Infection par Dr Guard Résolu

Question

Bonjour,

Je me suis fais malheureusement infecté par Dr Guard.
J'ai commencé à suivre la procédure que j'ai trouvé ici :
http://www.commentcamarche.net/faq/26988-dr-guard

Donc je vous poste ci-après le rapport généré par Malwarebytes'Anti Malware.
Et je vais entamé le scan avec List&Kill'em, et je vous posterais à la suite le rapport.

D'avance merci pour toute aide, j'attends vos futures instructions.
Arnaud


Rapport de Malwarebytes' Anti Malware :

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3510
Windows 5.1.2600 Service Pack 2 (Safe Mode)
Internet Explorer 7.0.5730.13

06/03/2010 16:52:36
mbam-log-2010-03-06 (16-52-36).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 153445
Temps écoulé: 46 minute(s), 48 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 7
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 302

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2d2bee6e-3c9a-4d58-b9ec-458edb28d0f6} (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{09f1adac-76d8-4d0f-99a5-5c907dadb988} (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7aa32fc7-133b-4ae7-998e-ced0d9829b12} (Trojan.Dialer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Malware Defense (Rogue.MalwareDefense) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\MADOWN (Worm.Magania) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56b38f40-4e70-11d4-a076-0080ad86ba2f} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{56b38f40-4e70-11d4-a076-0080ad86ba2f} (Trojan.BHO) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cbvcs (Spyware.OnlineGames) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\explorer.exe (Trojan.Agent) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wsctf.exe (Trojan.Agent) -> Delete on reboot.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS\system32\urretnd.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\autorun.inf (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\d1vmq.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP807\A0023783.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP807\A0023804.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP807\A0023805.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP808\A0023807.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP808\A0023825.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP808\A0023826.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP809\A0023828.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP810\A0023958.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP810\A0023959.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP810\A0023979.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP810\A0023980.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP811\A0023982.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP811\A0023998.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP811\A0023999.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP812\A0024001.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP812\A0024011.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP812\A0024012.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP813\A0024017.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP813\A0024025.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP813\A0024026.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP814\A0024035.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP814\A0024056.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP814\A0024057.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP815\A0024062.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP815\A0024072.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP815\A0024073.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP816\A0024077.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP816\A0024092.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP816\A0024093.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP817\A0024098.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP817\A0024106.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP817\A0024107.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP817\A0024115.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP817\A0024116.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP818\A0024123.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP818\A0024133.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP818\A0024134.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP819\A0024142.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP819\A0024150.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP819\A0024151.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP820\A0024220.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP820\A0024231.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP820\A0024233.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP821\A0024241.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP821\A0024250.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP821\A0024252.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP821\A0024280.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP821\A0024282.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP822\A0024284.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP822\A0024296.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP822\A0024298.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP823\A0024313.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP823\A0024336.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP823\A0024338.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP823\A0024357.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP823\A0024359.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP823\A0024389.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP823\A0024391.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP824\A0024393.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP824\A0024411.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP824\A0024413.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP825\A0024415.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP825\A0024433.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP825\A0024435.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP826\A0024443.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP826\A0024479.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP826\A0024481.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024496.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024511.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024513.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024524.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024526.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024547.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024549.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024604.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024609.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024624.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024626.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024640.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP827\A0024642.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP828\A0024646.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP828\A0024668.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP828\A0024669.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP829\A0024672.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP829\A0024710.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP829\A0024711.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP830\A0024720.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP830\A0024741.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP830\A0024743.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP831\A0024748.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP831\A0024773.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP831\A0024775.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP832\A0024777.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP832\A0024804.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP832\A0024806.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP833\A0024816.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP833\A0024835.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP833\A0024837.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP834\A0024879.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP834\A0024898.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP834\A0024899.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP834\A0024926.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP834\A0024928.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP835\A0024930.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP835\A0024972.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP835\A0024973.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP836\A0024979.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP836\A0025023.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP836\A0025025.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP837\A0025031.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP837\A0025065.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP837\A0025066.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP838\A0025068.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP838\A0025093.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP838\A0025095.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP838\A0025116.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP838\A0025118.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP839\A0025120.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP839\A0025149.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP839\A0025151.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP840\A0025153.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP840\A0025240.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP840\A0025241.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP840\A0025250.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP840\A0025252.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP841\A0025295.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP841\A0025368.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP841\A0025370.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP841\A0025381.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP841\A0025383.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP841\A0025403.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP841\A0025405.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP841\A0025421.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP841\A0025423.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP842\A0025425.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP842\A0025454.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP842\A0025456.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP843\A0025458.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP843\A0025483.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP843\A0025485.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP844\A0025487.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP844\A0025524.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP844\A0025526.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP845\A0025528.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP846\A0025634.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP846\A0025636.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP846\A0025648.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP846\A0025650.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP847\A0025658.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP847\A0025667.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP847\A0025669.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP848\A0025671.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP848\A0025696.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP848\A0025698.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP848\A0025706.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP848\A0025708.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP849\A0025720.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP849\A0025745.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP849\A0025747.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP850\A0025755.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP850\A0025770.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP850\A0025772.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP850\A0025785.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP850\A0025787.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP851\A0025793.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP851\A0025802.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP851\A0025804.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP852\A0025810.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP852\A0025831.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP852\A0025833.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP853\A0025850.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP853\A0025877.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP853\A0025881.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP854\A0025892.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP854\A0025903.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP854\A0025904.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP854\A0025938.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP854\A0025940.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP855\A0025942.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP855\A0025969.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP855\A0025971.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP856\A0025973.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP856\A0026969.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP856\A0026971.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP857\A0026987.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP857\A0027017.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP857\A0027018.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP858\A0027023.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP858\A0027049.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP858\A0027050.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP859\A0027057.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP859\A0027075.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP859\A0027077.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP859\A0027097.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP859\A0027099.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP860\A0027105.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP860\A0027116.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP860\A0027118.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP861\A0027126.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP861\A0027138.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP861\A0027139.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP861\A0027157.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP861\A0027161.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP862\A0027167.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP862\A0027174.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP862\A0027178.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP862\A0027186.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP862\A0027188.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP862\A0027200.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP862\A0027202.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP862\A0027212.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP862\A0027214.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP863\A0027226.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP864\A0027298.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP864\A0027299.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP864\A0027332.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP864\A0027333.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP865\A0027342.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP865\A0027359.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP865\A0027361.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP866\A0027365.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP866\A0027384.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP866\A0027387.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP867\A0027394.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP867\A0027422.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP867\A0027424.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP867\A0027434.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP867\A0027436.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP868\A0027447.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP868\A0027489.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP868\A0027490.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP869\A0027495.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP869\A0027517.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP869\A0027518.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP869\A0027533.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP869\A0027537.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP870\A0027553.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP870\A0027581.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP870\A0027584.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP871\A0027601.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP871\A0027609.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP871\A0027611.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP872\A0027627.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP872\A0027641.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP872\A0027642.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP873\A0027645.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP873\A0027664.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP873\A0027666.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP874\A0027668.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP874\A0027677.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP874\A0027679.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP874\A0028677.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP874\A0028679.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP875\A0028683.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP875\A0028693.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP875\A0028695.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP875\A0028717.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP875\A0028718.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP876\A0028723.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP877\A0028740.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP877\A0028743.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP877\A0028754.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP877\A0028756.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP877\A0028789.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP877\A0028794.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP877\A0028805.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP877\A0028807.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP878\A0028870.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP878\A0028905.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP878\A0028906.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP879\A0028909.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP879\A0028932.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP879\A0028934.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP880\A0028940.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP880\A0028954.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP880\A0028956.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP880\A0028980.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP880\A0028983.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP881\A0028991.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP881\A0029004.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP881\A0029005.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP882\A0029028.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP882\A0029046.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP882\A0029047.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP883\A0029051.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP883\A0029060.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP883\A0029062.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP884\A0029082.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP884\A0029096.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP884\A0029097.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP885\A0029115.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP885\A0029136.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP885\A0029137.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP885\A0029151.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP885\A0029153.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\optyhww0.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\optyhww1.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.
C:\U.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cgmopenbho.dll (Trojan.BHO) -> Quarantined and deleted successfully.

