Mon ordi rame j'ai lu tout les posts pourtan

Question

Bonjour,

Mon ordinateur rame trop sur internet depuis maintenant une semaine... C'est insoutenable! 

J'ai lu presque tout les posts :

- J'ai fait les analyses et corrections via : 

Ad-aware, 
Spyblot, 
Uniblue Tune Up utilities, 
Clean Up!, 
Cc cleaner 
Avast

et tous ces logiciels en dernières versions!

J'ai vidé les dossiers prefech et windows temp... etc... de mes disques dur , j'ai même boosté la performance mémoire/rapidité de mon ordi ... MAIS RIEN N'y fait!

Si quelqu'un a une idée svp, je lui en serait très reconnaissant!!! 

Voici le rapport Hijackthis, si ça peut aider... Merci énormément: 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:20:06, on 29/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\system32undll32.exe
D:\WINDOWS\AhnRpta.exe
D:\Program Files\iolo\common\lib\ioloServiceManager.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\TUProgSt.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Windows Live\Messenger\msnmsgr.exe
D:\Program Files\Windows Live\Contacts\wlcomm.exe
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Documents and Settings\adri\Local Settings\Temporary Internet Files\Content.IE5\G8NFKIOJ\HiJackThis[1].exe
D:\WINDOWS\system32
otepad.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - D:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - D:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
O2 - BHO: D - {ECBDFAD1-9759-339C-8BA5-827BB0BF8A3A} - D:\WINDOWS\system32\xi43468.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - D:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [cdoosoft] D:\DOCUME~1\adri\LOCALS~1\Temp\herss.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Google Sidewiki... - res://D:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - D:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
O9 - Extra 'Tools' menuitem: Paramètres de Google &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - D:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - D:\WINDOWS\bdoscandel.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader2.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - http://3dlifeplayer.dl.3dvia.com/player/install/3DVIA_player_installer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Update Service (gupdate1c96b626a701370) (gupdate1c96b626a701370) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - D:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - D:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: PanelSvc - Unknown owner - D:\Program Files\Votre Opinion\PanelApp\PanelSvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - D:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - D:\WINDOWS\System32\TUProgSt.exe

mikka-mee · Answer

salut adrien 

concretement il a quoi dans le ventre ce pc ?

dédétraqué · Answer

Salut Adrien


Ton PC est bien infecté et on va vérifier cela, télécharge RSIT (de random/random) sur le bureau ici :
http://images.malwareremoval.com/random/RSIT.exe

- Double clique sur RSIT.exe qui est sur le bureau
- Clique sur Continue dans la fenêtre
- RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
- Poste le contenue des deux rapports, log.txt et info.txt(réduit dans la barre des tâches) à la fin de l’analyse

Les rapports sont dans le dossier ici C:\rsit


@++ :)

dédétraqué · Answer

Salut Adrien


Cela est pire que je pensait, bon faudra bien suivre toutes les procédures.

Télécharge et installe UsbFix par Chiquitine29
http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe

(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir.

• Double clic sur le raccourci UsbFix présent sur ton bureau .

• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .

• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]

• Laisse travailler l'outil.

• Ensuite poste le rapport UsbFix.txt qui apparaitra.

Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note2 : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.


• Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html 


@++  :)

coolvirus · Answer

peut etre ses ton ordianteur qui est trop sale lave le ses le truc qui est trop sale

dédétraqué · Answer

Salut Adrien


Je te met en garde contre le téléchargement illégal qui est le principal facteur d’infection (µTorrent, BitTorrent, eMule, Limewire, etc..)   http://forum.malekal.com/ftopic893.php

################## | Cracks > Keygens > Serials |

"D:\Documents and Settings\adri\Mes documents\Downloads\TuneUp Utilities 2009 v8.0.110.34+Serial+Keygen[h33t]MasterUploader\Keygen\Keygen.exe"
27/12/2009 01:48 |Size 81920 |Crc32 af7adad6 |Md5 0024f2bd757b2de18d2f52a5132d9348

"D:\Ma musique\belliqueux\site web\FTP expert\TFTPExpert (keygen).zip"
-> Contain : Keygen FTP Expert 3.70.3.exe

"F:\Ma musique\belliqueux\site web\FTP expert\TFTPExpert (keygen).zip"
-> Contain : Keygen FTP Expert 3.70.3.exe

"D:\Documents and Settings\adri\Mes documents\Downloads\Guitar.Pro.5.0 full +crack.rar"
-> contain : GP5FULL.exe

"D:\Documents and Settings\adri\Mes documents\Downloads\Registry Booster + serial [byGreenboy420].rar"
-> contain : registrybooster.exe

"D:\Documents and Settings\adri\Mes documents\Downloads\Registry Booster 2 + Serial.rar"
-> contain : registry booster 2.exe 


-----


(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, caméra, Carte SD, etc...) susceptible d avoir été infectés sans les ouvrir

• Double clic sur le raccourci UsbFix présent sur ton bureau

• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .

• Au second menu Choisis l'option " 2 " ( Suppression ) et tape sur [entrée]

• Ton bureau disparaîtra et le pc redémarrera.

• Au redémarrage, UsbFix scannera ton PC, laisse travailler l'outil.

• Ensuite poste le rapport UsbFix.txt qui apparaîtra avec le bureau.

• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller ) 


@++  :)

mikka-mee · Answer

hey adrien !!
peut etre pourais tu suprimer ce poste pour eviter les ennuits futur nn ?
moin de gens le voi mieux c est !

dédétraqué · Answer

Salut Adrien 


C'est indiquer a la fin du rapport, poste le je te donnerai plus d'indication.

Il est sauvegardé a la racine du disque.( C:\UsbFix.txt ) 


@++   :)

dédétraqué · Answer

Salut Adrien


Non pas le bon rapport, sinon refais la procédure.


