Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Infection Smitfraud

Matia60

Par Matia60
dans Analyses et éradication malwares

 Partager

Messages recommandés

angelique Devil Member !

angelique

Posté(e)
Posté(e)

Tu reupload juste C:\upload_moi_NOM-R23KDENUGXQ.tar.gz

 

1/essaie ComboFix mais de cette maniere, assure toi qu'il soit bien sur ton bureau

 

menu demarrer---executer, copie\colle la ligne ci dessous et clic ok ou valide par "enter"

 

"%Userprofile%\Bureau\Combofix.exe" /KillAll

 

 

Tu peux toujours t'amuser en scannant ton pc avec antivir , ewido micro-scanner << http://downloads.ewido.net/ewido_micro.exe >> , avg antispyware << http://free.grisoft.com/filedir/inst/avgas...5.1.43-3339.exe >>

 

si c'est idem , tu formates ; securise ton pc,antivir << http://www.free-av.com/ >> installe le sp2 << http://www.microsoft.com/downloads/details...;displaylang=fr >>

Matia60 Member

Matia60

Posté(e)
  • Auteur
Posté(e)

Re,

 

Je suis toujourq bloqué avec ComboFix. j'ai tenté de l'éxécuter avec ta procédure mais cela n'a pas marché : il fait son point de restauration, puis la fenêtre reste vide (j'ai laissé 20 minutes et RIEN ne se passe) . J'ai fait également un scan avec ewido micro-scanner. Je ne sais pas quoi éliminer. Voici le rapport :

 

__________________________________________________

ewido anti-spyware online scanner

http://www.ewido.net

__________________________________________________

 

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\COM+.log:mdgfrp

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\COM+.log:nectjz

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\COM+.log:oldsxz

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\COM+.log:soaygo

Risk: High

 

Name: Downloader.Agent.bc

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\COM+.log:szgcd

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\COM+.log:upqcyu

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\comsetup.log:omiqpn

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\comsetup.log:poehnj

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\comsetup.log:rntkci

Risk: High

 

Name: Downloader.Agent.al

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\DtcInstall.log:kqtge

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\DtcInstall.log:qkasqa

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\DtcInstall.log:xsyfbg

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\DtcInstall.log:zzbclw

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\ocgen.log:sjmsfd

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\ocgen.log:wbwush

Risk: High

 

Name: Downloader.WinShow.ak

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\ocgen.log:xbcmvz

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\OEWABLog.txt:esczvo

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\OEWABLog.txt:rehxhn

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\OEWABLog.txt:uokyfe

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\OEWABLog.txt:yoxhec

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt:afuze

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt:cptctg

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt:eyypq

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt:lnisit

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.1:afuze

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.1:cptctg

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.1:eyypq

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.1:lnisit

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.2:afuze

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.2:cptctg

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.2:eyypq

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.2:lnisit

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.3:afuze

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.3:cptctg

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.3:eyypq

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.3:lnisit

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.4:afuze

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.4:cptctg

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.4:eyypq

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.4:lnisit

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.5:afuze

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.5:cptctg

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.5:eyypq

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.5:lnisit

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.6:afuze

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.6:cptctg

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.6:eyypq

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.6:lnisit

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.7:afuze

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.7:cptctg

Risk: High

 

Name: Downloader.Small.ajr

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.7:eyypq

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\SchedLgU.Txt.7:lnisit

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setupact.log:ccgvct

Risk: High

 

Name: Downloader.Agent.kd

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setupact.log:lgwrm

Risk: High

 

Name: Adware.SearchPage

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setupact.log:nvhodd

Risk: Medium

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setupact.log:wbsmvq

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setupact.log:yekpiq

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setupact.log:yuizdo

Risk: High

 

Name: Downloader.Agent.al

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setuperr.log:dblhja

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setuperr.log:diijhy

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setuperr.log:uvxzeh

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setuperr.log:yydvmj

Risk: High

 

Name: Downloader.Agent.al

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setuplog.txt:delwgl

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setuplog.txt:ocdrxb

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setuplog.txt:pagaux

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\setuplog.txt:vhllfg

Risk: High

 

Name: Downloader.Agent.al

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\svcpack.log:blwzyy

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\svcpack.log:ejtoyy

Risk: High

 

Name: Downloader.Agent.ap

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\svcpack.log:fgizt

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\svcpack.log:kxdyaf

Risk: High

 

Name: Downloader.Agent.bc

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\svcpack.log:pyiqi

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\svcpack.log:utlnma

Risk: High

 

Name: Downloader.Agent.bq

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\svcpack.log:yobsee

Risk: High

 

Name: Trojan.Agent.bi

Path: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\wmsetup.log:rjqvbc

Risk: High

 

Name: Trojan.Small

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP645\A0345972.exe

Risk: High

 

Name: Downloader.WinShow.az

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP646\A0351200.dll

Risk: High

 

Name: Trojan.Small

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP647\A0353308.exe

Risk: High

 

Name: Trojan.Small

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP648\A0357951.exe

Risk: High

 

Name: Downloader.WinShow.az

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP649\A0359313.dll

Risk: High

 

Name: Trojan.Small

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP650\A0364084.exe

Risk: High

 

Name: Backdoor.IRCBot.bc

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP650\A0370003.exe

Risk: High

 

Name: Trojan.VB.btz

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP650\A0370004.exe

Risk: High

 

Name: Backdoor.IRCBot.bc

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP650\A0371866.exe

Risk: High

 

Name: Trojan.VB.btz

Path: C:\System Volume Information\_restore{90760DB4-9C40-4122-9ED5-679FF4BACE7E}\RP650\A0372361.exe

Risk: High

angelique Devil Member !

angelique

Posté(e)
Posté(e)

ewido micro-scanner le revele que les vackup de spybot à supprimer , et point de restaurations infectés{activier\désactiver supprime les infections: http://service1.symantec.com/SUPPORT/INTER...020830101856924 }

 

mais dans ton cas , il est fortement recommander de formater.

 

Essaie ComboFix en mode sans echec:

 

•Redémarre en mode Sans Échec : au redémarrage, tapote immédiatement la touche F8 ; tu verras un écran avec choix de démarrages apparaître. Utilisant les flèches du clavier, choisis "Mode Sans Échec" et valide avec "Entrée". Choisis ton compte usuel, et non Administrateur.

 

•Télécharge combofix.exe (par sUBs) et sauvegarde le sur ton bureau.

 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

 

* Double-clique combofix.exe afin de l'exécuter et suis les instructions.

* Lorsque l'analyse sera complétée, un rapport apparaîtra que tu me posteras.

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...