Posez votre question Format imprimable Liste des forums Aidez-les Statistiques Rechercher Charte Forum Virus-Sécurité

Virus W32.sillyDC puis acces disque refusé

Dernière réponse le 12 jan 2008 à 14:18:23 jpav, le 1 jan 2008 à 18:09:34

Signaler ce message aux modérateurs

Bonjour,
Bonjour,
Mon PC (sous XP familial) a été infesté par W32.sillyDC.
Il semble que NORTON l'a éliminé (le scan complet par NORTON et AVAST ne signale plus rien) et l'ordi a l'air de marcher normalement.
NEANMOINS, je n'ai plus acces aux disques C, D et G (un WD externe par USB) par l'icone correspondante du poste d etravail; il me dit "acces disque refusé"; en revanche, je peux accéder à tous mes fichiers par les autres icones ou raccourcis, ou par l'explorateur (ce qui me rassure et me permet de travailler).
Mais, pouvez vous m'aider à
- vérifier si le virus est bien éradiqué
- corriger le pb d'accès aux disques.
Merci d'avance et bonne année à tous (sans virus, si possible !!).

Configuration: Windows XP
Internet Explorer 7.0

Meilleures réponses pour « virus W32.sillyDC puis acces disque refusé » dans :

Virus w32 gamina.ag (Résolu) Voir

Accès disque toutes les secondes Voir

Probleme avec svchost.exe (virus W32.Jeefo.) Voir

[Windows] Accès au registre / gestionnaire des tâches refusé VoirLe message "L'accès à la base de registre a été désactivé par votre administrateur" s'affiche. Il peut s'agir d'un trojan ou d'un virus qui ait désactivé l'accès à la base de registre. Procéder comme suit : Mettre à jour l'antivirus (Aussi bien le...

[Virus] Kit de désinfection pour éradiquer W32/Beagle@mm (Bagle) VoirNom des variantes Beagle/bagle Kits de désinfection Nom des variantes Beagle/bagle Plusieurs éditeurs ont mis au point des kits de désinfection permettant de supprimer les variantes suivantes du Virus W32.Beagle@mm, appelé aussi Win32.Bagle...

[Virus] Kit de désinfection pour éradiquer W32/MyDoom VoirPlusieurs éditeurs ont mis au point des kits de désinfection permettant de supprimer les variantes suivantes du Virus W32.MyDoom@mm : W32.Mydoom.A@mm W32.Mydoom.B@mm W32.Mydoom.F@mm W32.Mydoom.G@mm W32.Mydoom.H@mm W32.Mydoom.L@mm ...

Acces disque permanent avec vista Voir

PB accès disque dur refusé après formatage Voir

Disque dur externe reconnu mais accès refusé (Résolu) Voir

Ok réessai tes lecteurs "Impossible is nothing"

Posez votre question Répondre

Regis59, le 1 jan 2008 à 19:00:32

Bienvenue sur le forum d’entraide de CommentCaMarche.net

Nous connaissons votre situation et nous vous conseillons de ne surtout pas vous inquiéter.
De plus, au vu du nombre croissant de désinfections effectuées sur le forum, nous vous demandons un peu de patience et surtout de ne pas créer plusieurs postes pour le même problème.
Merci de votre compréhension.

Télécharge HijackThis ici:
http://telechargement.zebulon.fr/138-hijackthis-1991.html

Dézippe le dans un dossier prévu à cet effet.
Par exemple C:\hijackthis < Enregistre-le bien dans c : !
Démo : (Merci a Balltrap34 pour cette réalisation)
http://pageperso.aol.fr/balltrap34/Hijenr.gif

Lance le puis:
Clique sur "do a system scan and save logfile" (cf démo)
Faire un copier coller du log entier sur le forum

Démo : (Merci a Balltrap34 pour cette réalisation)
http://pageperso.aol.fr/balltrap34/demohijack.htm

Bon courage

A+

"Impossible is nothing"

Répondre à Regis59

jpav, le 1 jan 2008 à 19:14:08

Merci Regis 59,
Voilà le rapport de Hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:10:40, on 01/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\Wireless Console\wcourier.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Ulead Systems\Ulead InstaMedia 3.0\Monitor.exe
C:\Program Files\Ulead Systems\Ulead InstaMedia 3.0\RMC.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ASUS\Asus ChkMail\ChkMail.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\DOCUME~1\clem\LOCALS~1\Temp\Répertoire temporaire 1 pour HiJackThis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,System
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe
O4 - HKLM\..\Run: [Wireless Console] C:\Program Files\ASUS\Wireless Console\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Matchlock Scheduling] C:\Program Files\Ulead Systems\Ulead InstaMedia 3.0\Monitor.exe
O4 - HKLM\..\Run: [Ulead Remote Control Center] C:\Program Files\Ulead Systems\Ulead InstaMedia 3.0\RMC.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\ASUS\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart17.exe
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O16 - DPF: {05D96F71-87C6-11D3-9BE4-00902742D6E0} (QuickPlace Class) - http://fr2.mayetic.com/qp2.cab
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - http://www.nanoscan.com/as/cabs/ascstubie.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
End of file - 10777 bytes

Merci pour ton aide et bonne année !!

A+

JPAV

Répondre à jpav

Regis59, le 1 jan 2008 à 19:21:28

Meilleurs voeux :)

Télécharge Combofix sUBs : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
et sauvegarde le sur ton bureau et pas ailleurs!

Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider.
Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.

