Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

virus VIRTUMONDE et PRIVACYREMOVER

ltdpt

Par ltdpt
dans Analyses et éradication malwares

 Partager

Messages recommandés

Falkra Devil Member !

Falkra

Posté(e)
Posté(e)

Memtest tourne en boucle et ne dit pas que c'est fini, chaque passe terminée en démarre une autre.

Une passe dure environ 20-30 minutes, si ça a tourné une heure ou deux, ça va.

ltdpt Junior Member

ltdpt

Posté(e)
  • Auteur
Posté(e)

Il a tourné 1h15-1h20. Mais il m'a bien dit que l'analyse était terminée. No errors detected. Press ESC to finish ou un truc dans ce genre.

 

Je n'ai pas vu ce qui se passait, je l'ai laissé tourner pendant que j'allais faire des courses. En tout cas, aucun problème de trouvé.

 

 

Et maintenant, qu'est ce qu'il faut que je fasse ? (je ne pourrai m'en occuper que jeudi maintenant).

 

Merci de ton aide !

ltdpt Junior Member

ltdpt

Posté(e)
  • Auteur
Posté(e) (modifié)
Rien ne démarre ? Si tu as ton cd d'installation, essaie une réinstallation sans pertes, ça permet de ne pas formater, et retrouver ses programmes et fichiers personnels.

 

Gaffe à la manip, on ne reformate pas hein :

http://www.micro-astuce.com/depannage/reparation-windows-XP

 

Je récapitule:

 

- en mode normal: j'arrive sur le bureau, antivir démarre (la petite fenêtre qui indique qu'il est présent), puis spyhunter aussi, et là l'ordi plante)

- en mode sans échec: tiret blanc clignotant sur fond noir, et rien d'autre.

- en mode sans échec avec prise en charge réseau: écran bleu avec "échec d'initialisation du pilote vidéo"

 

 

Je ne rentre chez moi que demain, alors j'ai une petite question avant de commencer: il s'agit des cd que j'ai eu à graver juste après avoir acheté mon PC, ou c'est autre chose (et dans ce cas-là je le trouve où cet autre cd, parce que je ne l'ai jamais eu - merci Acer de fournir Windows directement installé...)?

 

Est ce que ça va me supprimer les 2 virus, ou ça va juste permettre à mon ordi de redevenir docile ??

 

Bonne journée.

Modifié par ltdpt
Falkra Devil Member !

Falkra

Posté(e)
Posté(e)

Les cd de constructeur comme ceux que tu mentionnes restaurent la configuration d'usine (c'est à dire comme quand tu l'as acheté), ça fait perdre les données personnelles, donc il vaut mieux éviter.

 

Est-ce que tu peux faire 2-3 trucs en mode normal ou ça plante tout de suite ?

Spyhunter est un logiciel à virer :

http://assiste.com.free.fr/p/craptheque/spyhunter.html

ltdpt Junior Member

ltdpt

Posté(e)
  • Auteur
Posté(e)
Les cd de constructeur comme ceux que tu mentionnes restaurent la configuration d'usine (c'est à dire comme quand tu l'as acheté), ça fait perdre les données personnelles, donc il vaut mieux éviter.

 

Est-ce que tu peux faire 2-3 trucs en mode normal ou ça plante tout de suite ?

Spyhunter est un logiciel à virer :

http://assiste.com.free.fr/p/craptheque/spyhunter.html

 

Mon problème est que, à part les cd recovery que j'ai gravés quand j'ai eu l'ordi, je n'ai rien d'autre, et impossible de remettre la main sur la notice de l'ordi (elle est à mon avis partie à la poubelle lors de mon déménagement). Bref, comment faire pour tenter une réinstallation sans pertes si je n'ai pas le cd d'origine ?

 

Je peux faire qq trucs, mais dès que Spyhunter se met en route, ça plante. Quand je dis "faire quelques trucs", généralement, j'essaie de désinstaller Spyhunter dès le démarrage: l'ordi me demande si je ne veux jeter que le raccourci à la corbeille, je réponds non, j'arrive sur Ajout/Suppression de programmes et là spyhunter se met en route (il semble programmé pour se mettre en route au démarrage de l'ordi) et ça plante.

 

J'ai donc l'impression (peut être fausse) que c'est Spyhunter qui fait planter mon PC. En effet, avant que je ne le télécharge, l'ordi ne plantait pas. Il était lent, mais il ne plantait pas.

Falkra Devil Member !

Falkra

Posté(e)
Posté(e)

Spyhunter est un faux programme, il faut le virer.

Si le mode sans échec passait, ça serait nickel.