@++   :)

dédétraqué · Answer

Salut Adrien


Supprime ce dossier C:\rsit

Refais un scan avec RSIT et poste le rapport log.txt seulement à la fin de l’analyse

Le rapport est dans le dossier ici C:\rsit


@++   :)

dédétraqué · Answer

Salut douyou4


Je doit quitter pour le boulot, on finalise cela ce soir, bonne journée  ;)


@++   :)

douyou4 · Answer

je ne sais pas si ce que je vais dire est utile, mais mon disque dur est partionné en deux partie : 

- C:
et
- D:

Ca ne devrait pas poser de problème je pense, parce qu'à chaque fois que tu me demandes de retrouver une analyse ou un rapport dans C: je le trouve toujours dans D: 

merci encore, voila le rapport :


############################## | UsbFix V6.068 |

User : adri (Administrateurs) # ADRI-7B57F251AF
Update on 28/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 13:11:33 | 29/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

mobile AMD Athlon(tm) XP-M 2400+
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Disabled
AV : avast! antivirus 4.7.1098 [VPS 090323-0] 4.7.1098 [ Enabled | (!) Outdated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 19,53 Go (17,02 Go free) # NTFS
D:\ -> Disque fixe local # 56,79 Go (19,31 Go free) # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque fixe local # 465,53 Go (310,33 Go free) # FAT32

############################## | Processus actifs |

D:\WINDOWS\System32\smss.exe 540
D:\WINDOWS\system32\csrss.exe 604
D:\WINDOWS\system32\winlogon.exe 628
D:\WINDOWS\system32\services.exe 672
D:\WINDOWS\system32\lsass.exe 684
D:\WINDOWS\system32\svchost.exe 836
D:\WINDOWS\system32\svchost.exe 892
D:\WINDOWS\System32\svchost.exe 980
D:\WINDOWS\system32\svchost.exe 1036
D:\WINDOWS\system32\svchost.exe 1192
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1472
D:\Program Files\Lavasoft\Ad-Aware\AAWService.exe 1484
D:\WINDOWS\Explorer.EXE 1608
D:\Program Files\Alwil Software\Avast4\ashServ.exe 1700
D:\WINDOWS\system32\rundll32.exe 188
D:\Program Files\iolo\common\lib\ioloServiceManager.exe 1548
D:\WINDOWS\system32\svchost.exe 368
D:\WINDOWS\System32\TUProgSt.exe 948
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 1596
D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 1840
D:\WINDOWS\system32\ctfmon.exe 2420
D:\Program Files\Internet Explorer\IEXPLORE.EXE 2428
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 2440
D:\WINDOWS\system32\wbem\unsecapp.exe 2464
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe 2480
D:\WINDOWS\system32\wbem\wmiprvse.exe 2580
D:\WINDOWS\System32\alg.exe 2812
D:\Program Files\Internet Explorer\IEXPLORE.EXE 4012
D:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe 3260
D:\Program Files\Internet Explorer\iexplore.exe 2904
D:\Program Files\Internet Explorer\iexplore.exe 3480
D:\Program Files\Internet Explorer\iexplore.exe 2248
D:\Program Files\Windows Live\Messenger\msnmsgr.exe 3444
D:\Program Files\Internet Explorer\iexplore.exe 2772
D:\Program Files\Internet Explorer\iexplore.exe 748
D:\Program Files\Internet Explorer\iexplore.exe 3288
D:\Program Files\Internet Explorer\iexplore.exe 4044
D:\WINDOWS\system32\wbem\wmiprvse.exe 3656

################## | Elements infectieux |


################## | Registre |


################## | Mountpoints2 |


################## | Cracks > Keygens > Serials |

"D:\Documents and Settings\adri\Mes documents\Downloads\TuneUp Utilities 2009 v8.0.110.34+Serial+Keygen[h33t]MasterUploader\Keygen\Keygen.exe"  
27/12/2009 01:48 |Size 81920 |Crc32 af7adad6 |Md5 0024f2bd757b2de18d2f52a5132d9348  
 
"D:\Ma musique\belliqueux\site web\FTP expert\TFTPExpert (keygen).zip"
-> Contain : Keygen FTP Expert 3.70.3.exe 

"F:\Ma musique\belliqueux\site web\FTP expert\TFTPExpert (keygen).zip"
-> Contain : Keygen FTP Expert 3.70.3.exe 

"D:\Documents and Settings\adri\Mes documents\Downloads\Guitar.Pro.5.0 full +crack.rar" 
-> contain :  GP5FULL.exe

"D:\Documents and Settings\adri\Mes documents\Downloads\Registry Booster + serial [byGreenboy420].rar" 
-> contain :  registrybooster.exe

"D:\Documents and Settings\adri\Mes documents\Downloads\Registry Booster 2 + Serial.rar" 
-> contain :  registry booster 2.exe


################## | ! Fin du rapport # UsbFix V6.068 ! |

douyou4 · Answer

dac! Merci

Je t'écris à quelle heure?

Merci encore

dédétraqué · Answer

Salut douyou4


Supprime ce dossier C:\rsit

Refais un scan avec RSIT et poste le rapport log.txt seulement à la fin de l’analyse

Le rapport est dans le dossier ici C:\rsit


@++   :)

douyou4 · Answer

et voici le rapport que l'on m'a donné après avoir supprimé Rsit et avoir refait un scan : 

############################## | UsbFix V6.068 | 

User : adri (Administrateurs) # ADRI-7B57F251AF 
Update on 28/12/2009 by Chiquitine29, C_XX & Chimay8 
Start at: 13:11:33 | 29/12/2009 
Website : http://pagesperso-orange.fr/NosTools/index.html 
Contact : FindyKill.Contact@gmail.com 

mobile AMD Athlon(tm) XP-M 2400+ 
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2 
Internet Explorer 8.0.6001.18702 
Windows Firewall Status : Disabled 
AV : avast! antivirus 4.7.1098 [VPS 090323-0] 4.7.1098 [ Enabled | (!) Outdated ] 

A:\ -> Lecteur de disquettes 3 ½ pouces 
C:\ -> Disque fixe local # 19,53 Go (17,02 Go free) # NTFS 
D:\ -> Disque fixe local # 56,79 Go (19,31 Go free) # NTFS 
E:\ -> Disque CD-ROM 
F:\ -> Disque fixe local # 465,53 Go (310,33 Go free) # FAT32 

############################## | Processus actifs | 

D:\WINDOWS\System32\smss.exe 540 
D:\WINDOWS\system32\csrss.exe 604 
D:\WINDOWS\system32\winlogon.exe 628 
D:\WINDOWS\system32\services.exe 672 
D:\WINDOWS\system32\lsass.exe 684 
D:\WINDOWS\system32\svchost.exe 836 
D:\WINDOWS\system32\svchost.exe 892 
D:\WINDOWS\System32\svchost.exe 980 
D:\WINDOWS\system32\svchost.exe 1036 
D:\WINDOWS\system32\svchost.exe 1192 
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1472 
D:\Program Files\Lavasoft\Ad-Aware\AAWService.exe 1484 
D:\WINDOWS\Explorer.EXE 1608 
D:\Program Files\Alwil Software\Avast4\ashServ.exe 1700 
D:\WINDOWS\system32\rundll32.exe 188 
D:\Program Files\iolo\common\lib\ioloServiceManager.exe 1548 
D:\WINDOWS\system32\svchost.exe 368 
D:\WINDOWS\System32\TUProgSt.exe 948 
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 1596 
D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 1840 
D:\WINDOWS\system32\ctfmon.exe 2420 
D:\Program Files\Internet Explorer\IEXPLORE.EXE 2428 
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 2440 
D:\WINDOWS\system32\wbem\unsecapp.exe 2464 
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe 2480 
D:\WINDOWS\system32\wbem\wmiprvse.exe 2580 
D:\WINDOWS\System32\alg.exe 2812 
D:\Program Files\Internet Explorer\IEXPLORE.EXE 4012 
D:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe 3260 
D:\Program Files\Internet Explorer\iexplore.exe 2904 
D:\Program Files\Internet Explorer\iexplore.exe 3480 
D:\Program Files\Internet Explorer\iexplore.exe 2248 
D:\Program Files\Windows Live\Messenger\msnmsgr.exe 3444 
D:\Program Files\Internet Explorer\iexplore.exe 2772 
D:\Program Files\Internet Explorer\iexplore.exe 748 
D:\Program Files\Internet Explorer\iexplore.exe 3288 
D:\Program Files\Internet Explorer\iexplore.exe 4044 
D:\WINDOWS\system32\wbem\wmiprvse.exe 3656 

