Security-X
Forum Security-X => Sécurité Générale => Malwares => Discussion démarrée par: AsteroHache le février 28, 2012, 00:07:48
-
Bonjour @ tous
Vous trouverez ici (http://forum.security-x.fr/malwares-315/%28fiches-malware%29-roguescareware-et-ransomware/) un tutoriel qui explique ce qu'est un rogue ou un ransomware, avec le guide de désinfection relatif à ce genre d'infection.
Seront listés ci-après les différentes rogues/ransomwares découverts, avec les conseils spécifiques de désinfection de bleeping computer ou de malekal pour chacun d'entre eux.
ROGUES:
- system-check: http://www.bleepingcomputer.com/virus-removal/remove-system-check (ATTENTION: pas de ccleaner...)
- internet-security-2012: http://www.malekal.com/2012/01/22/roguescareware-internet-security-2012-par-malvertising/
- smart-anti-malware-protection: http://www.bleepingcomputer.com/virus-removal/remove-smart-anti-malware-protection
- windows-protection-master : http://www.bleepingcomputer.com/virus-removal/remove-windows-protection-master
- windows-functionality-checker: http://www.bleepingcomputer.com/virus-removal/remove-windows-functionality-checker
- security-scanner: http://www.bleepingcomputer.com/virus-removal/remove-security-scanner
- windows-smart-partner: http://www.bleepingcomputer.com/virus-removal/remove-windows-smart-partner
- home-malware-cleaner: http://www.bleepingcomputer.com/virus-removal/remove-home-malware-cleaner
- windows-telemetry-center: http://www.bleepingcomputer.com/virus-removal/remove-windows-telemetry-center
- strong-malware-defender: http://www.bleepingcomputer.com/virus-removal/remove-strong-malware-defender
- windows-shield-tool: http://www.bleepingcomputer.com/virus-removal/remove-windows-shield-tool
- virus-doctor: http://forum.malekal.com/virus-doctor-t17525.html
- windows-pro-scanner: http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-scanner
- windows-basic-antivirus: http://www.bleepingcomputer.com/virus-removal/remove-windows-basic-antivirus
- smart-fortress-2012: http://www.bleepingcomputer.com/virus-removal/remove-smart-fortress-2012
- windows-firewall-constructor: http://www.bleepingcomputer.com/virus-removal/remove-windows-firewall-constructor
- windows-threats-destroyer: http://www.bleepingcomputer.com/virus-removal/remove-windows-threats-destroyer
- windows-attacks-preventor: http://www.bleepingcomputer.com/virus-removal/remove-windows-attacks-preventor
- windows-attacks-defender: http://www.bleepingcomputer.com/virus-removal/remove-windows-attacks-defender
- windows-trojans-inspector: http://www.bleepingcomputer.com/virus-removal/remove-windows-trojans-inspector
- windows-personal-detective: http://www.bleepingcomputer.com/virus-removal/remove-windows-personal-detective
- antimalware-pc-safety: http://www.bleepingcomputer.com/virus-removal/remove-antimalware-pc-safety
- windows-personal-doctor:http://www.bleepingcomputer.com/virus-removal/remove-windows-personal-doctor
- best-virus-protection: http://www.bleepingcomputer.com/virus-removal/remove-best-virus-protection
- windows-tools-patch: http://www.bleepingcomputer.com/virus-removal/remove-windows-tools-patch
- windows-safety-tweaker: http://www.bleepingcomputer.com/virus-removal/remove-windows-safety-tweaker
- windows-managing-system: http://www.bleepingcomputer.com/virus-removal/remove-windows-managing-system
- windows-risk-minimizer: http://www.bleepingcomputer.com/virus-removal/remove-windows-risk-minimizer
- windows-antihazard-solution: http://www.bleepingcomputer.com/virus-removal/remove-windows-antihazard-solution