 

Au menu du démarrage (quand on choisit mode sans échec ou autre) tu peux restaurer le système à une date antérieure ?

ltdpt Junior Member

ltdpt

Posté(e)
  • Auteur
Posté(e) (modifié)

J'ai réussi à virer Spyhunter (au démarrage, je me suis dépêché de cliquer sur Démarrer, dans la liste des programmes j'ai cherché Spyhunter, et j'ai fait Désinstaller => résultat l'ordi ne bugge plus au déparrage !!!!! Yeeeeeeeeeeeha !)

 

J'ai donc téléchargé MBAM, et voici le rapport d'analyse:

 

 

Malwarebytes' Anti-Malware 1.28

Version de la base de données: 1266

Windows 5.1.2600 Service Pack 2

 

13/10/2008 18:29:49

mbam-log-2008-10-13 (18-29-49).txt

 

Type de recherche: Examen rapide

Eléments examinés: 58974

Temps écoulé: 19 minute(s), 5 second(s)

 

Processus mémoire infecté(s): 2

Module(s) mémoire infecté(s): 5

Clé(s) du Registre infectée(s): 34

Valeur(s) du Registre infectée(s): 12

Elément(s) de données du Registre infecté(s): 20

Dossier(s) infecté(s): 6

Fichier(s) infecté(s): 84

 

Processus mémoire infecté(s):

C:\WINDOWS\system32\lphc7g0j0enhm.exe (Trojan.FakeAlert) -> Unloaded process successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\_A00F5EBBF.exe (Trojan.FakeAlert) -> Unloaded process successfully.

 

Module(s) mémoire infecté(s):

C:\WINDOWS\system32\efcYRlKD.dll (Trojan.Vundo) -> Delete on reboot.

C:\WINDOWS\rwlfsdmk.dll (Trojan.Zlob) -> Delete on reboot.

C:\WINDOWS\system32\__c00CD100.dat (Trojan.Agent) -> Delete on reboot.

C:\WINDOWS\onfwbsak.dll (Trojan.FakeAlert) -> Delete on reboot.

C:\WINDOWS\system32\blphc7g0j0enhm.scr (Trojan.FakeAlert) -> Delete on reboot.

 

Clé(s) du Registre infectée(s):

HKEY_CLASSES_ROOT\CLSID\{36dc214c-02c4-4341-8a84-997f4772e1e5} (Trojan.Vundo) -> Delete on reboot.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\efcyrlkd (Trojan.Vundo) -> Delete on reboot.

HKEY_CLASSES_ROOT\CLSID\{87091271-33ea-4b86-98a1-237d055c104e} (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\istx.installer.2 (Adware.ISTBar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\qaccess.tchongabho (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{a34fa88d-8437-4634-8a60-e913011ef2e5} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a34fa88d-8437-4634-8a60-e913011ef2e5} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2abe804b-4d3a-41bf-a172-304627874b45} (Adware.EGDAccess) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\__c00cd100 (Trojan.Vundo) -> Delete on reboot.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{9c49f28f-9285-4659-9eb9-cee15da85009} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{a87f2637-2d4b-46dc-8948-82a4451efd70} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{0fa15166-39da-4dab-9b1a-0dddbaca8bd5} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{b917d91c-2b99-4ff8-acc2-f7972b7fdd16} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webvideo (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{d25118fc-cf56-4ed5-a669-a2e91ef1add9} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{95de3a2c-df48-4cdf-9bc8-36baee2288e2} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{aacce1f1-f0ad-429f-83d9-941bcfea335f} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{11dfb01a-0852-4955-9747-c59e21dbbda5} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11dfb01a-0852-4955-9747-c59e21dbbda5} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\peltodgx.batg (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\peltodgx.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\AMeOpt (Adware.NetOptimizer) -> Quarantined and deleted successfully.

 

Valeur(s) du Registre infectée(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{36dc214c-02c4-4341-8a84-997f4772e1e5} (Trojan.Vundo) -> Delete on reboot.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\rwlfsdmk (Trojan.Zlob) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphc7g0j0enhm (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\a00f5ebbf.exe (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{0fa15166-39da-4dab-9b1a-0dddbaca8bd5} (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\onfwbsak (Trojan.FakeAlert) -> Delete on reboot.

HKEY_CURRENT_USER\Control Panel\Desktop\wallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Control Panel\Desktop\originalwallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Control Panel\Desktop\convertedwallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe (Hijack.Wallpaper) -> Quarantined and deleted successfully.

 

Elément(s) de données du Registre infecté(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\ -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\ -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.Homepage) -> Bad: (http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2) Good: (http://www.google.com/) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId (Trojan.FakeAlert) -> Bad: (VIRUS ALERT!) Good: (55639-OEM-0011903-00100) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Control Panel\International\sTimeFormat (Trojan.FakeAlert) -> Bad: (HH:mm: VIRUS ALERT!) Good: (HH:mm:ss) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowControlPanel (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowRun (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyDocs (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuMorePrograms (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives (Hijack.Drives) -> Bad: (12) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoToolbarCustomize (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCPL (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

 

Dossier(s) infecté(s):

C:\Program Files\MyWay (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\History (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\Settings (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\2.bin (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\Cache (Adware.MyWay) -> Quarantined and deleted successfully.

