Ajoute la ligne suivante sur HijackThis :
O4 - HKLM\..\Run: [Windows Remote Launcher] wnpmcs.exe
Ajoute les fichiers :
C:\Windows\system32\wnpmcs.exe
Scan du fichier :
File image020.zip received on 12.04.2007 22:50:27 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED
Result: 7/32 (21.88%)
Antivirus Version Last Update Result
AhnLab-V3 2007.12.5.0 2007.12.04 -
AntiVir 7.6.0.34 2007.12.04 -
Authentium 4.93.8 2007.12.04 -
Avast 4.7.1098.0 2007.12.04 Win32:Sramler-J
AVG 7.5.0.503 2007.12.04 -
BitDefender 7.2 2007.12.04 BehavesLike:Win32.ProcessHijack
CAT-QuickHeal 9.00 2007.12.04 -
ClamAV 0.91.2 2007.12.04 Trojan.Agent-7548
DrWeb 4.44.0.09170 2007.12.04 -
eSafe 7.0.15.0 2007.12.04 -
eTrust-Vet 31.3.5349 2007.12.04 -
Ewido 4.0 2007.12.04 -
FileAdvisor 1 2007.12.04 -
Fortinet 3.14.0.0 2007.12.04 -
F-Prot 4.4.2.54 2007.12.04 -
F-Secure 6.70.13030.0 2007.12.04 -
Ikarus T3.1.1.12 2007.12.04 Trojan-Dropper.Win32.Sramler.a
Kaspersky 7.0.0.125 2007.12.04 -
McAfee 5177 2007.12.04 -
Microsoft 1.3007 2007.12.03 VirTool:Win32/DelfInject.gen!S
NOD32v2 2701 2007.12.04 -
Norman 5.80.02 2007.12.04 -
Panda 9.0.0.4 2007.12.04 Suspicious file
Prevx1 V2 2007.12.04 MSNLive-Image:Worm-a
Rising 20.21.10.00 2007.12.04 -
Sophos 4.24.0 2007.12.04 -
Sunbelt 2.2.907.0 2007.12.04 -
Symantec 10 2007.12.04 -
TheHacker 6.2.9.149 2007.12.04 -
VBA32 3.12.2.5 2007.12.04 -
VirusBuster 4.3.26:9 2007.12.04 -
Webwasher-Gateway 6.6.2 2007.12.04 -
Additional information
File size: 46754 bytes
MD5: ab6a1a7fd2c74307b74334419f0c91e1
SHA1: 09c75565a776744c89f21aadc65d5f19f47c695a