Posez votre question Signaler

Suppression virus Trojan.Domcom

Bruce - Dernière réponse le 30 avril 2005 à 21:27
Un grand merci à Balltrap pour son programme permettant d'éradiquer Trajan.Domcom. Ca marche.
Salut
Lire la suite 
Réponse
+0
moins plus
les differents rapports que tu as fait ! ceux de norton, ceux de cleenup, ceux de rav car je ne sais pas ou tu en est et tu me dis tes soucis persistes, donc je prend le sujet en cours , ca serait bien tu me mette tes scans les plus recents de norton, cleenup, RAV...

a+
patrick- 30 avril 2005 à 19:31
pour scanup voici:CleanUp! started on 04/30/05 19:27:00.
...
http://r6.kelkoo.com/misc/footer_icon_info.gif - deleted
http://europe.adserver.yahoo.com/a?f=2124610235&p=bekkcomp&l=SKY&c=sr - deleted
www.pcentraide.com%2Findex.php%3Fact%3DUserCP%26CODE%3D00&color_bg=F5F5F5&color_tex' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880072945&lmt=1114880072&format=728x90_as&output=html&channel=0060263680&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DUserCP%26CODE%3D00&color_bg=F5F5F5&color_tex - deleted
www.pcentraide.com%2F&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D01&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=20&u_java=true' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880134123&lmt=1114880134&format=728x90_as&output=html&channel=8861617361&url=http%3A%2F%2Fwww.pcentraide.com%2F&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D01&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=20&u_java=true - deleted
http://www.pcentraide.com/informatique/virus.jpg - deleted
http://www.pcentraide.com/uploads/av-245.jpg - deleted
http://www.pcentraide.com/index.php?act=Search&CODE=01 - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=http%3A//www.pcentraide.com/index.php%3Fact%3Didx&NS_url=http%3A//www.pcentraide.com/index.php%3Fshowuser%3D3&t=Affichage%20d%27un%20profil - deleted
http://r6.kelkoo.com/misc/footer_icon_contact.gif - deleted
http://r6.kelkoo.com/scripts/rd/crawlers.js - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=http%3A//www.pcentraide.com/lofiversion/index.php/t611.html&NS_url=http%3A//www.pcentraide.com/index.php%3Fact%3DMembers&t=La%20liste%20des%20membres - deleted
http://dhnet.metriweb.be/sd/dhnet/mw.cgi?page=homepage&q=fr&c=0001114875051.335822.5&v=3.0&R=0.36402543004192345 - deleted
http://logv12.xiti.com/hit.xiti?s=52543&p=_forum_affich-1449192&hl=19x21x39&r=1024x768xundefinedx32&ref=http://www.commentcamarche.net/forum/ajout.php3 - deleted
http://www.pcentraide.com/index.php?act=UserCP&CODE=26 - deleted
http://www.pcentraide.com/index.php?act=Msg&CODE=01&VID=in&sort=name&st= - deleted
http://r6.kelkoo.com/css/kelkoo_61_fr_BE_KELKOO_1.css - deleted
http://www.dhnet.be/imagette_pdf/dh_pdf.jpg?time=1114881351 - deleted
http://r6.kelkoo.com/misc/footer_bg.gif - deleted
http://fr.kelkoo.be/images/be/sponsor/belcenter/visu60adsl.jpg - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=&NS_url=http%3A//www.pcentraide.com/index.php&t=PC%20entraide%2C%20forum%20aide%20informatique - deleted
http://www.commentcamarche.net/forum/affich-1483869 - deleted
www.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3Ddelete&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D03%26VID%3Din%26MSID%3D2052&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=22&u_java=true' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880637888&lmt=1114880637&prev_fmts=728x90_as&format=728x90_as&output=html&channel=3909659384&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3Ddelete&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D03%26VID%3Din%26MSID%3D2052&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=22&u_java=true - deleted
www.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D03%26VID%3Din%26MSID%3D2052&col' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880890621&lmt=1114880890&format=728x90_as&output=html&channel=0060263680&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D03%26VID%3Din%26MSID%3D2052&col - deleted
http://dhnet.metriweb.be/sd/dhnet/mw.cgi?page=homepage&q=fr&c=0001114875051.335822.5&v=3.0&R=0.06723461946074321 - deleted
http://logv12.xiti.com/hit.xiti?s=52543&p=_forum_affich-1449192-Suppression-virus-Trojan-Domcom&hl=19x16x21&r=1024x768xundefinedx32&ref= - deleted
www.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D01%26VID%3D' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880896740&lmt=1114880896&prev_fmts=728x90_as&format=728x90_as&output=html&channel=3909659384&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D01%26VID%3D - deleted
http://r6.kelkoo.com/misc/footer_right.gif - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=http%3A//www.pcentraide.com/lofiversion/index.php/f6.html&NS_url=http%3A//www.pcentraide.com/lofiversion/index.php/t611.html&t=PC%20entraide%20%3E%20virus%20tenaces - deleted
www.pcentraide.com%2Findex.php%3Fact%3Dmembers&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMembers&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=4&u_java=true' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114881213105&lmt=1114881213&format=728x90_as&output=html&channel=0060263680&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3Dmembers&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMembers&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=4&u_java=true - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=http%3A//www.pcentraide.com/index.php%3Fs%3D515e784de724323ebab72ae70f389e06%26showuser%3D744&NS_url=http%3A//www.pcentraide.com/index.php%3F&t=PC%20entraide%2C%20forum%20aide%20informatique - deleted
http://logv12.xiti.com/hit.xiti?s=52543&p=_forum_ajout.php3&hl=19x19x56&r=1024x768xundefinedx32&ref=http://www.commentcamarche.net/forum/affich-1449192?page=1 - deleted
http://logv27.xiti.com/hit.xiti?s=188930&p=&hl=19x16x6&r=1024x768xundefinedx32&ref= - deleted
