aartemis

[jfb]

j'ai recu deux rapports :

le premier mbam log :

https://upload.sosvirus.net/log/SosUploa ... 3a9dc7.txt


le duxième nommé protection log :

https://upload.sosvirus.net/log/SosUploa ... 9d5a89.txt

merci

[El Desaparecido]

• Télécharge Junkware Removal Tool (de thisisu) sur ton bureau.
• Lance Junkware Removal Tool, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista
• Appuie sur n'importe quelle touche.
  
  
• Une fois le scan terminé rends toi sur le bureau, le fichier JRT.txt à été créé.
• Héberge le rapport JRT.txt surSosUpload, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum

Ensuite redémarre le pc et dis moi si t'as encore des soucis stp.

[jfb]

voici le fichier JRT.txt

https://upload.sosvirus.net/log/SosUploa ... 8d7d27.txt

je redémarre le pc et donne le verdict

à tout de suite

[jfb]

Après redémarrage AARTEMIS est toujours là !!!

[El Desaparecido]

Refais ceci stp : https://www.sosvirus.net/aartemis-t4237.html#p15247 Une fois le scan zhpsearch terminé, copie le texte qui se situe dans le cadre et colle le dans ta prochaine réponse.

[jfb]

voici le rapport zhpsearch



Rapport de ZHPSearch, v2013.11.9.20 par Nicolas Coolman, Update du 09/11/2013
Run by BELLIARD P E M E JF at 09/11/2013 15:06:12
WebSite:
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Search : aartemis



---\\ Recherche dans l'explorateur
C:\FRST\Quarantine\aartemis.xml
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Internet Explorer\DOMStore\KJT2RIYA\aartemis[1].xml
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OQEQ9UGX\aartemis_com[1].htm
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QC04U0JB\aartemis-t4237-10[1].htm
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\N1BLTHDI\aartemis-t4237-10[1].htm
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RIC5DRCO\aartemis_com[1].htm
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UYXPS06Y\aartemis-t4234-10[1].htm
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UYXPS06Y\aartemis-t4237[2].htm
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZH235404\affich-29071580-moteur-de-recherche-aartemis-resolu[1].htm
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\fullpackage_temp\tugs_aartemis.db
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\fullpackage_temp\tugs_aartemis.json
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\MircosoftStudio\tugs_aartemis.db
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\MircosoftStudio\tugs_aartemis.json
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\Aartemis
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\Aartemis\info.html
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\css\aartemis.css
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\software\tugs_aartemis.exe
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\temp\Aartemisinfo.dfe
C:\Users\BELLIARD P E M E JF\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\S1L9W5YR\aartemis[1].xml
C:\Users\BELLIARD P E M E JF\Pictures\2011\2012\Favorites\Links\SOS Virus - aartemis.url
C:\_OTL\MovedFiles\11082013_235150\C_Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\DSLTG13D\1209476-aartemis-virus[2].htm

~ Items d'explorateur scannés en 01mn 39s

---\\ Recherche dans la Base de Registre
[HKEY_LOCAL_MACHINE\SOFTWARE\aartemisSoftware]
[HKEY_LOCAL_MACHINE\SOFTWARE\aartemisSoftware\aartemishp]

~ Items d'explorateur scannés en 01mn 33s

[El Desaparecido]

Ok , je vais être embettant

Refais la même chose mais en configurant zhpsearch autrement, tu clic sur configurer et tu coches toutes les cases comme ainsi :

[jfb]

oh non tu ne m'embète pas

voici le nouveau rapport avec la config zhp demandée

Rapport de ZHPSearch, v2013.11.9.20 par Nicolas Coolman, Update du 09/11/2013
Run by BELLIARD P E M E JF at 09/11/2013 15:40:02
WebSite:
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Search : aartemis