################## | Elements infectieux | 


################## | Registre | 


################## | Mountpoints2 | 


################## | Cracks > Keygens > Serials | 

"D:\Documents and Settings\adri\Mes documents\Downloads\TuneUp Utilities 2009 v8.0.110.34+Serial+Keygen[h33t]MasterUploader\Keygen\Keygen.exe" 
27/12/2009 01:48 |Size 81920 |Crc32 af7adad6 |Md5 0024f2bd757b2de18d2f52a5132d9348 

"D:\Ma musique\belliqueux\site web\FTP expert\TFTPExpert (keygen).zip" 
-> Contain : Keygen FTP Expert 3.70.3.exe 

"F:\Ma musique\belliqueux\site web\FTP expert\TFTPExpert (keygen).zip" 
-> Contain : Keygen FTP Expert 3.70.3.exe 

"D:\Documents and Settings\adri\Mes documents\Downloads\Guitar.Pro.5.0 full +crack.rar" 
-> contain : GP5FULL.exe 

"D:\Documents and Settings\adri\Mes documents\Downloads\Registry Booster + serial [byGreenboy420].rar" 
-> contain : registrybooster.exe 

"D:\Documents and Settings\adri\Mes documents\Downloads\Registry Booster 2 + Serial.rar" 
-> contain : registry booster 2.exe 


################## | ! Fin du rapport # UsbFix V6.068 ! |

dédétraqué · Answer

Salut douyou4


Cela est le rapport de UsbFix, si tu ne trouve plus RSIT c'est que tu ne là pas enregistrer sur le PC, tu là exécuter au lieu de cliquer sur enregistrer.
D:\Documents and Settings\adri\Local Settings\Temporary Internet Files\Content.IE5\1CQC5CIK\RSIT[1].exe

Télécharge le de nouveau ici :

http://images.malwareremoval.com/random/RSIT.exe

- Double clique sur RSIT.exe qui est sur le bureau
- Clique sur Continue dans la fenêtre
- RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
- Poste le contenue des deux rapports, log.txt et info.txt(réduit dans la barre des tâches) à la fin de l’analyse

Les rapports sont dans le dossier ici C:\rsit


@++ :)

dédétraqué · Answer

Salut douyou4 


Faire un scan de ce fichier xi43468.dll ici :

https://www.virustotal.com/gui/


Clique sur Parcourir et copie/colle ceci :
D:\WINDOWS\system32\xi43468.dll
Après tu clique sur Envoyer le fichier et attendre le résultat de l’analyse.

Si il te dit que le fichier a déjà été analysé, sélectionne le bouton :
Reanalyse le fichier maintenant et attendre le résultat de l'analyse, poste le résultat au complet.

Poste le résultat au complet

Aide : http://bibou0007.com/scans-en-ligne-f75/tutorial-sur-virustotal-t190.htm

Faire une analyse de ce fichier également :
D:\WINDOWS\system32	askmano.dll


@++   :)

douyou4 · Answer

Merci,

voici le résultat de xi43468.dll, pour ce qui est de D:\WINDOWS\system32	askmano.dll il est introuvable!  :

Fichier xi43468.dll reçu le 2009.12.29 23:03:33 (UTC)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE 


Résultat: 2/41 (4.88%)
  

Antivirus           Version          Dernière         mise à jour          Résultat 
a-squared 4.5.0.43 2009.12.30 - 
AhnLab-V3 5.0.0.2 2009.12.29 - 
AntiVir 7.9.1.122 2009.12.29 TR/Agent.233472.18 
Antiy-AVL 2.0.3.7 2009.12.29 - 
Authentium 5.2.0.5 2009.12.29 - 
Avast 4.8.1351.0 2009.12.29 - 
AVG 8.5.0.430 2009.12.29 - 
BitDefender 7.2 2009.12.29 - 
CAT-QuickHeal 10.00 2009.12.29 - 
ClamAV 0.94.1 2009.12.29 - 
Comodo 3407 2009.12.29 - 
DrWeb 5.0.1.12222 2009.12.30 - 
eSafe 7.0.17.0 2009.12.29 - 
eTrust-Vet 35.1.7205 2009.12.29 - 
F-Prot 4.5.1.85 2009.12.28 - 
F-Secure 9.0.15370.0 2009.12.29 - 
Fortinet 4.0.14.0 2009.12.29 - 
GData 19 2009.12.29 - 
Ikarus T3.1.1.79.0 2009.12.29 - 
Jiangmin 13.0.900 2009.12.29 - 
K7AntiVirus 7.10.932 2009.12.28 - 
Kaspersky 7.0.0.125 2009.12.29 - 
McAfee 5846 2009.12.29 - 
McAfee+Artemis 5846 2009.12.29 - 
McAfee-GW-Edition 6.8.5 2009.12.29 Trojan.Agent.233472.18 
Microsoft 1.5302 2009.12.29 - 
NOD32 4726 2009.12.29 - 
Norman 6.04.03 2009.12.29 - 
nProtect 2009.1.8.0 2009.12.29 - 
Panda 10.0.2.2 2009.12.15 - 
PCTools 7.0.3.5 2009.12.29 - 
Prevx 3.0 2009.12.30 - 
Rising 22.28.01.03 2009.12.29 - 
Sophos 4.49.0 2009.12.29 - 
Sunbelt 3.2.1858.2 2009.12.29 - 
Symantec 1.4.4.12 2009.12.29 - 
TheHacker 6.5.0.3.119 2009.12.29 - 
TrendMicro 9.120.0.1004 2009.12.29 - 
VBA32 3.12.12.1 2009.12.29 - 
ViRobot 2009.12.29.2114 2009.12.29 - 
VirusBuster 5.0.21.0 2009.12.29 - 
Information additionnelle 
File size: 229376 bytes 
MD5...: cd453e7e2fe81e25acc9601538d445c0 
SHA1..: 850a012548d1a78c2c203cd8dcc781a2a62f24ee 
SHA256: c73d657c2b88858243599931664a7af7dbdec7cd7865f613968ee397573791f0 
ssdeep: 6144:qhVG+7/pp2+2f8nMTW+2scMTPULxhYQuHaXT:qrt7RE1f8nMTW+2csLxwHG
T
 