http://logv12.xiti.com/hit.xiti?s=52543&p=_forum_affich-1449192&hl=19x19x59&r=1024x768xundefinedx32&ref=http://www.commentcamarche.net/forum/ajout.php3 - deleted
www.pcentraide.com%2Findex.php%3Fs%3D515e784de724323ebab72ae70f389e06%26showuser%3D744&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=1&u_java=true' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114881273352&lmt=1114881273&prev_fmts=728x90_as&format=728x90_as&output=html&channel=3909659384&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fs%3D515e784de724323ebab72ae70f389e06%26showuser%3D744&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=1&u_java=true - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QTLEB698\2521.468x60_JB_3fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QTLEB698\2445.skyscraper_enfant_fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QTLEB698\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\C3DVA23X\2521.468x60_JB_3fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\C3DVA23X\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\ACC_RANDOM=1114875193619[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\ajout[1].php3 - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WPYRGDI7\2445.banner_crane_fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WPYRGDI7\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WPYRGDI7\index[2].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\81EFMNCP\AAMSZ=1X1[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QHSNI149\ajout[1].php3 - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QHSNI149\index[2].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QHSNI149\index[3].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\Y7YHQ50X\ACC_RANDOM=1114875050594[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\Y7YHQ50X\ACC_RANDOM=1114875052817[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\JI4J3PKP\2521.468x60_JB_3fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\0HMRGLUJ\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\6P5U7YL4\ajout[1].php3 - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\6P5U7YL4\2521.sky_120_fr_bis[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\6P5U7YL4\2521.sky_120_fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\6P5U7YL4\10160[1].htm - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\HO0O88H2\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\HO0O88H2\ajout[1].php3 - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\BBP73XCW\AAMSZ=1X1[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\KJ7JM45H\ACC_RANDOM=1114875051695[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\KJ7JM45H\index[2].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\OLK58\ - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Historique\History.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Historique\History.IE5\MSHist012005043020050501\index.dat currently in use. Will be deleted when Windows is restarted.
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1483485?page=1 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=01&VID=in - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Login&CODE=03 - deleted
Visited: Patrick@javascript:unselect_all() - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=01&VID=in&sort=name&st= - deleted
Visited: Patrick@http://fr.kelkoo.be/b/a/c_100015713_abonnement_adsl.html?kpartnerid=8915228 - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/ajout.php3 - deleted
Visited: Patrick@http://www.pcentraide.com/lofiversion/index.php/f6.html - deleted
Visited: Patrick@www.inoculer.com%2Flogo.gif%3BS%3Ahttp%3A%2F%2Fwww.inoculer.com%3BFORID%3A1%3B&hl=fr' target='_blank' rel='nofollow'>http://www.google.com/custom?domains=inoculer.com&q=trojan.domcom&sitesearch=inoculer.com&client=pub-6436802219407199&forid=1&ie=ISO-8859-1&oe=ISO-8859-1&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A000000%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BLH%3A50%3BLW%3A250%3BL%3Ahttp%3A%2F%2Fwww.inoculer.com%2Flogo.gif%3BS%3Ahttp%3A%2F%2Fwww.inoculer.com%3BFORID%3A1%3B&hl=fr - deleted
Visited: Patrick@res://C:\Program%20Files\Norton%20AntiVirus\NAVComUI.dll/SMTPProgress.htm - deleted
Visited: Patrick@javascript:emoticon(':help:') - deleted
Visited: Patrick@javascript:select_read() - deleted
Visited: Patrick@http://www.pcentraide.com/index.php - deleted
Visited: Patrick@outlook:%C9l%E9ments%20supprim%E9s - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Members - deleted
Visited: Patrick@javascript:buddy_pop(); - deleted
Visited: Patrick@http://www.inoculer.com/virusdesinfection.php3 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?showuser=744 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?&act=Msg&CODE=01 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=4&MID=3 - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1449192-Suppression-virus-Trojan-Domcom - deleted
Visited: Patrick@http://www.pcentraide.com/lofiversion/index.php/t611.html - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search&CODE=01 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=4&MID=744 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=01 - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1449192?page=1 - deleted
Visited: Patrick@www.inoculer.com%2Flogo.gif%3BLH%3A50%3BLW%3A250%3BGL%3A1%3BBGC%3AFFFFFF%3BT%3A%23000000%3BLC%3A%230000ff%3BVLC%3A%23663399%3BALC%3A%230000ff%3BGALT%3A%23008000%3BGFNT%3A%230000ff%3BGIMP%3A%230000ff%3BDIV%3A%23336699%3BLBGC%3A000000%3BAH%3Acenter%3BS%3Ahttp%3A%2F%2Fwww.inoculer.com%3B&domains=inoculer.com&sitesearch=inoculer.com' target='_blank' rel='nofollow'>http://www.google.com/custom?q=trojan.domcom&btnG=Rechercher&hl=fr&ie=ISO-8859-1&oe=ISO-8859-1&client=pub-6436802219407199&cof=FORID%3A1%3BL%3Ahttp%3A%2F%2Fwww.inoculer.com%2Flogo.gif%3BLH%3A50%3BLW%3A250%3BGL%3A1%3BBGC%3AFFFFFF%3BT%3A%23000000%3BLC%3A%230000ff%3BVLC%3A%23663399%3BALC%3A%230000ff%3BGALT%3A%23008000%3BGFNT%3A%230000ff%3BGIMP%3A%230000ff%3BDIV%3A%23336699%3BLBGC%3A000000%3BAH%3Acenter%3BS%3Ahttp%3A%2F%2Fwww.inoculer.com%3B&domains=inoculer.com&sitesearch=inoculer.com - deleted
