Suppression virus Trojan.Domcom

Fermé
Bruce - 17 avril 2005 à 22:08
 moe - 30 avril 2005 à 21:27
Un grand merci à Balltrap pour son programme permettant d'éradiquer Trajan.Domcom. Ca marche.
Salut
A voir également:

24 réponses

les differents rapports que tu as fait ! ceux de norton, ceux de cleenup, ceux de rav car je ne sais pas ou tu en est et tu me dis tes soucis persistes, donc je prend le sujet en cours , ca serait bien tu me mette tes scans les plus recents de norton, cleenup, RAV...

a+
0
pour scanup voici:CleanUp! started on 04/30/05 19:27:00.
...
http://r6.kelkoo.com/misc/footer_icon_info.gif - deleted
http://europe.adserver.yahoo.com/a?f=2124610235&p=bekkcomp&l=SKY&c=sr - deleted
www.pcentraide.com%2Findex.php%3Fact%3DUserCP%26CODE%3D00&color_bg=F5F5F5&color_tex' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880072945&lmt=1114880072&format=728x90_as&output=html&channel=0060263680&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DUserCP%26CODE%3D00&color_bg=F5F5F5&color_tex - deleted
www.pcentraide.com%2F&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D01&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=20&u_java=true' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880134123&lmt=1114880134&format=728x90_as&output=html&channel=8861617361&url=http%3A%2F%2Fwww.pcentraide.com%2F&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D01&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=20&u_java=true - deleted
http://www.pcentraide.com/informatique/virus.jpg - deleted
http://www.pcentraide.com/uploads/av-245.jpg - deleted
http://www.pcentraide.com/index.php?act=Search&CODE=01 - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=http%3A//www.pcentraide.com/index.php%3Fact%3Didx&NS_url=http%3A//www.pcentraide.com/index.php%3Fshowuser%3D3&t=Affichage%20d%27un%20profil - deleted
http://r6.kelkoo.com/misc/footer_icon_contact.gif - deleted
http://r6.kelkoo.com/scripts/rd/crawlers.js - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=http%3A//www.pcentraide.com/lofiversion/index.php/t611.html&NS_url=http%3A//www.pcentraide.com/index.php%3Fact%3DMembers&t=La%20liste%20des%20membres - deleted
http://dhnet.metriweb.be/sd/dhnet/mw.cgi?page=homepage&q=fr&c=0001114875051.335822.5&v=3.0&R=0.36402543004192345 - deleted
http://logv12.xiti.com/hit.xiti?s=52543&p=_forum_affich-1449192&hl=19x21x39&r=1024x768xundefinedx32&ref=http://www.commentcamarche.net/forum/ajout.php3 - deleted
http://www.pcentraide.com/index.php?act=UserCP&CODE=26 - deleted
http://www.pcentraide.com/index.php?act=Msg&CODE=01&VID=in&sort=name&st= - deleted
http://r6.kelkoo.com/css/kelkoo_61_fr_BE_KELKOO_1.css - deleted
http://www.dhnet.be/imagette_pdf/dh_pdf.jpg?time=1114881351 - deleted
http://r6.kelkoo.com/misc/footer_bg.gif - deleted
http://fr.kelkoo.be/images/be/sponsor/belcenter/visu60adsl.jpg - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=&NS_url=http%3A//www.pcentraide.com/index.php&t=PC%20entraide%2C%20forum%20aide%20informatique - deleted
http://www.commentcamarche.net/forum/affich-1483869 - deleted
www.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3Ddelete&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D03%26VID%3Din%26MSID%3D2052&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=22&u_java=true' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880637888&lmt=1114880637&prev_fmts=728x90_as&format=728x90_as&output=html&channel=3909659384&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3Ddelete&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D03%26VID%3Din%26MSID%3D2052&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=22&u_java=true - deleted
www.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D03%26VID%3Din%26MSID%3D2052&col' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880890621&lmt=1114880890&format=728x90_as&output=html&channel=0060263680&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D03%26VID%3Din%26MSID%3D2052&col - deleted
http://dhnet.metriweb.be/sd/dhnet/mw.cgi?page=homepage&q=fr&c=0001114875051.335822.5&v=3.0&R=0.06723461946074321 - deleted
http://logv12.xiti.com/hit.xiti?s=52543&p=_forum_affich-1449192-Suppression-virus-Trojan-Domcom&hl=19x16x21&r=1024x768xundefinedx32&ref= - deleted
www.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D01%26VID%3D' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114880896740&lmt=1114880896&prev_fmts=728x90_as&format=728x90_as&output=html&channel=3909659384&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMsg%26CODE%3D01%26VID%3D - deleted
http://r6.kelkoo.com/misc/footer_right.gif - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=http%3A//www.pcentraide.com/lofiversion/index.php/f6.html&NS_url=http%3A//www.pcentraide.com/lofiversion/index.php/t611.html&t=PC%20entraide%20%3E%20virus%20tenaces - deleted
www.pcentraide.com%2Findex.php%3Fact%3Dmembers&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMembers&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=4&u_java=true' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114881213105&lmt=1114881213&format=728x90_as&output=html&channel=0060263680&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3Dmembers&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fact%3DMembers&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=4&u_java=true - deleted
http://www.pcentraide.com/phps/php-stats.php?w=1024&h=768&c=32&f=http%3A//www.pcentraide.com/index.php%3Fs%3D515e784de724323ebab72ae70f389e06%26showuser%3D744&NS_url=http%3A//www.pcentraide.com/index.php%3F&t=PC%20entraide%2C%20forum%20aide%20informatique - deleted
http://logv12.xiti.com/hit.xiti?s=52543&p=_forum_ajout.php3&hl=19x19x56&r=1024x768xundefinedx32&ref=http://www.commentcamarche.net/forum/affich-1449192?page=1 - deleted
http://logv27.xiti.com/hit.xiti?s=188930&p=&hl=19x16x6&r=1024x768xundefinedx32&ref= - deleted
http://logv12.xiti.com/hit.xiti?s=52543&p=_forum_affich-1449192&hl=19x19x59&r=1024x768xundefinedx32&ref=http://www.commentcamarche.net/forum/ajout.php3 - deleted