PEiD..: - 
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1cc2b
timedatestamp.....: 0x4afb072a (Wed Nov 11 18:49:14 2009)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x236a0 0x24000 6.35 92cbfde5bc55525ceefd0ee0d43b4f09
.rdata 0x25000 0x9600 0xa000 5.37 c03eb0c9319c21e17083a6140ef3f3a6
.data 0x2f000 0x4988dc 0x2000 4.72 36f6f180b9355bb9cbbab050f7b5d843
.rsrc 0x4c8000 0xa60 0x1000 2.50 ca7c714df04e6a69ec69773132349041
.reloc 0x4c9000 0x5534 0x6000 2.83 6d3b4684b7761c793c81ac33acd6433c

( 9 imports ) 
> urlmon.dll: CoInternetCompareUrl, UrlMkSetSessionOption, IsValidURL
> KERNEL32.dll: GetThreadLocale, InitializeCriticalSection, DeleteCriticalSection, LeaveCriticalSection, InterlockedIncrement, EnterCriticalSection, InterlockedDecrement, MultiByteToWideChar, GetModuleFileNameA, GetLastError, WideCharToMultiByte, lstrlenW, SizeofResource, LoadResource, FindResourceA, LoadLibraryExA, lstrcmpiA, lstrcpynA, IsDBCSLeadByte, GetModuleHandleA, lstrcatA, lstrcmpiW, ExitProcess, FreeResource, lstrcatW, lstrcpyW, GetVolumeInformationA, CreateProcessA, CloseHandle, TerminateThread, WaitForSingleObject, CreateThread, SetFileTime, WriteFile, GetFileTime, CreateFileA, Process32Next, Module32First, FlushFileBuffers, SetStdHandle, GetLocaleInfoA, GetSystemInfo, VirtualProtect, LCMapStringW, LCMapStringA, SetFilePointer, GetStringTypeW, GetStringTypeA, GetCPInfo, GetOEMCP, IsBadCodePtr, IsBadReadPtr, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, GetStdHandle, GetACP, GetVersionExA, InterlockedExchange, Sleep, LoadLibraryA, GetProcAddress, FreeLibrary, GetCurrentProcessId, lstrlenA, lstrcpyA, DisableThreadLibraryCalls, TerminateProcess, GetCurrentProcess, SetHandleCount, SetUnhandledExceptionFilter, IsBadWritePtr, VirtualAlloc, VirtualFree, HeapCreate, HeapDestroy, TlsAlloc, GetTickCount, QueryPerformanceCounter, GetCommandLineA, TlsSetValue, GetCurrentThreadId, GetSystemTimeAsFileTime, HeapAlloc, HeapReAlloc, RaiseException, HeapFree, RtlUnwind, LocalFree, HeapSize, VirtualQuery, SetLastError, TlsGetValue, TlsFree
> USER32.dll: CharNextA, GetParent, SetTimer, LoadStringA, GetFocus, GetKBCodePage, IsWindow, ReplyMessage, GetMenu, wsprintfA, EnumWindows, DeleteMenu, IsWindowEnabled, GetDoubleClickTime, GetScrollPos, FlashWindow, CloseWindow, GetMessagePos, KillTimer, CallMsgFilterA, GetInputState, EndDialog, DestroyMenu, wsprintfW, IsWindowVisible, GetKeyboardType, GetDC
> ADVAPI32.dll: RegDeleteValueA, RegSetValueExA, RegOpenKeyA, RegQueryInfoKeyA, RegEnumKeyExA, RegCreateKeyExA, RegCreateKeyA, RegEnumKeyA, RegOpenKeyExA, RegCloseKey, RegDeleteKeyA, RegQueryValueExA
> SHELL32.dll: SHGetSpecialFolderPathA, ShellExecuteA
> ole32.dll: CoCreateInstance, CoTaskMemFree, CoTaskMemAlloc, CoTaskMemRealloc, StringFromCLSID, StringFromGUID2
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> SHLWAPI.dll: PathFindExtensionA
> COMCTL32.dll: InitCommonControlsEx

( 4 exports ) 
DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer
 
RDS...: NSRL Reference Data Set
- 
pdfid.: - 
trid..: DirectShow filter (50.8%)
Windows OCX File (31.1%)
Win32 Executable MS Visual C++ (generic) (9.5%)
Windows Screen Saver (3.3%)
Win32 Executable Generic (2.1%) 
sigcheck:
publisher....: Microsoft Corporation
copyright....: Copyright 2008
product......: XML parser library
description..: XML parser library
original name: xml2w32.dll
internal name: libxml2
file version.: 1.0.352.7
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
 



et celui de

douyou4 · Answer

ah bah du coup j'ai oublié d'effacer "et celui de" sur mon message précédent... ^^

dédétraqué · Answer

Salut douyou4


Je me doutais bien que tu avais oublié :)))

Le fichier est bien présent, mais il est caché = hidden
2009-12-11 20:27:29 ----RASH---- D:\WINDOWS\system32	askmano.dll

Autoriser l'affichage des fichiers et dossiers cachés :
https://www.commentcamarche.net/informatique/windows/185-afficher-les-extensions-et-les-fichiers-caches-sous-windows/


@++   :)

douyou4 · Answer

Là c'était dur à trouver! 

Après analyse voici ce qu'on me dit : 

 bytes size received / Se ha recibido un archivo vacio

dédétraqué · Answer

Salut douyou4


Télécharge combofix.exe (de sUBs) sur le bureau :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.geekstogo.com/forum/files/file/197-combofix-by-subs/

Important Désactive ton Antivirus et antispyware avant le scan avec Combofix :
https://forum.pcastuces.com/default.asp


==> Sauvegarde ton travail et ferme toutes les fenêtres actives, il peut y avoir un redémarrage du PC. Ne lance aucun programme tant que Combofix n’est pas fini. <==

Double clique sur combofix.exe, clique sur OUI et valide par Entrée 

Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Combofix est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure


@++   :)

douyou4 · Answer

Voilà C'est fait! :D

Voici le rapport de combofix:

ComboFix 09-12-29.04 - adri 30/12/2009   1:02.1.1 - x86
Microsoft Windows XP Professionnel  5.1.2600.2.1252.33.1036.18.991.697 [GMT 1:00]
Lancé depuis: d:\documents and settings\adri\Bureau\ComboFix.exe
AV: avast! antivirus 4.7.1098 [VPS 090323-0] *On-access scanning disabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\u16sqrqn.exe
d:\documents and settings\adri\Application Data\Desktopicon
d:\documents and settings\adri\Application Data\Desktopicon\eBay.ico
d:\documents and settings\adri\Application Data\Desktopicon\uninst.exe
D:\u16sqrqn.exe
d:\windows\system32\ctfmon_yb.exe
d:\windows\system32\xi43468.dll

.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_WINDOWS_MAIL_SERVICE


(((((((((((((((((((((((((((((   Fichiers créés du 2009-11-28 au 2009-12-30  ))))))))))))))))))))))))))))))))))))
.

