Bonjour,
j'ai depuis quelques jours un cheval de troie nommé win32:vundo@dll.Quand avast me previent avec une alerte et me demande de le supprimer, je le supprime et ca marche mais au bout d'un petit moment une autre alerte surgit en me disant que le programme a detecté ce cheval de troie.Voila j'espere que quelqu'un pourra m'aider a régler ce probleme, merci d'avance.
[05/22/2008, 21:56:02] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\pierrot\Bureau\VirtumundoBeGone.exe" )
[05/22/2008, 21:56:10] - Detected System Information:
[05/22/2008, 21:56:10] - Windows Version: 5.1.2600, Service Pack 2
[05/22/2008, 21:56:10] - Current Username: pierrot (Admin)
[05/22/2008, 21:56:10] - Windows is in NORMAL mode.
[05/22/2008, 21:56:10] - Searching for Browser Helper Objects:
[05/22/2008, 21:56:10] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
[05/22/2008, 21:56:10] - BHO 2: {522E0112-EDD9-413D-A99E-C311A54B6676} ()
[05/22/2008, 21:56:10] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/22/2008, 21:56:10] - Checking for HKLM\...\Winlogon\Notify\xxyyvUmm
[05/22/2008, 21:56:10] - Found: HKLM\...\Winlogon\Notify\xxyyvUmm - This is probably Virtumundo.
[05/22/2008, 21:56:10] - Assigning {522E0112-EDD9-413D-A99E-C311A54B6676} MSEvents Object
[05/22/2008, 21:56:10] - BHO list has been changed! Starting over...
[05/22/2008, 21:56:10] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
[05/22/2008, 21:56:10] - BHO 2: {522E0112-EDD9-413D-A99E-C311A54B6676} (MSEvents Object)
[05/22/2008, 21:56:10] - ALERT: Found MSEvents Object!
[05/22/2008, 21:56:10] - BHO 3: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[05/22/2008, 21:56:10] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[05/22/2008, 21:56:10] - BHO 5: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
[05/22/2008, 21:56:10] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/22/2008, 21:56:10] - No filename found. Continuing.
[05/22/2008, 21:56:11] - BHO 6: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[05/22/2008, 21:56:11] - Finished Searching Browser Helper Objects
[05/22/2008, 21:56:11] - *** Detected MSEvents Object
[05/22/2008, 21:56:11] - Trying to remove MSEvents Object...
[05/22/2008, 21:56:12] - Terminating Process: IEXPLORE.EXE
[05/22/2008, 21:56:12] - Terminating Process: RUNDLL32.EXE
[05/22/2008, 21:56:12] - Disabling Automatic Shell Restart
[05/22/2008, 21:56:12] - Terminating Process: EXPLORER.EXE
[05/22/2008, 21:56:12] - Suspending the NT Session Manager System Service
[05/22/2008, 21:56:13] - Terminating Windows NT Logon/Logoff Manager
[05/22/2008, 21:56:13] - Re-enabling Automatic Shell Restart
[05/22/2008, 21:56:13] - File to disable: C:\WINDOWS\system32\xxyyvUmm.dll
[05/22/2008, 21:56:13] - Renaming C:\WINDOWS\system32\xxyyvUmm.dll -> C:\WINDOWS\system32\xxyyvUmm.dll.vir
[05/22/2008, 21:56:14] - File successfully renamed!
[05/22/2008, 21:56:14] - Removing HKLM\...\Browser Helper Objects\{522E0112-EDD9-413D-A99E-C311A54B6676}
[05/22/2008, 21:56:14] - Removing HKCR\CLSID\{522E0112-EDD9-413D-A99E-C311A54B6676}
[05/22/2008, 21:56:14] - Adding Kill Bit for ActiveX for GUID: {522E0112-EDD9-413D-A99E-C311A54B6676}
[05/22/2008, 21:56:14] - Deleting ATLEvents/MSEvents Registry entries
[05/22/2008, 21:56:14] - Removing HKLM\...\Winlogon\Notify\xxyyvUmm
[05/22/2008, 21:56:14] - Searching for Browser Helper Objects:
[05/22/2008, 21:56:14] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
[05/22/2008, 21:56:14] - BHO 2: {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
[05/22/2008, 21:56:14] - BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[05/22/2008, 21:56:14] - BHO 4: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
[05/22/2008, 21:56:14] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/22/2008, 21:56:14] - No filename found. Continuing.
[05/22/2008, 21:56:14] - BHO 5: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[05/22/2008, 21:56:14] - Finished Searching Browser Helper Objects
[05/22/2008, 21:56:14] - Finishing up...
[05/22/2008, 21:56:14] - A restart is needed.
[05/22/2008, 21:56:14] - Automatic Reboot on STOP Error is not set. User will have to manually restart.
[05/22/2008, 21:56:23] - Attempting to Restart via STOP error (Blue Screen!)