Copie/colle un nouveau rapport HiJackThis avec.
"Impossible is nothing"

Répondre à Regis59

jpav, le 1 jan 2008 à 19:29:15

Regis59,
Voilà le rapport de COMBOFIX

ComboFix 07-12-31.4 - clem 2008-01-01 19:25:10.1 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.506 [GMT 1:00]
Running from: C:\Documents and Settings\clem\Bureau\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\Documents and Settings\All Users\Application Data\Starware354
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\748_button_1b_def.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\748_button_1b_over.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\750_button_1b_def.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\FindIt.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\FindItHot.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\findithotxp.png
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\finditxp.png
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\Green_Card0.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\logo.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\logoxp.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\Rencontres0.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\buttons\Screensavers0.bmp
C:\Documents and Settings\All Users\Application Data\Starware354\contexts\error.xml
C:\Documents and Settings\All Users\Application Data\Starware354\contexts\Related.xml
C:\Documents and Settings\All Users\Application Data\Starware354\contexts\Travel.xml
C:\Documents and Settings\All Users\Application Data\Starware354\SimpleUpdate\ProductMessagingConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware354\SimpleUpdate\ProductMessagingConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware354\SimpleUpdate\SimpleUpdateConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware354\SimpleUpdate\SimpleUpdateConfig.xml.backup
C:\Documents and Settings\All Users\Application Data\Starware354\SimpleUpdate\TimerManagerConfig.xml
C:\Documents and Settings\All Users\Application Data\Starware354\SimpleUpdate\TimerManagerConfig.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354
C:\Documents and Settings\clem\Application Data\Starware354\BrowserSearch\BrowserSearch.xml
C:\Documents and Settings\clem\Application Data\Starware354\BrowserSearch\BrowserSearch.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\Configurator\Configurator.xml
C:\Documents and Settings\clem\Application Data\Starware354\Configurator\Configurator.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\ErrorSearch\ErrorSearchOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\ErrorSearch\ErrorSearchOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\Green_Card\Green_CardOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\Green_Card\Green_CardOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\Layouts\ToolbarLayout.xml
C:\Documents and Settings\clem\Application Data\Starware354\Layouts\ToolbarLayout.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\Manager\ManagerOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\Manager\ManagerOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\Rechercher_de_recettes\Rechercher_de_recettesOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\Rechercher_de_recettes\Rechercher_de_recettesOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\Recipe_RSS\Recipe_RSSOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\Recipe_RSS\Recipe_RSSOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\RelatedSearch\RelatedSearchOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\RelatedSearch\RelatedSearchOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\Rencontres\RencontresOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\Rencontres\RencontresOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\Screensavers\ScreensaversOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\Screensavers\ScreensaversOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\Toolbar\TBProductsOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\Toolbar\TBProductsOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\ToolbarLogo\ToolbarLogoOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\ToolbarLogo\ToolbarLogoOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\ToolbarSearch\ToolbarSearchOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\ToolbarSearch\ToolbarSearchOptions.xml.backup
C:\Documents and Settings\clem\Application Data\Starware354\TravelSearch\TravelSearchOptions.xml
C:\Documents and Settings\clem\Application Data\Starware354\TravelSearch\TravelSearchOptions.xml.backup
C:\Program Files\Starware354
C:\Program Files\Starware354\icons\star_16.ico
C:\Program Files\Starware354\Starware354Config.xml
C:\Program Files\Starware354\Starware354Uninstall.exe
D:\Autorun.inf
G:\Autorun.inf

.
((((((((((((((((((((((((((((( Fichiers créés 2007-12-01 to 2008-01-01 ))))))))))))))))))))))))))))))))))))
.

2008-01-01 19:24 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-01 19:08 . 2008-01-01 19:08 <REP> d-------- C:\hijackthis
2008-01-01 18:57 . 2008-01-01 18:57 <REP> d-------- C:\Program Files\CCleaner
2008-01-01 18:14 . 2008-01-01 18:14 <REP> d-------- C:\WINDOWS\LastGood
2008-01-01 18:14 . 2008-01-01 18:14 <REP> d-------- C:\Program Files\Panda Security
2007-12-31 10:37 . 2007-12-31 10:37 <REP> d-------- C:\Program Files\Alwil Software
2007-12-30 21:44 . 2007-12-30 21:44 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Intel
2007-12-30 21:43 . 2007-03-10 16:40 <REP> d-------- C:\Documents and Settings\Administrateur\WINDOWS
2007-12-30 21:43 . 2007-03-10 16:22 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
2007-12-30 21:43 . 2007-03-10 16:22 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2007-12-30 21:43 . 2007-03-10 16:22 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2007-12-30 21:43 . 2007-03-10 16:47 <REP> dr------- C:\Documents and Settings\Administrateur\Mes documents
2007-12-30 21:43 . 2007-03-10 16:22 <REP> d-------- C:\Documents and Settings\Administrateur\Menu Démarrer
2007-12-30 21:43 . 2007-03-10 16:47 <REP> dr------- C:\Documents and Settings\Administrateur\Favoris
2007-12-30 21:43 . 2007-03-10 16:22 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2007-12-30 21:43 . 2007-03-10 16:52 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Ulead Systems
2007-12-30 17:56 . 2007-12-30 17:56 <REP> d-------- C:\WINDOWS\system32\NtmsData
2007-12-30 13:17 . 2007-12-30 13:17 <REP> d--hs---- C:\FOUND.006
2007-12-30 10:07 . 2007-12-30 10:07 <REP> d--hs---- C:\FOUND.005
2007-12-26 09:13 . 2007-12-26 09:13 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-26 09:13 . 2007-12-26 09:13 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-25 17:00 . 2007-12-25 17:00 <REP> d-------- C:\Documents and Settings\clem\Application Data\My Games
2007-12-25 16:45 . 2007-12-25 16:45 <REP> d-------- C:\Program Files\Firaxis Games
2007-12-25 16:44 . 2005-05-26 15:34 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-12-10 19:45 . 2007-12-10 19:45 <REP> d--hs---- C:\FOUND.004
2007-12-05 13:55 . 2007-12-05 13:55 <REP> d--hs---- C:\FOUND.003

