Piègé par Spyware Quake, Help

udolfo · le 23 août 2006

Yo Regis,

un fichier de 2,5 Ko nommé "services.dll"

A+

regis56 · le 23 août 2006

Bonsoir udolfo !

Bien alors tu peut supprimer tout le dossier !

=> Si tun 'y arrive pas fais le en mode sans échec si tu as des problèmes dis le moi je te donnerai une procédure pour le faire.

Ensuite refais un scan Panda STP en ayant pris le soin de désactiver avast avant

sinon va ici si tu n'aime pas Panda

http://www.kaspersky.com/virusscanner

tuto d'aide ici

http://www.malekal.com/scan_Av_en_ligne.html

udolfo · le 24 août 2006

Bonjour,

voici le dernier log de Panda :

Incident Status Location

Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\uuoh3u97.default\cookies.txt[fe.lea.lycos.fr/]

Spyware:Cookie/DomainSponsor Not disinfected C:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\uuoh3u97.default\cookies.txt[landing.domainsponsor.com/]

Spyware:Cookie/3 Not disinfected C:\Documents and Settings\François\Cookies\françois@3[2].txt

Spyware:Cookie/64.62.232 Not disinfected C:\Documents and Settings\François\Cookies\françois@64.62.232[5].txt

Spyware:Cookie/888 Not disinfected C:\Documents and Settings\François\Cookies\françois@888[1].txt

Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\François\Cookies\françois@ad.sensismediasmart.com[2].txt

Spyware:Cookie/Gorillanation Not disinfected C:\Documents and Settings\François\Cookies\françois@ads.gorillanation[1].txt

Spyware:Cookie/adultfriendfinder Not disinfected C:\Documents and Settings\François\Cookies\françois@adultfriendfinder[2].txt

Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\François\Cookies\françois@atwola[1].txt

Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\François\Cookies\françois@azjmp[2].txt

Spyware:Cookie/Bns1 Not disinfected C:\Documents and Settings\François\Cookies\françois@bns1[2].txt

Spyware:Cookie/Barelylegal Not disinfected C:\Documents and Settings\François\Cookies\françois@c.fsx[1].txt

Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\François\Cookies\françois@c3.gostats[2].txt

Spyware:Cookie/Ccbill Not disinfected C:\Documents and Settings\François\Cookies\françois@ccbill[2].txt

Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\François\Cookies\françois@cdfreaks[2].txt

Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\François\Cookies\françois@club.cdfreaks[1].txt

Spyware:Cookie/Sexsuche Not disinfected C:\Documents and Settings\François\Cookies\françois@counter.sexsuche[2].txt

Spyware:Cookie/Kazaa Networks Not disinfected C:\Documents and Settings\François\Cookies\françois@desktop.kazaa[2].txt

Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\François\Cookies\françois@fe.lea.lycos[1].txt

Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\François\Cookies\françois@fe.lea.lycos[2].txt

Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\François\Cookies\françois@fe.lea.lycos[4].txt

Spyware:Cookie/Go Not disinfected C:\Documents and Settings\François\Cookies\françois@go[1].txt

Spyware:Cookie/Kount Not disinfected C:\Documents and Settings\François\Cookies\françois@kount[1].txt

Spyware:Cookie/Rightmedia Not disinfected C:\Documents and Settings\François\Cookies\françois@rightmedia[2].txt

Spyware:Cookie/Tucows Not disinfected C:\Documents and Settings\François\Cookies\françois@tucows[1].txt

Spyware:Cookie/WebPower Not disinfected C:\Documents and Settings\François\Cookies\françois@webpower[2].txt

Spyware:Cookie/ademails Not disinfected C:\Documents and Settings\François\Cookies\françois@www.ademails[2].txt

Spyware:Cookie/Advnt Not disinfected C:\Documents and Settings\François\Cookies\françois@www.advnt01[1].txt

Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\François\Cookies\françois@xiti[1].txt

Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\François\Cookies\françois@xiti[3].txt

Spyware:Cookie/Xiti Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.xiti.com/]