- windows-no-risk-center: http://www.bleepingcomputer.com/virus-removal/remove-windows-no-risk-center
- windows-health-keeper: http://www.bleepingcomputer.com/virus-removal/remove-windows-health-keeper
- windows-problems-stopper: http://www.bleepingcomputer.com/virus-removal/remove-windows-problems-stopper
- windows-software-keeper: http://www.bleepingcomputer.com/virus-removal/remove-windows-software-keeper
- windows-guardian-angel: http://www.bleepingcomputer.com/virus-removal/remove-windows-guardian-angel
- security shield: http://www.bleepingcomputer.com/forums/topic447053.html
- windows-process-director: http://www.bleepingcomputer.com/virus-removal/remove-windows-process-director
- windows-antihazard-center: http://www.bleepingcomputer.com/virus-removal/remove-windows-antihazard-center
- windows-software-saver: http://www.bleepingcomputer.com/virus-removal/remove-windows-software-saver
- windows-no-risk-agent: http://www.bleepingcomputer.com/virus-removal/remove-windows-no-risk-agent
- windows-defending-center: http://www.bleepingcomputer.com/virus-removal/remove-windows-defending-center
- windows-debug-center: http://www.bleepingcomputer.com/virus-removal/remove-windows-debug-center
- windows-trouble-taker: http://www.bleepingcomputer.com/virus-removal/remove-windows-trouble-taker
- windows-first-class-protector: http://www.bleepingcomputer.com/virus-removal/remove-windows-first-class-protector
- smart-HDD: http://www.bleepingcomputer.com/virus-removal/remove-smart-hdd
- windows-activity-debugger: http://www.bleepingcomputer.com/virus-removal/remove-windows-activity-debugger
- windows-warding-system: http://www.bleepingcomputer.com/virus-removal/remove-windows-warding-system
- windows-shielding-utility: http://www.bleepingcomputer.com/virus-removal/remove-windows-shielding-utility
- advanced-antispyware-solution: http://www.bleepingcomputer.com/virus-removal/remove-advanced-antispyware-solution
- windows-custodian-utility: http://www.bleepingcomputer.com/virus-removal/remove-windows-custodian-utility
- windows-care-taker: http://www.bleepingcomputer.com/virus-removal/remove-windows-care-taker
- Windows Efficiency Reservoir: http://www.bleepingcomputer.com/virus-removal/remove-windows-efficiency-reservoir
- Windows Processes Accelerator : http://www.bleepingcomputer.com/virus-removal/remove-windows-processes-accelerator
- Windows Stability Maximizer : http://www.bleepingcomputer.com/virus-removal/remove-windows-stability-maximizer
- Windows Cleaning Tools: http://www.bleepingcomputer.com/virus-removal/remove-windows-cleaning-tools
- Windows Component Protector: http://www.bleepingcomputer.com/virus-removal/remove-windows-component-protector
- Windows Antibreaking System: http://www.bleepingcomputer.com/virus-removal/remove-windows-antibreaking-system
- Windows Foolproof Protector: http://www.bleepingcomputer.com/virus-removal/remove-windows-foolproof-protector
- Windows Antivirus Patch: http://www.bleepingcomputer.com/virus-removal/remove-windows-antivirus-patch
- Windows Safety Manager: http://www.bleepingcomputer.com/virus-removal/remove-windows-safety-manager
- Windows Guard Solutions: http://www.bleepingcomputer.com/virus-removal/remove-windows-guard-solutions
- Windows Antivirus Care: http://www.bleepingcomputer.com/virus-removal/remove-windows-antivirus-care
- Windows Safety Toolkit: http://www.bleepingcomputer.com/virus-removal/remove-windows-safety-toolkit
- Windows Pro Rescuer: http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-rescuer