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-30 21:27 --------- d-----w C:\Documents and Settings\clem\Application Data\dvdcss
2007-11-28 20:47 --------- d-----w C:\Program Files\Western Digital Technologies
2007-11-24 16:29 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF
2007-11-24 16:29 60,800 ----a-w C:\WINDOWS\system32\S32EVNT1.DLL
2007-11-24 16:29 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-11-24 16:29 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2007-11-24 16:04 3,861,320 ----a-w C:\Program Files\eMule0.48a-Installer2.exe
2007-11-24 16:04 --------- d-----w C:\Program Files\eMule
2007-11-24 15:48 --------- d-----w C:\Documents and Settings\clem\Application Data\vlc
2007-11-24 15:38 --------- d-----w C:\Program Files\VideoLAN
2007-11-24 15:31 9,679,815 ----a-w C:\Program Files\vlc-0.8.6c-win32.exe
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-02 10:24 13,411,824 ----a-w C:\Program Files\Google_Earth_BZXV.exe
2007-10-31 03:53 3,590,656 ------w C:\WINDOWS\system32\dllcache\mshtml.dll
2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll
2007-10-25 16:43 8,516,608 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll
2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll
2007-10-11 06:13 474,624 ----a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
2007-10-11 06:13 152,064 ----a-w C:\WINDOWS\system32\dllcache\cdfview.dll
2007-10-11 06:13 1,495,040 ----a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
2007-10-11 06:13 1,056,768 ----a-w C:\WINDOWS\system32\dllcache\danim.dll
2007-10-11 06:13 1,024,000 ----a-w C:\WINDOWS\system32\dllcache\browseui.dll
2007-10-10 23:49 824,832 ------w C:\WINDOWS\system32\dllcache\wininet.dll
2007-10-10 23:49 671,232 ------w C:\WINDOWS\system32\dllcache\mstime.dll
2007-10-10 23:49 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll
2007-10-10 23:49 6,065,664 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
2007-10-10 23:49 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-10-10 23:49 478,208 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-10-10 23:49 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-10-10 23:49 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll
2007-10-10 23:49 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll
2007-10-10 23:49 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-10-10 23:49 27,648 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-10-10 23:49 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll
2007-10-10 23:49 232,960 ------w C:\WINDOWS\system32\dllcache\webcheck.dll
2007-10-10 23:49 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll
2007-10-10 23:49 214,528 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll
2007-10-10 23:49 193,024 ------w C:\WINDOWS\system32\dllcache\msrating.dll
2007-10-10 23:49 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll
2007-10-10 23:49 132,608 ------w C:\WINDOWS\system32\dllcache\extmgr.dll
2007-10-10 23:49 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll
2007-10-10 23:49 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll
2007-10-10 23:49 102,400 ------w C:\WINDOWS\system32\dllcache\occache.dll
2007-10-10 23:49 1,159,680 ------w C:\WINDOWS\system32\dllcache\urlmon.dll
2007-10-10 11:01 625,152 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
2007-10-10 11:00 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2007-10-10 10:59 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-10-10 05:46 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
2007-10-01 13:49 542,088 ----a-w C:\WINDOWS\system32\SymNeti.dll
2007-10-01 13:49 161,160 ----a-w C:\WINDOWS\system32\SymRedir.dll
2007-08-27 11:57 3,853,117 ----a-w C:\Program Files\setup_oC305PE2.exe
2007-03-23 22:36 1,708,697 ----a-w C:\Program Files\jidelna-v.mov
2007-03-23 11:39 20,928,336 ----a-w C:\Program Files\SkypeSetup.exe
2007-03-14 16:15 17,929,072 ----a-w C:\Program Files\Install_Messenger.exe
1999-07-07 01:00 6 --sh--r C:\WINDOWS\@desktop@.dat
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55 5674352]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS Live Update"="C:\Program Files\ASUS\ASUS Live Update\ALU.exe" [2003-09-19 12:54 172032]
"Wireless Console"="C:\Program Files\ASUS\Wireless Console\wcourier.exe" [2005-07-22 14:36 57344]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-05-11 06:03 708697]
"Matchlock Scheduling"="C:\Program Files\Ulead Systems\Ulead InstaMedia 3.0\Monitor.exe" [2005-07-05 23:22 45056]
"Ulead Remote Control Center"="C:\Program Files\Ulead Systems\Ulead InstaMedia 3.0\RMC.exe" [2005-05-27 08:09 49152]
"ccApp"="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-02-22 12:08 52840]
"RemoteControl"="C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe" [2004-11-02 20:24 32768]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-05-31 22:46 401408]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-06-03 01:31 385024]
"EOUApp"="C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe" [2005-05-31 22:50 356352]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-02-16 10:54 282624]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-03-14 19:05 257088]
"Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 10:22 517768]
"RTHDCPL"="RTHDCPL.EXE" [2005-07-13 03:37 14679552 C:\WINDOWS\RTHDCPL.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

C:\Documents and Settings\clem\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2007-03-24 14:41:25]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
ASUS ChkMail.lnk - C:\Program Files\ASUS\Asus ChkMail\ChkMail.exe [2007-03-10 16:40:08]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 04:44:06]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 21:05:56]
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2004-12-22 13:42:30]
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2007-03-24 14:41:25]
Acc‚l‚rateur de d‚marrage AutoCAD.lnk - C:\Program Files\Fichiers communs\Autodesk Shared\acstart17.exe [2006-03-05 14:43:54]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
C:\Program Files\Intel\Wireless\Bin\LgNotify.dll 2005-05-31 22:46 110592 C:\Program Files\Intel\Wireless\Bin\LgNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-08-05 14:00 15360 --a------ C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControl]
2005-07-06 20:26 102400 --a------ C:\WINDOWS\ATK0100\HControl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]
System