Spyware:Cookie/Tradedoubler Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.tradedoubler.com/]

Spyware:Cookie/Bluestreak Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.bluestreak.com/]

Spyware:Cookie/Mediaplex Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.mediaplex.com/]

Spyware:Cookie/Falkag Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.as-eu.falkag.net/]

Spyware:Cookie/MetriWeb Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.metriweb.be/]

Spyware:Cookie/Comclick Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[fl01.ct2.comclick.com/]

Spyware:Cookie/Statcounter Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.statcounter.com/]

Spyware:Cookie/Doubleclick Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.doubleclick.net/]

Spyware:Cookie/Weborama Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.weborama.fr/]

Spyware:Cookie/Apmebf Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.apmebf.com/]

Spyware:Cookie/Toplist Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.toplist.cz/]

Spyware:Cookie/RealMedia Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.247realmedia.com/]

Spyware:Cookie/Adtech Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.adtech.de/]

Spyware:Cookie/Atlas DMT Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[.atdmt.com/]

Spyware:Cookie/WebtrendsLive Not disinfected E:\Documents and Settings\François\Application Data\Mozilla\Firefox\Profiles\i9hnghrv.default\cookies.txt[statse.webtrendslive.com/]

Potentially unwanted tool:Application/Processor Not disinfected E:\Documents and Settings\François\Bureau\Rep infection\SmitfraudFix\SmitfraudFix\Process.exe

Potentially unwanted tool:Application/Processor Not disinfected E:\Documents and Settings\François\Bureau\Rep infection\SmitfraudFix.zip[smitfraudFix/Process.exe]

Spyware:Cookie/Atlas DMT Not disinfected E:\Documents and Settings\François\Cookies\françois@atdmt[1].txt

Spyware:Cookie/Doubleclick Not disinfected E:\Documents and Settings\François\Cookies\françois@doubleclick[1].txt

Spyware:Cookie/MetriWeb Not disinfected E:\Documents and Settings\François\Cookies\françois@metriweb[1].txt

Spyware:Cookie/Reliablestats Not disinfected E:\Documents and Settings\François\Cookies\françois@stats1.reliablestats[2].txt

A+

regis56 · le 24 août 2006

Bonsoir udolfo !

Voici ce que tu vas faire maintenant STP

Télécharge ATF Cleaner par Atribune.

Double-clique ATF-Cleaner.exe afin de lancer le programme.

Sous l'onglet Main, choisis : Select All

Clique sur le bouton Empty Selected

Si tu utilises le navigateur Firefox :

Clique Firefox au haut et choisis : Select All
Clique le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Si tu utilises le navigateur Opera :

Clique Opera au haut et choisis : Select All
Clique le bouton Empty Selected
NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Clique Exit, du menu prinicipal, afin de fermer le programme.

Pour obtenir du Support technique, double-clique l'adresse électronique située au bas de chacun des menus.

Ensuite fais un scan ici

http://www.kaspersky.com/virusscanner

tuto d'aide ici

http://www.malekal.com/scan_Av_en_ligne.html

A plus.

udolfo · le 26 août 2006

Bonjour Regis,

Voici le rapport de Kaspersky

-------------------------------------------------------------------------------

KASPERSKY ONLINE SCANNER REPORT

Saturday, August 26, 2006 3:27:32 PM

Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky Online Scanner version: 5.0.83.0

Kaspersky Anti-Virus database last update: 26/08/2006

Kaspersky Anti-Virus database records: 205623

-------------------------------------------------------------------------------

Scan Settings:

Scan using the following antivirus database: standard

Scan Archives: true

Scan Mail Bases: true

Scan Target - My Computer:

A:\

C:\

D:\

E:\

F:\

G:\

H:\

I:\

J:\

K:\

L:\

Scan Statistics:

