpdate (C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
¤¤¤ Particular Files / Folders: ¤¤¤
¤¤¤ Driver: [NOT LOADED] ¤¤¤
¤¤¤ Infection : ¤¤¤
¤¤¤ HOSTS File: ¤¤¤
¤¤¤ MBR Check: ¤¤¤
+++++ PhysicalDrive0: ST9250411AS +++++
--- User ---
[MBR] 252e903a992a4d34bb8bd0eec26f57c8
[bSP] 702b5313b1f8b0d9b4168e4be5f7209e : Lenovo tatooed MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1200 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2459648 | Size: 226773 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 466890752 | Size: 10500 Mo
User = LL1 ... OK!
User = LL2 ... OK!
Finished : << RKreport[1].txt >>
RKreport[1].txt
--------------------------------------------
RogueKiller V7.4.4 [05/08/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: RogueKiller - Geeks to Go Forums
Blog: tigzy-RK
Operating System: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: Remove -- Date: 05/15/2012 03:07:56
¤¤¤ Bad processes: 0 ¤¤¤
¤¤¤ Registry Entries: 4 ¤¤¤
[RANDOMNAME] HKCU\[...]\RunOnce : FlashPlayerUpdate (C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p) -> DELETED
[HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REPLACED (1)
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
¤¤¤ Particular Files / Folders: ¤¤¤
¤¤¤ Driver: [NOT LOADED] ¤¤¤
¤¤¤ Infection : ¤¤¤
¤¤¤ HOSTS File: ¤¤¤
¤¤¤ MBR Check: ¤¤¤
+++++ PhysicalDrive0: ST9250411AS +++++
--- User ---
[MBR] 252e903a992a4d34bb8bd0eec26f57c8
[bSP] 702b5313b1f8b0d9b4168e4be5f7209e : Lenovo tatooed MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1200 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2459648 | Size: 226773 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 466890752 | Size: 10500 Mo
User = LL1 ... OK!
User = LL2 ... OK!
Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt
-----------------------------------------
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Database version: v2012.05.14.07
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Administrator :: TT [administrator]
15/05/2012 03:16:06
mbam-log-2012-05-15 (03-16-06).txt
Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 880730
Time elapsed: 1 hour(s), 35 minute(s), 1 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