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 11:50 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NWEReboot]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE2]
2003-05-08 11:00 49152 --a------ C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zshutdown]
c:\sysprep\patch\sysprep.cmd

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WMPNetworkSvc"=3 (0x3)
"SPBBCSvc"=2 (0x2)
"LxrSII1s"=2 (0x2)
"ITECIRService"=2 (0x2)

R2 LxrSII1d;Secure II Driver;C:\WINDOWS\system32\Drivers\LxrSII1d.sys [2006-01-10 10:52]
R2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique;"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe" [2006-08-03 17:29]
R3 AVerE506;AVerE506 service;C:\WINDOWS\system32\DRIVERS\AVerE506.sys [2005-06-14 11:12]
R3 ITECIR;ITE CIR Driver;C:\WINDOWS\system32\DRIVERS\ITECIR.sys [2004-04-22 15:03]
R3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D.sys [2004-07-06 19:56]
S3 Asushwio;Asushwio;C:\WINDOWS\system32\drivers\Asushwio.sys [2000-03-29 14:17]
S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;C:\WINDOWS\system32\DNINDIS5.SYS [2003-07-24 12:10]
S3 WPN111;Wireless USB 2.0 Adapter with RangeMax Service;C:\WINDOWS\system32\DRIVERS\WPN111.sys []
S4 ITECIRService;ITE Remote Control Service;C:\WINDOWS\system32\RemoteControlService.exe [2005-05-16 14:09]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\C]
\Shell\AutoRun\command - C:\
\Shell\explore\Command - RECYCLED\INFO.exe
\Shell\open\Command - RECYCLED\INFO.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
\Shell\AutoRun\command - D:\
\Shell\explore\Command - RECYCLED\INFO.exe
\Shell\open\Command - RECYCLED\INFO.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0a25b81e-6c6e-11dc-8991-0013ce6fb3e6}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4473d0e6-da1f-11db-a6ae-0013ce6fb3e6}]
\Shell\AutoRun\command - F:\Autorun.exe /run
\Shell\Shell00\Command - F:\Autorun.exe /run
\Shell\Shell01\Command - F:\Autorun.exe /action
\Shell\Shell02\Command - F:\Autorun.exe /uninstall

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{81ba20a2-5947-11dc-8953-806d6172696f}]
\Shell\AutoRun\command - D:\
\Shell\explore\Command - RECYCLED\INFO.exe
\Shell\open\Command - RECYCLED\INFO.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ad8b8040-cf22-11db-a687-806d6172696f}]
\Shell\AutoRun\command - C:\
\Shell\explore\Command - RECYCLED\INFO.exe
\Shell\open\Command - RECYCLED\INFO.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dd4731b4-9b71-11dc-8a10-0013ce6fb3e6}]
\Shell\AutoRun\command - G:\
\Shell\explore\Command - RECYCLED\INFO.exe
\Shell\open\Command - RECYCLED\INFO.exe

*Newly Created Service* - PROCEXP90
*Newly Created Service* - RKPAVPROC
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2007-12-14 19:24:56 C:\WINDOWS\Tasks\Norton AntiVirus - Effectuer une analyse complète du système - clem.job"
- C:\PROGRA~1\NORTON~1\Navw32.exeh/TASK:
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-01 19:27:15
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-01 19:27:43
C:\qoobox\ComboFix-quarantined-files.txt 2008-01-01 18:27:42
.
2007-12-31 08:31:34 --- E O F ---

A+

JPAV

Répondre à jpav

jpav, le 1 jan 2008 à 19:48:26

Regis59,

J'avais lancé un
Est ce que cela aide

;*************************
ANALYSIS: 2008-01-01 19:30:42
PROTECTIONS: 1
MALWARE: 40
SUSPECTS: 0
;*************************
PROTECTIONS
Description
;=========================
Norton AntiVirus 2006
;=========================
MALWARE
Id Description
;=========================
00139060 Cookie/Casalemedia
00139061 Cookie/Doubleclick
00139064 Cookie/Atlas DMT
00145393 Cookie/Tradedoubler
00145393 Cookie/Tradedoubler
00145393 Cookie/Tradedoubler
00145405 Cookie/RealMedia
00145405 Cookie/RealMedia
00145457 Cookie/FastClick
00145457 Cookie/FastClick
00145731 Cookie/Tribalfusion
00145732 Cookie/Falkag
00145738 Cookie/Mediaplex
00145738 Cookie/Mediaplex
00145738 Cookie/Mediaplex
00159564 Cookie/WUpd
00167642 Cookie/Com.com
00167704 Cookie/Xiti
00167709 Cookie/fe.lea.lycos
00167744 Cookie/GoStats
00167749 Cookie/Toplist
00167753 Cookie/Statcounter
00167753 Cookie/Statcounter
00168048 Cookie/Overture
00168056 Cookie/YieldManager
00168056 Cookie/YieldManager
00168061 Cookie/Apmebf
00168090 Cookie/Serving-sys
00168090 Cookie/Serving-sys
00168090 Cookie/Serving-sys
00168093 Cookie/Serving-sys
00168093 Cookie/Serving-sys
00168093 Cookie/Serving-sys
00168102 Cookie/Falkag
00168106 Cookie/Weborama
00168106 Cookie/Weborama
00168106 Cookie/Weborama
00168106 Cookie/Weborama
00168106 Cookie/Weborama
00168109 Cookie/Adtech
00168116 Cookie/Comclick
00169190 Cookie/Advertising
00169190 Cookie/Advertising
00169287 Cookie/Adrevolver
00170304 Cookie/WebtrendsLive
00170304 Cookie/WebtrendsLive
00170495 Cookie/PointRoll
00170495 Cookie/PointRoll
00170495 Cookie/PointRoll
00170554 Cookie/Overture
00170554 Cookie/Overture
00170554 Cookie/Overture
00170556 Cookie/RealMedia
00171982 Cookie/QuestionMarket
00171982 Cookie/QuestionMarket
00172449 Cookie/MetriWeb
00173520 Cookie/Bluestreak
00184846 Cookie/Adrevolver
00199984 Cookie/Searchportal
00207936 Cookie/Adviva
00207936 Cookie/Adviva
00273339 Cookie/Smartadserver
00273339 Cookie/Smartadserver
00273339 Cookie/Smartadserver
02887375 Adware/Starware
02888324 Trj/Lineage.GVV
02888324 Trj/Lineage.GVV
;=========================
SUSPECTS
Location
;=========================
;=========================