Total number of scanned objects: 140365

Number of viruses found: 15

Number of infected objects: 105 / 0

Number of suspicious objects: 0

Duration of the scan process: 01:15:20

Infected Object Name / Virus Name / Last Action

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3fd20a676afddc079bee95e6afcc5e9f_9a40dc41-ada2-45f9-9f83-48bf24e6c450 Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7cffe90875432d6d1e274c1c6bc09865_9a40dc41-ada2-45f9-9f83-48bf24e6c450 Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\88ce334c3cc67ce99df2b089e83f3259_9a40dc41-ada2-45f9-9f83-48bf24e6c450 Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a0baf4d2dde0c64df199794230129e1c_9a40dc41-ada2-45f9-9f83-48bf24e6c450 Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bef6ec93e2a98f3b5cb3b0e4b9ca73fd_9a40dc41-ada2-45f9-9f83-48bf24e6c450 Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bf9a7481e236a90bca2d9d464552518b_9a40dc41-ada2-45f9-9f83-48bf24e6c450 Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped

C:\Program Files\Norton AntiVirus\Quarantine\06B70996.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\06B70996.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\06B70996.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\06B70996.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\06B70996.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\06B70996.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\33C61779.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\33C61779.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\33C61779.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\33C61779.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\33C61779.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\33C61779.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\44205BD3.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\44205BD3.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\44205BD3.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\44205BD3.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\44205BD3.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\44205BD3.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\481D781E.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\481D781E.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\481D781E.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\481D781E.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\481D781E.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\481D781E.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\633A698B.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\633A698B.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\633A698B.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\633A698B.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\633A698B.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\633A698B.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\76D80F46.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\76D80F46.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\76D80F46.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\76D80F46.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\76D80F46.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\76D80F46.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\783F19BB.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\783F19BB.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\783F19BB.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\783F19BB.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\783F19BB.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\783F19BB.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\79303CB1.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\79303CB1.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\79303CB1.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\79303CB1.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\79303CB1.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\79303CB1.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\793466AE.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\793466AE.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\793466AE.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\793466AE.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\793466AE.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\793466AE.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\7961327B.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\7961327B.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\7961327B.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\7961327B.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\7961327B.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\7961327B.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\79965242.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\79965242.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\79965242.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\79965242.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\79965242.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\79965242.zip CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\79E76BE8.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped

C:\Program Files\Norton AntiVirus\Quarantine\79E76BE8.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped

C:\Program Files\Norton AntiVirus\Quarantine\79E76BE8.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped

C:\Program Files\Norton AntiVirus\Quarantine\79E76BE8.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped

C:\Program Files\Norton AntiVirus\Quarantine\79E76BE8.zip ZIP: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\79E76BE8.zip CryptFF: infected - 4 skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

E:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

E:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

E:\Documents and Settings\François\Cookies\index.dat Object is locked skipped

E:\Documents and Settings\François\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

E:\Documents and Settings\François\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

E:\Documents and Settings\François\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

E:\Documents and Settings\François\Local Settings\Historique\History.IE5\MSHist012006082620060827\index.dat Object is locked skipped

E:\Documents and Settings\François\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

E:\Documents and Settings\François\NTUSER.DAT Object is locked skipped

E:\Documents and Settings\François\ntuser.dat.LOG Object is locked skipped

E:\Documents and Settings\François\UserData\index.dat Object is locked skipped

E:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

E:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

E:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

E:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

E:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

E:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

E:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

E:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped

E:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

E:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

E:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

E:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

E:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

E:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

E:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped

E:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped

E:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped

E:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped

E:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped

E:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\BWDocMap.pht Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\BWInfopakMap.pht Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\chandir.dat Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\chandir.idx Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\chn.dat Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\chn.idx Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\D0000000.FCS Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\inuse.txt Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\L0000008.FCS Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\main.log Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs.dat Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs.idx Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs_die.dat Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs_die.idx Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs_dnd.dat Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs_dnd.idx Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs_ext.dat Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs_ext.idx Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs_rcv.dat Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\prs_rcv.idx Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\storydb.dat Object is locked skipped

E:\Program Files\Logitech\Desktop Messenger\8876480\Users\François\Data\storydb.idx Object is locked skipped