benurrr · Answer

Salut : mbam a bien travailler continue avec List&Kill'em

Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent(car il est detecté a tort comme infection)

 Télécharge et installe List&Kill'em et enregistre le sur ton bureau

http://sd-1.archive-host.com/membres/up/829108531491024/List_Killem_Install.exe


 Branche clés usb , disques durs externes , mp3 , mp4 , etc..

double clique ( clic droit "exécuter en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

coche la case "créer une icône sur le bureau"

une fois terminée , clic sur "terminer" et le programme se lancera seul

choisis la langue puis choisis l'option 1 = Mode Recherche

 laisse travailler l'outil

à l'apparition de la fenêtre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , mais ne le supprime pas pour l instant, le scan n'est pas fini.

Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'écran "COMPLETED"

benurrr · Answer

#  Aller dans le menu "Démarrer"
# Choisir "Panneau de configuration". 
Dans "Pare-feu Windows", cliquer sur Paramètres, puis choisissez  "Désactivé" afin d'activer ou de désactiver le pare-feu et enfin cliquer sur OK pour valider.

&#9654; Relance List&Kill'em(soit en clic droit pour vista),avec le raccourci sur ton bureau.
mais cette fois-ci :

&#9654; choisis l'option 2 = Mode Suppression

laisse travailler l'outil.

en fin de scan un rapport s'ouvre

&#9654; colle le contenu dans ta réponse

ensuite :

&#9654; Relance List&Kill'em(soit en clic droit pour vista),avec le raccourci sur ton bureau.
mais cette fois-ci :

&#9654; choisis l'option 6 = Restore MBR

laisse travailler l'outil.

en fin de scan un rapport s'ouvre

&#9654; colle le contenu dans ta réponse

benurrr · Answer

se rapport c'est le rapport de l'option 1

relance le et choisie l'option 2 et après l'option 6

benurrr · Answer

c'est du coriace

fait le en mode sans échec si sa plante encore

jlpjlp · Answer

slt en passant MBAM n'a pas été mis à jour


Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3510 



et donc l'efficacité est limitée

benurrr · Answer

salut jlpjlp,sa fait un bail tu va bien j'espere

bien vue

jlpjlp · Answer

slt benurrr effectivement cela fait un bout de temps ! moi ça va impec et toi?

benurrr · Answer

moi sa roule merci mon ami

jlpjlp · Answer

:)

benurrr · Answer

pour la mise a jour relance mbam va dans l'onglet mise jour et clic sur mise a jour

Arno · Answer

Ok merci.
Du coup il faut que je recommence toute la procédure depuis l'étape MBAM?

benurrr · Answer

oui au cas ou il y'aurai des reste meme si il a virer plus de 300 merde

Arno · Answer

Ok, bon bah il va faire ça cette nuit.

Arno · Answer

Mouahah, impossible de lancer mbam en mode normal (ça m'était déjà arrivé tout à l'heure), et impossible de mettre à jour mbam en mode sans échec (j'ai une erreur n°blablablaquej'aipasnoté, et il semble que je n'ai pas de connexion internet en mode sans échec).... pffffffff

Des solutions? Où je continue la procédure?

benurrr · Answer

Telecharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Note importante :tu est sous Vista

la désactivation du Contrôle des comptes utilisateurs est obligatoire

Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac­er-l-uac

pour toute manipulation fait comme ceci( clic droit "exécuter en tant qu'administrateur" pour Vista/7 ) 

-> Double clique combofix.exe. 
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

-Attention  Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. risque de figer l'ordi 

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. 

!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordi (plantage complet) 

::Si combofix detecte quelque chose et de demande a redémarrer tu accepte

Arno · Answer

Slaut benurrr,

Les liens vers combofix sont tous morts.... Comment faire?

Je suis sous XP, il faut que je désactive le Contrôle des comptes utilisateurs?
Merci

Arno · Answer

Bon alors, après d'âpres recherches, j'ai trouvé combofix.
J'ai bien compris que j'avais pas besoin de désactiver le Contrôle des comptes utilisateurs car je suis sous XP.
J'ai essayé de lancé combofix en mode normal, ça marchait pas, il ne se lançait pas du tout. Donc du coup je l'ai lancé en mode sans échec. En le lançant il m'a dit que la version était expiré donc il s'est lancé en - Mode FONCTIONNALITES REDUITES -.