2009-12-29 22:23 . 2009-12-29 22:24	--------	d-----w-	D:sit
2009-12-29 01:54 . 2009-12-29 12:13	--------	d-----w-	D:\UsbFix
2009-12-29 01:32 . 2009-12-29 22:24	--------	d-----w-	d:\program files	rend micro
2009-12-27 00:50 . 2009-12-27 00:50	603904	----a-w-	d:\windows\system32\TUProgSt.exe
2009-12-27 00:50 . 2008-11-12 15:44	27904	----a-w-	d:\windows\system32\uxtuneup.dll
2009-12-27 00:50 . 2009-12-27 00:50	362240	----a-w-	d:\windows\system32\TuneUpDefragService.exe
2009-12-27 00:50 . 2009-12-27 00:50	--------	d-----w-	d:\documents and settings\adri\Application Data\TuneUp Software
2009-12-27 00:49 . 2009-12-27 00:49	--------	d-----w-	d:\documents and settings\All Users\Application Data\TuneUp Software
2009-12-27 00:49 . 2009-12-27 00:50	--------	d-----w-	d:\program files\TuneUp Utilities 2009
2009-12-27 00:49 . 2009-12-27 00:49	--------	d-sh--w-	d:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-12-25 23:29 . 2009-12-25 23:32	--------	d-----w-	d:\documents and settings\adri\Application Data\Registry Booster
2009-12-25 23:29 . 2009-12-27 00:48	--------	d-----w-	d:\program files\Uniblue
2009-12-25 23:03 . 2009-12-25 23:16	--------	d-----w-	d:\documents and settings\adri\Application Data\Uniblue
2009-12-25 16:38 . 2009-09-03 09:17	15688	----a-w-	d:\windows\system32\lsdelete.exe
2009-12-25 14:55 . 2009-12-25 14:55	--------	d-----w-	d:\documents and settings\LocalService\Bureau
2009-12-25 14:35 . 2009-09-23 12:55	64288	----a-w-	d:\windows\system32\drivers\Lbd.sys
2009-12-25 14:20 . 2009-12-25 14:21	6296864	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Resources.dll
2009-12-25 14:20 . 2009-12-25 14:20	327000	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\RPAPI.dll
2009-12-25 14:20 . 2009-12-25 14:20	87496	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\PrivacyClean.dll
2009-12-25 14:20 . 2009-12-25 14:20	933120	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\CEAPI.dll
2009-12-25 14:20 . 2009-12-25 14:20	641632	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AutoLaunch.exe
2009-12-25 14:19 . 2009-12-25 14:19	816272	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe
2009-12-25 14:19 . 2009-12-25 14:19	822904	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe
2009-12-25 14:19 . 2009-12-25 14:19	1643272	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-Aware.exe
2009-12-25 14:19 . 2009-12-25 14:19	788880	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWTray.exe
2009-12-25 14:18 . 2009-12-25 14:19	1181328	----a-w-	d:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWService.exe
2009-12-25 14:05 . 2009-12-25 14:05	--------	dc-h--w-	d:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-12-25 14:05 . 2009-10-03 08:15	2924848	-c--a-w-	d:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
2009-12-25 14:03 . 2009-12-25 14:03	--------	d-----w-	d:\program files\Lavasoft
2009-12-25 14:03 . 2009-12-25 14:35	--------	d-----w-	d:\documents and settings\All Users\Application Data\Lavasoft
2009-12-25 13:26 . 2009-12-25 13:26	--------	d-----w-	d:\program files\CCleaner
2009-12-25 12:55 . 2009-12-25 12:55	--------	d-----w-	d:\program files\CleanUp!
2009-12-25 12:50 . 2009-12-25 12:51	--------	d-----w-	d:\windows\BDOSCAN8
2009-12-23 19:06 . 2009-12-23 19:06	--------	d-sh--w-	d:\documents and settings\LocalService\IETldCache
2009-12-17 17:33 . 2009-12-25 11:59	--------	d-----w-	d:\program files\Spybot - Search & Destroy
2009-12-17 17:33 . 2009-12-25 11:59	--------	d-----w-	d:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-17 17:17 . 2009-12-17 17:17	--------	d-----w-	d:\documents and settings\adri\Local Settings\Application Data\Threat Expert
2009-12-17 17:15 . 2009-11-10 09:28	1640400	----a-w-	d:\windows\PCTBDCore.dll
2009-12-17 17:14 . 2009-12-17 17:26	--------	d-----w-	d:\program files\Spyware Doctor
2009-12-17 17:14 . 2009-12-17 17:26	--------	d-----w-	d:\program files\Fichiers communs\PC Tools
2009-12-13 00:58 . 2009-12-13 00:58	--------	d-----w-	d:\windows\system32\NtmsData
2009-12-11 19:27 . 2009-12-11 19:27	55808	--sha-r-	d:\windows\system32	askmano.dll
2009-12-06 23:52 . 2009-12-07 00:19	--------	d-----w-	d:\program files\Unlocker
2009-12-06 15:54 . 2009-12-06 15:54	--------	d-----w-	d:\program files\AxBx