- Windows Performance Advisor: http://www.bleepingcomputer.com/virus-removal/remove-windows-performance-advisor
- Windows Efficiency Accelerator: http://www.bleepingcomputer.com/virus-removal/windows-efficiency-accelerator-removal-guide
- Windows Premium Guard: http://www.bleepingcomputer.com/virus-removal/remove-windows-premium-guard
- Windows Safety Checkpoint: http://www.bleepingcomputer.com/virus-removal/remove-windows-safety-checkpoint
- Windows Recovery Series: http://www.bleepingcomputer.com/virus-removal/remove-windows-recovery-series
- Windows High-End Protection: http://www.bleepingcomputer.com/virus-removal/remove-windows-high-end-protection
- Windows Safety Module: http://www.bleepingcomputer.com/virus-removal/remove-windows-safety-module
- Windows Daily Adviser: http://www.bleepingcomputer.com/virus-removal/remove-windows-daily-adviser
- Windows Pro Web Helper: http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-web-helper
- Windows Advanced User Patch: http://www.bleepingcomputer.com/virus-removal/remove-windows-advanced-user-patch
- Windows Internet Booster: http://www.bleepingcomputer.com/virus-removal/remove-windows-internet-booster
- Total Anti Malware Protection: http://www.bleepingcomputer.com/virus-removal/remove-total-anti-malware-protection
- Best Antivirus Software: http://www.bleepingcomputer.com/virus-removal/remove-best-antivirus-software
- Windows ProSecurity Scanner. : http://www.bleepingcomputer.com/virus-removal/remove-windows-prosecurity-scanner
- Windows Sleek Performance: http://www.bleepingcomputer.com/virus-removal/remove-windows-sleek-performance
- Windows Pro Solutions: http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-solutions
- Be-on-Guard Edition: http://www.bleepingcomputer.com/virus-removal/remove-windows-be-on-guard-edition
- Windows Secure Surfer: http://www.bleepingcomputer.com/virus-removal/remove-windows-secure-surfer
- Windows Safeguard: http://www.bleepingcomputer.com/virus-removal/remove-windows-safeguard-upgrade
- Windows Pro Safety Release: http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-safety-release
- Windows Pro Safety: http://www.bleepingcomputer.com/virus-removal/remove-windows-pro-safety
- Windows Private Shield: http://www.bleepingcomputer.com/virus-removal/remove-windows-private-shield
- Multi Control System: http://www.bleepingcomputer.com/virus-removal/remove-windows-multi-control-system
- System Protection Tools: http://www.bleepingcomputer.com/virus-removal/remove-system-protection-tools
- Windows Safety Maintenance: http://www.bleepingcomputer.com/virus-removal/remove-windows-safety-maintenance
- Windows Guard Tools: http://www.bleepingcomputer.com/virus-removal/remove-windows-guard-tools
- Windows Defence Counsel: http://www.bleepingcomputer.com/virus-removal/remove-windows-defence-counsel
- Windows Ultimate Security Patch: http://www.bleepingcomputer.com/virus-removal/remove-windows-ultimate-security-patch
- Windows Antivirus Rampart: http://www.bleepingcomputer.com/virus-removal/remove-windows-antivirus-rampart
- Live Security Platinum: http://www.bleepingcomputer.com/virus-removal/remove-live-security-platinum
- Windows Malware Firewall: http://www.bleepingcomputer.com/virus-removal/remove-windows-malware-firewall
- Windows TurnKey console: http://www.bleepingcomputer.com/virus-removal/remove-windows-turnkey-console
- Windows Safety Wizard: http://www.bleepingcomputer.com/virus-removal/remove-windows-safety-wizard
- Windows PC Aid: http://www.bleepingcomputer.com/virus-removal/remove-windows-pc-aid
- Windows Maintenance Suite: http://www.bleepingcomputer.com/virus-removal/remove-windows-maintenance-suite