---\\ Recherche dans l'explorateur
[MD5.2B7D70C4C674919884C73A0A5DFA9733] [SCH][07/11/2013] (...) -- C:\FRST\Quarantine\aartemis.xml [547]
[MD5.C1DDEA3EF6BBEF3E7060A1A9AD89E4C5] [SCH][09/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Internet Explorer\DOMStore\KJT2RIYA\aartemis[1].xml [13]
[MD5.AC09366E73F4787ECBCE305295CDB8CB] [SCH][09/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OQEQ9UGX\aartemis_com[1].htm [7852]
[MD5.B9BD8944913FE0D21B8C191EF8EE2D18] [SCH][09/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QC04U0JB\aartemis-t4237-10[1].htm [44406]
[MD5.E8D82C3AACE8B921A7B556533A9A8021] [SCH][09/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\N1BLTHDI\aartemis-t4237-10[1].htm [47181]
[MD5.AC09366E73F4787ECBCE305295CDB8CB] [SCH][09/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RIC5DRCO\aartemis_com[1].htm [7852]
[MD5.EF7249D10C6A1B26F8A10933FB1653ED] [SCH][09/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UYXPS06Y\aartemis-t4234-10[1].htm [57926]
[MD5.2F5AF1B3213F7406267DAC429CF0342F] [SCH][09/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UYXPS06Y\aartemis-t4237[2].htm [86339]
[MD5.94C35BF0890CD01FD1D6AACA90602C6D] [SCH][09/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZH235404\affich-29071580-moteur-de-recherche-aartemis-resolu[1].htm [47116]
[MD5.296E9C98F1269738A07906B78C0C2BCF] [SCH][06/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\fullpackage_temp\tugs_aartemis.db [112]
[MD5.F2E2EEAEDC9C0A24D2579437D6C9C667] [SCH][06/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\fullpackage_temp\tugs_aartemis.json [280]
[MD5.90B02D6B2B1EA0DEF60BC49347643FC2] [SCH][07/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\MircosoftStudio\tugs_aartemis.db [91]
[MD5.F2E2EEAEDC9C0A24D2579437D6C9C667] [SCH][06/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\MircosoftStudio\tugs_aartemis.json [280]
[MD5.D41D8CD98F00B204E9800998ECF8427E] [SCH][02/01/1601] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\Aartemis [0]
[MD5.6A56B9A5567AFBF4F43FFB06E3F15102] [SCH][07/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\Aartemis\info.html [5460]
[MD5.C47ED7501D999DF32D7735C3C8611771] [SCH][07/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\css\aartemis.css [3556]
[MD5.A241039EA8586096395562DD545282C9] [SCH][07/11/2013] (.Skytech Co., Ltd. - Skytech Downloader.) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\software\tugs_aartemis.exe [454808]
[MD5.8CB111C1C2286DC135B12FE5DDC67E3E] [SCH][07/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\temp\Aartemisinfo.dfe [979]
[MD5.C1DDEA3EF6BBEF3E7060A1A9AD89E4C5] [SCH][08/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\S1L9W5YR\aartemis[1].xml [13]
[MD5.80F74203F6998F3B9D01506F241FB79E] [SCH][08/11/2013] (...) -- C:\Users\BELLIARD P E M E JF\Pictures\2011\2012\Favorites\Links\SOS Virus - aartemis.url [134]
[MD5.90ED2D71F1ABDE021E8CE914C62ECF3C] [SCH][08/11/2013] (...) -- C:\_OTL\MovedFiles\11082013_235150\C_Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\DSLTG13D\1209476-aartemis-virus[2].htm [78340]

~ Items d'explorateur scannés en 00mn 06s

---\\ Recherche dans la Base de Registre
[HKEY_LOCAL_MACHINE\SOFTWARE\aartemisSoftware]
[HKEY_LOCAL_MACHINE\SOFTWARE\aartemisSoftware\aartemishp]

~ Items d'explorateur scannés en 13mn 32s

[El Desaparecido]

• Télécharge OTM de OldTimer sur ton bureau.
• Double-clique sur OTM.exe pour le lancer.
• Sous Vista/Seven , clic droit -> lancer en tant qu'administrateur
• Copie la liste ci-dessous et colle-la dans le cadre de gauche de OTM sous Paste Instructions for Items to be Moved.