www.pcentraide.com%2Findex.php%3Fs%3D515e784de724323ebab72ae70f389e06%26showuser%3D744&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=1&u_java=true' target='_blank' rel='nofollow'>http://pagead2.googlesyndication.com/pagead/ads?client=ca-pub-3979408414468186&dt=1114881273352&lmt=1114881273&prev_fmts=728x90_as&format=728x90_as&output=html&channel=3909659384&url=http%3A%2F%2Fwww.pcentraide.com%2Findex.php%3Fs%3D515e784de724323ebab72ae70f389e06%26showuser%3D744&color_bg=F5F5F5&color_text=666666&color_link=000000&color_url=666666&color_border=F5F5F5&ad_type=text&ref=http%3A%2F%2Fwww.pcentraide.com%2Findex.php&u_h=768&u_w=1024&u_ah=734&u_aw=1024&u_cd=32&u_tz=120&u_his=1&u_java=true - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QTLEB698\2521.468x60_JB_3fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QTLEB698\2445.skyscraper_enfant_fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QTLEB698\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\C3DVA23X\2521.468x60_JB_3fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\C3DVA23X\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\ACC_RANDOM=1114875193619[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\ajout[1].php3 - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WPYRGDI7\2445.banner_crane_fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WPYRGDI7\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WPYRGDI7\index[2].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\81EFMNCP\AAMSZ=1X1[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QHSNI149\ajout[1].php3 - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QHSNI149\index[2].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\QHSNI149\index[3].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\Y7YHQ50X\ACC_RANDOM=1114875050594[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\Y7YHQ50X\ACC_RANDOM=1114875052817[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\JI4J3PKP\2521.468x60_JB_3fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\0HMRGLUJ\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\6P5U7YL4\ajout[1].php3 - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\6P5U7YL4\2521.sky_120_fr_bis[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\6P5U7YL4\2521.sky_120_fr[1].swf - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\6P5U7YL4\10160[1].htm - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\HO0O88H2\index[1].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\HO0O88H2\ajout[1].php3 - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\BBP73XCW\AAMSZ=1X1[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\KJ7JM45H\ACC_RANDOM=1114875051695[1] - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\KJ7JM45H\index[2].php - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\OLK58\ - deleted
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Historique\History.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Historique\History.IE5\MSHist012005043020050501\index.dat currently in use. Will be deleted when Windows is restarted.
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1483485?page=1 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=01&VID=in - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Login&CODE=03 - deleted
Visited: Patrick@javascript:unselect_all() - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=01&VID=in&sort=name&st= - deleted
Visited: Patrick@http://fr.kelkoo.be/b/a/c_100015713_abonnement_adsl.html?kpartnerid=8915228 - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/ajout.php3 - deleted
Visited: Patrick@http://www.pcentraide.com/lofiversion/index.php/f6.html - deleted
Visited: Patrick@www.inoculer.com%2Flogo.gif%3BS%3Ahttp%3A%2F%2Fwww.inoculer.com%3BFORID%3A1%3B&hl=fr' target='_blank' rel='nofollow'>http://www.google.com/custom?domains=inoculer.com&q=trojan.domcom&sitesearch=inoculer.com&client=pub-6436802219407199&forid=1&ie=ISO-8859-1&oe=ISO-8859-1&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A000000%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BLH%3A50%3BLW%3A250%3BL%3Ahttp%3A%2F%2Fwww.inoculer.com%2Flogo.gif%3BS%3Ahttp%3A%2F%2Fwww.inoculer.com%3BFORID%3A1%3B&hl=fr - deleted
Visited: Patrick@res://C:\Program%20Files\Norton%20AntiVirus\NAVComUI.dll/SMTPProgress.htm - deleted
Visited: Patrick@javascript:emoticon(':help:') - deleted
Visited: Patrick@javascript:select_read() - deleted
Visited: Patrick@http://www.pcentraide.com/index.php - deleted
Visited: Patrick@outlook:%C9l%E9ments%20supprim%E9s - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Members - deleted
Visited: Patrick@javascript:buddy_pop(); - deleted
Visited: Patrick@http://www.inoculer.com/virusdesinfection.php3 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?showuser=744 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?&act=Msg&CODE=01 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=4&MID=3 - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1449192-Suppression-virus-Trojan-Domcom - deleted
Visited: Patrick@http://www.pcentraide.com/lofiversion/index.php/t611.html - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search&CODE=01 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=4&MID=744 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=01 - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1449192?page=1 - deleted
Visited: Patrick@www.inoculer.com%2Flogo.gif%3BLH%3A50%3BLW%3A250%3BGL%3A1%3BBGC%3AFFFFFF%3BT%3A%23000000%3BLC%3A%230000ff%3BVLC%3A%23663399%3BALC%3A%230000ff%3BGALT%3A%23008000%3BGFNT%3A%230000ff%3BGIMP%3A%230000ff%3BDIV%3A%23336699%3BLBGC%3A000000%3BAH%3Acenter%3BS%3Ahttp%3A%2F%2Fwww.inoculer.com%3B&domains=inoculer.com&sitesearch=inoculer.com' target='_blank' rel='nofollow'>http://www.google.com/custom?q=trojan.domcom&btnG=Rechercher&hl=fr&ie=ISO-8859-1&oe=ISO-8859-1&client=pub-6436802219407199&cof=FORID%3A1%3BL%3Ahttp%3A%2F%2Fwww.inoculer.com%2Flogo.gif%3BLH%3A50%3BLW%3A250%3BGL%3A1%3BBGC%3AFFFFFF%3BT%3A%23000000%3BLC%3A%230000ff%3BVLC%3A%23663399%3BALC%3A%230000ff%3BGALT%3A%23008000%3BGFNT%3A%230000ff%3BGIMP%3A%230000ff%3BDIV%3A%23336699%3BLBGC%3A000000%3BAH%3Acenter%3BS%3Ahttp%3A%2F%2Fwww.inoculer.com%3B&domains=inoculer.com&sitesearch=inoculer.com - deleted
