win32. trogansky.wildtagent

Question

Une fenêtre avec message de CorelIOMonitor.exe -pas de disque : Il n'y a pas de disque dans le lecteur. Insérez un disque dans le lecteur. \Device\Harddisk2\DR2 . 3 options / Annuler , Recommencer, Continuer . aucune ne fonctionnent , impossible de fermer la fenêtre. Je peux juste bouger le fenetre dans l'écran . Mon avg , s'était mis en inactif. J'ai lancé un scan avec adaward , il m'a trouvé un win32. trogansky.wildtagent. j'ai redémarré comme il me demande , mais la fenêtre est toujours là ! quelqu'un pourrait il m'aider ?? 
merci


Configuration: windows xp familial
internet explorer
antivirus avg free edition

magicdave · Answer

Oui télécharge l'excellent antispyware MALWAREBYTES qui détecte et supprime ce que les antivirus laissent passer
Mets-le à jour avant d'effectuer un examen complet

keaska · Answer

personne pour m'aider ?? maintenant c'est mon AVG qui a été interrompu , windows me lance une alerte sécurité . Help !!

green day · Answer

Salut,

- Télécharge http://www.trendsecure.com/portal/fr/_download/HJTInstall.exe ton bureau.
- Double-clic sur HijackThis
- Génère un rapport en suivant ces indications :
- Exécute le et clique sur Do a scan and save log file.
- Le rapport s'ouvre sur le Bloc-Note
- Colle le rapport ici, pour cela :
- Menu Edition / Selectionner Tout
- Menu Edition / copier
- Ici dans un nouveau message : clic droit coper/coller le rapport stp

@+

keaska · Answer

oups pardon je ne t'avais point vu . merci pour ta réponse , j'ai essayé de le téléchargé , mais il ne réponds pas dès que je le lance, j'ai du le désinstaller . je rééssaie !

keaska · Answer

merci beaucoup , voici le rapport 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:05:43, on 03/06/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\vVX3000.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Windows\System32undll32.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10e.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [VX3000] C:\Windows\vVX3000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [Corel File Shell Monitor] C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [DVDAgent] "c:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Nikon Transfer Monitor] C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O13 - Gopher Prefix: 
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} (FBootloaderAX) - http://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe

green day · Answer

Ok,

Télécharge Malwarebytes : http://www.malwarebytes.org/mbam/program/mbam-setup.exe 

Installe le 
Lance malwarebytes 
Clique pour commencer sur Mise à jour et ensuite sur Rechercher des mises à jour 
Coche "Exécuter un examen complet" 
Si tu es en présence d'une infection à la fin de l'examen clique sur "ok" 
Clique sur Supprimer la sélection 
Pour poster le rapport Clique sur l'onglet Rapports/Logs, sélectionne celui t'intéresse et clique sur Ouvrir 
Fait copier coller et poste le rapport stp 

++

keaska · Answer

ça fait 3 fois que j'essaie , impossible de le lancer au bout de 2 minute , il ne répond pas .

keaska · Answer

rien a faire pas moyen de lancer malwarebytes, il me le bloque comme mon antivirus ! arrrf .

green day · Answer

essaye en mode sans échec

keaska · Answer

bonjour Green day 

voici le rapport de malwarebytes que j'ai réussi à lancé en mode sans echec .
**ma fille m'a dit qu'elle a accepté une vidéo d'un copain qui a des virus sur son pc , et elle est souvent sur msn a faire des échanges de zik ou autres , j'ai viré la vidéo mais la fenêtre est toujours là 
. 
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4168

Windows 6.0.6002 Service Pack 2 (Safe Mode)
Internet Explorer 8.0.6001.18904

04/06/2010 09:36:15
mbam-log-2010-06-04 (09-36-15).txt

Type d'examen: Examen complet (C:\|D:\|F:\|)
Elément(s) analysé(s): 363632
Temps écoulé: 55 minute(s), 3 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Users\client\Documents\keygen.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.

keaska · Answer

toujours personne ??  svp

green day · Answer

Bonsoir,

Ce sont des fichiers téléchargés infectés.
Peux tu me poster le rapport de adaware ?

