Bonjour,

Je viens de scanner mon ordi en ligne avec bitdefender quickscan et il a trouve "Virtool.20359" dans <winlogon.exe (664)>. J'ai cherche des articles sur ce virus mais j'en trouve presque rien. Est-ce que vous avez des info sur ce virus, comment peut-on l'enlever? Merci.
P.S. Voila aussi une copie du resultat du scannage.

BitDefender QuickScan Beta v0.9.7.8
-----------------------------------

Procesul winlogon.exe (664) este afectat de Virtool.20359


S-a găsit 1 fişier infectat!
------------------------------
C:\WINDOWS\system32\antiwpa.dll - Virtool.20359


Procese
-------
<nesemnat> SoundMAX service agent component

1112 C:\Program Files\Analog

Devices\SoundMAX\SMAgent.exe
<nesemnat> Skype Extras Manager

1372 C:\Program Files\Skype\Plugin Manager\skypePM.exe

<verificat> avast! service GUI component

1904 C:\Program Files\Alwil Software\Avast4

\ashDisp.exe
<verificat> avast! e-Mail Scanner Service

2304 C:\Program Files\Alwil Software\Avast4

\ashMaiSv.exe
<verificat> avast! antivirus service

1476 C:\Program Files\Alwil Software\Avast4

\ashServ.exe
<verificat> avast! Web Scanner

2400 C:\Program Files\Alwil Software\Avast4

\ashWebSv.exe
<verificat> avast! Antivirus updating service

1412 C:\Program Files\Alwil Software\Avast4

\aswUpdSv.exe
<verificat> GoogleToolbarNotifier

2000 C:\Program

Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
<verificat> BTNtService.exe

900 C:\Program Files\IVT

Corporation\BlueSoleil\BTNtService.exe
<verificat> StartSkysolSvc.exe

1172 C:\Program Files\IVT

Corporation\BlueSoleil\StartSkysolSvc.exe
<verificat> Java(TM) Quick Starter Service

