Sos Virus - Antispyware vista ALERT Fermé

Question

Bonjour a tous, 

Je vous contacte afin d'obtenir de l'aide car je ne peux plus travailler sur mon ordinateur depuis ce matin. 

A l'allumage du PC j'avais une icone de casino del rio j'ai donc supprimé et ensuite un genre d'antivirus que j'ai reussi a supprimer. Et la maintenant j'ai un antispyware vista alert qui m'empeche d'allez sur internet explorer, il m'ouvre des pages sans arret et essaie de me faire payer. 

J'ai lu plusieurs post mais je n'arrive toujours pas a le supprimer.  
J'ai installé ZHP mais je n'y comprends pas grand chose. 
Sans mon ordinateur je suis dans la m.... Car je bosse uniquement sur PC et j'ai plein de clients en attente. 

Pouvez vous m'aidez svp ? 

Merci d'avance. 

L

Utilisateur anonyme · Accepted Answer

tu as un trojan et un dropper sur ton pc, même après un reformatage, ça na partira pas, donc les adéptes de reformatage, houst !!!!


Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton bureau:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ 

ou ici : http://www.malwarebytes.org/mbam/program/mbam-setup.exe

 
/!\Utilisateur de Vista et Windows 7 : Clique droit sur le logo de Malwarebytes' Anti-Malware, « exécuter en tant qu'Administrateur »

. Double cliques sur le fichier téléchargé pour lancer le processus d'installation. 
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour 
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes 
. Une fois la mise à jour terminé
. rend-toi dans l'onglet, Recherche 
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre. 
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés. 
. Cliques sur Ok pour poursuivre. 
. Si des malwares ont été détectés, cliques sur Afficher les résultats 
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine. . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse. 
. rends toi dans l'onglet rapport/log 
. tu cliques dessus pour l'afficher une fois affiché 
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous 
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse 
. Tu cliques droit dans le cadre de la réponse et coller 
. À la fin du scan, il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redémarre ton pc !!!

Si tu as besoin d'aide regarde ce tutoriel : 
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

Utilisateur anonyme · Answer

bonjour,
@ Lilloise59 :

* Télécharge ZHPDiag 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html 

* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin. 
* Clique sur l'icône représentant une loupe (« Lancer le diagnostic ») 
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette 
* Héberge le rapport ZHPDiag.txt sur ce site, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum. 
http://www.cijoint.fr/

Lilloise59 · Answer

Merci electricien69

Voila le lien fourni par le site

http://www.cijoint.fr/cjlink.php?file=cj201004/cijQxZI3Hh.txt

Lilloise59 · Answer

Merci pour l'info electricien. J'espere que cela va me debarassé du probleme.

Le scan est en route depuis 35 minutes. Je reviens poster un message a la fin du scan.

A tout a l'heure.

Utilisateur anonyme · Answer

laisse travailler MBAM, suis bien mon précedant message et poste le rapport dés que c'est términé  ;-)

Lilloise59 · Answer

Bonsoir,

Bientot 7h que l'analyse est en cours. 
Est ce normal ?

Lilloise59 · Answer

Bonjour,

Le pc a tourner toute la nuit. 
Je viens de me reveillée et mon pc m'affiché no video input. Impossible de faire quoi que ce soit.

Je le redemarre et la page noire, je ne peux plus rien faire du tout et de plus les page du virus continue a venir malgret mon ecran noir.

Je ne peux plus rien tenté. Que faire?

Lilloise59 · Answer

Voila j'ai fait un examen rapide, et il trouve presque autant de virus en 5 minutes au lieu de 15 heures. lol ...
Le PC redemmare pour le moment RAS, aucune fenetre virus ne s'ouvre.
Par contre j'ai une petite fenetre qui me dit " ce pilote est bloqué en raison de probleme de compatibilité.
Pilote star force protection, ça vien d'un virus aussi ?

En tout cas un grand merci electricien. Au moins je ne vais pas me faire arnaqué par une grande enseigne de reparation pc qui change tout sur le pc sans jamais retiré la cause du probleme.