@+

keaska · Answer

bonsoir Green day , merci de ta réponse 
je relance adaware car je n'avais pas exporté le 1er rapport et je ne le retrouve pas .

green day · Answer

ok ;-)

keaska · Answer

Bonjour Green day ! ;-)) que des cookies mais la fenêtre est toujours là.

Logfile created: 04/06/2010 23:38:02
Ad-Aware version: 8.2.0
User performing scan: client

*********************** Definitions database information ***********************
Lavasoft definition file: 149.274
Genotype definition file version: 2010/06/03 08:23:36

******************************** Scan results: *********************************
Scan profile name: Analyse complète  (ID: full)
Objects scanned: 305769
Objects detected: 57


Type              Detected
==========================
Processes.......:        0
Registry entries:        0
Hostfile entries:        0
Files...........:        0
Folders.........:        0
LSPs............:        0
Cookies.........:       57
Browser hijacks.:        0
MRU objects.....:        0



Removed items:
Description: *ad.yieldmanager* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409172 Family ID: 0
Description: *adtech* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409018 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *atdmt* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408910 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *bs.serving-sys* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408902 Family ID: 0
Description: *serving-sys* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409130 Family ID: 0
Description: *doubleclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408875 Family ID: 0
Description: *estat* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408873 Family ID: 0
Description: *.comclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409086 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *serving-sys* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409130 Family ID: 0
Description: *2o7* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408943 Family ID: 0
Description: *adserver* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408737 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408921 Family ID: 0
Description: *adserve* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409020 Family ID: 0
Description: *statcounter* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409185 Family ID: 0
Description: *tradedoubler* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408964 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408921 Family ID: 0
Description: *adserver* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408737 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408921 Family ID: 0
Description: *adserve* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409020 Family ID: 0
Description: *ad.yieldmanager* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409172 Family ID: 0
Description: *adviva* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409016 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *atdmt* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408910 Family ID: 0
Description: *doubleclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408875 Family ID: 0
Description: *fastclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408869 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *webtrends* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 599640 Family ID: 0
Description: *specificclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408807 Family ID: 0
Description: *tribalfusion* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408785 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *ad.yieldmanager* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409172 Family ID: 0
Description: *adtech* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409018 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *atdmt* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408910 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *bs.serving-sys* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408902 Family ID: 0
Description: *serving-sys* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409130 Family ID: 0
Description: *doubleclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408875 Family ID: 0
Description: *estat* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408873 Family ID: 0
Description: *.comclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409086 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *serving-sys* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409130 Family ID: 0
Description: *2o7* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408943 Family ID: 0
Description: *adserver* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408737 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408921 Family ID: 0
Description: *adserve* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409020 Family ID: 0
Description: *statcounter* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409185 Family ID: 0
Description: *tradedoubler* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408964 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408921 Family ID: 0
Description: *adserver* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408737 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408921 Family ID: 0
Description: *adserve* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409020 Family ID: 0

Scan and cleaning complete: Finished correctly after 8307 seconds

*********************************** Settings ***********************************

Scan profile:
ID: full, enabled:1, value: Analyse complète
  ID: folderstoscan, enabled:1, value: C:\,D:\,F:\
  ID: useantivirus, enabled:1, value: true
  ID: sections, enabled:1
    ID: scancriticalareas, enabled:1, value: true
    ID: scanrunningapps, enabled:1, value: true
    ID: scanregistry, enabled:1, value: true
    ID: scanlsp, enabled:1, value: true
    ID: scanads, enabled:1, value: true
    ID: scanhostsfile, enabled:1, value: true
    ID: scanmru, enabled:1, value: true
    ID: scanbrowserhijacks, enabled:1, value: true
    ID: scantrackingcookies, enabled:1, value: true
      ID: closebrowsers, enabled:1, value: false
  ID: filescanningoptions, enabled:1
    ID: archives, enabled:1, value: true
    ID: onlyexecutables, enabled:1, value: false
    ID: skiplargerthan, enabled:1, value: 20480
    ID: scanrootkits, enabled:1, value: true
      ID: rootkitlevel, enabled:1, value: mild, domain: medium,mild,strict
    ID: usespywareheuristics, enabled:1, value: true