- Windows Privacy Module: http://www.bleepingcomputer.com/virus-removal/remove-windows-privacy-module
- Windows Custom Safety: http://www.bleepingcomputer.com/virus-removal/remove-windows-custom-safety
- Windows Privacy Counsel: http://www.bleepingcomputer.com/virus-removal/remove-windows-privacy-counsel
- Windows Instant Scanner: http://www.bleepingcomputer.com/virus-removal/remove-windows-instant-scanner
- Windows Active Defender: http://www.bleepingcomputer.com/virus-removal/remove-windows-active-defender
- Windows Secure Web Patch: http://www.bleepingcomputer.com/virus-removal/remove-windows-secure-web-patch
- Windows Maintenance Guard: http://www.bleepingcomputer.com/virus-removal/remove-windows-maintenance-guard
- windows-advanced-toolkit: http://www.bleepingcomputer.com/virus-removal/remove-windows-advanced-toolkit
- windows-control-series: http://www.bleepingcomputer.com/virus-removal/remove-windows-control-series
- windows-pro-defencehttp://www.bleepingcomputer.com/virus-removal/remove-windows-pro-defence
- windows-custom-management: http://www.bleepingcomputer.com/virus-removal/remove-windows-custom-management
- Windows Privacy Extension: http://www.bleepingcomputer.com/virus-removal/remove-windows-privacy-extension
- windows-proprietary-advisor: http://www.bleepingcomputer.com/virus-removal/remove-windows-proprietary-advisor
- windows-web-commander: http://www.bleepingcomputer.com/virus-removal/remove-windows-web-commander
- windows-virus-hunter: http://www.bleepingcomputer.com/virus-removal/remove-windows-virus-hunter
-windows-expert-series: http://www.bleepingcomputer.com/virus-removal/remove-windows-expert-series
- windows-profound-security:http://www.bleepingcomputer.com/virus-removal/remove-windows-profound-security
- windows-virtual-angel: http://www.bleepingcomputer.com/virus-removal/remove-windows-virtual-angel pour AngelDark... :NNN
- windows-web-combat: http://www.bleepingcomputer.com/virus-removal/remove-windows-web-combat
- file-recovery: http://www.bleepingcomputer.com/virus-removal/remove-file-recovery
- windows-premium-defender: http://www.bleepingcomputer.com/virus-removal/remove-windows-premium-defender
- windows-virtual-firewall: http://www.bleepingcomputer.com/virus-removal/remove-windows-virtual-firewall
- windows-home-patron: http://www.bleepingcomputer.com/virus-removal/remove-windows-home-patron
- A qui le tour? ....
RANSOMWARES:
- Winlock: http://www.malekal.com/2012/02/02/ransomwaretrojan-winlock-windows-a-ete-bloque-pour-des-raisons-de-securite/
- gendarmerie-nationale: http://www.malekal.com/2011/12/11/trojan-fake-police-virus-gendarmerie-nation/
- virus-police-nationale-francaise-activite-illegale-revelee: http://www.malekal.com/2012/05/12/virus-police-nationale-francaise-activite-illegale-revelee/
- GEMA: http://declicomatik.forumgratuit.fr/t292-ransomware-gema-apres-la-gendarmerie-la-sacem
- ukash-bootkitlock2-gen32: http://www.malekal.com/2012/02/22/ransomware-ukash-bootkitlock2-gen32-votre-ordinateur-ne-peut-pas-etre-allume/
- Liste des écrans des ransomwares police: http://www.malekal.com/2011/11/30/trojan-winlock-tropan-ransomware-virus-police/
- Malvertising clicksor: http://www.malekal.com/2012/03/26/malvertising-clicksor-conduit-a-un-spambot/
- Anti-Child Porn Spam Protection: http://www.bleepingcomputer.com/forums/topic449398.html
- virus-police-nationale-departement-de-la-cybercriminalite: http://www.malekal.com/2012/06/24/virus-police-nationale-departement-de-la-cybercriminalite-votre-ordinateur-est-bloque/