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-27 00:49 . 2009-03-20 22:58	--------	d-----w-	d:\documents and settings\adri\Application Data\BitTorrent
2009-12-26 01:08 . 2009-09-19 15:00	--------	d-----w-	d:\documents and settings\adri\Application Data\Audacity
2009-12-25 14:35 . 2009-03-20 22:57	--------	d-----w-	d:\documents and settings\adri\Application Data\DNA
2009-12-25 12:01 . 2009-03-20 22:57	--------	d-----w-	d:\program files\DNA
2009-12-17 17:26 . 2008-01-15 18:52	--------	d---a-w-	d:\documents and settings\All Users\Application Data\TEMP
2009-12-17 10:25 . 2009-02-01 14:02	1	----a-w-	d:\documents and settings\adri\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-12-12 23:40 . 2009-07-07 19:41	--------	d-----w-	d:\program files\ZynAddSubFX
2009-12-12 23:40 . 2009-10-21 21:44	--------	d-----w-	d:\program files\FBP - Facebook Blaster Pro
2009-12-12 23:40 . 2008-01-01 15:40	--------	d-----w-	d:\program files\DivX
2009-12-06 17:54 . 2009-02-21 19:58	--------	d-----w-	d:\program files\Guitar Pro 5
2009-11-23 18:07 . 2008-01-01 15:24	--------	d-----w-	d:\program files\Google
2009-11-23 17:58 . 2009-11-23 17:57	--------	d-----w-	d:\documents and settings\All Users\Application Data\Google Updater
2009-11-22 18:45 . 2008-01-01 15:15	21128	----a-w-	d:\documents and settings\adri\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-11-22 18:42 . 2009-03-31 00:06	--------	d-----w-	d:\program files\Microsoft Silverlight
2009-11-22 18:41 . 2008-01-20 22:58	--------	d-----w-	d:\program files\Windows Live
2009-11-22 18:40 . 2009-11-22 18:40	--------	d-----w-	d:\program files\Microsoft
2009-11-22 18:40 . 2009-11-22 18:40	--------	d-----w-	d:\program files\Windows Live SkyDrive
2009-11-22 18:36 . 2009-11-22 18:36	--------	d-----w-	d:\program files\Fichiers communs\Windows Live
2009-11-03 23:30 . 2001-08-24 12:00	71488	----a-w-	d:\windows\system32\perfc00C.dat
2009-11-03 23:30 . 2001-08-24 12:00	458648	----a-w-	d:\windows\system32\perfh00C.dat
2008-11-14 12:49 . 2008-11-11 23:16	67696	----a-w-	d:\program files\mozilla firefox\components\jar50.dll
2008-11-14 12:49 . 2008-11-11 23:16	54376	----a-w-	d:\program files\mozilla firefox\components\jsd3250.dll
2008-11-14 12:49 . 2008-11-11 23:16	34952	----a-w-	d:\program files\mozilla firefox\components\myspell.dll
2008-11-14 12:49 . 2008-11-11 23:16	46720	----a-w-	d:\program files\mozilla firefox\components\spellchk.dll
2008-11-14 12:49 . 2008-11-11 23:16	172144	----a-w-	d:\program files\mozilla firefox\components\xpinstal.dll
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="d:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-23 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="d:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 79224]
"QuickTime Task"="d:\program files\QuickTime\qttask.exe" [2007-12-11 286720]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2004-08-03 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\D:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=d:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=d:\windows\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2007-05-11 02:06	40048	----a-w-	d:\program files\Adobe\Reader 8.0\Readereader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
2009-11-07 10:29	323392	----a-w-	d:\program files\DNA\btdna.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Shockwave Updater]
2009-03-19 15:55	460216	----a-w-	d:\windows\system32\Adobe\Shockwave 11\SwHelper_1150595.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-06-10 03:27	144784	----a-w-	d:\program files\Java\jre1.6.0_07\bin\jusched.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversionun-]
"Uniblue RegistryBooster 2"=d:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
"swg"="d:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
"cdoosoft"=d:\docume~1\adri\LOCALS~1\Temp\herss.exe
"CTFMON.EXE"=d:\windows\system32\ctfmon.exe
"PanelApp"=d:\documents and settings\adri\Local Settings\Application Data\Votre Opinion\PanelApp\PanelApp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun-]
"QuickTime Task"="d:\program files\QuickTime\qttask.exe" -atboottime
"Google Quick Search Box"="d:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe"  /autorun
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd
"SiSPower"=Rundll32.exe SiSPower.dll,ModeAgent

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"d:\Program Files\Messenger\msmsgs.exe"=
"d:\Program Files\DNA\btdna.exe"=
"d:\Program Files\BitTorrent\bittorrent.exe"=
"d:\Program Files\Windows Live\Messenger\wlcsdk.exe"=
"d:\Program Files\Windows Live\Messenger\msnmsgr.exe"=

R0 Lbd;Lbd;d:\windows\system32\drivers\Lbd.sys [25/12/2009 15:35 64288]
R2 ioloFileInfoList;iolo FileInfoList Service;d:\program files\iolo\Common\Lib\ioloServiceManager.exe [31/12/2008 03:43 596336]
R2 ioloSystemService;iolo System Service;d:\program files\iolo\Common\Lib\ioloServiceManager.exe [31/12/2008 03:43 596336]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;d:\program files\Lavasoft\Ad-Aware\AAWService.exe [24/09/2009 12:17 1169232]
R3 RT80x86;Ralink 802.11n Wireless Driver;d:\windows\system32\driverst2860.sys [31/12/2007 00:25 528640]
S2 gupdate1c96b626a701370;Google Update Service (gupdate1c96b626a701370);d:\program files\Google\Update\GoogleUpdate.exe [31/12/2008 17:11 133104]
S3 PanelSvc;PanelSvc;d:\program files\Votre Opinion\PanelApp\PanelSvc.exe [09/11/2007 11:45 77312]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'

2009-12-30 d:\windows\Tasks\1-Click Maintenance.job
- d:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-11-20 15:28]

2009-12-30 d:\windows\Tasks\Ad-Aware Update (Weekly).job
- d:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 13:06]

2009-12-30 d:\windows\Tasks\Google Software Updater.job
- d:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-01-01 17:57]

2009-12-30 d:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- d:\program files\Google\Update\GoogleUpdate.exe [2008-12-31 16:11]

2009-12-29 d:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- d:\program files\Google\Update\GoogleUpdate.exe [2008-12-31 16:11]
.
.
------- Examen supplémentaire -------
.
IE: Google Sidewiki... - d:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} - hxxp://lads.myspace.com/upload/MySpaceUploader2.cab
FF - ProfilePath - d:\documents and settings\adri\Application Data\Mozilla\Firefox\Profiles\q7k9nk7a.default\
FF - component: d:\program files\Google\Google Gears\Firefox\lib\ff2\gears.dll
FF - component: d:\program files\Mozilla Firefox\components\xpinstal.dll
FF - component: d:\program files\Mozilla Firefox\extensions	alkback@mozilla.org\components\qfaservices.dll