Scan global:
ID: global, enabled:1
  ID: addtocontextmenu, enabled:1, value: true
  ID: playsoundoninfection, enabled:1, value: false
    ID: soundfile, enabled:0, value: *to be filled in automatically*\alert.wav

Scheduled scan settings:
<Empty>

Update settings:
ID: updates, enabled:1
  ID: launchthreatworksafterscan, enabled:1, value: off, domain: normal,off,silently
  ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
  ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
  ID: schedules, enabled:1, value: true
    ID: updatedaily1, enabled:1, value: Daily 1
      ID: time, enabled:1, value: Thu Jun 03 16:50:00 2010
      ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
      ID: weekdays, enabled:1
        ID: monday, enabled:1, value: false
        ID: tuesday, enabled:1, value: false
        ID: wednesday, enabled:1, value: false
        ID: thursday, enabled:1, value: false
        ID: friday, enabled:1, value: false
        ID: saturday, enabled:1, value: false
        ID: sunday, enabled:1, value: false
      ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
      ID: scanprofile, enabled:1, value: 
      ID: auto_deal_with_infections, enabled:1, value: false
    ID: updatedaily2, enabled:1, value: Daily 2
      ID: time, enabled:1, value: Thu Jun 03 22:50:00 2010
      ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
      ID: weekdays, enabled:1
        ID: monday, enabled:1, value: false
        ID: tuesday, enabled:1, value: false
        ID: wednesday, enabled:1, value: false
        ID: thursday, enabled:1, value: false
        ID: friday, enabled:1, value: false
        ID: saturday, enabled:1, value: false
        ID: sunday, enabled:1, value: false
      ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
      ID: scanprofile, enabled:1, value: 
      ID: auto_deal_with_infections, enabled:1, value: false
    ID: updatedaily3, enabled:1, value: Daily 3
      ID: time, enabled:1, value: Thu Jun 03 04:50:00 2010
      ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
      ID: weekdays, enabled:1
        ID: monday, enabled:1, value: false
        ID: tuesday, enabled:1, value: false
        ID: wednesday, enabled:1, value: false
        ID: thursday, enabled:1, value: false
        ID: friday, enabled:1, value: false
        ID: saturday, enabled:1, value: false
        ID: sunday, enabled:1, value: false
      ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
      ID: scanprofile, enabled:1, value: 
      ID: auto_deal_with_infections, enabled:1, value: false
    ID: updatedaily4, enabled:1, value: Daily 4
      ID: time, enabled:1, value: Thu Jun 03 10:50:00 2010
      ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
      ID: weekdays, enabled:1
        ID: monday, enabled:1, value: false
        ID: tuesday, enabled:1, value: false
        ID: wednesday, enabled:1, value: false
        ID: thursday, enabled:1, value: false
        ID: friday, enabled:1, value: false
        ID: saturday, enabled:1, value: false
        ID: sunday, enabled:1, value: false
      ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
      ID: scanprofile, enabled:1, value: 
      ID: auto_deal_with_infections, enabled:1, value: false
    ID: updateweekly1, enabled:1, value: Weekly
      ID: time, enabled:1, value: Thu Jun 03 16:50:00 2010
      ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,systemstart,weekly
      ID: weekdays, enabled:1
        ID: monday, enabled:1, value: false
        ID: tuesday, enabled:1, value: false
        ID: wednesday, enabled:1, value: false
        ID: thursday, enabled:1, value: true
        ID: friday, enabled:1, value: false
        ID: saturday, enabled:1, value: false
        ID: sunday, enabled:1, value: true
      ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
      ID: scanprofile, enabled:1, value: 
      ID: auto_deal_with_infections, enabled:1, value: false