E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

E:\System Volume Information\_restore{1F2D333E-EF67-4F44-814E-E46489AF0BDC}\RP93\A0016671.exe Infected: Trojan-Downloader.Win32.Small.bwy skipped

E:\System Volume Information\_restore{1F2D333E-EF67-4F44-814E-E46489AF0BDC}\RP97\change.log Object is locked skipped

E:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

E:\WINDOWS\SchedLgU.Txt Object is locked skipped

E:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

E:\WINDOWS\Sti_Trace.log Object is locked skipped

E:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

E:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

E:\WINDOWS\system32\cfwblurd.exe Infected: Trojan.Win32.Small.ju skipped

E:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped

E:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

E:\WINDOWS\system32\config\default Object is locked skipped

E:\WINDOWS\system32\config\default.LOG Object is locked skipped

E:\WINDOWS\system32\config\SAM Object is locked skipped

E:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

E:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

E:\WINDOWS\system32\config\SECURITY Object is locked skipped

E:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

E:\WINDOWS\system32\config\software Object is locked skipped

E:\WINDOWS\system32\config\software.LOG Object is locked skipped

E:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

E:\WINDOWS\system32\config\system Object is locked skipped

E:\WINDOWS\system32\config\system.LOG Object is locked skipped

E:\WINDOWS\system32\config\systemprofile\Cookies\index.dat Object is locked skipped

E:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

E:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

E:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped

E:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped

E:\WINDOWS\system32\drivers\sptd8141.sys Object is locked skipped

E:\WINDOWS\system32\h323log.txt Object is locked skipped

E:\WINDOWS\system32\iycjrobv.exe Infected: Trojan.Win32.Small.ju skipped

E:\WINDOWS\system32\ntuhmdpc.exe Infected: Trojan.Win32.Small.ju skipped

E:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

E:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

E:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

E:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

E:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

E:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

E:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

E:\WINDOWS\Temp\Perflib_Perfdata_1d8.dat Object is locked skipped

E:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped

E:\WINDOWS\wiadebug.log Object is locked skipped

E:\WINDOWS\wiaservc.log Object is locked skipped

E:\WINDOWS\WindowsUpdate.log Object is locked skipped

F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

F:\System Volume Information\_restore{AB4E6112-4A8C-4DE1-9F3C-BA8A15188F42}\RP338\A0070105.exe/stream/data0006 Infected: Trojan.Win32.Krepper.ag skipped

F:\System Volume Information\_restore{AB4E6112-4A8C-4DE1-9F3C-BA8A15188F42}\RP338\A0070105.exe/stream/data0007/data0002 Infected: Trojan-Downloader.Win32.IstBar.er skipped

F:\System Volume Information\_restore{AB4E6112-4A8C-4DE1-9F3C-BA8A15188F42}\RP338\A0070105.exe/stream/data0007 Infected: Trojan-Downloader.Win32.IstBar.er skipped

F:\System Volume Information\_restore{AB4E6112-4A8C-4DE1-9F3C-BA8A15188F42}\RP338\A0070105.exe/stream Infected: Trojan-Downloader.Win32.IstBar.er skipped

F:\System Volume Information\_restore{AB4E6112-4A8C-4DE1-9F3C-BA8A15188F42}\RP338\A0070105.exe NSIS: infected - 4 skipped

G:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

K:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

L:\disque c\Application Data\Microsoft\Outlook\outlook.pst/Dossiers personnels/Éléments supprimés/16 Oct 2001 18:10:is licensed, not sold..eml/UNINSTAL.EXE Infected: Email-Worm.Win32.Magistr.a skipped

L:\disque c\Application Data\Microsoft\Outlook\outlook.pst/Dossiers personnels/Éléments supprimés/16 Oct 2001 18:10:is licensed, not sold..eml Infected: Email-Worm.Win32.Magistr.a skipped

L:\disque c\Application Data\Microsoft\Outlook\outlook.pst/Dossiers personnels/Éléments supprimés/14 Nov 2001 08:05 from planet:Build by Build Details SM56/Cleaned.bat Infected: Email-Worm.Win32.Magistr.b skipped