Visited: Patrick@http://www.pcentraide.com/index.php? - deleted
Visited: Patrick@res://C:\WINDOWS\System32\shdoclc.dll/dnserror.htm - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?showuser=3 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=buddy - deleted
Visited: Patrick@file:///C:/Documents%20and%20Settings/Patrick/Mes%20documents/virus%20trojan%20domcom.doc - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search&f= - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?CODE=05&act=Msg&MSID=2052&VID=in - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1483869 - deleted
Visited: Patrick@http://www.google.be/fr - deleted
Visited: Patrick@res://C:\PROGRA~1\NORTON~1\NAVComUI.DLL/CommonUIProgress.htm - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Login&CODE=01 - deleted
Visited: Patrick@http://www.pcentraide.com/lofiversion/index.php/t757.html - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=UserCP&CODE=00 - deleted
Visited: Patrick@http://www.google.be - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=idx - deleted
Visited: Patrick@http://www.virustraq.com/info_virus/10160 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?CODE=01&act=Msg - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=UserCP&CODE=26 - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1483884 - deleted
Visited: Patrick@res://C:\PROGRA~1\NORTON~1\NAVUI.dll/navstats.htm - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=delete - deleted
Visited: Patrick@http://www.dhnet.be/index.php - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=01&VID=in&sort=title&st= - deleted
Visited: Patrick@http://www.dhnet.be/dhsports/article.phtml?id=120515 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search&nav=lv&CODE=show&searchid=55713e2a0c439e8f971fddc216c00eb5&search_in=topics&result_type=topics&lastdate= - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1483670 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=03&VID=in&MSID=2052 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=03&VID=in&MSID=2050 - deleted
Visited: Patrick@http://www.pcentraide.com - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1449192 - deleted
Visited: Patrick@http://www.inoculer.com/scan/licence.php - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?CODE=04&act=Msg&MID=1&MSID=2050 - deleted
Visited: Patrick@about:blank - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Reg&CODE=00 - deleted
Visited: Patrick@outlook:Bo%EEte%20de%20r%E9ception - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search&CODE=getnew - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=members - deleted
Visited: Patrick@outlook:aujourd'hui - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Login&CODE=00 - deleted
Visited: Patrick@http://www.pcentraide.com/lofiversion/index.php - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?showforum=6 - deleted
Visited: Patrick@http://www.google.be/search?hl=fr&q=trojan.domcom&meta=lr%3Dlang_fr - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?CODE=06&act=Msg - deleted
Visited: Patrick@outlook:Boîte%20de%20réception - deleted
Visited: Patrick@http://www.inoculer.com/lire2.php?msg=2343 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=SF&s=&f=sj_home - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?s=515e784de724323ebab72ae70f389e06&showuser=744 - deleted
'Typed URLs' (Internet Explorer) - removed from the registry.
Cookie:patrick@metriweb.be/ - deleted
Cookie:patrick@www.pcentraide.com/ - deleted
Cookie:patrick@yahoo.com/ - deleted
Cookie:patrick@www.dhnet.be/ - deleted
Cookie:patrick@dhnet.be/ - deleted
Cookie:patrick@kelkoo.be/ - deleted
Cookie:patrick@fr.kelkoo.be/ - deleted
Cookie:patrick@google.be/ - deleted
Cookie:patrick@beweb.com/ - deleted
Cookie:patrick@mediaplex.com/ - deleted
Cookie:patrick@google.com/ - deleted
Cookie:patrick@xiti.com/ - deleted
Cookie:patrick@doubleclick.net/ - deleted
C:\Documents and Settings\Patrick\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Recent\virus trojan domcom.lnk - deleted
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~DFEF16.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~WRD0000.doc currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~DF962C.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\msohtml1\01\ - deleted
C:\DOCUME~1\Patrick\LOCALS~1\Temp\msohtml1\ - deleted
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~DFEF16.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~WRD0000.doc currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~DF962C.tmp currently in use. Will be deleted when Windows is restarted.
C:\WINDOWS\temp\rtdrvmon.exe - deleted
C:\WINDOWS\temp\T30DebugLogFile.txt - deleted
C:\Documents and Settings\Patrick\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\locals~1\tempor~1\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\locals~1\tempor~1\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temp\~DFEF16.tmp currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temp\~WRD0000.doc currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temp\~DF962C.tmp currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\locals~1\tempor~1\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
'Run MRU' list - removed from the registry.
WordPad Recent File List - removed from the registry.
Telnet's MRU list - removed from the registry.
CleanUp! recovered 4.7 MB of disk space from 923 files.
CleanUp! finished on 04/30/05 19:27:14.