- fbi-monkeypak: http://www.bleepingcomputer.com/virus-removal/remove-fbi-monkeypak-ransomware
- police-central-e-crime: http://www.bleepingcomputer.com/virus-removal/remove-police-central-e-crime-unit-reveton-
- virus-coder-de-windows: http://www.malekal.com/2012/07/10/trojan-trustezeb-ransomware-virus-coder-de-windows/
- trafficholder: http://www.malekal.com/2012/07/07/malvertising-trafficholder-et-multi-infection-et-nouveau-ransomware/
- fake-police-international-police-association: http://www.malekal.com/2012/07/18/ransomware-fake-police-international-police-association/
Voici deux sites qui font également le recensement de toutes les bestioles du genre:
- bleepin Computer: http://www.bleepingcomputer.com/forums/topic171335.html
- geekstogo: http://www.geekstogo.com/forum/forum/121-malware-removal-guides-and-tutorials/
:AAN :AAC
-
:AAN
maj smart-fortress-2012
info:
une infection en rapport avec le ransomware gendarmerie-nationale: http://www.malekal.com/2012/02/28/sinowal-avec-virus-gendarmerie-par-malversiting-clicksor/
:AAC
-
Plop
Maj
http://www.bleepingcomputer.com/virus-removal/remove-windows-firewall-constructor
http://www.bleepingcomputer.com/virus-removal/remove-windows-threats-destroyer
http://www.bleepingcomputer.com/virus-removal/remove-windows-attacks-preventor
http://www.bleepingcomputer.com/virus-removal/remove-windows-attacks-defender
http://www.bleepingcomputer.com/virus-removal/remove-windows-trojans-inspector
-
:AAN
maj
http://www.bleepingcomputer.com/virus-removal/remove-antimalware-pc-safety
http://www.bleepingcomputer.com/virus-removal/remove-windows-personal-detective
-
:AAN
maj
- windows-personal-doctor:http://www.bleepingcomputer.com/virus-removal/remove-windows-personal-doctor
- best-virus-protection: http://www.bleepingcomputer.com/virus-removal/remove-best-virus-protection
-
:AAN
maj
- windows-tools-patch: http://www.bleepingcomputer.com/virus-removal/remove-windows-tools-patch :AAN
-
:AAN :AAC
maj
rogues
http://www.bleepingcomputer.com/virus-removal/remove-windows-tools-patch
http://www.bleepingcomputer.com/virus-removal/remove-windows-safety-tweaker
http://www.bleepingcomputer.com/virus-removal/remove-windows-managing-system
http://www.bleepingcomputer.com/forums/topic446111.html
http://www.bleepingcomputer.com/virus-removal/remove-windows-risk-minimizer
ransomware
http://www.malekal.com/2012/03/12/votre-ordinateur-est-bloque-en-raison-du-delit-de-la-loi-france/
http://www.malekal.com/2012/03/13/virus-sacem-police-nationale/b
http://www.malekal.com/2012/03/13/malvertising-adf-ly-ransomware-sacem-police-nationale/
faut pas prendre trop de retard en lecture, on s'en prend 15 dans la tronche !
:AAN :AAC
-
maj
- windows-antihazard-solution: http://www.bleepingcomputer.com/virus-removal/remove-windows-antihazard-solution
-
maj
- windows-no-risk-center: http://www.bleepingcomputer.com/virus-removal/remove-windows-no-risk-center
-
(https://forum.security-x.fr/proxy.php?request=http%3A%2F%2Fr27.imgfast.net%2Fusers%2F2714%2F13%2F72%2F17%2Fsmiles%2F238981.gif&hash=f8fe6a7bc97726e127f88229bd6ae308dea80a13)
Euh, un petit rogue permet à windows d'être en forme non? (https://forum.security-x.fr/proxy.php?request=http%3A%2F%2Fr27.imgfast.net%2Fusers%2F2714%2F13%2F72%2F17%2Fsmiles%2F902193.gif&hash=76c3d15cf2aaae3887d91b5f1358a9e34077ff87)
http://www.bleepingcomputer.com/virus-removal/remove-windows-health-keeper
Me feront toujours rire ces noms de rogues:
http://www.bleepingcomputer.com/virus-removal/remove-windows-problems-stopper
cela stoppe les problèmes, mais aussi windows :pdr:
