Infecté par Smart Fortress 2012

[mattam]

Bonjour,

je suis sous Windows 7 et infectee par divers trojans dont smart fortress:

 

Mon antivirus a deja mis en quarantaine les elements suivants:

 

a variant of Win32/Injector.RIO trojan

Win32/PSW.Delf.OBN trojan

a variant of Adware/SystemSecurity.Ak Application

 

Smart fortress est encore la donc j'ai lance Rogue Killer voila les rapports: Peut-on m'indiquer si ca veut dire que tout va bien ou pas? Faut-il faire autre chose?

 

J'ai aussi lance Malwarebytes, ci-dessous le rapport.

J'ai aussi lance ZHPdiag, mais je ne vois pas ou poster le rapport sur le site et je ne sais pas lire ce que ca signifie, je n'y comprends pas grand chose...

 

Quelqu'un peut-il m'aider?

D'autant plus que Smart Fortress apparait encore dans mes Programmes malgre toutes ces manipulations. Puis le desinstaller via l'OS normal de via windows Install/Uninstall ou est-ce dangereux pour le systeme?

 

 

RogueKiller V7.4.4 [05/08/2012] by Tigzy

mail: tigzyRK<at>gmail<dot>com

Feedback: RogueKiller - Geeks to Go Forums

Blog: tigzy-RK

 

Operating System: Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User: Administrator [Admin rights]

Mode: Scan -- Date: 05/15/2012 03:03:03

 

¤¤¤ Bad processes: 0 ¤¤¤

 

¤¤¤ Registry Entries: 5 ¤¤¤

[RANDOMNAME] HKCU\[...]\RunOnce : FlashPlayerUpdate (C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p) -> FOUND

[RANDOMNAME] HKUS\S-1-5-21-974068335-3421125521-4278328022-500[...]\RunOnce : FlashPlayerUpdate (C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p) -> FOUND

[HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> FOUND

[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

 

¤¤¤ Particular Files / Folders: ¤¤¤

 

¤¤¤ Driver: [NOT LOADED] ¤¤¤

 

¤¤¤ Infection : ¤¤¤

 

¤¤¤ HOSTS File: ¤¤¤

 

 

¤¤¤ MBR Check: ¤¤¤

 

+++++ PhysicalDrive0: ST9250411AS +++++

--- User ---

[MBR] 252e903a992a4d34bb8bd0eec26f57c8

[bSP] 702b5313b1f8b0d9b4168e4be5f7209e : Lenovo tatooed MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1200 Mo

1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2459648 | Size: 226773 Mo

2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 466890752 | Size: 10500 Mo

User = LL1 ... OK!

User = LL2 ... OK!

 

Finished : << RKreport[1].txt >>

RKreport[1].txt

--------------------------------------------

RogueKiller V7.4.4 [05/08/2012] by Tigzy

mail: tigzyRK<at>gmail<dot>com

Feedback: RogueKiller - Geeks to Go Forums

Blog: tigzy-RK

 

Operating System: Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User: Administrator [Admin rights]

Mode: Remove -- Date: 05/15/2012 03:07:56

 

¤¤¤ Bad processes: 0 ¤¤¤

 

¤¤¤ Registry Entries: 4 ¤¤¤

[RANDOMNAME] HKCU\[...]\RunOnce : FlashPlayerUpdate (C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p) -> DELETED

[HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REPLACED (1)

[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)

[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

 

¤¤¤ Particular Files / Folders: ¤¤¤

 

¤¤¤ Driver: [NOT LOADED] ¤¤¤

 

¤¤¤ Infection : ¤¤¤

 

¤¤¤ HOSTS File: ¤¤¤

 

 

¤¤¤ MBR Check: ¤¤¤

 

+++++ PhysicalDrive0: ST9250411AS +++++

--- User ---

[MBR] 252e903a992a4d34bb8bd0eec26f57c8

[bSP] 702b5313b1f8b0d9b4168e4be5f7209e : Lenovo tatooed MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1200 Mo

1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2459648 | Size: 226773 Mo

2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 466890752 | Size: 10500 Mo

User = LL1 ... OK!

User = LL2 ... OK!

 

Finished : << RKreport[2].txt >>

RKreport[1].txt ; RKreport[2].txt

 

 

-----------------------------------------

Malwarebytes Anti-Malware 1.61.0.1400

www.malwarebytes.org

 

Database version: v2012.05.14.07

 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

Administrator :: TT [administrator]

 

15/05/2012 03:16:06

mbam-log-2012-05-15 (03-16-06).txt

 

Scan type: Full scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 880730

Time elapsed: 1 hour(s), 35 minute(s), 1 second(s)

 

Memory Processes Detected: 0

(No malicious items detected)

 

Memory Modules Detected: 0

(No malicious items detected)

 

Registry Keys Detected: 0

(No malicious items detected)

 

Registry Values Detected: 0

(No malicious items detected)

 

Registry Data Items Detected: 0

(No malicious items detected)

 

Folders Detected: 0

(No malicious items detected)

 

Files Detected: 0

(No malicious items detected)

 

(end)

Modifié le 15 mai 2012 par mattam