rootkit caché

Marsh Posté le 10-06-2012 à 16:34:39

Bonjour,

Après une analyse AVG j'ai eu deux détections de rootkit cachés et impossible à supprimer. J'ai téléchargé GMER et voilà ce que j'obtiens.

Savez vous ce que je dois faire ?

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit quick scan 2012-06-10 16:31:33
Windows 6.0.6000 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 WDC_WD25 rev.01.0
Running: 8vprq2k5.exe; Driver: C:\Users\NANSET~1\AppData\Local\Temp\ffwoypob.sys

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs avgidsfilterx.sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
AttachedDevice \Driver\tdx \Device\Ip SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\tdx \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\Tcp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\tdx \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\Udp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\tdx \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

---- Processes - GMER 1.0.15 ----

Process (*** hidden *** ) -2030721760
Process (*** hidden *** ) -2008593136
Process (*** hidden *** ) -2003714768
Process (*** hidden *** ) -2006168064
Process (*** hidden *** ) -2003142288
Process (*** hidden *** ) -2003788288
Process (*** hidden *** ) -2003159904
Process (*** hidden *** ) -2003059576
Process (*** hidden *** ) -2003067392
Process (*** hidden *** ) -2003068784
Process (*** hidden *** ) -2002831336
Process (*** hidden *** ) -2003035400
Process (*** hidden *** ) -2002905456
Process (*** hidden *** ) -2002790160
Process (*** hidden *** ) -2030760448
Process (*** hidden *** ) -2006253384
Process (*** hidden *** ) -2002529104
Process (*** hidden *** ) -2002522688
Process (*** hidden *** ) -2002526024
Process (*** hidden *** ) -2002524768
Process (*** hidden *** ) -2003157504
Process (*** hidden *** ) -2003085592
Process (*** hidden *** ) -2006643200
Process (*** hidden *** ) -2005557064
Process (*** hidden *** ) -2002527288
Process (*** hidden *** ) -2005841560
Process (*** hidden *** ) -2003821768
Process (*** hidden *** ) -2004231728
Process (*** hidden *** ) -2006186416
Process (*** hidden *** ) -2002674504
Process (*** hidden *** ) -2003068088
Process (*** hidden *** ) -2005172040
Process (*** hidden *** ) -2006130504
Process (*** hidden *** ) -2004856504
Process (*** hidden *** ) -2006671176
Process (*** hidden *** ) -2002837320
Process (*** hidden *** ) -2004957040
Process (*** hidden *** ) -2006880768
Process (*** hidden *** ) -2002294088
Process (*** hidden *** ) -2006075472
Process (*** hidden *** ) -2004279112
Process (*** hidden *** ) -2004935576
Process (*** hidden *** ) -2030761808
Process (*** hidden *** ) -2001751416
Process (*** hidden *** ) -2001939104
Process (*** hidden *** ) -2021445448
Process (*** hidden *** ) -2004273064
Process (*** hidden *** ) -2004263424
Process (*** hidden *** ) -2021507584
Process (*** hidden *** ) -2018752616
Process (*** hidden *** ) -2018616864
Process (*** hidden *** ) -2018433760
Process (*** hidden *** ) -2011094856
Process (*** hidden *** ) -2007989552
Process (*** hidden *** ) -2008991504
Process (*** hidden *** ) -2004264816
Process (*** hidden *** ) -2030344912
Process (*** hidden *** ) -2001741416
Process (*** hidden *** ) -2005786440
Process (*** hidden *** ) -2008637952
Process (*** hidden *** ) -2009041752
Process (*** hidden *** ) -2002641408
Process (*** hidden *** ) -2001320248
Process (*** hidden *** ) -2004001280
Process (*** hidden *** ) -2003910472
Process (*** hidden *** ) -2005107200