JPAV scan online avec Panda avant notre discussion; voilà le rapport avec détection de virus sur mon disque externe G: ton diagnostic ? ********************************************************************************************************************************************************** ********************************************************************************************************************************************************** Version Active Updated ========================================================================================================================================================== 2005 Yes Yes ========================================================================================================================================================== Type Active Severity Disinfectable Disinfected Location ========================================================================================================================================================== TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@casalemedia[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@doubleclick[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@atdmt[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@tradedoubler[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@tradedoubler[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@tradedoubler[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@247realmedia[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@247realmedia[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@fastclick[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@fastclick[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@tribalfusion[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@as-eu.falkag[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@mediaplex[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@mediaplex[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@mediaplex[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@revenue[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@com[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@xiti[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@fe.lea.lycos[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@gostats[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@toplist[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@statcounter[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@statcounter[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@perf.overture[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@ad.yieldmanager[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@ad.yieldmanager[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@apmebf[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@serving-sys[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@serving-sys[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@serving-sys[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@bs.serving-sys[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@bs.serving-sys[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@bs.serving-sys[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@as1.falkag[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@weborama[5].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@weborama[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@weborama[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@facebook[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@weborama[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@adtech[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@fl01.ct2.comclick[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@advertising[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@advertising[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@adrevolver[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@statse.webtrendslive[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@statse.webtrendslive[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@ads.pointroll[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@ads.pointroll[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@ads.pointroll[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@overture[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@overture[3].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@overture[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@realmedia[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@questionmarket[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@questionmarket[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@metriweb[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@bluestreak[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@adrevolver[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@searchportal.information[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@adviva[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@adviva[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@smartadserver[1].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@smartadserver[2].txt TrackingCookie No 0 Yes No C:\Documents and Settings\CLEM\Cookies\clem@smartadserver[4].txt Adware No 0 Yes No C:\System Volume Information\_restore{2A87055D-FCC1-4C83-B05F-7D9EAA393733}\RP198\A0041202.DLL Virus/Trojan No 1 Yes No G:\System Volume Information\_restore{C7573461-46F2-4697-9611-314166CD6D59}\RP212\A0017979.INF Virus/Trojan No 1 Yes No G:\System Volume Information\_restore{9A6782E4-5778-483D-A0D6-883114E1C06E}\RP257\A0027656.INF ========================================================================================================================================================== ========================================================================================================================================================== ==========================================================================================================================================================

Répondre à jpav

Regis59, le 1 jan 2008 à 19:58:54

Ok réessai tes lecteurs
"Impossible is nothing"

Répondre à Regis59

jpav, le 1 jan 2008 à 20:37:49

Merci Régis59 ! Super, j'ai à nouveau acès à mes disques !
Mais quid du virus détecté par Panda sur mon disque G: ? Faut-il faire qqchose de plus ?

JPAV

Répondre à jpav

Regis59, le 2 jan 2008 à 12:21:48

Re,

J'avais pas vu le rapport, c'est soit des cookies soit localisé dans la restauration systeme donc neutralisés, rien de grave.
Ou en sont tes soucis?

A+
"Impossible is nothing"

Répondre à Regis59

jpav, le 2 jan 2008 à 17:01:01

Merci beaucoup de ton aide Régis59; le pb d'accès aux disques durs est réglé. C'est parfait.
Pb résolu.
Bonne année et bravo pour ton efficacité dans le dépannage des internautes incompétents ...
A+

JPAV

Répondre à jpav

Regis59, le 2 jan 2008 à 21:22:09

Re JPAV;

De rien, et desormais attention a tes telechargements et tes surfs ;)

Meilleurs voeux.

A+
"Impossible is nothing"

Répondre à Regis59

jpav, le 3 jan 2008 à 23:12:38

Régis59,
Visiblement mon pb précédent n'est pas complètement terminé (loin de là); en effet, j'ai un deuxième PC, fixe celui là (par rapport au portable surlequel j'avais le pb précédent); entre les deux j'utilise un disque dur USB transportable.
J'ai branché ce disque transportable sur mon fixe et rebelote il se bloque.
J'ai procédé comme recommandé sur le site en faisant les 4 opérations préalables (ccleaner, avg,bitdefendeer et hijackthis).
Je te poste les reports

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 20:37:15 03/01/2008

+ Résultat de l'analyse:

