Virus ??

doudou_thebest Messages postés 45 Statut Membre -  
doudou_thebest Messages postés 45 Statut Membre -
Bonjour,
alors voici mon souci dès que je clique sur nimporte qu'elle explorateur windows ( poste de travail, mes documents .... ) une page internet aparait et l'explorateur ne s'ouvre pas ! J'ai kapersky et j'ai donc fait une analyse anti-virus sans succès :s Jesper que vous allez pouvoir m'aider .. ! Merci d'avance

P.S : voici la page qui aparait sans cesse
https://www.google.com/search?q=win32.DNSChanger&btnG=Search&meta=&gws_rd=ssl
Configuration: Windows Vista
Firefox 3.0.6

8 réponses

  1. doudou_thebest Messages postés 45 Statut Membre 6
     
    svp aidez moiii !
    0
  2. Utilisateur anonyme
     
    Bonsoir doudou_thebest,
    Fais deja un nettoyage CCleaner, pour le registre aussi. il est preregle, tu fais le nettoyage deux fois, ensuite registre fais la sauvegarde demandee.
    Dis nous si c'est suffisant.
    A+
    0
  3. doudou_thebest Messages postés 45 Statut Membre 6
     
    je viens de fair exactement ce que tu viens de me dire mais aucun resultat le bug est toujours la :s
    0
  4. Utilisateur anonyme
     
    RE
    Telecharges Malwarebytes, tu le lances, tu fais la mise a jour, tu fais un scanne et tu fais un copier coller du rapport dans un prochain post.
    A+
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. doudou_thebest Messages postés 45 Statut Membre 6
     
    dakor c en cour la, je tenvoie sa après
    0
  7. doudou_thebest Messages postés 45 Statut Membre 6
     
    voila :

    Malwarebytes' Anti-Malware 1.34
    Version de la base de données: 1822
    Windows 6.0.6000

    05/03/2009 22:26:58
    mbam-log-2009-03-05 (22-26-58).txt

    Type de recherche: Examen complet (C:\|D:\|)
    Eléments examinés: 173054
    Temps écoulé: 44 minute(s), 2 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 1
    Clé(s) du Registre infectée(s): 18
    Valeur(s) du Registre infectée(s): 1
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 19

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    C:\Windows\System32\fejokt.dll (Trojan.FakeAlert) -> Delete on reboot.

    Clé(s) du Registre infectée(s):
    HKEY_CLASSES_ROOT\TypeLib\{a8954909-1f0f-41a5-a7fa-3b376d69e226} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{7a85cdf5-284b-4496-a9a7-dd82fee9dcec} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{fcd4b2f5-8793-4e1f-8774-6e520cf6cd79} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{930e7881-d9f3-4293-a24b-23a80c013378} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{930e7881-d9f3-4293-a24b-23a80c013378} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{930e7881-d9f3-4293-a24b-23a80c013378} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\lmaspois (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\lmaspois.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\oberontb.band (Adware.Gamesbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{ad76633e-e50d-4844-9e7f-4dfbc7c18467} (Adware.Gamesbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{ec1a2105-5621-440f-987d-27ef428131d9} (Adware.Gamesbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\oberontb.band.1 (Adware.Gamesbar) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1a93c934-025b-4c3a-b38e-9654a7003239} (Adware.Gamesbar) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1a93c934-025b-4c3a-b38e-9654a7003239} (Adware.Gamesbar) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Bind (Malware.Trace) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\Windows\System32\fejokt.dll (Trojan.FakeAlert) -> Delete on reboot.
    C:\Program Files\GamesBar\oberontb.dll (Adware.Gamesbar) -> Quarantined and deleted successfully.
    D:\Logiciels\Indispensable\acrobate2\zwtapro8\Keygen\keygen.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
    D:\Logiciels\Soft\Maintenance\Générateur de clé XP\XP KeyGen\XP Keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\Logiciels\Soft\Maintenance\RegFreeze 5.5.1 (Français)\regfreeze.v5.5.1-patch.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    C:\Users\Administrateur\Favorites\Cheap Software.url (Rogue.Link) -> Quarantined and deleted successfully.
    C:\Windows\System32\sf.ico (Malware.Trace) -> Quarantined and deleted successfully.
    C:\Users\Administrateur\Favorites\MP3 Download.url (Rogue.Link) -> Quarantined and deleted successfully.
    C:\Windows\System32\m3.ico (Malware.Trace) -> Quarantined and deleted successfully.
    C:\Users\Administrateur\Favorites\Search Online.url (Rogue.Link) -> Quarantined and deleted successfully.
    C:\Users\Administrateur\Favorites\VIP Casino.url (Rogue.Link) -> Quarantined and deleted successfully.
    C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\SMS TRAP.url (Rogue.Link) -> Quarantined and deleted successfully.
    C:\Users\Administrateur\Favorites\Cheap Pharmacy Online.url (Rogue.Link) -> Quarantined and deleted successfully.
    C:\Windows\System32\c.ico (Malware.Trace) -> Quarantined and deleted successfully.
    C:\Windows\System32\m.ico (Malware.Trace) -> Quarantined and deleted successfully.
    C:\Windows\System32\p.ico (Malware.Trace) -> Quarantined and deleted successfully.
    C:\Windows\System32\s.ico (Malware.Trace) -> Quarantined and deleted successfully.
    C:\Users\Administrateur\Favorites\SMS TRAP.url (Rogue.Link) -> Quarantined and deleted successfully.
    C:\Windows\ios.dat (Malware.Trace) -> Quarantined and deleted successfully.
    0
  8. Utilisateur anonyme
     
    RE
    Ca a bien fait le menage deja. Comment se comporte ton PC, maintenant?
    A+
    0
  9. doudou_thebest Messages postés 45 Statut Membre 6
     
    c'est parfait tout marche nikel ! jte remercie de ton aide ^^ Bonne soirée et encor merci
    0