Process (*** hidden *** ) -1989589280
Process (*** hidden *** ) -1991796528
Process (*** hidden *** ) -1988090280
Process (*** hidden *** ) -2010649616
Process (*** hidden *** ) -1986924360
Process (*** hidden *** ) -1989441888
Process (*** hidden *** ) -1988907520
Process (*** hidden *** ) -1987881856
Process (*** hidden *** ) -1989719288
Process (*** hidden *** ) -1987740224
Process (*** hidden *** ) -2008993024
Process (*** hidden *** ) -1990162720
Process (*** hidden *** ) -1989122680
Process (*** hidden *** ) -1991460600
Process (*** hidden *** ) -1987630728
Process (*** hidden *** ) -1987589416
Process (*** hidden *** ) -1987556160
Process (*** hidden *** ) -1992668408
Process (*** hidden *** ) -2006976992
Process (*** hidden *** ) -1987531424
Process (*** hidden *** ) -2004372648
Process (*** hidden *** ) -1990880696
Process (*** hidden *** ) -1987285504
Process (*** hidden *** ) -2004409304
Process (*** hidden *** ) -1987615456
Process (*** hidden *** ) -1990952536
Process (*** hidden *** ) -1987047936
Process (*** hidden *** ) -2004262728
Process (*** hidden *** ) -1991296536
Process (*** hidden *** ) -1986925056
Process (*** hidden *** ) -1987018568
Process (*** hidden *** ) -2003119944
Process (*** hidden *** ) -1990544192
Process (*** hidden *** ) -1981710152
Process (*** hidden *** ) -2001699328
Process (*** hidden *** ) -1993000808
Process (*** hidden *** ) -1989039656
Process (*** hidden *** ) -1986829024
Process (*** hidden *** ) -1991976080
Process (*** hidden *** ) -1987017440
Process (*** hidden *** ) -2004369224
Process (*** hidden *** ) -2026144256
Process (*** hidden *** ) -1987182344
Process (*** hidden *** ) -1986960080
Process (*** hidden *** ) -1987826344
Process (*** hidden *** ) -2007146312
Process (*** hidden *** ) -2006168800
Process (*** hidden *** ) -2005293232
Process (*** hidden *** ) -2005099728
Process (*** hidden *** ) -2002070240
Process (*** hidden *** ) -2001897352
Process (*** hidden *** ) -2004362768
Process (*** hidden *** ) -1986641736
Process (*** hidden *** ) -2010616320
Process (*** hidden *** ) -2010657416
Process (*** hidden *** ) -1987355200
Process (*** hidden *** ) -1985995936
Process (*** hidden *** ) -2034285976
Process (*** hidden *** ) -1987163320
Process (*** hidden *** ) -2001892448
Process (*** hidden *** ) -2002002432
Process (*** hidden *** ) -2007426320
Process (*** hidden *** ) -2005798728
Process (*** hidden *** ) -1987675712
Process (*** hidden *** ) -1989646328
Process (*** hidden *** ) -1991534000
Process (*** hidden *** ) -2005013688
Process (*** hidden *** ) -1983048392
Process (*** hidden *** ) -1987641160
Process (*** hidden *** ) -2010612224
Process (*** hidden *** ) -2001711616
Process (*** hidden *** ) -1989253328
Process (*** hidden *** ) -1983136256
Process (*** hidden *** ) -2005942088
Process (*** hidden *** ) -2002815480
Process (*** hidden *** ) -2010558976
Process (*** hidden *** ) -1989859552
Process (*** hidden *** ) -1985466880
Process (*** hidden *** ) -2002453536
Process (*** hidden *** ) -1985907400
Process (*** hidden *** ) -1986137928
Process (*** hidden *** ) -1986943784
Process (*** hidden *** ) -1985978184
Process (*** hidden *** ) -2003761304
Process (*** hidden *** ) -2004236000
Process (*** hidden *** ) -1987672352
Process (*** hidden *** ) -2002003600
Process (*** hidden *** ) -2018766664
Process (*** hidden *** ) -2005453536
Process (*** hidden *** ) -1991091992
Process (*** hidden *** ) -2001777152
Process (*** hidden *** ) -1985964760
Process (*** hidden *** ) -2005016392
Process (*** hidden *** ) -1985862352