Donc voila le rapport 

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Version de la base de données: 3930

Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

28/04/2010 10:38:28
mbam-log-2010-04-28 (10-38-28).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 104908
Temps écoulé: 5 minute(s), 44 seconde(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 8
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 138

Processus mémoire infecté(s):
C:\Users\laura\wuaucldt.exe (Trojan.Agent) -> Unloaded process successfully.
C:\Users\laura\AppData\Local\ave.exe (Rogue.MultipleAV) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\currentversion (Trojan.Inject) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\syncman (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\regedit32 (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\browserpcglade (Adware.Agent.N) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\iasmapdraw (Adware.Agent.N) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.exe\shell\open\command\(default) (Hijack.ExeFile) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\secfile\shell\open\command\(default) (Rogue.MultipleAV) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Users\laura\AppData\Local\ave.exe" /START "C:\Program Files\Internet Explorer\iexplore.exe") Good: (iexplore.exe) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.exe\(default) (Hijacked.exeFile) -> Bad: (secfile) Good: (exefile) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (explorer.exe,C:\RECYCLER\S-1-5-21-3308125080-9437929365-460010038-0731\recycle.exe) Good: (Explorer.exe) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\ProgramData\14787431 (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-0324232222-888888379-781133308-1995 (Trojan.Agent.M) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\RECYCLER\S-1-5-21-0324232222-888888379-781133308-1995\recyclebin.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\011.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\021.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\023.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\034.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\038.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\047.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\166.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\317.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\502.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\529.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\534.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\544.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\549.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\565.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\581.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\583.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\586.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\599.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\611.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\614.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\615.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\629.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\642.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\647.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\648.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\652.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\665.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\702.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\706.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\062.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\070.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\091.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\095.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\107.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\115.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\121.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\122.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\123.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\132.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\139.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\140.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\146.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\153.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\157.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\321.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\324.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\327.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\329.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\349.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\352.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\357.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\363.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\374.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\377.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\380.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\381.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\384.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\867.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\869.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\873.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\876.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\893.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\895.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\905.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\913.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\921.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\928.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\949.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\950.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\968.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\975.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\978.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\990.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\991.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\994.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\996.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\729.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\751.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\755.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\757.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\766.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\774.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\779.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\787.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\793.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\802.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\803.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\807.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\812.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\819.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\822.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\824.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\830.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\836.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\841.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\845.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\848.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\851.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\400.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\408.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\415.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\418.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\420.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\440.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\444.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\483.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\491.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\495.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\497.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\168.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\184.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\193.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\204.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\211.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\212.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\223.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\226.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\237.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\242.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\267.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\292.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\297.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\310.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\ProgramData\14787431\14787431.exe (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-0324232222-888888379-781133308-1995\Desktop.ini (Trojan.Agent.M) -> Quarantined and deleted successfully.
C:\Users\laura\wuaucldt.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.LNK (Rogue.SecurityTool) -> Quarantined and deleted successfully.
C:\Windows\Temp\_ex-08.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\Temp\_ex-68.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\Temp\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\laura\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> Quarantined and deleted successfully.
C:\Windows\PDFCreator_Toolbar_Uninstaller_4781.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Windows\PDFCreator_Toolbar_Uninstaller_5281.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\browserpcGlade\browserpcGlade.dll (Adware.Agent.N) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\iasmapDraw\iasmapDraw.dll (Adware.Agent.N) -> Delete on reboot.
C:\Users\laura\Local Settings\Application Data\ave.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.
C:\Users\laura\AppData\Local\ave.exe (Rogue.MultipleAV) -> Quarantined and deleted successfully.

Utilisateur anonyme · Answer

bonjour,
redemarre ton pc,

relance MBAM, vide sa quarantaine mais ne le lance pas, 

suis ce que je te mets ci dessous dans l'ordre, c'est important :



*	/!\Avertissement :
Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.
Ne pas utiliser en dehors de ce cas de figure : dangereux! 

/!\ Utilisateur de Vista : Ne pas oublier de désactiver l'UAC juste le temps de désinfection de ton pc, il sera à réactiver plus tard :
Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac
	
&#9658; Télécharges ComboFix à partir de ce lien et enregistres le sur ton bureau :
https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm 
ou ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe 
A lire 
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix 

Avant d'utiliser ComboFix : 
&#9658; Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 
&#9658; Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 
Une fois fait, sur ton bureau double-clic sur Combofix.exe. 
/!\Utilisateur de Vista : Clique droit sur le logo de Combofix, « exécuter en tant qu'Administrateur »

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
 
/!\INSTALLES LA CONSOLE DE RECUPERATION

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.
 
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 
&#9658; Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 
&#9658; Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

Lilloise59 · Answer

Bonsoir,

Je viens de retrouver le post. Je ne le trouvais plus sur le forum.

Je vais faire ce que tu m'as dit de faire. Et je te tient au courant. 

Merci pour les conseils en tout cas.

Utilisateur anonyme · Answer

bonjour,
j'attends le rapport de combofix

@++

Nicoco · Answer

Bonjour,
j'ai aussi un problème sur mon PC, j'ai fais un test avec MBAM et voila le résultat : 

http://www.cijoint.fr/cjlink.php?file=cj201005/cijaTVEgMx.txt

Que dois-je faire pour réparer ceux-ci??
Merci.
COrdialeùent

Sos Virus - Antispyware vista ALERT

12 réponses

Discussions similaires