Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1439
Windows 5.1.2600 Service Pack 3
30.11.2008 21:22:01
mbam-log-2008-11-30 (21-21-56).txt
Type de recherche: Examen rapide
Eléments examinés: 56701
Temps écoulé: 4 minute(s), 31 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 4
Clé(s) du Registre infectée(s): 17
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 5
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 9
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
C:\WINDOWS\system32\byXRkjHx.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\nsrynqaa.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\gvokgz.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\fccdecDu.dll (Trojan.Vundo.H) -> No action taken.
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{1117e323-5d5f-44b8-b822-54736841342d} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{1117e323-5d5f-44b8-b822-5
4736841342d} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\fccdecdu (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{6d794cb4-c7cd-4c6f-bfdc-9
b77afbdc02c} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{98c57f97-fb53-4486-8c29-bb3d2114851a} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{98c57f97-fb53-4486-8c29-b
b3d2114851a} (Trojan.Vundo.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{98c57f97-fb53-4486-8c29-bb3d2
114851a} (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{6d794cb4-c7cd-4c6f-bfdc-9b77a
fbdc02c} (Trojan.Vundo.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{1117e323-5d5f-44b8-b822-54736
841342d} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\instkey (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Run\a0d8fdf8 (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\ShellExecuteHooks\{6d794cb4-c7
cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo.H) -> No action taken.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro
l\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\byxrkjhx -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro
l\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\byxrkjhx -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Explorer\Advanced\Start_ShowMyDocs (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\WINDOWS\system32\byXRkjHx.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\xHjkRXyb.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\xHjkRXyb.ini2 (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\fccdecDu.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\gvokgz.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\nsrynqaa.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\aaqnyrsn.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\nnnmnnkK.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\jasegolj.dll (Trojan.Vundo) -> No action taken.