Et à la fin il me donne ça :

ComboFix 08-12-17.01 - rodon 2010-03-07 18:35:03.1 - NTFSx86 MINIMAL
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.511.397 [GMT 1:00]
Lancé depuis: c:\documents and settings\rodon\Bureau\ComboFix.exe

[COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
.
- Mode FONCTIONNALITES REDUITES -
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\explorer.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\o4Patch.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2010-02-07 au 2010-03-07 ))))))))))))))))))))))))))))))))))))
.

2010-03-07 18:03 . 2010-03-07 18:04 <REP> d-------- c:\program files\QuickTime
2010-03-07 18:03 . 2010-03-07 18:03 <REP> d-------- c:\documents and settings\All Users\Application Data\Apple Computer
2010-03-07 18:02 . 2010-03-07 18:02 <REP> d-------- c:\program files\Fichiers communs\Apple
2010-03-07 17:43 . 2010-03-07 17:42 73,728 --a------ c:\windows\system32\javacpl.cpl
2010-03-07 13:56 . 2010-03-07 13:56 <REP> d-------- C:\Kill'em
2010-03-06 23:01 . 2010-03-06 23:02 <REP> d--h-c--- c:\windows\ie8
2010-03-06 22:58 . 2010-03-06 22:58 <REP> d-------- C:\d609d9bbb6f6b38490d3a642b47ac9
2010-03-06 21:34 . 2010-03-06 21:34 <REP> d-------- C:\6c9737f2f515420252982a8c48
2010-03-06 17:00 . 2010-03-07 14:00 <REP> d-------- c:\program files\List_Kill'em
2010-03-06 15:54 . 2010-03-06 22:42 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2010-03-06 15:54 . 2010-03-06 15:54 <REP> d-------- c:\documents and settings\rodon\Application Data\Malwarebytes
2010-03-06 15:54 . 2010-03-06 15:54 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-03-06 15:54 . 2010-01-07 16:07 38,224 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-06 15:54 . 2010-01-07 16:07 19,160 --a------ c:\windows\system32\drivers\mbam.sys
2010-03-06 15:19 . 2010-03-06 15:21 <REP> d-------- C:\FyK
2010-03-06 14:44 . 2008-12-12 01:57 78,336 --a------ c:\windows\system32\Agent.OMZ.Fix.exe
2010-03-06 14:41 . 2007-04-18 10:47 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage réseau
2010-03-06 14:41 . 2007-04-18 10:47 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage d'impression
2010-03-06 14:41 . 2007-04-18 08:58 <REP> d--h----- c:\documents and settings\Administrateur\Modèles
2010-03-06 14:41 . 2007-04-18 10:47 <REP> d-------- c:\documents and settings\Administrateur\Mes documents
2010-03-06 14:41 . 2007-04-18 10:47 <REP> dr------- c:\documents and settings\Administrateur\Menu Démarrer
2010-03-06 14:41 . 2007-04-18 10:47 <REP> d-------- c:\documents and settings\Administrateur\Favoris
2010-03-06 14:41 . 2010-03-06 14:44 <REP> d-------- c:\documents and settings\Administrateur\Bureau
2010-03-06 14:41 . 2010-03-06 14:41 <REP> d-------- c:\documents and settings\Administrateur
2010-03-06 13:39 . 2010-03-07 13:46 1,539 --a------ c:\documents and settings\All Users\Application Data\_VOIDkrl32mainweq.dll
2010-03-06 13:38 . 2010-03-06 13:38 49,152 --a------ c:\windows\system32\_VOIDxfukneepcw.dll
2010-03-06 13:38 . 2010-03-06 13:38 34,304 --a------ c:\windows\system32\_VOIDnbemgirnip.dll
2010-03-06 13:38 . 2010-03-07 13:42 10,738 --a------ c:\documents and settings\All Users\Application Data\_VOIDmainqt.dll
2010-03-06 13:37 . 2010-03-06 13:37 <REP> d-------- c:\windows\_VOIDlbypdipmko
2010-03-06 13:37 . 2010-03-06 13:37 28,672 --a------ c:\windows\system32\_VOIDoqxwkbsodp.dll
2010-03-06 13:37 . 2010-03-06 13:37 18,432 --a------ c:\documents and settings\rodon\Application Data\7c7e.exe
2010-03-06 13:37 . 2010-03-07 18:27 272 --a------ c:\windows\system32\_VOIDcpevxehdti.dat
2010-02-15 18:50 . 2010-02-15 18:50 94,208 --a------ c:\windows\system32\QuickTimeVR.qtx
2010-02-15 18:50 . 2010-02-15 18:50 69,632 --a------ c:\windows\system32\QuickTime.qts