Process (*** hidden *** ) -1987474088
Process (*** hidden *** ) -1992832248
Process (*** hidden *** ) -2004830056
Process (*** hidden *** ) -1981676224
Process (*** hidden *** ) -1992644000
Process (*** hidden *** ) -2021493960
Process (*** hidden *** ) -2002375168
Process (*** hidden *** ) -1987399496
Process (*** hidden *** ) -1985963192
Process (*** hidden *** ) -2005918904
Process (*** hidden *** ) -1990196016
Process (*** hidden *** ) -2006145968
Process (*** hidden *** ) -2074612904
Process (*** hidden *** ) -2005249088
Process (*** hidden *** ) -1986156568
Process (*** hidden *** ) -1987599208
Process (*** hidden *** ) -1991313288
Process (*** hidden *** ) -1990537032
Process (*** hidden *** ) -1992215136
Process (*** hidden *** ) -2002005832
Process (*** hidden *** ) -2018760896
Process (*** hidden *** ) -1991299584
Process (*** hidden *** ) -1986664456
Process (*** hidden *** ) -1988606584
Process (*** hidden *** ) -2005533184
Process (*** hidden *** ) -1990635336
Process (*** hidden *** ) -1988534088
Process (*** hidden *** ) -1988738888
Process (*** hidden *** ) -1984389632
Process (*** hidden *** ) -2074619040
Process (*** hidden *** ) -2002242136
Process (*** hidden *** ) -1987745792
Process (*** hidden *** ) -1991459904
Process (*** hidden *** ) -1987566304
Process (*** hidden *** ) -1991282504
Process (*** hidden *** ) -1992961864
Process (*** hidden *** ) -1987484320
Process (*** hidden *** ) -2034050272
Process (*** hidden *** ) -1987391304
Process (*** hidden *** ) -2002365432
Process (*** hidden *** ) -1985525416
Process (*** hidden *** ) -1987244544
Process (*** hidden *** ) -1987264328
Process (*** hidden *** ) -2004021064
Process (*** hidden *** ) -1991232840
Process (*** hidden *** ) -1987162624
Process (*** hidden *** ) -1991312072
Process (*** hidden *** ) -1985698616
Process (*** hidden *** ) -1991315272
Process (*** hidden *** ) -2004460032
Process (*** hidden *** ) -2003728528
Process (*** hidden *** ) -1987026760
Process (*** hidden *** ) -2004475720
Process (*** hidden *** ) -1983134240
Process (*** hidden *** ) -2005864264
Process (*** hidden *** ) -1992033384
Process (*** hidden *** ) -2001214744
Process (*** hidden *** ) -1987396728
Process (*** hidden *** ) -2002648056
Process (*** hidden *** ) -1993091280
Process (*** hidden *** ) -2002896560
Process (*** hidden *** ) -1987025544
Process (*** hidden *** ) -2002617528
Process (*** hidden *** ) -2010333000
Process (*** hidden *** ) -2019776488
Process (*** hidden *** ) -1987172992
Process (*** hidden *** ) -1991943992
Process (*** hidden *** ) -1991471616
Process (*** hidden *** ) -1991367024
Process (*** hidden *** ) -1987548680
Process (*** hidden *** ) -2004474336
Process (*** hidden *** ) -2001912320
Process (*** hidden *** ) -2034057728
Process (*** hidden *** ) -2034035104
Process (*** hidden *** ) -2002202440
Process (*** hidden *** ) -2030785888
Process (*** hidden *** ) -2002898208
Process (*** hidden *** ) -1987704800
Process (*** hidden *** ) -1986113352
Process (*** hidden *** ) -2006251568
Process (*** hidden *** ) -1982668616
Process (*** hidden *** ) -1982649392
Process (*** hidden *** ) -1989263176
Process (*** hidden *** ) -2006984016
Process (*** hidden *** ) -1986127896
Process (*** hidden *** ) -2004747232
Process (*** hidden *** ) -2005025976
Process (*** hidden *** ) -2004970248
Process (*** hidden *** ) -1987188448
Process (*** hidden *** ) -2003103560
Process (*** hidden *** ) -1985848872
Process (*** hidden *** ) -1982667480
Process (*** hidden *** ) -2004340552