---- PARAMETRES FIREFOX ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{ECBDFAD1-9759-339C-8BA5-827BB0BF8A3A} - d:\windows\system32\xi43468.dll
AddRemove-eBay Icon - d:\documents and settings\adri\Application Data\Desktopicon\uninst.exe
AddRemove-HijackThis - d:\documents and settings\adri\Local Settings\Temporary Internet Files\Content.IE5\G8NFKIOJ\HijackThis.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-30 01:09
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(2352)
d:\windows\system32\ieframe.dll
d:\windows\system32\webcheck.dll
.
------------------------ Autres processus actifs ------------------------
.
d:\program files\Alwil Software\Avast4\aswUpdSv.exe
d:\program files\Alwil Software\Avast4\ashServ.exe
d:\windows\system32undll32.exe
d:\windows\System32\TUProgSt.exe
d:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Heure de fin: 2009-12-30  01:14:53 - La machine a redémarré
ComboFix-quarantined-files.txt  2009-12-30 00:14

Avant-CF: 20 611 096 576 octets libres
Après-CF: 20 650 090 496 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="m443394m9v8rr2ffrgc27wqcd" help
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

- - End Of File - - D0BE7FA2EF34F8E58E30003593D009DC

douyou4 · Answer

désolé pour la lecture...

dédétraqué · Answer

Salut douyou4


Télécharge et installe MalwareByte's Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

- Mets le à jour

---

- Redémarre en mode sans échec :

Au redémarrage de ton PC tapote sur la touche F8 ou F5, sur l'écran suivant déplace toi avec les flèches de direction et choisis Mode sans échec. Choisis ta session habituelle et non la session Administrateur

---

- Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
- Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
- clique sur Rechercher

- Une fois le scan terminé, une fenêtre s'ouvre, clique sur  sur OK

- Si MalwareByte's n'a rien détecté, clique sur OK  Un rapport va apparaître ferme-le.

- Si MalwareByte's a détecté des infections, clique sur Afficher les résultats  ensuite sur Supprimer la sélection

- Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

Note : Si MalwareByte's  a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur OK

Tutoriel pour MalwareByte's ici : 
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/


@++   :)

douyou4 · Answer

Ca a été long, mais c'est fait :D 

Voila le rapport :


Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3453
Windows 5.1.2600 Service Pack 2 (Safe Mode)
Internet Explorer 8.0.6001.18702

30/12/2009 02:58:16
mbam-log-2009-12-30 (02-58-16).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 173968
Temps écoulé: 47 minute(s), 25 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 175

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP1\A0000029.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008851.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008852.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008853.exe (Worm.Taterf) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008854.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008855.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008856.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008857.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008858.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008860.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008861.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008862.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008863.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008864.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008865.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0002540.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007077.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007080.bat (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007081.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007085.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007087.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007088.com (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007089.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007090.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007091.com (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007092.exe (Trojan.GameThief) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007093.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007094.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007097.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007099.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007101.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007103.bat (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007104.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007105.cmd (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007106.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007107.bat (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007110.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007111.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007112.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007113.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007114.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007115.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007116.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007117.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007120.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007121.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007122.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007123.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007124.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007125.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007128.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007129.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007131.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007132.exe (Worm.AutoRun) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007134.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007135.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007136.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007137.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007142.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007143.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007144.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007206.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007207.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007210.bat (Worm.AutoRun) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007213.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007214.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007215.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007216.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007222.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\Qoobox\Quarantine\D\WINDOWS\system32\xi43468.dll.vir (Trojan.BHO) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP1\A0000031.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008872.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008873.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008874.exe (Worm.Taterf) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008875.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008876.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008877.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008878.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008879.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008881.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008882.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008883.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008884.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008885.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008886.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008888.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0009003.dll (Trojan.BHO) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0002542.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007078.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007083.bat (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007146.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007148.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007149.com (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007150.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007151.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007152.com (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007153.exe (Trojan.GameThief) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007154.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007155.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007158.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007160.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007162.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007164.bat (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007165.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007166.cmd (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007167.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007168.bat (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007171.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007172.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007173.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007174.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007175.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007176.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007177.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007178.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007181.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007182.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007183.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007184.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007185.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007186.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007189.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007190.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007192.exe (Worm.AutoRun) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007194.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007195.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007196.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007197.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007202.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007203.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007204.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007208.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007209.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007211.bat (Worm.AutoRun) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007218.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007219.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007220.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007221.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007223.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\2o1ajagt.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\bycfht.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\f9o8o.exe.UsbFix (Worm.Taterf) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\g12g.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\mranjm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\pbudsara.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\q3kku.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\rg9g9bgq.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\vk0w.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\w9uxx92.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\wrsf.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\x8sigm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\ycvvj.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\ysep1.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\2o1ajagt.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\bycfht.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\f9o8o.exe.UsbFix (Worm.Taterf) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\g12g.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\mbdm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\mranjm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\pbudsara.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\q3kku.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\rg9g9bgq.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\vk0w.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\w9uxx92.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\wrsf.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\x8sigm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\ycvvj.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\ysep1.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\hm1bfpuj.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\mb9x.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\Recycled\INFO.EXE.UsbFix (Worm.AutoRun) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008891.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008892.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP196\A0063438.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP196\A0063442.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.

dédétraqué · Answer

Salut douyou4 


Faire un scan avec Nod32 en ligne (il faut utiliser Internet Explorer) ici :

https://www.eset.com/int/home/online-scanner/

(coche toutes les cases à chaque fois) 
A la fin, colle le rapport : C:\Program Files\EsetOnlineScanner\[b]log.txt[/b]


@++   :)

douyou4 · Answer

je le fais tout de suite

douyou4 · Answer

Voici le rapport ! 

Le scan est terminé, avant de fermer la fênetre, le logiciel me laisse 4 possibilités :

--> List of found threats
--->Manage quarantine

- Uninstall application on close

- Delet quarantined files 

Dois je cliquer sur l'une des ces phrases? 


Voici le rapport :

Ca a été long, mais c'est fait :D 

Voila le rapport :


Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3453
Windows 5.1.2600 Service Pack 2 (Safe Mode)
Internet Explorer 8.0.6001.18702

30/12/2009 02:58:16
mbam-log-2009-12-30 (02-58-16).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 173968
Temps écoulé: 47 minute(s), 25 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 175

