Forum XP.Net -Sécurité Informatique-

J'en ai refait un rien que pour toi

Counterspy .

Spyware Scan Details
Start Date: 04/08/2006 19:02:30
End Date: 04/08/2006 19:44:47
Total Time: 42 mins 17 secs

Detected spyware

BearShare P2P Program more information...
Details: BearShare is a peer-to-peer (P2P) application that allows its users to join together in a network via the Internet and share files from each other's hard drives.
Status: Deleted

Infected files detected
c:\program files\bearshare\bearshare.dat
c:\program files\bearshare\freepeers.ini
c:\program files\bearshare\db\library.dat


DesktopScam Trojan Downloader more information...
Details: DesktopScam is a trojan that is downloaded with rogue security applicatons in order to frighten the affected user into purchasing the rogue program.
Status: Deleted

Infected files detected
C:\System Volume Information\_restore{15BA8DAA-A5BC-4B1B-AD74-48E526A02941}\RP479\A0104438.ico


Overnet Adware Bundler more information...
Details: Overnet/eDonkey is a file sharing application that bundles third party adware and spyware with the free version.
Status: Deleted

Infected files detected
C:\System Volume Information\_restore{15BA8DAA-A5BC-4B1B-AD74-48E526A02941}\RP479\A0104442.dll
C:\System Volume Information\_restore{15BA8DAA-A5BC-4B1B-AD74-48E526A02941}\RP479\A0104444.dll
C:\System Volume Information\_restore{15BA8DAA-A5BC-4B1B-AD74-48E526A02941}\RP479\A0104446.dll


RealVNC Commercial Remote Control Tool more information...
Details: VNC (Virtual Network Computing) software makes it possible to view and fully-interact with one computer from any other computer or mobile device anywhere on the Internet.
Status: Ignored

Infected registry entries detected
HKEY_CURRENT_USER\Software\ORL\VNCHooks
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MsiExec.exe use_GetUpdateRect 1
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MsiExec.exe use_Timer 0
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MsiExec.exe use_KeyPress 1
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MsiExec.exe use_LButtonUp 1
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MsiExec.exe use_MButtonUp 1
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MsiExec.exe use_RButtonUp 1
HKEY_CURRENT_USER\Software\ORL\VNCHooks\Application_Prefs\MsiExec.exe use_Deferral 1


Tu peut marquer resolu maintenant .

J'ai tout viré ...

Merci a toi.
C'est chouette
Je ne connaissais pas ce programme mais il a "bonne presse".
Le rapport est simple et clair.
N'oublie pas de finir le nettoyage ainsi:
http://forumxp.net.free.fr/phpBB2/voir_ ... .php?id=35

Affaire classée.