L:\disque c\Application Data\Microsoft\Outlook\outlook.pst/Dossiers personnels/Éléments envoyés/12 Mar 2001 19:00 to philippe Vervaet; v.orban@alternet.be; th.d/Prdelky.exe Infected: not-virus:BadJoke.Win32.Pedelky skipped

L:\disque c\Application Data\Microsoft\Outlook\outlook.pst/Dossiers personnels/Éléments envoyés/08 Aug 2001 16:00 to maurice@renson.be:Fw: Doc1/ATT00073.dat Infected: Email-Worm.Win32.Sircam.c skipped

L:\disque c\Application Data\Microsoft\Outlook\outlook.pst/Dossiers personnels/Archives/gene/01 Jun 2001 15:18 from Megadif:GregorioFautrigolerRue Vital Fran/unregmp2.exe Infected: Email-Worm.Win32.Magistr.a skipped

L:\disque c\Application Data\Microsoft\Outlook\outlook.pst Mail MS Mail: infected - 6 skipped

L:\disque c\Mes documents\ÉLÉMEN~1.DBX/[From =?iso-8859-1?Q?Fran=E7ois_Semet?= <fr.semet@infonie.be>][Date Wed, 23 Jun 1999 20:28:34 +0200]/UNNAMED/Att1.exe Infected: not-virus:BadJoke.Win32.Boredom skipped

L:\disque c\Mes documents\ÉLÉMEN~1.DBX/[From =?iso-8859-1?Q?Fran=E7ois_Semet?= <fr.semet@infonie.be>][Date Wed, 23 Jun 1999 20:28:34 +0200]/UNNAMED Infected: not-virus:BadJoke.Win32.Boredom skipped

L:\disque c\Mes documents\ÉLÉMEN~1.DBX/[From =?iso-8859-1?Q?Fran=E7ois_Semet?= <fr.semet@infonie.be>][Date Sun, 27 Jun 1999 22:36:31 +0200]/UNNAMED/Att1.exe Infected: not-virus:BadJoke.Win32.Boredom skipped

L:\disque c\Mes documents\ÉLÉMEN~1.DBX/[From =?iso-8859-1?Q?Fran=E7ois_Semet?= <fr.semet@infonie.be>][Date Sun, 27 Jun 1999 22:36:31 +0200]/UNNAMED Infected: not-virus:BadJoke.Win32.Boredom skipped

L:\disque c\Mes documents\ÉLÉMEN~1.DBX/[From =?iso-8859-1?Q?Fran=E7ois_Semet?= <fr.semet@infonie.be>][Date Sun, 27 Jun 1999 22:38:31 +0200]/UNNAMED/Att1.exe Infected: not-virus:BadJoke.Win32.Boredom skipped

L:\disque c\Mes documents\ÉLÉMEN~1.DBX/[From =?iso-8859-1?Q?Fran=E7ois_Semet?= <fr.semet@infonie.be>][Date Sun, 27 Jun 1999 22:38:31 +0200]/UNNAMED Infected: not-virus:BadJoke.Win32.Boredom skipped

L:\disque c\Mes documents\ÉLÉMEN~1.DBX Mail MS Outlook 5: infected - 6 skipped

L:\disque c\Mes documents\Éléments supprimés.dbx/[From "Alain Hecq" <alain.hecq@publione.com>][Date Mon, 4 Oct 1999 05:19:07 +0200]/UNNAMED/[From "Marguerite Brachmanska (EBR)"][Date Thu, 30 Sep 1999 11:30:58 +0200]/TURKIJE.EXE Infected: not-virus:BadJoke.Win16.Aloap skipped

L:\disque c\Mes documents\Éléments supprimés.dbx/[From "Alain Hecq" <alain.hecq@publione.com>][Date Mon, 4 Oct 1999 05:19:07 +0200]/UNNAMED Infected: not-virus:BadJoke.Win16.Aloap skipped