(https://forum.security-x.fr/proxy.php?request=http%3A%2F%2Fr27.imgfast.net%2Fusers%2F2714%2F13%2F72%2F17%2Fsmiles%2F842673.gif&hash=9cb368ea52e721a341562db1e4071fb837671008)
-
:AAN
- windows-software-keeper: http://www.bleepingcomputer.com/virus-removal/remove-windows-software-keeper
- windows-guardian-angel: http://www.bleepingcomputer.com/virus-removal/remove-windows-guardian-angel
- security shield: http://www.bleepingcomputer.com/forums/topic447053.html
- windows-process-director: http://www.bleepingcomputer.com/virus-removal/remove-windows-process-director
- windows-antihazard-center: http://www.bleepingcomputer.com/virus-removal/remove-windows-antihazard-center
:AAC
-
maj
- windows-software-saver: http://www.bleepingcomputer.com/virus-removal/remove-windows-software-saver
:AAC
-
:AAN
maj
-system-check: http://www.bleepingcomputer.com/virus-removal/remove-system-check
une mise en garde pour un des rogues: system check
http://forum.pcastuces.com/rogue_system_chek-f25s63164.htm
Merci Labougie pour l'info ;)
Malvertising clicksor
http://www.malekal.com/2012/03/26/malvertising-clicksor-conduit-a-un-spambot/
:AAN
-
:AAC
maj
un rappel des derniers rogues trouvés par bleeping computer:
- windows-no-risk-agent: http://www.bleepingcomputer.com/virus-removal/remove-windows-no-risk-agent
- windows-defending-center: http://www.bleepingcomputer.com/virus-removal/remove-windows-defending-center
- windows-debug-center: http://www.bleepingcomputer.com/virus-removal/remove-windows-debug-center
- windows-trouble-taker: http://www.bleepingcomputer.com/virus-removal/remove-windows-trouble-taker
- windows-first-class-protector: http://www.bleepingcomputer.com/virus-removal/remove-windows-first-class-protector
- smart-HDD: http://www.bleepingcomputer.com/virus-removal/remove-smart-hdd
- windows-activity-debugger: http://www.bleepingcomputer.com/virus-removal/remove-windows-activity-debugger
- windows-warding-system: http://www.bleepingcomputer.com/virus-removal/remove-windows-warding-system
-
:AAN
maj
- windows-shielding-utility: http://www.bleepingcomputer.com/virus-removal/remove-windows-shielding-utility
- advanced-antispyware-solution: http://www.bleepingcomputer.com/virus-removal/remove-advanced-antispyware-solution
- windows-custodian-utility: http://www.bleepingcomputer.com/virus-removal/remove-windows-custodian-utility
- windows-care-taker: http://www.bleepingcomputer.com/virus-removal/remove-windows-care-taker
C'est la fête du rock ! :NNN
:AAN
-
:AAN
grosse maj de la liste récapitulative.
Merci @ bleeping computer et Lawrence Abrams sur twitter :sup:
:AAC
-
:AAN
encore un !
windows-advanced-toolkit: http://www.bleepingcomputer.com/virus-removal/remove-windows-advanced-toolkit
-
Bonne pioche ! :NNN
rogue:
windows-control-series: http://www.bleepingcomputer.com/virus-removal/remove-windows-control-series
windows-pro-defencehttp://www.bleepingcomputer.com/virus-removal/remove-windows-pro-defence
ransomware:
virus-police-nationale-departement-de-la-cybercriminalite: http://www.malekal.com/2012/06/24/virus-police-nationale-departement-de-la-cybercriminalite-votre-ordinateur-est-bloque/
-
Plop, n'ayant pas vu ce lien dedans :
Ransomware :
http://www.malekal.com/2012/05/12/virus-police-nationale-francaise-activite-illegale-revelee/
Mais, comme j'ai mis dans les commentaires :
Je vois que la ligne du rapport montre le fichier dans le dossier TEMP.
Un nettoyage par ATFCleaner pourrait-il résoudre le probleme ?
Qu'en pensez vous ? Après un rapport HJT ne montre pas tout mais bon.
-
Plop
merci, je vais l'ajouter.