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-07 17:25 --------- d-----w c:\program files\Google
2010-03-07 16:56 --------- d-----w c:\documents and settings\rodon\Application Data\Skype
2010-03-07 16:42 411,368 ----a-w c:\windows\system32\deploytk.dll
2010-03-07 16:42 --------- d-----w c:\program files\Java
2010-03-07 16:37 --------- d-----w c:\program files\Fichiers communs\Java
2010-03-06 21:28 --------- d-----w c:\program files\Fichiers communs\Adobe
2010-03-05 21:57 --------- d-----w c:\documents and settings\rodon\Application Data\skypePM
2010-01-28 13:08 --------- d-----w c:\documents and settings\rodon\Application Data\Apple Computer
2010-01-05 09:56 832,512 ----a-w c:\windows\system32\wininet.dll
2010-01-05 09:56 78,336 ----a-w c:\windows\system32\ieencode.dll
2010-01-05 09:56 17,408 ------w c:\windows\system32\corpol.dll
2009-12-17 07:59 347,648 ----a-w c:\windows\system32\mspaint.exe
2009-12-14 07:36 33,280 ----a-w c:\windows\system32\csrsrv.dll
2009-12-09 10:26 2,182,400 ----a-w c:\windows\system32\ntoskrnl.exe
2009-12-09 10:26 2,059,776 ----a-w c:\windows\system32\ntkrnlpa.exe
2003-07-30 05:00 12,800 ----a-w c:\documents and settings\rodon\cnmss Canon i560 (Local).exe
2003-07-30 05:00 12,800 ----a-w c:\documents and settings\LocalService\cnmss Canon i560 (Local).exe
2001-11-23 04:08 712,704 ----a-w c:\windows\inf\OTHER\AUDIO3D.DLL
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]
"EXPLORER.EXE"="EXPLORER.EXE" [2007-06-13 c:\windows\explorer.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HTpatch"="c:\windows\htpatch.exe" [2002-10-30 28672]
"SiSUSBRG"="c:\windows\SiSUSBrg.exe" [2002-07-12 106496]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-09-12 335872]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-11-17 7700480]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-11-17 86016]
"LogitechCommunicationsManager"="c:\program files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe" [2006-06-26 497200]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam10\QuickCam10.exe" [2006-06-26 614960]
"LVCOMSX"="c:\program files\Fichiers communs\Logitech\LComMgr\LVComSX.exe" [2006-06-26 243248]
"53B8B6"="c:\windows\system32\44A587\[u]0[/u]59BB7.EXE" [2009-12-20 17:26 1557237]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-01-07 1394000]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2010-01-11 246504]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-02-15 417792]
"nwiz"="nwiz.exe" [2006-11-17 c:\windows\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settings\rodon\Menu D‚marrer\Programmes\D‚marrage\
252277.lnk - c:\windows\system32\44A587\[u]0[/u]59BB7.EXE [2009-12-20 17:26:12 1557237]
BJ Status Monitor Canon i560.lnk - c:\documents and settings\rodon\cnmss Canon i560 (Local).exe [2008-04-09 12800]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-02-17 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe,EXPLORER.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"="0x00000000"
"UpdatesDisableNotify"="0x00000000"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\rodon\\Application Data\\7c7e.exe"=

S2 gupdate;Service Google Update (gupdate);"c:\program files\Google\Update\GoogleUpdate.exe" /svc [2010-02-04 135664]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3439b808-2023-11dd-9f3c-000b6a289b1d}]
\Shell\Auto\command - AdobeR.exe e
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4197c8d6-d9ba-11dd-a02b-000b6a289b1d}]
\Shell\AutoRun\command - F:\d1vmq.exe
\Shell\open\Command - F:\d1vmq.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{592e8a2f-9c44-11de-a135-000b6a289b1d}]
\Shell\AutoRun\command - F:\d1vmq.exe
\Shell\open\Command - F:\d1vmq.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5e4cc67c-8c1e-11de-a118-000b6a289b1d}]
\Shell\AutoRun\command - F:\EXPLORER.EXE
\Shell\explore\Command - F:\EXPLORER.EXE
\Shell\open\Command - F:\EXPLORER.EXE

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{72ba7372-c91d-11de-a171-000b6a289b1d}]
\Shell\AutoRun\command - F:\d1vmq.exe
\Shell\open\Command - F:\d1vmq.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{73bd4bda-6572-11de-a0e2-000b6a289b1d}]
\Shell\AutoRun\command - F:\d1vmq.exe
\Shell\open\Command - F:\d1vmq.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{783baaa6-1a13-11df-a1ef-000b6a289b1d}]
\Shell\AutoRun\command - G:\EXPLORER.EXE
\Shell\explore\Command - G:\EXPLORER.EXE
\Shell\open\Command - G:\EXPLORER.EXE
.
Contenu du dossier 'Tâches planifiées'

2010-03-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-04 08:12]

2010-03-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-04 08:12]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-updateMgr - c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
HKCU-Run-asr64_ldm.exe - c:\docume~1\rodon\LOCALS~1\Temp\asr64_ldm.exe
HKCU-Run-Dr. Guard - c:\program files\Dr. Guard\drguard.exe
HKCU-Run-wsctf.exe - wsctf.exe
HKLM-Run-Cmaudio - cmicnfg.cpl
HKLM-Run-NWEReboot - (no file)

.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.orange.fr/
uInternet Connection Wizard,ShellNext = iexplore
IE: Easy-WebPrint Ajouter à la Liste à Imprimer - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

c:\windows\system32\mfc42.dll - c:\windows\system32\msvcrt.dll
c:\windows\system32\olepro32.dll
c:\windows\Downloaded Program Files\TeleTVA.ocx
O16 -: {A06BE318-C096-11D4-964F-0010A4D06F69}
hxxps://tva.dgi.minefi.gouv.fr/activeX/TeleTVA.tva
c:\windows\Downloaded Program Files\teletva.inf
FF - ProfilePath - c:\documents and settings\rodon\Application Data\Mozilla\Firefox\Profiles\u8q1srcq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - plugin: c:\documents and settings\rodon\Application Data\Mozilla\Firefox\Profiles\u8q1srcq.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll
FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-07 18:35:28
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HTpatch = c:\windows\htpatch.exe?ows\CurrentVersion\Run???\???/??[???????[???[???????????????????[???[?C?????[$??????[????????????S??[????????m??[???w????(???{??w???w???????w???w???[????????d???b6?[%??[???[????"??[A??[???[.??wZ??[?3?[?3?[????st.I?????? [????d???0=?[?K?[

Recherche de fichiers cachés ...

