Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Version de la base de données: 8396

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

19/12/2011 09:25:30
mbam-log-2011-12-19 (09-25-18).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 236918
Temps écoulé: 7 minute(s), 41 seconde(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 20

Processus mémoire infecté(s):
c:\Users\Julien\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\snvsawv.exe (Trojan.Agent) -> 2896 -> No action taken.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} (Adware.ShoppingReport2) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} (Adware.ShoppingReport2) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> No action taken.
HKEY_CURRENT_USER\Software\DC3_FEXEC (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\QuestBrowse (Adware.QuestBrowse) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate (Trojan.Agent) -> Value: WindowsUpdate -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate (Trojan.Agent) -> Value: WindowsUpdate -> No action taken.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\zydfwopdmbsiurxzhe (Trojan.Agent) -> Value: zydfwopdmbsiurxzhe -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\Users\Parents\AppData\Roaming\gjqss.exe (Trojan.Ransom.BP) -> No action taken.
c:\Users\Parents\AppData\Roaming\microsoft\svchost.exe (Trojan.Ransom.BP) -> No action taken.
c:\Users\Julien\AppData\Local\Temp\dclogs\2011-12-18-1.dc (Stolen.Data) -> No action taken.
c:\Users\Parents\AppData\Local\Temp\dclogs\2011-12-17-7.dc (Stolen.Data) -> No action taken.
c:\Users\Parents\AppData\Local\Temp\dclogs\2011-12-18-1.dc (Stolen.Data) -> No action taken.
c:\Users\Julien\AppData\Roaming\msconfig.exe (Trojan.Agent) -> No action taken.
c:\Users\Parents\AppData\Roaming\msconfig.exe (Trojan.Agent) -> No action taken.
c:\a.txt (Worm.Traces) -> No action taken.
c:\captura.bmp (Malware.Traces) -> No action taken.
c:\codigo1.bmp (Malware.Traces) -> No action taken.
c:\codigo2.bmp (Malware.Traces) -> No action taken.
c:\codigo3.bmp (Malware.Traces) -> No action taken.
c:\codigo4.bmp (Malware.Traces) -> No action taken.
c:\error.bmp (Malware.Traces) -> No action taken.
c:\Users\Parents\AppData\Local\Temp\pws_cdk.bss (Stolen.Data) -> No action taken.
c:\Users\Parents\AppData\Local\Temp\pws_mail.bss (Stolen.Data) -> No action taken.
c:\Users\Parents\AppData\Local\Temp\pws_mess.bss (Stolen.Data) -> No action taken.
c:\Users\Julien\AppData\Local\Temp\cscomp.dll (Trojan.Agent) -> No action taken.
c:\Users\Parents\AppData\Local\Temp\cscomp.dll (Trojan.Agent) -> No action taken.
c:\Users\Julien\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\snvsawv.exe (Trojan.Agent) -> No action taken.