Si on regarde cela: https://www.virustotal.com/file/dab9c20a80e673e603881e8fe6eb562ac019fae409f3e291f176e1c778dc4e97/analysis/
le trojan est donc un dropper, qui télécharge les merdouilles? Il se lance via une clé run qui pointe vers l'exe se situant dans les temp.
Un petit virus donc.
Suffit même de dégager la clé run du registre, pour que l'infection ne se remette pas en route, et de redémarrer.
Par sécurité, supprimer les temporaires est en effet à faire, cela supprime le fichier injecteur, qu'il vaut mieux ne pas laisser trainer sur la machine.
Mais faut demander aux vrais pros de confirmer mes dires, je suis bien loin de leurs connaissances.
Mais je crois ne pas dire de connerie :hi:
j'ajoute après celui de la gendarmerie nationale déjà mis. Merci.
:sup:
-
:AAN
http://www.bleepingcomputer.com/virus-removal/remove-windows-custom-management
:DDD
-
:AAC
Windows Privacy Extension
http://www.bleepingcomputer.com/virus-removal/remove-windows-privacy-extension
:miam:
-
:AAN
maj
windows-proprietary-advisor: http://www.bleepingcomputer.com/virus-removal/remove-windows-proprietary-advisor
-
:AAN
maj
http://www.bleepingcomputer.com/virus-removal/remove-windows-web-commander
-
:AAN
maj
windows-virus-hunter: http://www.bleepingcomputer.com/virus-removal/remove-windows-virus-hunter
on fait appel à RickHunter ou pas? :NNN
-
:AAN :AAC
Petite maj avec un peu de retard...
rogues:
windows-expert-series: http://www.bleepingcomputer.com/virus-removal/remove-windows-expert-series
windows-profound-security:http://www.bleepingcomputer.com/virus-removal/remove-windows-profound-security
windows-virtual-angel: http://www.bleepingcomputer.com/virus-removal/remove-windows-virtual-angel pour AngelDark... :NNN
windows-web-combat: http://www.bleepingcomputer.com/virus-removal/remove-windows-web-combat
file-recovery: http://www.bleepingcomputer.com/virus-removal/remove-file-recovery
ransomware:
fbi-monkeypak: http://www.bleepingcomputer.com/virus-removal/remove-fbi-monkeypak-ransomware
police-central-e-crime: http://www.bleepingcomputer.com/virus-removal/remove-police-central-e-crime-unit-reveton-ransomware
virus-coder-de-windows: http://www.malekal.com/2012/07/10/trojan-trustezeb-ransomware-virus-coder-de-windows/
trafficholder: http://www.malekal.com/2012/07/07/malvertising-trafficholder-et-multi-infection-et-nouveau-ransomware/
-
:AAC
maj
windows-premium-defender: http://www.bleepingcomputer.com/virus-removal/remove-windows-premium-defender
Hier était présenté le ransomware virus-coder-de-windows: http://www.malekal.com/2012/07/10/trojan-trustezeb-ransomware-virus-coder-de-windows/
Il n'a pas fallu longtemps pour qu'il sévisse...
http://www.infos-du-net.com/forum/id-2143486/virus-codeur-windows.html
Bonne :miam: AngelDark, cela va être dur car les outils pouir décrypter ne sont pas encore développés...
:AAN :AAC
-
:AAN
un petit rogue du jour :hi:
windows-virtual-firewall: http://www.bleepingcomputer.com/virus-removal/remove-windows-virtual-firewall
:AAC
-
:AAC
maj
- windows-home-patron: http://www.bleepingcomputer.com/virus-removal/remove-windows-home-patron
- fake-police-international-police-association: http://www.malekal.com/2012/07/18/ransomware-fake-police-international-police-association/
:miam:
-
Bonjour,
j'ai eu ce problème chez un "costumer" et celui-ci à crypter toutes les données sur le serveur et quand il a finit et bien le gentil petit soft dis : payer 300.- pour decrypter vos données... et quand il y a aucun fichier source non crypter et bien voilà c'est partit pour une réstauration complète avec les backups :AAM