pour norton il est dans:ipreg 32.dll, norton me renseigne le chemin suivant C:\windows\system 32\config\systemprofile\local settings\temporary internet file\content.IE5.
Répondre
Ajouter un commentaire
Réponse
+0
moins plus
salut:

Fais un nettoyage des fichiers temps...etc avec ce programme:
http://pageperso.aol.fr/Balltrap34/CleanUp312.exe

ensuite redemarre ton pc !

et dis moi ou en sont tes problemes !!

a+
patrick- 30 avril 2005 à 20:02
Regis, j'ai fait les différentes opérations et le trojan est toujours présent.
Répondre
Ajouter un commentaire
Réponse
+0
moins plus
alors tu les refais qd meme (avec le lien je t ai mis au dessu puis tu redemarres) et tu lance un scan chez RAV :
http://www.ravantivirus.com/scan/

Clique sur "To continue without subscribing click here" et attends quelques minutes.
Lorsque "Ready" est affiché dans "status", coche la case "Autoclean" puis clique sur "Scan my PC"
A la fin de l'analyse, copie/colle le rapport ici
patrick- 30 avril 2005 à 21:06
scanravest toujours occupé.
mercipour ta patience.
Répondre
patrick- 30 avril 2005 à 21:20
Scan started at 30/04/2005 20:34:38

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\D4EBCZJG\v3cab[1].cab->v3.dll - HackTool:Win32/Simple.A -> Infected

voici le résultat de scanrav

Scanned
============================
Objects: 50103
Directories: 2908
Archives: 5961
Size(Kb): 1554963
Infected files: 1

Found
============================
Viruses found: 1
Suspicious files: 0
Disinfected files: 0
Mail files: 29
Répondre
Ajouter un commentaire
Réponse
+0
moins plus
salut

supprime le manuellement.

rend visible les dossiers cachés:
panneau de configuration > options des dossiers > onglet affichage
cocher " afficher les fichiers et dossiers cachés "
décocher " masquer les extentions des fichiers dont le type est connu

puis va dans :
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\double clic sur Content.IE5
supprime tous les dossiers sauf le fichier index.dat

a+
Ajouter un commentaire
Ce document intitulé «  Suppression virus Trojan.Domcom  » issu de CommentCaMarche (www.commentcamarche.net) est mis à disposition sous les termes de la licence Creative Commons. Vous pouvez copier, modifier des copies de cette page, dans les conditions fixées par la licence, tant que cette note apparaît clairement.

Vous n'êtes pas encore membre ?

inscrivez-vous, c'est gratuit et ça prend moins d'une minute !

Les membres obtiennent plus de réponses que les utilisateurs anonymes.

Le fait d'être membre vous permet d'avoir un suivi détaillé de vos demandes.

Le fait d'être membre vous permet d'avoir des options supplémentaires.