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\_VOIDd.sys]
"imagepath"="\systemroot\system32\drivers\_VOIDqjxtqwwywm.sys"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(224)
c:\windows\system32\Ati2evxx.dll
.
Heure de fin: 2010-03-07 18:37:38
ComboFix-quarantined-files.txt 2010-03-07 17:36:22

Avant-CF: 139 783 032 832 octets libres
Après-CF: 139,821,563,904 octets libres

198 --- E O F --- 2010-03-06 21:34:53

jlpjlp · Answer

pour avancer benurr , branche tous tes supports externes (clé usb, disque dur externe carte de memoire)

et colle un rapport usbfix option 2




bonne suite à tous les deux

Arno · Answer

Merci à vous deux.
J'ai installé Antivir, j'ai lancé windows en mode sans échec, j'ai lancé une analyse par Antivir, il m'a trouvé 210 fichiers infectés. Après les avoir mis en quarantaine, et relancé windows en mode normal, il semble que tout aille mieux.
Antivir qui ne se lançait pas avant en mode normal au démarrage de windows, marche enfin, je l'ai mis à jour et relancé un scan, il m'a retrouvé une trentaine de fichiers infectés.
Avant au démarrage du bureau de windows, une fois sur deux ça se figeait. Là je n'ai plus ce problème.
Je vais désaciver et réactiver la restauration du système pour nettoyer une dernière fois, et j'espère que ça ira.
Si vous avez encore des infos, je suis preneur, car au point où le pc était infecté il peut surement resté des merdes.
Merci.

benurrr · Answer

bonjour

fait se que jlpjlp,et après en voit avec combofix car tu a des trace de rootkit au premier passage

Arno · Answer

Ok je ferais ça un peu plus tard (demain ou mercredi), tout ce merdier m'a retardé sur mon vrai travail.

Arno · Answer

Rapport de UsbFix :


############################## | UsbFix V6.098 |

User : rodon (Administrateurs) # RODON-F9DE315D9
Update on 03/03/2010 by El Desaparecido , C_XX & Chimay8
Start at: 12:17:50 | 09/03/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

AMD Athlon(tm) XP 2400+
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : Dr. Guard 1.0 [ Enabled | (!) Outdated ]
AV : AntiVir Desktop 9.0.1.32 [ (!) Disabled | (!) Outdated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 149,04 Go (130,9 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 997,85 Mo (979,32 Mo free) [CLE ARNO] # FAT32

################## | Elements infectieux |

Supprimé ! C:\DOCUME~1odon\LOCALS~1\Temp\E_N4\cnvpe.fne 
Supprimé ! C:\DOCUME~1odon\LOCALS~1\Temp\E_N4\dp1.fne 
Supprimé ! C:\DOCUME~1odon\LOCALS~1\Temp\E_N4\eAPI.fne 
Supprimé ! C:\DOCUME~1odon\LOCALS~1\Temp\E_N4\HtmlView.fne 
Supprimé ! C:\DOCUME~1odon\LOCALS~1\Temp\E_N4\internet.fne 
Supprimé ! C:\DOCUME~1odon\LOCALS~1\Temp\E_N4\krnln.fnr 
Supprimé ! C:\DOCUME~1odon\LOCALS~1\Temp\E_N4\shell.fne 
Supprimé ! C:\DOCUME~1odon\LOCALS~1\Temp\E_N4\spec.fne 
Supprimé ! C:\DOCUME~1odon\LOCALS~1\Temp\E_N4 
Supprimé ! C:\Recycler\S-1-5-21-583907252-1563985344-725345543-1003 

################## | Registre |

Supprimé ! [HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_KAVSYS]  
Supprimé ! [HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_KAVSYS]  
Supprimé ! [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"  
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoDrives"  

################## | Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{3439b808-2023-11dd-9f3c-000b6a289b1d}\Shell\Auto\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{592e8a2f-9c44-11de-a135-000b6a289b1d}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{5e4cc67c-8c1e-11de-a118-000b6a289b1d}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{72ba7372-c91d-11de-a171-000b6a289b1d}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{73bd4bda-6572-11de-a0e2-000b6a289b1d}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{783baaa6-1a13-11df-a1ef-000b6a289b1d}\Shell\AutoRun\Command  

################## | Listing des fichiers présent |

[18/04/2007 09:02|--a------|0] C:\AUTOEXEC.BAT 
[31/07/2009 15:57|--a------|771] C:\BJ Status Monitor Canon i560.lnk 
[07/03/2010 20:06|---hs----|212] C:\boot.ini 
[05/08/2004 13:00|-rahs----|4952] C:\Bootfont.bin 
[18/04/2007 09:02|--a------|0] C:\CONFIG.SYS 
[06/03/2010 15:21|--a------|3211] C:\FyK.txt 
[?|?|?] C:\hiberfil.sys 
[18/04/2007 09:02|-rahs----|0] C:\IO.SYS 
[29/12/2008 15:17|--a------|3286] C:\lvcoinst.log 
[18/04/2007 09:02|-rahs----|0] C:\MSDOS.SYS 
[05/08/2004 13:00|-rahs----|47564] C:\NTDETECT.COM 
[05/08/2004 13:00|-rahs----|251712] C:
tldr 
[?|?|?] C:\pagefile.sys 
[09/03/2010 12:21|--a------|3128] C:\UsbFix.txt 
[08/03/2010 15:59|--ah-----|4096] F:\._.Trashes 
[09/03/2010 01:00|--ah-----|4096] F:\._ARedonLifestyleFolioOPT149QELV.pdf 
[09/03/2010 00:42|--a------|10614455] F:\ARedonLifestyleFolioQMAX.pdf 
[09/03/2010 00:56|--ah-----|4096] F:\._ARedonLifestyleFolioQMAX.pdf 
[15/02/2010 14:46|--a------|146267] F:\ArnaudRedonResume.pdf 
[09/03/2010 00:57|--ah-----|4096] F:\._ArnaudRedonResume.pdf 
[09/03/2010 00:52|--a------|8133460] F:\ARedonLifestyleFolio.pdf 

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido). 
# F:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido). 

################## | Upload | 

Veuillez envoyer le fichier : C:\UsbFix_Upload_Me_RODON-F9DE315D9.zip : https://www.ionos.fr/?affiliate_id=77097 
Merci pour votre contribution .  

