Plus d'antivirus - Page 2

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3600+ )
BIOS : BIOS Date: 05/28/07 15:18:21 Ver: 08.00.12
USER : Utilisateur ( Administrator )
BOOT : Normal boot
Firewall : Online Armor Firewall 2.1.0.31 (Not Activated)
C:\ (Local Disk) - NTFS - Total:232 Go (Free:167 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
F:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 03/07/2009|22:59 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127
Supprime! - C:\Program Files\Dealio\DealioAU.exe
Supprime! - C:\Program Files\Dealio\kb127
Supprime! - C:\Program Files\Dealio\SearchSettingsKit.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
Supprime! - C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\ICD1.tmp
Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio
Supprime! - C:\Program Files\Dealio
Supprime! - C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings
Supprime! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
"Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"
"Start Page Restore"="https://www.orange.fr/portail"
"Search Bar"="https://www.orange.fr/portail?kw="
"Start Page"="https://www.orange.fr/portail"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="https://www.msn.com/fr-fr/"
"Start Page"="https://www.msn.com/fr-fr/"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 03/07/2009|22:36 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 03/07/2009|23:02 - Option : [2]

-----------\\ Fin du rapport a 23:02:12,09

Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2369
Windows 5.1.2600 Service Pack 3

04/07/2009 00:17:58
mbam-log-2009-07-04 (00-17-58).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 243918
Temps écoulé: 1 hour(s), 0 minute(s), 18 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 9

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\bitsprx232.dll (Trojan.Tracur) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\c81348d1632 (Trojan.Tracur) -> Delete on reboot.
HKEY_CLASSES_ROOT\experttool.pornpro_bho (Adware.ExpertTools) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\experttool.pornpro_bho.1 (Adware.ExpertTools) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\experttool (Adware.ExpertTools) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegedit (Hijack.Regedit) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegedit (Hijack.Regedit) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Tracur) -> Data: c:\windows\system32\bitsprx232.dll -> Delete on reboot.

Dossier(s) infecté(s):
C:\Program Files\ExpertTool (Adware.ExpertTools) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SystemX86 (Worm.Archive) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\bitsprx232.dll (Trojan.Tracur) -> Delete on reboot.
c:\system volume information\_restore{d2b94b42-99bc-4cdd-93e0-508a90a8d95e}\RP332\A0038790.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
c:\system volume information\_restore{d2b94b42-99bc-4cdd-93e0-508a90a8d95e}\RP332\A0038792.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
c:\system volume information\_restore{d2b94b42-99bc-4cdd-93e0-508a90a8d95e}\RP332\A0038793.exe (Trojan.Tracur) -> Quarantined and deleted successfully.
c:\program files\experttool\ExpertTool.dat (Adware.ExpertTools) -> Quarantined and deleted successfully.
c:\program files\experttool\pcre3.dll (Adware.ExpertTools) -> Quarantined and deleted successfully.
c:\program files\experttool\uninstall.exe (Adware.ExpertTools) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\systemx86\E9.tmp (Worm.Archive) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\2.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 07/04/2009 at 01:25 AM

Application Version : 4.26.1006

Core Rules Database Version : 3970
Trace Rules Database Version: 1910

Scan type : Complete Scan
Total Scan Time : 00:46:48

Memory items scanned : 740
Memory threats detected : 0
Registry items scanned : 6694
Registry threats detected : 0
File items scanned : 34455
File threats detected : 15

Adware.Tracking Cookie
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@doubleclick[2].txt
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@atdmt[1].txt
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@questionmarket[2].txt
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@serving-sys[2].txt
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@weborama[1].txt
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@xiti[1].txt
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@smartadserver[2].txt
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@advertising[2].txt
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@aimfar.solution.weborama[1].txt
C:\Documents and Settings\Utilisateur\Cookies\utilisateur@bs.serving-sys[1].txt

Adware.Vundo/Variant-MSFake
C:\DOCUMENTS AND SETTINGS\UTILISATEUR\APPLICATION DATA\MICROSOFT\QUIZ QUELLE CELEBRITE ETES-VOUS\SUPPRESSION-QUELLECELEBRITEETESVOUS.EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{D2B94B42-99BC-4CDD-93E0-508A90A8D95E}\RP254\A0032034.EXE

Trojan.Agent/Gen-Dropper[Temp]
C:\WINDOWS\INSTALLER\MSI270.TMP
C:\WINDOWS\INSTALLER\MSI28F.TMP
C:\WINDOWS\INSTALLER\MSI557.TMP

Pour être débarrassé des infections il faut redémarrer ton pc.Astu supprimer tout ce que superantspywares a trouvé.
Post un nouveau rapport rsit.

Tout a l'air de tourner normalement.J'ai réussi a réinstaller BITDEFENDER et ça fonctionne.