Code : Tout sélectionner

:files 
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Internet Explorer\DOMStore\KJT2RIYA
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OQEQ9UGX
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\N1BLTHDI
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RIC5DRCO
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UYXPS06Y
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZH235404
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\fullpackage_temp
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\MircosoftStudio\tugs_aartemis.db [91]
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe
C:\Users\BELLIARD P E M E JF\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\S1L9W5YR\
C:\Users\BELLIARD P E M E JF\Pictures\2011\2012\Favorites\Links\SOS Virus - aartemis.url

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\aartemisSoftware]

:commands 
[emptytemp] 

• Clique sur "MoveIt!" .
• Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demanderas de redémarrer l'ordinateur.
• Si c'est le cas, acceptes en cliquant sur "YES".
• Post le rapport dans ta prochaine réponse.
• Le rapport est situé dans C:\_OTM\MovedFiles (Le nom du rapport correspond au moment de sa création : date_heure.log).

• Télécharge Shortcut_Module (de g3n-h@ckm@n) sur ton bureau.
• Lance Shortcut_Module, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista
  
  Note : Patiente le temps du scan
  
  
• Copie et colle le rapport qui va s'ouvrir sur le forum.

---

[Invité]

salut

ci apr-s les deux rapports demandés
au reboot du pc pas d'apparition d'aartemis via IE Google

l'infection viens certainement des enfants qui ont voulus télécharger des jeux pour DS


voici le rapport de OTM

All processes killed
========== FILES ==========
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Internet Explorer\DOMStore\KJT2RIYA folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OQEQ9UGX folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\N1BLTHDI folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RIC5DRCO folder moved successfully.
Folder move failed. C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UYXPS06Y scheduled to be moved on reboot.
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\ZH235404 folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\fullpackage_temp folder moved successfully.
File/Folder C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\MircosoftStudio\tugs_aartemis.db [91] not found.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\temp folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\software folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\Wajam folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\Superlyrics folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\SpeedUpMyPc folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\Quickshare folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\MyBackupPc folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\HDplus folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\exe folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\Dealply folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\css\images folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\css folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin\Aartemis folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69\bin folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe\218ed282719c4ec281e8d49064001c69 folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Temp\Player_Setup.exe folder moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\S1L9W5YR folder moved successfully.
C:\Users\BELLIARD P E M E JF\Pictures\2011\2012\Favorites\Links\SOS Virus - aartemis.url moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\aartemisSoftware\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: BELLIARD P E M E JF
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 61421227 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 602 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2748537 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36666 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 755 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 24064 bytes

Total Files Cleaned = 61,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 11092013_161752

Files moved on Reboot...
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UYXPS06Y folder moved successfully.
File C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UYXPS06Y\xd_arbiter[1].htm not found!
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\N1BLTHDI\xd_arbiter[1].htm moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4J2LZHK5\post15461[1].htm moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\7A7E08C8-3FF5-45F2-873D-A84D669DC82F.dat moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
C:\Users\BELLIARD P E M E JF\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

Registry entries deleted on Reboot...


************************************************************************************************************************

et le rapport de shortcut



¤¤¤¤¤¤¤¤¤¤ | Shortcut_Module 27.09.2013 - g3n-h@ckm@n

16:28:49 - 09/11/2013

Disinfected : C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk : C:\Program Files (x86)\Mozilla Firefox\firefox.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk : C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\BELLIARD P E M E JF\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk : C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\BELLIARD P E M E JF\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk : C:\Program Files (x86)\Internet Explorer\iexplore.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\BELLIARD P E M E JF\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk : C:\Program Files (x86)\Mozilla Firefox\firefox.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\BELLIARD P E M E JF\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer (64-bit).lnk : C:\Program Files\Internet Explorer\iexplore.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\BELLIARD P E M E JF\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer (64-bit).lnk : C:\Program Files\Internet Explorer\iexplore.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\BELLIARD P E M E JF\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk : C:\Program Files (x86)\Mozilla Firefox\firefox.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\BELLIARD P E M E JF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk : C:\Program Files\Internet Explorer\iexplore.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\BELLIARD P E M E JF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk : C:\Program Files\Internet Explorer\iexplore.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk : C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)
Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk : C:\Program Files (x86)\Mozilla Firefox\firefox.exe (hxxp://aartemis.com/?type=sc&ts=1383856246&from=tugs&uid=395049983_1052514_A847EB7E)