Process (*** hidden *** ) -2005032776
Process (*** hidden *** ) -1993011016
Process (*** hidden *** ) -2005796864
Process (*** hidden *** ) -2002465280
Process (*** hidden *** ) -2005282040
Process (*** hidden *** ) -2004922880
Process (*** hidden *** ) -2008736256
Process (*** hidden *** ) -1987411464
Process (*** hidden *** ) -1987512240
Process (*** hidden *** ) -2005775544
Process (*** hidden *** ) -2003797176
Process (*** hidden *** ) -1987966472
Process (*** hidden *** ) -1992232776
Process (*** hidden *** ) -1991782016
Process (*** hidden *** ) -2010711776
Process (*** hidden *** ) -2010552168
Process (*** hidden *** ) -2005168640
Process (*** hidden *** ) -1982612808
Process (*** hidden *** ) -2002160040
Process (*** hidden *** ) -1992762384
Process (*** hidden *** ) -1987623648
Process (*** hidden *** ) -2002536392
Process (*** hidden *** ) -2002537088
Process (*** hidden *** ) -1987413256
Process (*** hidden *** ) -1992651840
Process (*** hidden *** ) -1993034440
Process (*** hidden *** ) -2008759112
Process (*** hidden *** ) -2001829440
Process (*** hidden *** ) -1986134840
Process (*** hidden *** ) -2002335384
Process (*** hidden *** ) -1985229312
Process (*** hidden *** ) -2006984712
Process (*** hidden *** ) -1989893464
Process (*** hidden *** ) -2002855432
Process (*** hidden *** ) -2002906952
Process (*** hidden *** ) -1987814584
Process (*** hidden *** ) -2060317184
Process (*** hidden *** ) -2018764512
Process (*** hidden *** ) -1987813888
Process (*** hidden *** ) -2004842752
Process (*** hidden *** ) -1991294792
Process (*** hidden *** ) -1986029072
Process (*** hidden *** ) -2006861216
Process (*** hidden *** ) -2007007048
Process (*** hidden *** ) -1986966016
Process (*** hidden *** ) -1990533632
Process (*** hidden *** ) -2074616320
Process (*** hidden *** ) -1988014944
Process (*** hidden *** ) -2034172416
Process (*** hidden *** ) -1987965440
Process (*** hidden *** ) -2004833464
Process (*** hidden *** ) -2005217096
Process (*** hidden *** ) -2074612224
Process (*** hidden *** ) -2005940616
Process (*** hidden *** ) -2030785192
Process (*** hidden *** ) -2030682624
Process (*** hidden *** ) -2009110104
Process (*** hidden *** ) -1983054336
Process (*** hidden *** ) -1987819544
Process (*** hidden *** ) -2006975920
Process (*** hidden *** ) -2005694920
Process (*** hidden *** ) -1989350376
Process (*** hidden *** ) -1991369792
Process (*** hidden *** ) -2018755424
Process (*** hidden *** ) -2001862472
Process (*** hidden *** ) -1987212840
Process (*** hidden *** ) -1983128064
Process (*** hidden *** ) -2005045760
Process (*** hidden *** ) -2018619208
Process (*** hidden *** ) -1990197064
Process (*** hidden *** ) -1992143360
Process (*** hidden *** ) -1990320640
Process (*** hidden *** ) -2005167472
Process (*** hidden *** ) -1987314392
Process (*** hidden *** ) -1992389632
Process (*** hidden *** ) -2030781280
Process (*** hidden *** ) -1987613496
Process (*** hidden *** ) -2034278216
Process (*** hidden *** ) -2006649856
Process (*** hidden *** ) -2004938568
Process (*** hidden *** ) -2030676584
Process (*** hidden *** ) -1987447600
Process (*** hidden *** ) -2030638312
Process (*** hidden *** ) -1986759360
Process (*** hidden *** ) -2010606616
Process (*** hidden *** ) -2008737888
Process (*** hidden *** ) -1986613064
Process (*** hidden *** ) -2002050888
Process (*** hidden *** ) -2005141488

---- EOF - GMER 1.0.15 ----

Merci d'avance

Marsh Posté le 10-06-2012 à 16:34:39

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed

Name *

Email *

URL

Message *