################## | ! Fin du rapport # UsbFix V6.098 ! |

benurrr · Answer

salut

tu peut refaire un combofix stp

Arno · Answer

Rapport de MBAM après mise à jour de sa base de donneés :

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3839
Windows 5.1.2600 Service Pack 2 (Safe Mode)
Internet Explorer 8.0.6001.18702

09/03/2010 13:33:31
mbam-log-2010-03-09 (13-33-31).txt

Type de recherche: Examen complet (C:\|F:\|)
Eléments examinés: 159145
Temps écoulé: 47 minute(s), 57 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 16

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Malware Defense (Rogue.MalwareDefense) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\_VOID (Rootkit.TDSS) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\_VOIDd.sys (Rootkit.TDSS) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Paladin Antivirus (Rogue.PaladinAntivirus) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Paladin Antivirus (Rogue.PaladinAntivirus) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Dr. Guard (Rogue.DrGuard) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\WINDOWS\_VOIDlbypdipmko (Rootkit.TDSS) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\System Volume Information\_restore{832AB80E-718C-46E6-A56C-5C25F61905DD}\RP895\A0033348.dll (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\UsbFix\Quarantine\C\DOCUME~1odon\LOCALS~1	emp\E_N4\cnvpe.fne.UsbFix (Worm.Autorun) -> Quarantined and deleted successfully.
C:\UsbFix\Quarantine\C\DOCUME~1odon\LOCALS~1	emp\E_N4\HtmlView.fne.UsbFix (HackTool.Patcher) -> Quarantined and deleted successfully.
C:\UsbFix\Quarantine\C\DOCUME~1odon\LOCALS~1	emp\E_N4\internet.fne.UsbFix (HackTool.Patcher) -> Quarantined and deleted successfully.
C:\UsbFix\Quarantine\C\DOCUME~1odon\LOCALS~1	emp\E_N4\krnln.fnr.UsbFix (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\_VOIDoqxwkbsodp.dll (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\_VOIDxfukneepcw.dll (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\CF40D9\cnvpe.fne (Worm.Autorun) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\CF40D9\HtmlView.fne (HackTool.Patcher) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\CF40D9\internet.fne (HackTool.Patcher) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\CF40D9\krnln.fnr (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\_VOIDkrl32mainweq.dll (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\_VOIDmainqt.dll (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\_VOIDcpevxehdti.dat (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS	emp\_VOID610b.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\Documents and Settingsodon\Application Data\Microsoft\Internet Explorer\Quick Launch\Dr. Guard.lnk (Rogue.DrGuard) -> Quarantined and deleted successfully.

Arno · Answer

Rapport de ComboFix :

ComboFix 10-03-08.02 - rodon 09/03/2010  13:57:13.2.1 - x86
Microsoft Windows XP Professionnel  5.1.2600.2.1252.33.1036.18.511.262 [GMT 1:00]
Lancé depuis: c:\documents and settingsodon\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\Agent.OMZ.Fix.exe

.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy__VOIDLBYPDIPMKO
-------\Service__VOIDlbypdipmko


(((((((((((((((((((((((((((((   Fichiers créés du 2010-02-09 au 2010-03-09  ))))))))))))))))))))))))))))))))))))
.

2010-03-09 11:34 . 2010-01-07 15:07	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-09 11:33 . 2010-03-09 11:34	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2010-03-09 11:33 . 2010-01-07 15:07	19160	----a-w-	c:\windows\system32\drivers\mbam.sys
2010-03-09 11:21 . 2010-03-09 11:21	1220685	----a-w-	C:\UsbFix_Upload_Me_RODON-F9DE315D9.zip
2010-03-09 11:14 . 2010-03-09 11:21	--------	d-----w-	C:\UsbFix
2010-03-08 13:06 . 2010-03-08 13:06	--------	d-sh--w-	c:\documents and settingsodon\PrivacIE
2010-03-08 13:06 . 2010-03-08 13:06	--------	d-----w-	c:\program files\Fichiers communs\Java
2010-03-08 13:03 . 2010-03-08 13:03	79488	----a-w-	c:\documents and settingsodon\Application Data\Sun\Java\jre1.6.0_18\gtapi.dll
2010-03-08 13:03 . 2010-03-08 13:03	152576	----a-w-	c:\documents and settingsodon\Application Data\Sun\Java\jre1.6.0_18\lzma.dll
2010-03-08 12:24 . 2010-03-08 12:24	--------	d-sh--w-	c:\documents and settingsodon\IECompatCache
2010-03-08 12:08 . 2010-03-08 12:08	--------	d-sh--w-	c:\documents and settingsodon\IETldCache
2010-03-08 12:02 . 2010-03-08 12:02	--------	d--h--w-	c:\windows\msdownld.tmp
2010-03-08 12:01 . 2010-03-09 11:09	--------	d-----w-	c:\windows\ie8updates
2010-03-07 18:47 . 2009-11-25 10:19	56816	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2010-03-07 18:47 . 2009-03-30 08:32	96104	----a-w-	c:\windows\system32\drivers\avipbb.sys
2010-03-07 18:47 . 2009-02-13 10:28	22360	----a-w-	c:\windows\system32\drivers\avgntmgr.sys
2010-03-07 18:47 . 2009-02-13 10:17	45416	----a-w-	c:\windows\system32\drivers\avgntdd.sys
2010-03-07 18:47 . 2010-03-07 18:47	--------	d-----w-	c:\program files\Avira
2010-03-07 18:47 . 2010-03-07 18:47	--------	d-----w-	c:\documents and settings\All Users\Application Data\Avira
2010-03-07 18:07 . 2010-03-07 18:07	--------	d-----w-	C:\0fc0a56f89642e157e641611692c0d71
2010-03-07 17:55 . 2010-03-07 17:55	--------	d-----w-	c:\program files\Fichiers communs\Skype
2010-03-07 17:55 . 2010-03-07 17:55	--------	d-----r-	c:\program files\Skype
2010-03-07 17:03 . 2010-03-07 17:04	--------	d-----w-	c:\program files\QuickTime
2010-03-07 17:03 . 2010-03-07 17:03	--------	d-----w-	c:\documents and settings\All Users\Application Data\Apple Computer
2010-03-07 17:02 . 2010-03-07 17:02	--------	d-----w-	c:\program files\Fichiers communs\Apple
2010-03-06 22:01 . 2010-03-08 11:59	--------	dc-h--w-	c:\windows\ie8
2010-03-06 21:58 . 2010-03-06 21:58	--------	d-----w-	C:\d609d9bbb6f6b38490d3a642b47ac9
2010-03-06 21:29 . 2010-03-06 21:29	--------	d-----w-	c:\documents and settings\Default User\Local Settings\Application Data\Adobe
2010-03-06 21:15 . 2010-03-06 21:15	503808	----a-w-	c:\documents and settingsodon\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-6acd0188-n\msvcp71.dll
2010-03-06 21:15 . 2010-03-06 21:15	499712	----a-w-	c:\documents and settingsodon\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-6acd0188-n\jmc.dll
2010-03-06 21:15 . 2010-03-06 21:15	348160	----a-w-	c:\documents and settingsodon\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-6acd0188-n\msvcr71.dll
2010-03-06 21:15 . 2010-03-06 21:15	61440	----a-w-	c:\documents and settingsodon\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-64678bea-n\decora-sse.dll
2010-03-06 21:15 . 2010-03-06 21:15	12800	----a-w-	c:\documents and settingsodon\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-64678bea-n\decora-d3d.dll
2010-03-06 20:35 . 2009-12-11 08:38	69120	-c----w-	c:\windows\system32\dllcache\iecompat.dll
2010-03-06 20:35 . 2009-12-21 19:06	246272	-c----w-	c:\windows\system32\dllcache\ieproxy.dll
2010-03-06 20:35 . 2009-12-21 19:07	12800	-c----w-	c:\windows\system32\dllcache\xpshims.dll
2010-03-06 20:34 . 2010-03-06 20:34	--------	d-----w-	C:\6c9737f2f515420252982a8c48
2010-03-06 14:54 . 2010-03-06 14:54	--------	d-----w-	c:\documents and settingsodon\Application Data\Malwarebytes
2010-03-06 14:54 . 2010-03-06 14:54	--------	d-----w-	c:\documents and settings\All Users\Application Data\Malwarebytes
2010-03-06 14:19 . 2010-03-06 14:21	--------	d-----w-	C:\FyK
2010-02-26 07:17 . 2010-02-26 07:17	--------	d-----w-	c:\documents and settingsodon\Local Settings\Application Data\Temp