Visited: Patrick@http://www.pcentraide.com/index.php? - deleted
Visited: Patrick@res://C:\WINDOWS\System32\shdoclc.dll/dnserror.htm - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?showuser=3 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=buddy - deleted
Visited: Patrick@file:///C:/Documents%20and%20Settings/Patrick/Mes%20documents/virus%20trojan%20domcom.doc - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search&f= - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?CODE=05&act=Msg&MSID=2052&VID=in - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1483869 - deleted
Visited: Patrick@http://www.google.be/fr - deleted
Visited: Patrick@res://C:\PROGRA~1\NORTON~1\NAVComUI.DLL/CommonUIProgress.htm - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Login&CODE=01 - deleted
Visited: Patrick@http://www.pcentraide.com/lofiversion/index.php/t757.html - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=UserCP&CODE=00 - deleted
Visited: Patrick@http://www.google.be - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=idx - deleted
Visited: Patrick@http://www.virustraq.com/info_virus/10160 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?CODE=01&act=Msg - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=UserCP&CODE=26 - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1483884 - deleted
Visited: Patrick@res://C:\PROGRA~1\NORTON~1\NAVUI.dll/navstats.htm - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=delete - deleted
Visited: Patrick@http://www.dhnet.be/index.php - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=01&VID=in&sort=title&st= - deleted
Visited: Patrick@http://www.dhnet.be/dhsports/article.phtml?id=120515 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search&nav=lv&CODE=show&searchid=55713e2a0c439e8f971fddc216c00eb5&search_in=topics&result_type=topics&lastdate= - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1483670 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=03&VID=in&MSID=2052 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Msg&CODE=03&VID=in&MSID=2050 - deleted
Visited: Patrick@http://www.pcentraide.com - deleted
Visited: Patrick@http://www.commentcamarche.net/forum/affich-1449192 - deleted
Visited: Patrick@http://www.inoculer.com/scan/licence.php - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Reg&coppa_user=0&termsread=1&coppa_pass=1 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?CODE=04&act=Msg&MID=1&MSID=2050 - deleted
Visited: Patrick@about:blank - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Reg&CODE=00 - deleted
Visited: Patrick@outlook:Bo%EEte%20de%20r%E9ception - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Search&CODE=getnew - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=members - deleted
Visited: Patrick@outlook:aujourd'hui - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=Login&CODE=00 - deleted
Visited: Patrick@http://www.pcentraide.com/lofiversion/index.php - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?showforum=6 - deleted
Visited: Patrick@http://www.google.be/search?hl=fr&q=trojan.domcom&meta=lr%3Dlang_fr - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?CODE=06&act=Msg - deleted
Visited: Patrick@outlook:Boîte%20de%20réception - deleted
Visited: Patrick@http://www.inoculer.com/lire2.php?msg=2343 - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?act=SF&s=&f=sj_home - deleted
Visited: Patrick@http://www.pcentraide.com/index.php?s=515e784de724323ebab72ae70f389e06&showuser=744 - deleted
'Typed URLs' (Internet Explorer) - removed from the registry.
Cookie:patrick@metriweb.be/ - deleted
Cookie:patrick@www.pcentraide.com/ - deleted
Cookie:patrick@yahoo.com/ - deleted
Cookie:patrick@www.dhnet.be/ - deleted
Cookie:patrick@dhnet.be/ - deleted
Cookie:patrick@kelkoo.be/ - deleted
Cookie:patrick@fr.kelkoo.be/ - deleted
Cookie:patrick@google.be/ - deleted
Cookie:patrick@beweb.com/ - deleted
Cookie:patrick@mediaplex.com/ - deleted
Cookie:patrick@google.com/ - deleted
Cookie:patrick@xiti.com/ - deleted
Cookie:patrick@doubleclick.net/ - deleted
C:\Documents and Settings\Patrick\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Recent\virus trojan domcom.lnk - deleted
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~DFEF16.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~WRD0000.doc currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~DF962C.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\msohtml1\01\ - deleted
C:\DOCUME~1\Patrick\LOCALS~1\Temp\msohtml1\ - deleted
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~DFEF16.tmp currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~WRD0000.doc currently in use. Will be deleted when Windows is restarted.
C:\DOCUME~1\Patrick\LOCALS~1\Temp\~DF962C.tmp currently in use. Will be deleted when Windows is restarted.
C:\WINDOWS\temp\rtdrvmon.exe - deleted
C:\WINDOWS\temp\T30DebugLogFile.txt - deleted
C:\Documents and Settings\Patrick\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\locals~1\tempor~1\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\locals~1\tempor~1\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temp\~DFEF16.tmp currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temp\~WRD0000.doc currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temp\~DF962C.tmp currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\Patrick\Local Settings\Temporary Internet Files\Content.IE5\WTWZG7WB\affich-1483869[1] currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\locals~1\tempor~1\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Cookies\index.dat currently in use. Will be deleted when Windows is restarted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat currently in use. Will be deleted when Windows is restarted.
'Run MRU' list - removed from the registry.
WordPad Recent File List - removed from the registry.
Telnet's MRU list - removed from the registry.
CleanUp! recovered 4.7 MB of disk space from 923 files.
CleanUp! finished on 04/30/05 19:27:14.