HKU\S-1-5-21-725345543-1960408961-2147196821-1003\Software\Microsoft\Internet Explorer\SearchScopes\{7F41B871-1AB8-4721-A304-7B8F25CCB672}\\URL -> Adware.WinFixer : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@2o7[3].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@aolfr.122.2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@adrevolver[1].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@adtech[1].txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@advertising[2].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@advertising[2].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@adviva[2].txt -> TrackingCookie.Adviva : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@atdmt[3].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@atdmt[1].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@atdmt[1].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@atdmt[3].txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@bluestreak[3].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@doubleclick[2].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@doubleclick[2].txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@estat[1].txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@fastclick[2].txt -> TrackingCookie.Fastclick : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@ehg-danieljouvance.hitbox[2].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@hitbox[1].txt -> TrackingCookie.Hitbox : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@searchportal.information[1].txt -> TrackingCookie.Information : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@sales.liveperson[1].txt -> TrackingCookie.Liveperson : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@mediaplex[2].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@mediaplex[2].txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@revenue[2].txt -> TrackingCookie.Revenue : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@bs.serving-sys[3].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@news.skype[1].txt -> TrackingCookie.Skype : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@smartadserver[2].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@smartadserver[3].txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@tradedoubler[3].txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@m.webtrends[2].txt -> TrackingCookie.Webtrends : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@m.webtrends[3].txt -> TrackingCookie.Webtrends : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@m.webtrends[2].txt -> TrackingCookie.Webtrends : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@m.webtrends[2].txt -> TrackingCookie.Webtrends : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@m.webtrends[2].txt -> TrackingCookie.Webtrends : Ignoré.
C:\Documents and Settings\Caroline\Cookies\caroline@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\Documents and Settings\Clémentine\Cookies\clémentine@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@zedo[1].txt -> TrackingCookie.Zedo : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@zedo[2].txt -> TrackingCookie.Zedo : Ignoré.
C:\Documents and Settings\Martine\Cookies\martine@zedo[3].txt -> TrackingCookie.Zedo : Ignoré.

Fin du rapport

BITDEFENDER

BitDefender Online Scanner

Scan report generated at: Thu, Jan 03, 2008 - 22:59:06

Scan path: A:\;C:\;D:\;E:\;F:\;G:\;H:\;I:\;

Statistics

Time
02:16:37

Files
635306

Folders
16172

Boot Sectors
7

Archives
105337

Packed Files
17829

Results

Identified Viruses
6

Infected Files
361

Suspect Files
1

Warnings
0

Disinfected
0

Deleted Files
361

Engines Info

Virus Definitions
885280

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
14

Archive plugins
38

Unpack plugins
7

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\=>Master Boot Record 81
Infected with: Parity_Boot.B (Boot image)

C:\=>Master Boot Record 81
Disinfection failed

C:\Autorun.inf
Infected with: Win32.Worm.VB.NPM

C:\Autorun.inf
Deleted

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)=>(message body)
Suspected of: Exploit.Iframe.Vulnerability

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)=>(message body)
Disinfection failed

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)=>(message body)
Deleted

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)
Updated

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)
Updated

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx
Update failed

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP430\A0104399.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP430\A0104399.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP430\A0104400.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP430\A0104400.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP430\A0104401.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP430\A0104401.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104448.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104448.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104449.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104449.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104453.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104453.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104482.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104482.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104483.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104483.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104484.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP431\A0104484.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104519.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104519.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104520.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104520.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104538.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104538.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104566.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104566.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104567.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104567.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104568.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104568.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104606.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104606.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104607.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104607.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104608.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104608.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104635.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104635.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104636.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104636.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104637.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP432\A0104637.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104654.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104654.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104655.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104655.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104656.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104656.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104693.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104693.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104694.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104694.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104695.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104695.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104723.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104723.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104724.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104724.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104725.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104725.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104743.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104743.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104744.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104744.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104745.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP433\A0104745.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104760.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104760.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104761.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104761.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104762.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104762.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104787.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104787.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104788.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104788.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104789.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP434\A0104789.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104940.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104940.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104941.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104941.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104942.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104942.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104959.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104959.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104960.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104960.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104961.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104961.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104992.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104992.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104993.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104993.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104994.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP435\A0104994.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105006.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105006.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105007.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105007.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105021.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105021.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105022.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105022.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105023.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105023.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105044.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105044.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105045.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105045.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105048.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105048.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105086.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105086.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105087.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105087.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105088.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP436\A0105088.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105101.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105101.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105102.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105102.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105103.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105103.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105156.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105156.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105157.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105157.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105158.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP437\A0105158.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP438\A0105174.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP438\A0105174.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP438\A0105175.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP438\A0105175.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP438\A0105176.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP438\A0105176.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105747.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105747.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105748.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105748.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105933.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105933.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105964.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105964.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105965.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105965.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105966.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105966.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105993.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105993.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105994.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105994.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105995.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0105995.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106016.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106016.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106017.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106017.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106018.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106018.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106038.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106038.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106039.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106039.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106040.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP439\A0106040.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106064.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106064.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106065.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106065.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106066.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106066.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106087.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106087.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106088.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106088.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106089.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0106089.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0107092.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0107092.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0107093.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0107093.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0107094.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP440\A0107094.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107116.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107116.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107117.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107117.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107118.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107118.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107140.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107140.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107141.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107141.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107142.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107142.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107173.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107173.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107174.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107174.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107175.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107175.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107192.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107192.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107193.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107193.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107194.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP441\A0107194.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107231.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107231.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107232.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107232.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107233.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107233.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107253.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107253.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107254.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107254.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107255.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107255.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107282.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107282.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107283.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107283.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107284.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP442\A0107284.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107318.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107318.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107319.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107319.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107320.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107320.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107346.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107346.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107347.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107347.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107348.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107348.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107373.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107373.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107374.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107374.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107375.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107375.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107390.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107390.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107391.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107391.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107392.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107392.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107419.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107419.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107420.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107420.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107421.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107421.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107451.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107451.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107452.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107452.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107453.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107453.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107468.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107468.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107469.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107469.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107470.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP443\A0107470.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107493.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107493.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107494.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107494.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107500.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107500.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107536.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107536.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107537.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107537.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107538.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107538.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107583.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107583.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107584.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107584.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107585.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107585.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107600.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107600.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107601.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107601.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107602.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP444\A0107602.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107627.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107627.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107628.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107628.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107639.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107639.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107676.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107676.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107677.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107677.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107678.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP445\A0107678.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107698.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107698.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107699.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107699.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107700.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107700.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107751.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107751.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107752.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107752.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107753.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107753.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107780.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107780.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107781.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107781.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107782.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP446\A0107782.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107801.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107801.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107802.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107802.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107808.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107808.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107847.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107847.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107848.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107848.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107849.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107849.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107876.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107876.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107877.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107877.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107878.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP447\A0107878.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107911.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107911.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107912.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107912.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107958.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107958.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107959.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107959.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107960.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0107960.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0108002.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0108002.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0108003.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0108003.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0108004.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP448\A0108004.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0108101.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0108101.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0108102.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0108102.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0108103.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0108103.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0109138.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0109138.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0109139.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0109139.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0109140.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP449\A0109140.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP450\A0109280.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP450\A0109280.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP450\A0109281.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP450\A0109281.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP450\A0109282.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP450\A0109282.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP450\A0109298.exe
Infected with: Win32.Wor