L:\disque c\Mes documents\Éléments supprimés.dbx/[From "Thierry Dekens" <thierry.dekens@creativeweb.be>][Date Mon, 25 Oct 1999 12:04:16 +0200]/Hello(1).exe Infected: not-virus:BadJoke.Win32.Baton.a skipped

L:\disque c\Mes documents\Éléments supprimés.dbx/[From "Alain Hecq" <alain.hecq@publione.com>][Date Mon, 25 Oct 1999 19:45:34 +0200]/Hello(1).exe Infected: not-virus:BadJoke.Win32.Baton.a skipped

L:\disque c\Mes documents\Éléments supprimés.dbx Mail MS Outlook 5: infected - 4 skipped

L:\disque c\Mes documents\Éléments envoyés.dbx/[From =?iso-8859-1?B?RnJhbudvaXM=?= <francois.semet@pandora.be>][Date Sun, 24 Oct 1999 19:56:08 +0200]/UNNAMED/Hello(1).exe Infected: not-virus:BadJoke.Win32.Baton.a skipped

L:\disque c\Mes documents\Éléments envoyés.dbx/[From =?iso-8859-1?B?RnJhbudvaXM=?= <francois.semet@pandora.be>][Date Sun, 24 Oct 1999 19:56:08 +0200]/UNNAMED Infected: not-virus:BadJoke.Win32.Baton.a skipped

L:\disque c\Mes documents\Éléments envoyés.dbx/[From =?iso-8859-1?B?RnJhbudvaXM=?= <francois.semet@pandora.be>][Date Sun, 24 Oct 1999 19:57:54 +0200]/UNNAMED/Hello(1).exe Infected: not-virus:BadJoke.Win32.Baton.a skipped

L:\disque c\Mes documents\Éléments envoyés.dbx/[From =?iso-8859-1?B?RnJhbudvaXM=?= <francois.semet@pandora.be>][Date Sun, 24 Oct 1999 19:57:54 +0200]/UNNAMED Infected: not-virus:BadJoke.Win32.Baton.a skipped

L:\disque c\Mes documents\Éléments envoyés.dbx Mail MS Outlook 5: infected - 4 skipped

Scan process completed.

erci

A+

regis56 · le 26 août 2006

Bonjour udolfo !

Voici ce que tu vas faire !

Vide la quarantaine de Norton antivirus.

Ensuite

-Créer un point de restauration et supprimer les anciens !: (aide visuelle http://assiste.free.fr/p/comment/activer_d...estauration.php )

Cliquer avec le bouton droit sur l'icône Poste de travail, puis cliquer sur Propriétés.

Cliquer sur l'onglet «Restauration du système».

Sélectionner «Désactiver la Restauration du système» ou «Désactiver la Restauration du système sur tous les lecteurs»

Cliquer sur Appliquer.

Comme le dit le message, ceci supprimera tous les points de restauration existants. Pour faire cela, cliquer sur Oui.

Cliquer sur OK, redémarrer le PC. Faire l'opération inverse, et réactiver la restauration:un nouveau point sera automatiquement créé.

Et refait le scan en ligne STP

A plus.

udolfo · le 7 septembre 2006

Salut Regis,

voici le dernier Scan... pas l'air terrible

-------------------------------------------------------------------------------

KASPERSKY ONLINE SCANNER REPORT

Thursday, September 07, 2006 7:31:41 PM

Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky Online Scanner version: 5.0.83.0

Kaspersky Anti-Virus database last update: 7/09/2006

Kaspersky Anti-Virus database records: 208651

-------------------------------------------------------------------------------

Scan Settings:

Scan using the following antivirus database: standard

Scan Archives: true

Scan Mail Bases: true

Scan Target - My Computer:

A:\

C:\

D:\

E:\

F:\

G:\

H:\

I:\

K:\

L:\

Scan Statistics:

Total number of scanned objects: 141524

Number of viruses found: 10

Number of infected objects: 32 / 0

Number of suspicious objects: 0

Duration of the scan process: 01:26:27