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP1\A0000029.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008851.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008852.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008853.exe (Worm.Taterf) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008854.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008855.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008856.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008857.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008858.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008860.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008861.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008862.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008863.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008864.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008865.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0002540.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007077.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007080.bat (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007081.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007085.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007087.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007088.com (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007089.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007090.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007091.com (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007092.exe (Trojan.GameThief) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007093.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007094.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007097.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007099.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007101.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007103.bat (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007104.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007105.cmd (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007106.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007107.bat (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007110.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007111.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007112.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007113.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007114.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007115.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007116.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007117.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007120.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007121.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007122.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007123.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007124.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007125.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007128.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007129.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007131.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007132.exe (Worm.AutoRun) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007134.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007135.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007136.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007137.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007142.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007143.exe (Worm.Magania) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007144.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007206.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007207.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007210.bat (Worm.AutoRun) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007213.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007214.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007215.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007216.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007222.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\Qoobox\Quarantine\D\WINDOWS\system32\xi43468.dll.vir (Trojan.BHO) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP1\A0000031.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008872.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008873.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008874.exe (Worm.Taterf) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008875.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008876.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008877.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008878.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008879.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008881.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008882.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008883.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008884.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008885.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008886.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008888.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0009003.dll (Trojan.BHO) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0002542.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007078.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007083.bat (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007146.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007148.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007149.com (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007150.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007151.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007152.com (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007153.exe (Trojan.GameThief) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007154.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007155.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007158.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007160.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007162.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007164.bat (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007165.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007166.cmd (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007167.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007168.bat (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007171.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007172.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007173.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007174.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007175.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007176.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007177.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007178.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007181.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007182.exe (Trojan.Agent) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007183.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007184.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007185.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007186.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007189.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007190.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007192.exe (Worm.AutoRun) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007194.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007195.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007196.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007197.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007202.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007203.exe (Worm.Magania) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007204.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007208.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007209.bat (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007211.bat (Worm.AutoRun) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007218.cmd (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007219.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007220.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007221.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP3\A0007223.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\2o1ajagt.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\bycfht.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\f9o8o.exe.UsbFix (Worm.Taterf) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\g12g.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\mranjm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\pbudsara.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\q3kku.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\rg9g9bgq.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\vk0w.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\w9uxx92.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\wrsf.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\x8sigm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\ycvvj.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\C\ysep1.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\2o1ajagt.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\bycfht.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\f9o8o.exe.UsbFix (Worm.Taterf) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\g12g.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\mbdm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\mranjm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\pbudsara.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\q3kku.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\rg9g9bgq.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\vk0w.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\w9uxx92.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\wrsf.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\x8sigm.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\ycvvj.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\D\ysep1.exe.UsbFix (Spyware.OnlineGames) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\hm1bfpuj.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\mb9x.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\Recycled\INFO.EXE.UsbFix (Worm.AutoRun) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008891.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP10\A0008892.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP196\A0063438.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.
D:\UsbFix\Quarantine\F\System Volume Information\_restore{87BAEA7D-7619-4ED8-8265-41CDCE8DDE96}\RP196\A0063442.exe.UsbFix (Worm.Magania) -> Quarantined and deleted successfully.

douyou4 · Answer

Je me suis trompé, le rapport est là  : 

Le scan est terminé, avant de fermer la fênetre, le logiciel me laisse 4 possibilités : 

--> List of found threats 
--->Manage quarantine 

- Uninstall application on close 

- Delet quarantined files 

Dois je cliquer sur l'une des ces phrases? 


LE RAPPORT :


ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=908949e282394b46b26cb79815012d42
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2009-12-30 03:32:54
# local_time=2009-12-30 04:32:54 (+0100, Paris, Madrid)
# country="France"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=512 16777215 100 0 18350 18350 0 0
# compatibility_mode=768 16777179 100 0 62944776 62944776 0 0
# compatibility_mode=8192 67108863 100 0 3816 3816 0 0
# scanned=70788
# found=20
# cleaned=20
# scan_time=3777
D:\Documents and Settings\adri\Bureau\UsbFix_Upload_Me_ADRI-7B57F251AF.zip	multiple threats (deleted - quarantined)	00000000000000000000000000000000	C
D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Virtumondesdn.zip	Win32/Bagle.gen.zip worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinRungbua1.zip	Win32/Bagle.gen.zip worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinRungbua2.zip	Win32/Bagle.gen.zip worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinRungbua3.zip	Win32/Bagle.gen.zip worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\Program Files\Alwil Software\Avast4\VisthUpd.exe	probably a variant of Win32/Patched.NAE virus (deleted - quarantined)	00000000000000000000000000000000	C
D:\Program Files\Alwil Software\Avast4\Setup\avast.setup	probably a variant of Win32/Patched.NAE virus (deleted - quarantined)	00000000000000000000000000000000	C
D:\Program Files\Alwil Software\Avast4\Setup\setup.ovr	probably a variant of Win32/Patched.NAE virus (deleted - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\C\autorun.inf.UsbFix	Win32/AutoRun.PSW.OnlineGames.AN worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\C\imghyva6.exe.UsbFix	Win32/AutoRun.PSW.OnlineGames.AN worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\C\mbdm.exe.UsbFix	Win32/PSW.OnLineGames.NNU trojan (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\C\v1cbvsmq.exe.UsbFix	Win32/PSW.OnLineGames.NNU trojan (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\D\autorun.inf.UsbFix	Win32/AutoRun.PSW.OnlineGames.AN worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\D\imghyva6.exe.UsbFix	Win32/AutoRun.PSW.OnlineGames.AN worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\D\v1cbvsmq.exe.UsbFix	Win32/PSW.OnLineGames.NNU trojan (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\D\DOCUME~1\adri\LOCALS~1\Temp\cvasds0.dll.UsbFix	Win32/AutoRun.PSW.OnlineGames.AN worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\D\DOCUME~1\adri\LOCALS~1\Temp\cvasds1.dll.UsbFix	Win32/AutoRun.PSW.OnlineGames.AN worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\D\DOCUME~1\adri\LOCALS~1\Temp\herss.exe.UsbFix	Win32/AutoRun.PSW.OnlineGames.AN worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\F\Autorun.inf.UsbFix	Win32/AutoRun.PSW.OnlineGames.AN worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C
D:\UsbFix\Quarantine\F\imghyva6.exe.UsbFix	Win32/AutoRun.PSW.OnlineGames.AN worm (cleaned by deleting - quarantined)	00000000000000000000000000000000	C

douyou4 · Answer

j'ai posté deux messages, seul le dernier est le bon !

dédétraqué · Answer

Salut douyou4


Je te conseil très vivement de désinstaller Avast! pour Antivir, voir ce lien : 

[url=http://forum.malekal.com/ftopic3528.php]~Avast! VS Antivir~[/url]

Téléchargement Antivir de Avira en français ici :

http://dlce.antivir.com/package/wks_avira/win32/fr/pecl/avira_antivir_personal_fr.exe

Aide : http://www.libellules.ch/tuto_antivir.php

Suivre le tutoriel, faire un scan complet en mode sans échec et sauvegarde le rapport.
Redémarre en mode normal et poste le rapport.

Si tu rencontres un problème pour la désinstallation d'Avast, utilise son utilitaire de désinstallation :
https://www.avast.com/fr-fr/uninstall-utility


@++  :)

Mon ordi rame j'ai lu tout les posts pourtan

31 réponses

Votre réponse

Discussions similaires

Newsletters