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-08 13:04 . 2009-07-04 11:35	411368	----a-w-	c:\windows\system32\deploytk.dll
2010-03-07 17:55 . 2009-06-03 10:52	--------	d-----w-	c:\documents and settingsodon\Application Data\Skype
2010-03-07 17:25 . 2008-01-26 14:39	--------	d-----w-	c:\program files\Google
2010-03-07 16:42 . 2007-06-08 07:32	--------	d-----w-	c:\program files\Java
2010-03-06 21:28 . 2007-04-27 15:26	--------	d-----w-	c:\program files\Fichiers communs\Adobe
2010-03-05 21:57 . 2009-06-03 10:54	--------	d-----w-	c:\documents and settingsodon\Application Data\skypePM
2010-01-28 13:08 . 2010-01-28 13:08	--------	d-----w-	c:\documents and settingsodon\Application Data\Apple Computer
2010-01-17 18:11 . 2010-01-17 18:11	152576	----a-w-	c:\documents and settingsodon\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2010-01-17 18:11 . 2010-01-17 18:11	79488	----a-w-	c:\documents and settingsodon\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2009-12-31 16:14 . 2004-08-05 12:00	352640	----a-w-	c:\windows\system32\drivers\srv.sys
2009-12-21 19:07 . 2004-08-05 12:00	916480	----a-w-	c:\windows\system32\wininet.dll
2009-12-17 07:59 . 2007-04-18 07:58	347648	----a-w-	c:\windows\system32\mspaint.exe
2009-12-14 07:36 . 2004-08-05 12:00	33280	----a-w-	c:\windows\system32\csrsrv.dll
2009-12-10 07:00 . 2004-08-05 12:00	48616	----a-w-	c:\windows\system32\perfc00C.dat
2009-12-10 07:00 . 2004-08-05 12:00	367658	----a-w-	c:\windows\system32\perfh00C.dat
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HTpatch"="c:\windows\htpatch.exe" [2002-10-30 28672]
"SiSUSBRG"="c:\windows\SiSUSBrg.exe" [2002-07-12 106496]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-09-12 335872]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-11-17 7700480]
"nwiz"="nwiz.exe" [2006-11-17 1622016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-11-17 86016]
"LogitechCommunicationsManager"="c:\program files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe" [2006-06-26 497200]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam10\QuickCam10.exe" [2006-06-26 614960]
"LVCOMSX"="c:\program files\Fichiers communs\Logitech\LComMgr\LVComSX.exe" [2006-06-26 243248]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-02-15 417792]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2010-02-18 248040]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

c:\documents and settingsodon\Menu D‚marrer\Programmes\D‚marrage\
BJ Status Monitor Canon i560.lnk - c:\documents and settingsodon\cnmss Canon i560 (Local).exe [2008-4-9 12800]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"c:\Program Files\Messenger\msmsgs.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"=
"c:\Program Files\Skype\Phone\Skype.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [07/03/2010 19:47 108289]
S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [04/02/2010 08:12 135664]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - SISPORT
*Deregistered* - SiSPort
.
Contenu du dossier 'Tâches planifiées'

2010-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-04 07:12]

2010-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-04 07:12]
.
.
------- Examen supplémentaire -------
.
uInternet Connection Wizard,ShellNext = iexplore
IE: Easy-WebPrint Ajouter à la Liste à Imprimer - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
Trusted Zone: citroen.com\estim
Trusted Zone: citroen.com
etworkservice
Trusted Zone: citroen.com
ewagir-ru
Trusted Zone: citroen.com\public.service
Trusted Zone: citroen.com\service
Trusted Zone: inetpsa.com\estim.citroen
Trusted Zone: inetpsa.com\estim.peugeot
Trusted Zone: inetpsa.com
etworkservice.citroen
Trusted Zone: inetpsa.com
ewagir.citroen
Trusted Zone: inetpsa.com
ewagir.peugeot
Trusted Zone: inetpsa.com\public.service.citroen
Trusted Zone: inetpsa.com\public.servicebox.peugeot
Trusted Zone: inetpsa.com\service.citroen
Trusted Zone: inetpsa.com\servicebox.peugeot
Trusted Zone: peugeot.com\estim
Trusted Zone: peugeot.com
ewagir-ru
Trusted Zone: peugeot.com\public.servicebox
Trusted Zone: peugeot.com\servicebox
DPF: {A06BE318-C096-11D4-964F-0010A4D06F69} - hxxps://tva.dgi.minefi.gouv.fr/activeX/TeleTVA.tva
FF - ProfilePath - c:\documents and settingsodon\Application Data\Mozilla\Firefox\Profiles\u8q1srcq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - plugin: c:\program files\Google\Update\1.2.183.17
pGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins
p-mswmp.dll