Répondre à jpav

Regis59, le 4 jan 2008 à 12:39:22

Salut

Supprime tout ce que AVG a trouvé.
Et relance un scan AVG et Bitdefender.

A+
"Impossible is nothing"

Répondre à Regis59

jpav, le 4 jan 2008 à 13:31:22

Régis59,
J'avais déjà supprimé ce que AVG avait détecté avant de lancer bitdefender.
Donc le rapport de bitdefender est après suppression du résultat d'AVG.

Néanmoins, ok, Je relance AVG, puis bitdefender
A+
JPAV

Répondre à jpav

Regis59, le 4 jan 2008 à 13:55:03

Ok :)

A+
"Impossible is nothing"

Répondre à Regis59

jpav, le 4 jan 2008 à 17:40:26

Régis59,
Voilà les deux rapports:
- AVG; j'ai détruit les pb trouvés
- bitdefender

Il n'y a pas l'air d'avoir beaucoup de différences avec le précédent (lrs virus détruits la fois précédente sont revenus !)

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 14:47:23 04/01/2008

+ Résultat de l'analyse:

C:\Documents and Settings\Jean-Pascal\Cookies\jean-pascal@fnac.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\Jean-Pascal\Cookies\jean-pascal@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\Jean-Pascal\Cookies\jean-pascal@doubleclick[2].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\Martine\Cookies\martine@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\Jean-Pascal\Cookies\jean-pascal@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\Martine\Cookies\martine@mediaplex[1].txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
C:\Documents and Settings\Jean-Pascal\Cookies\jean-pascal@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Aucune action entreprise.
C:\Documents and Settings\Jean-Pascal\Cookies\jean-pascal@revsci[2].txt -> TrackingCookie.Revsci : Aucune action entreprise.
C:\Documents and Settings\Jean-Pascal\Cookies\jean-pascal@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\Jean-Pascal\Cookies\jean-pascal@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\Anne-Sophie\Cookies\anne-sophie@weborama[1].txt -> TrackingCookie.Weborama : Aucune action entreprise.

Fin du rapport

BitDefender Online Scanner

Scan report generated at: Fri, Jan 04, 2008 - 17:16:39

Scan path: A:\;C:\;D:\;E:\;F:\;G:\;H:\;I:\;

Statistics

Time
02:27:29

Files
638424

Folders
16181

Boot Sectors
7

Archives
105361

Packed Files
17902

Results

Identified Viruses
5

Infected Files
9

Suspect Files
1

Warnings
0

Disinfected
0

Deleted Files
9

Engines Info

Virus Definitions
885394

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
14

Archive plugins
38

Unpack plugins
7

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\=>Master Boot Record 81
Infected with: Parity_Boot.B (Boot image)

C:\=>Master Boot Record 81
Disinfection failed

C:\Autorun.inf
Infected with: Win32.Worm.VB.NPM

C:\Autorun.inf
Deleted

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)=>(message body)
Suspected of: Exploit.Iframe.Vulnerability

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)=>(message body)
Disinfection failed

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)=>(message body)
Deleted

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)
Updated

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx=>(message 8)
Updated

C:\Documents and Settings\Clémentine\Local Settings\Application Data\Identities\{D3D9DC56-81ED-4EFB-855B-0C45074D78E7}\Microsoft\Outlook Express\Clémence (1).dbx
Update failed

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP453\A0109750.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP453\A0109750.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP453\A0109751.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP453\A0109751.exe
Deleted

C:\WINDOWS\Config\Svchost.exe
Infected with: Win32.Worm.VB.NPM

C:\WINDOWS\Config\Svchost.exe
Deleted

C:\WINDOWS\Config\System.exe
Infected with: Win32.Worm.VB.NPM

C:\WINDOWS\Config\System.exe
Deleted

D:\Autorun.inf
Infected with: Win32.Worm.VB.NPM

D:\Autorun.inf
Deleted

E:\Autorun.inf
Infected with: Win32.Worm.VB.NPM

E:\Autorun.inf
Deleted

I:\Autorun.inf
Infected with: Win32.Worm.VB.NPM

I:\Autorun.inf
Deleted

Merci de ton aide.