 

Fichier(s) infecté(s):

C:\WINDOWS\system32\efcYRlKD.dll (Trojan.Vundo) -> Delete on reboot.

C:\WINDOWS\rwlfsdmk.dll (Trojan.Zlob) -> Delete on reboot.

C:\WINDOWS\system32\lphc7g0j0enhm.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\_A00F5EBBF.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Application Data\sp2\qaccess.dll (Trojan.BHO) -> Quarantined and deleted successfully.

C:\WINDOWS\evqb.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\igiyvaey.dll (Trojan.Vundo) -> Delete on reboot.

C:\WINDOWS\system32\dmbddv.dll (Trojan.Vundo) -> Delete on reboot.

C:\WINDOWS\system32\nuidpjok.dll (Trojan.Vundo) -> Delete on reboot.

C:\WINDOWS\system32\jkkHAqOh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\tuvVooop.dll (Trojan.Vundo) -> Delete on reboot.

C:\Documents and Settings\Alexandre\Local Settings\Temporary Internet Files\Content.IE5\TL2Q8UXO\upd105320[1] (Trojan.Vundo) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temporary Internet Files\Content.IE5\5817H5C0\ihwd[1].exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temporary Internet Files\Content.IE5\5817H5C0\cntr[1] (Trojan.Vundo) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temporary Internet Files\Content.IE5\66GNNUZS\file[1].exe (Trojan.Vundo) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temporary Internet Files\Content.IE5\3WBQJN68\scan[1].exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temporary Internet Files\Content.IE5\3WBQJN68\nd82m0[1] (Trojan.Vundo) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\History\search (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\Settings\prevcfg.htm (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\2.bin\MYWAYPLUGINPROXY.CLASS (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\2.bin\PARTNER.BMP (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\2.bin\PARTNER.DAT (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\2.bin\PARTNER2.DAT (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\2.bin\PARTNER3.DAT (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\2.bin\PARTNER4.DAT (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\2.bin\PARTNER5.DAT (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\2.bin\PARTNER6.DAT (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\Cache\files.ini (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\Cache\01E94F6D.bin (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\Cache\01E952A9.bin (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\Cache\01E95539.bin (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Program Files\MyWay\myBar\Cache\01E96A0A (Adware.MyWay) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Application Data\Adobe\Player.exe (Trojan.Agent) -> Delete on reboot.

C:\WINDOWS\Downloaded Program Files\uninst.bat (Trojan.Agent) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\ (Trojan.Agent) -> Delete on reboot.

C:\WINDOWS\system32\drivers\ (Trojan.Agent) -> Delete on reboot.

C:\WINDOWS\system32\__c00CD100.dat (Trojan.Vundo) -> Delete on reboot.

C:\WINDOWS\peltodgx.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\WINDOWS\onfwbsak.dll (Trojan.FakeAlert) -> Delete on reboot.

C:\WINDOWS\fbxrqtwn.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\WINDOWS\dfmlxbpkvlo.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\blphc7g0j0enhm.scr (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\WINDOWS\system32\phc7g0j0enhm.bmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Program Files\setup.exe (Rogue.Installer) -> Quarantined and deleted successfully.

C:\WINDOWS\tmlpcert2005 (Adware.EGDAccess) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Bureau\Protect Your Privacy.url (Rogue.Link) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Bureau\Malware Defender.url (Rogue.Link) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Bureau\System Error Fixer.url (Rogue.Link) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt15.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.ttF.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt4.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt1.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt9.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt2.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.ttA.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt3.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.ttE.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt5.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt6.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt7.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt8.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.ttC.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.ttB.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.ttD.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt10.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt14.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt15.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt17.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt18.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt19.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt1C.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt4.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt1.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt2.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt3.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt5.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt6.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.tt7.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.ttB.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\.ttC.tmp.vbs (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\pwrmgr.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\Alexandre\Local Settings\Temp\sft_ver1.1454.4.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\WINDOWS\smdat32m.sys (Rootkit.Agent) -> Quarantined and deleted successfully.

C:\WINDOWS\smdat32a.sys (Rootkit.Agent) -> Quarantined and deleted successfully.

 

 

 

 

 

----------------------------------------------------------------------------------------------------------------

J'ai également un problème de redirection sous Google et Yahoo! Les pages de résultats s'affichent correctement, mais les liens me redirigent vers des adresses qui ne m'intéressent pas du tout. C'est d'ailleurs de cette manière que j'avais été redirigé vers une page où on me conseillait de télécharger Spyhunter. Que dois-je faire maintenant ? (la navigation présente de plus toujours des problèmes de lenteurs)

 

Merci de ton aide !!

Modifié par ltdpt

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...