pour norton il est dans:ipreg 32.dll, norton me renseigne le chemin suivant C:\windows\system 32\config\systemprofile\local settings\temporary internet file\content.IE5.
0
salut:

Fais un nettoyage des fichiers temps...etc avec ce programme:
http://pageperso.aol.fr/Balltrap34/CleanUp312.exe

ensuite redemarre ton pc !

et dis moi ou en sont tes problemes !!

a+
0
Regis, j'ai fait les différentes opérations et le trojan est toujours présent.
0
alors tu les refais qd meme (avec le lien je t ai mis au dessu puis tu redemarres) et tu lance un scan chez RAV :
http://www.ravantivirus.com/scan/

Clique sur "To continue without subscribing click here" et attends quelques minutes.
Lorsque "Ready" est affiché dans "status", coche la case "Autoclean" puis clique sur "Scan my PC"
A la fin de l'analyse, copie/colle le rapport ici
0
scanravest toujours occupé.
mercipour ta patience.
0
Scan started at 30/04/2005 20:34:38

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\D4EBCZJG\v3cab[1].cab->v3.dll - HackTool:Win32/Simple.A -> Infected

voici le résultat de scanrav

Scanned
============================
Objects: 50103
Directories: 2908
Archives: 5961
Size(Kb): 1554963
Infected files: 1

Found
============================
Viruses found: 1
Suspicious files: 0
Disinfected files: 0
Mail files: 29
0
salut

supprime le manuellement.

rend visible les dossiers cachés:
panneau de configuration > options des dossiers > onglet affichage
cocher " afficher les fichiers et dossiers cachés "
décocher " masquer les extentions des fichiers dont le type est connu

puis va dans :
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\double clic sur Content.IE5
supprime tous les dossiers sauf le fichier index.dat

a+
0