JPAV

Répondre à jpav

jpav, le 6 jan 2008 à 13:40:55

Régis59,
J'ai réussi, en suivant les conseils de commentcamarche, à supprimer le virus Parity boot B (merci SOPHOS), et à désinfecter mon disque amoviblke I:.
Mais, je n'arrive pas à me débarrasser de Worm VB-NPM détecté par Bitdefender; à chaque fois, il dit le détruire mais au passage suivant il est toujours là. Je l'ai fait également en mode sans échec.
Comment ce fait-il également qu'il n'est pas détecté par Avast que j'ai en résident.

Je te poste le dernier rapport de bitdefender.

Merci de ton aide.

BitDefender Online Scanner

Scan report generated at: Sat, Jan 05, 2008 - 20:12:54

Scan path: A:\;C:\;D:\;E:\;F:\;G:\;H:\;

Statistics

Time
01:59:34

Files
634597

Folders
15586

Boot Sectors
5

Archives
105422

Packed Files
18089

Results

Identified Viruses
3

Infected Files
40

Suspect Files
1

Warnings
0

Disinfected
0

Deleted Files
41

Engines Info

Virus Definitions
885548

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
14

Archive plugins
38

Unpack plugins
7

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\Autorun.inf
Infected with: Win32.Worm.VB.NPM

C:\Autorun.inf
Deleted

C:\RECYCLER\S-1-5-21-725345543-1960408961-2147196821-1003\Dc46.dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)=>(message body)
Suspected of: Exploit.Iframe.Vulnerability

C:\RECYCLER\S-1-5-21-725345543-1960408961-2147196821-1003\Dc46.dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)=>(message body)
Disinfection failed

C:\RECYCLER\S-1-5-21-725345543-1960408961-2147196821-1003\Dc46.dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)=>(message body)
Deleted

C:\RECYCLER\S-1-5-21-725345543-1960408961-2147196821-1003\Dc46.dbx=>(message 8)=>[Subject: Introduction on ADSL][Date: Wed, 2 Apr 2003 11:23:44 +0200 (CEST)]=>(MIME part)
Updated

C:\RECYCLER\S-1-5-21-725345543-1960408961-2147196821-1003\Dc46.dbx=>(message 8)
Updated

C:\RECYCLER\S-1-5-21-725345543-1960408961-2147196821-1003\Dc46.dbx
Update failed

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109965.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109965.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109966.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109966.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109967.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109967.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110206.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110206.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110207.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110207.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110208.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110208.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111206.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111206.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111207.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111207.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111208.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111208.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112227.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112227.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112228.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112228.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112229.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112229.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112685.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112685.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112686.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112686.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112687.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112687.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112805.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112805.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112806.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112806.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112807.inf
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112807.inf
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112826.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112826.exe
Deleted

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112827.exe
Infected with: Win32.Worm.VB.NPM

C:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112827.exe
Deleted

C:\WINDOWS\Config\Svchost.exe
Infected with: Win32.Worm.VB.NPM

C:\WINDOWS\Config\Svchost.exe
Deleted

C:\WINDOWS\Config\System.exe
Infected with: Win32.Worm.VB.NPM

C:\WINDOWS\Config\System.exe
Deleted

D:\Autorun.inf
Infected with: Win32.Worm.VB.NPM

D:\Autorun.inf
Deleted

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109970.inf
Infected with: Win32.Worm.VB.NPM

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109970.inf
Deleted

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110211.inf
Infected with: Win32.Worm.VB.NPM

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110211.inf
Deleted

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111211.inf
Infected with: Win32.Worm.VB.NPM

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111211.inf
Deleted

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112232.inf
Infected with: Win32.Worm.VB.NPM

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112232.inf
Deleted

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112242.inf
Infected with: Win32.Worm.VB.NPM

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112242.inf
Deleted

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112690.inf
Infected with: Win32.Worm.VB.NPM

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112690.inf
Deleted

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112810.inf
Infected with: Win32.Worm.VB.NPM

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112810.inf
Deleted

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112830.inf
Infected with: Win32.Worm.VB.NPM

D:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112830.inf
Deleted

E:\Autorun.inf
Infected with: Win32.Worm.VB.NPM

E:\Autorun.inf
Deleted

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109973.inf
Infected with: Win32.Worm.VB.NPM

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP456\A0109973.inf
Deleted

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110214.inf
Infected with: Win32.Worm.VB.NPM

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0110214.inf
Deleted

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111213.inf
Infected with: Win32.Worm.VB.NPM

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0111213.inf
Deleted

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112234.inf
Infected with: Win32.Worm.VB.NPM

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP459\A0112234.inf
Deleted

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112693.inf
Infected with: Win32.Worm.VB.NPM

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP461\A0112693.inf
Deleted

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112813.inf
Infected with: Win32.Worm.VB.NPM

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112813.inf
Deleted

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112833.inf
Infected with: Win32.Worm.VB.NPM

E:\System Volume Information\_restore{04145840-F5E0-4D8E-BD28-8FF67159EA53}\RP462\A0112833.inf
Deleted

@+
JPAV

Répondre à jpav

Regis59, le 6 jan 2008 à 13:48:14

OK

Branche tes disques amovibles.

Execute ceci:
http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe

A+
"Impossible is nothing"

Répondre à Regis59

jpav, le 6 jan 2008 à 14:03:25

Régis59,
Ok, c'est fait.
Faut-il que je relance bitdefender, pour vérifier?

JPAV

Répondre à jpav

jpav, le 6 jan 2008 à 14:24:36

Régis,
J'ai relancé bitdefender, mais il trouve toujours le même virus VORM VB NPM sur mes disques C, D et E
Quoi faire ? Pourquoi AVAST ne détecte rien ?

JPAV

Répondre à jpav

27 réponses 12 Suivant

Posez votre question Répondre