1024 C:\Program Files\Java\jre6\bin\jqs.exe
<verificat> Java(TM) Platform SE binary

1984 C:\Program Files\Java\jre6\bin\jusched.exe
<verificat> Firefox

3532 C:\Program Files\Mozilla Firefox\firefox.exe
<verificat> Skype

3648 C:\Program Files\Skype\Phone\Skype.exe
<verificat> Windows Explorer

1640 C:\WINDOWS\Explorer.EXE
<verificat> Application Layer Gateway Service

2568 C:\WINDOWS\System32\alg.exe
<verificat> Client Server Runtime Process

640 C:\WINDOWS\system32\csrss.exe
<verificat> CTF Loader

1992 C:\WINDOWS\system32\ctfmon.exe
<verificat> hkcmd Module

1896 C:\WINDOWS\system32\hkcmd.exe
<verificat> igfxTray Module

1888 C:\WINDOWS\system32\igfxtray.exe
<verificat> LSA Shell (Export Version)

720 C:\WINDOWS\system32\lsass.exe
<verificat> Services and Controller app

708 C:\WINDOWS\system32\services.exe
<verificat> Windows NT Session Manager

584 C:\WINDOWS\System32\smss.exe
<verificat> Spooler SubSystem App

492 C:\WINDOWS\system32\spoolsv.exe
<verificat> Generic Host Process for Win32 Services

744 C:\WINDOWS\system32\svchost.exe
<verificat> Generic Host Process for Win32 Services

884 C:\WINDOWS\system32\svchost.exe
<verificat> Generic Host Process for Win32 Services

968 C:\WINDOWS\system32\svchost.exe
<verificat> Generic Host Process for Win32 Services

1080 C:\WINDOWS\System32\svchost.exe
<verificat> Generic Host Process for Win32 Services

1184 C:\WINDOWS\system32\svchost.exe
<verificat> Generic Host Process for Win32 Services

1300 C:\WINDOWS\system32\svchost.exe
<verificat> Windows User Mode Driver Manager

1228 C:\WINDOWS\system32\wdfmgr.exe
<verificat> Windows NT Logon Application

664 C:\WINDOWS\system32\winlogon.exe


Conexiuni
---------
Procesul ashWebSv.exe (2400) conectat pe portul 80 (HTTP) -

88.221.40.20
Procesul ashWebSv.exe (2400) conectat pe portul 80 (HTTP) -

ew-in-f102.1e100.net
Procesul ashWebSv.exe (2400) conectat pe portul 80 (HTTP) -

74.125.13.22
Procesul ashWebSv.exe (2400) conectat pe portul 80 (HTTP) -

ez-in-f105.1e100.net
Procesul ashWebSv.exe (2400) conectat pe portul 80 (HTTP) -

ew-in-f100.1e100.net
Procesul Skype.exe (3648) conectat pe portul 45410 - host-

static-92-114-150-31.moldtelecom.md

Procesul svchost.exe (968) serveşte pe porturile: 135 (RPC)
Procesul Skype.exe (3648) serveşte pe porturile: 80 (HTTP),

443 (HTTP over SSL), 45225


Autorun-uri şi fişiere critice
------------------------------
<nesemnat> Google Quick Search Box

C:\Program Files\Google\Quick Search

Box\GoogleQuickSearchBox.exe
<nesemnat> QuickTime Task

C:\Program Files\QuickTime\qttask.exe
<nesemnat> AntiWPA3 for X86

C:\WINDOWS\system32\antiwpa.dll
<nesemnat> NeroCheck

C:\WINDOWS\system32\NeroCheck.exe

<verificat> Adobe Acrobat SpeedLauncher

C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
<verificat> avast! service GUI component

C:\Program Files\Alwil Software\Avast4\ashDisp.exe
<verificat> Apple Software Update

C:\Program Files\Apple Software Update\SoftwareUpdate.exe
<verificat> Adobe Reader and Acrobat Manager

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
<verificat> GoogleToolbarNotifier

C:\Program

Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
<verificat> Java(TM) Platform SE binary

C:\Program Files\Java\jre6\bin\jusched.exe
<verificat> Microsoft IME

C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE
<verificat> Shell Browser UI Library

C:\WINDOWS\system32\browseui.dll
<verificat> Bluetooth Control Panel Applet

C:\WINDOWS\system32\bthprops.cpl
<verificat> Crypto API32

C:\WINDOWS\system32\crypt32.dll
<verificat> Crypto Network Related API

C:\WINDOWS\system32\cryptnet.dll
<verificat> Offline Network Agent

C:\WINDOWS\system32\cscdll.dll
<verificat> CTF Loader

C:\WINDOWS\system32\ctfmon.exe
<verificat> DIMS Notification Handler

C:\WINDOWS\system32\dimsntfy.dll
<verificat> hkcmd Module

C:\WINDOWS\system32\hkcmd.exe
<verificat> igfxsrvc Module

C:\WINDOWS\system32\igfxsrvc.dll
<verificat> igfxTray Module

C:\WINDOWS\system32\igfxtray.exe
<verificat> 微軟新注音輸入法 2002a

C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
<verificat> Windows Logon UI

C:\WINDOWS\system32\logonui.exe
<verificat> Secondary Logon Service Notification DLL

C:\WINDOWS\system32\sclgntfy.dll
<verificat> Windows Shell Common Dll

C:\WINDOWS\system32\shell32.dll
<verificat> Systray shell service object

C:\WINDOWS\system32\stobject.dll
<verificat> Userinit Logon Application

c:\windows\system32\userinit.exe
<verificat> Web Site Monitor

C:\WINDOWS\system32\webcheck.dll
<verificat> Windows Genuine Advantage Notifications

C:\WINDOWS\system32\WgaLogon.dll
<verificat> Common DLL to receive Winlogon notifications