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency",   1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug",            false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight",       2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize",       1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight",   25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight",     5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "https://www.mozilla.org/en-US/firefox/new/?redirect_source=firefox-com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-53B8B6 - c:\windows\system32\44A587\059BB7.EXE



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-09 14:04
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  HTpatch = c:\windows\htpatch.exe?ows\CurrentVersion\Run???\???/??[???????[???[???????????????????[???[?C?????[$??????[????????????S??[????????m??[???w????(???{??w???w???????w???w???[????????d???b6?[%??[???[????"??[A??[???[.??wZ??[?3?[?3?[????st.I?????? [????d???0=?[?K?[ 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(548)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(6680)
c:\program files\Fichiers communs\Logitech\LVMVFM\LVPrcInj.dll
c:\windows\system32\webcheck.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32
vsvc32.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\System32\spool\DRIVERS\W32X86\3\cnmsm58.exe
c:\program files\Logitech\QuickCam10\COCIManager.exe
.
**************************************************************************
.
Heure de fin: 2010-03-09  14:10:49 - La machine a redémarré
ComboFix-quarantined-files.txt  2010-03-09 13:10

Avant-CF: 140 590 088 192 octets libres
Après-CF: 140 563 419 136 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

- - End Of File - - D3426C3D078F44B78D5A9871551C2908

benurrr · Answer

salut

pour nettoyer les fix qui ont servit

Ferme toutes les applications en cours, puis télécharge ToolsCleaner2 sur ton Bureau.
http://pc-system.fr/

Double clique sur ToolsCleaner2.exe >
puis Recherche
et sur Suppression
Note : ton bureau va disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter"

Tape explorer.exe et valide. Cela fera re-apparaître le Bureau

tu poste le rapport générer après suppression

Arno · Answer

Oups, j'ai oublié de copier le rapport à la fin du scan et j'ai relancé, donc il m'a réécrit sur le tcleaner.txt...

En gros, il avait trouvé les Combofix.exe, Usbfix.exe, Combofix.txt, Usbfix.txt, C:\Qoobox, C:\Usbfix et aussi un C:\WINDOWS\mbr.exe (ou un truc comme ça : mrb...)

Enfin fini?

Arno · Answer

Oups j'ia oublié de copier le rapport, et j'ai relancé toolscleaner donc ça m'a effacé ce qu'il y avait dans le tcleaner.txt

En gros il y avait :
Combofix.txt
Combofix.exe
C:\Combofix

Usbfix.txt
Usbfix.exe
C:\Usbfix

et aussi un C:\Windows\mbr.exe (ou mrb.exe, ou dans le genre)

Enfin fini?

benurrr · Answer

Ok le rapport toolscleaner tu le trouve a la racine de C:

tu va télécharger Ccleaner http://dl.commentcamarche.net/www.commentcamarche.net/download/files/ccsetup227_slim.exe

ouvre "Ccleaner" vas dans l'onglet "Option" puis "Avancé" puis décoches "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures."

. Puis vas dans l'onglet "Nettoyeur" fais "Analyse" puis "Lancer le nettoyage".
 Puis vas dans l'onglet "Registre" puis fait "Chercher des erreurs" puis "Réparer les erreurs sélectionnée"
. Tu refais tous ca 4-5 fois (le nettoyage et le registre). 

Puis reste dans "Ccleaner" puis va dans "Option" puis "Propriété" puis coches "Nettoyer automatiquement l'ordinateur au démarrage". 

içi mode d'emploi pour ccleaner

https://www.malekal.com/tutoriel-ccleaner/

Arno · Answer

Ça y'est ça c'est fait!
La suite? ;)

benurrr · Answer

salut comment va ton pc ?

Arno · Answer

Il va bien, merci pour lui :)
A part le démarrage où il peut mettre du temps à lancer toutes les appli en arrière plan, sinon ça va pas de problème.

benurrr · Answer

salut

cool

tu va télécharger Ccleaner http://dl.commentcamarche.net/www.commentcamarche.net/download/files/ccsetup227_slim.exe

ouvre "Ccleaner" vas dans l'onglet "Option" puis "Avancé" puis décoches "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures."

. Puis vas dans l'onglet "Nettoyeur" fais "Analyse" puis "Lancer le nettoyage".
 Puis vas dans l'onglet "Registre" puis fait "Chercher des erreurs" puis "Réparer les erreurs sélectionnée"
. Tu refais tous ca 4-5 fois (le nettoyage et le registre). 

Puis reste dans "Ccleaner" puis va dans "Option" puis "Propriété" puis coches "Nettoyer automatiquement l'ordinateur au démarrage". 

içi mode d'emploi pour ccleaner

https://www.malekal.com/tutoriel-ccleaner/

Arno · Answer

C'est bon j'avais déjà lancé CCleaner, voir précédent message ;)

benurrr · Answer

salut

plus de Dr Guard ?

Arno · Answer

Non plus de Dr Guard, il a été balayé dès le début, mais il y avait plein d'autres m*rde donc ça méritait tous ces scans.
Merci.

benurrr · Answer

cool bonne soirée a toi et bon surf

Arno · Answer

Merci beaucoup!
Sinon il y a moyen de supprimé ce sujet, j'ai pas forcément envie de laisser trainer des infos concernant mon pc sur le net.

benurrr · Answer

salut

non y'a pas moyen de supprimer mais les donner sensible ne passe pas elle sont filtrer avant pour cela que certain se plaigne que leur message ne passe pas mais c'est pour leur bien

Infection par Dr Guard

39 réponses

Discussions similaires

Newsletters