C:\WINDOWS\system32\wlnotify.dll


Plugin-uri de browser
---------------------
<nesemnat> Java(TM) Quick Starter binary

c:\program files\java\jre6

\lib\deploy\jqs\ie\jqs_plugin.dll
<nesemnat> The QuickTime Plugin allows you to view a wide

var C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
<nesemnat> The QuickTime Plugin allows you to view a wide

var C:\Program Files\Mozilla

Firefox\plugins\npqtplugin2.dll
<nesemnat> The QuickTime Plugin allows you to view a wide

var C:\Program Files\Mozilla

Firefox\plugins\npqtplugin3.dll
<nesemnat> The QuickTime Plugin allows you to view a wide

var C:\Program Files\Mozilla

Firefox\plugins\npqtplugin4.dll
<nesemnat> The QuickTime Plugin allows you to view a wide

var C:\Program Files\Mozilla

Firefox\plugins\npqtplugin5.dll
<nesemnat> The QuickTime Plugin allows you to view a wide

var C:\Program Files\Mozilla

Firefox\plugins\npqtplugin6.dll
<nesemnat> The QuickTime Plugin allows you to view a wide

var C:\Program Files\Mozilla

Firefox\plugins\npqtplugin7.dll
<nesemnat> RealJukebox Netscape Plugin

C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
<nesemnat> 6.0.12.69

C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
<nesemnat> Adobe Shockwave for Director Netscape plug-in,

ver C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

<verificat> Adobe PDF Helper for Internet Explorer

c:\program files\common

files\adobe\acrobat\activex\acroiehelpershim.dll
<verificat> Fast Search

c:\program files\google\google

toolbar\component\fastsearch_b7c5ac242193bb3e.dll
<verificat> Google Toolbar

c:\program files\google\google

toolbar\googletoolbar_32.dll
<verificat> GoogleToolbarNotifier

C:\Program

Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
<verificat> Java(TM) Platform SE binary

c:\program files\java\jre6\bin\jp2ssv.dll
<verificat> Windows Messenger

C:\Program Files\Messenger\msmsgs.exe
<verificat> NPRuntime Script Plug-in Library for Java(TM)

Depl C:\Program Files\Mozilla

Firefox\plugins\npdeploytk.dll
<verificat> 1.7.0069.3

C:\Program Files\Mozilla

Firefox\plugins\npLegitCheckPlugin.dll
<verificat> Default Plug-in

C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
<verificat> Adobe PDF Plug-In For Firefox and Netscape

C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
<verificat> RealPlayer(tm) LiveConnect-Enabled Plug-In

C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
<verificat> Yahoo! Messenger

C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
<verificat> Yahoo Application State Plugin

C:\Program Files\Yahoo!\Shared\npYState.dll
<verificat> Adobe® Flash® Player ActiveX Installer

C:\WINDOWS\Downloaded Program

Files\FP_AX_CAB_INSTALLER.exe
<verificat> Facebook Photo Uploader 5 Control

C:\WINDOWS\Downloaded Program Files\PhotoUploader55.ocx
<verificat> Network Diagnostic for Windows XP

C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
<verificat> Internet Explorer

C:\WINDOWS\system32\ieframe.dll
<verificat> NPSWF32.dll

C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
<verificat> Microsoft Windows Sockets 2.0 Service Provider

C:\WINDOWS\system32\mswsock.dll
<verificat> Microsoft Windows Rsvp 1.0 Service Provider

C:\WINDOWS\system32\rsvpsp.dll
<verificat> LDAP RnR Provider DLL

C:\WINDOWS\system32\winrnr.dll
<verificat> Windows Sockets Helper DLL

C:\WINDOWS\system32\wshbth.dll


Fichiers manquants:
-------------
Pas trouve: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
mentionne dans:

HLKM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.

12.69\"Path"

Pas trouve: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
mentionne dans:

HLKM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.

3.69\"Path"

Pas trouve: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
mentionne dans:

HLKM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0

.12.69\"Path"


Scanare
-------

Nici un fişier nu a fost uploadat.

Scanarea s-a încheiat - comunicarea a durat 1 sec
Trafic total - 0.05 MB trimişi, 2.56 KB primiţi
S-au scanat 963 fişiere şi module - 145 secunde

Configuration: Windows XP
Firefox 3.0.15