Appearance settings:
ID: appearance, enabled:1
  ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Resource
  ID: showtrayicon, enabled:1, value: true
  ID: autoentertainmentmode, enabled:1, value: false
  ID: guimode, enabled:1, value: mode_advanced, domain: mode_advanced,mode_simple
  ID: language, enabled:1, value: fr, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Language

Realtime protection settings:
ID: realtime, enabled:1
  ID: modules, enabled:1
    ID: processprotection, enabled:1, value: true
    ID: onaccessprotection, enabled:1, value: false
    ID: registryprotection, enabled:1, value: false
    ID: networkprotection, enabled:1, value: false
  ID: layers, enabled:1
    ID: useantivirus, enabled:1, value: false
    ID: usespywareheuristics, enabled:1, value: false
  ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify,onlyimportant


****************************** System information ******************************
Computer name: PC-DE-CLIENT
Processor name: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+
Processor identifier: x86 Family 15 Model 107 Stepping 2
Processor speed: ~2411MHZ
Raw info: processorarchitecture 0, processortype 586, processorlevel 15, processor revision 27394, number of processors 2, processor features: [MMX,SSE,SSE2,SSE3,3DNow]
Physical memory available: 862994432 bytes
Physical memory total: 2010918912 bytes
Virtual memory available: 1912717312 bytes
Virtual memory total: 2147352576 bytes
Memory load: 57%
Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 2 (build 6002)
Windows startup mode:

Running processes:
PID: 448 name: C:\Windows\System32\smss.exe owner: SYSTEM domain: AUTORITE NT
PID: 536 name: C:\Windows\System32\csrss.exe owner: SYSTEM domain: AUTORITE NT
PID: 584 name: C:\Windows\System32\csrss.exe owner: SYSTEM domain: AUTORITE NT
PID: 592 name: C:\Windows\System32\wininit.exe owner: SYSTEM domain: AUTORITE NT
PID: 604 name: C:\Program Files\AVG\AVG9\avgchsvx.exe owner: SYSTEM domain: AUTORITE NT
PID: 612 name: C:\Program Files\AVG\AVG9\avgrsx.exe owner: SYSTEM domain: AUTORITE NT
PID: 688 name: C:\Windows\System32\services.exe owner: SYSTEM domain: AUTORITE NT
PID: 700 name: C:\Windows\System32\lsass.exe owner: SYSTEM domain: AUTORITE NT
PID: 712 name: C:\Windows\System32\lsm.exe owner: SYSTEM domain: AUTORITE NT
PID: 736 name: C:\Program Files\AVG\AVG9\avgcsrvx.exe owner: SYSTEM domain: AUTORITE NT
PID: 776 name: C:\Windows\System32\winlogon.exe owner: SYSTEM domain: AUTORITE NT
PID: 1124 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 1168 name: C:\Windows\System32
vvsvc.exe owner: SYSTEM domain: AUTORITE NT
PID: 1196 name: C:\Windows\System32\svchost.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 1340 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1368 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 1396 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 1516 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 1540 name: C:\Windows\System32\SLsvc.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 1612 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1648 name: C:\Windows\System32undll32.exe owner: SYSTEM domain: AUTORITE NT
PID: 1852 name: C:\Windows\System32\svchost.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 1956 name: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEM domain: AUTORITE NT
PID: 208 name: C:\Windows\System32\spoolsv.exe owner: SYSTEM domain: AUTORITE NT
PID: 284 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1724 name: C:\Program Files\AVG\AVG9\avgwdsvc.exe owner: SYSTEM domain: AUTORITE NT
PID: 1108 name: C:\Program Files\Common Files\LightScribe\LSSrvc.exe owner: SYSTEM domain: AUTORITE NT
PID: 1928 name: C:\Program Files\Microsoft LifeCam\MSCamS32.exe owner: SYSTEM domain: AUTORITE NT
PID: 1300 name: C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe owner: SYSTEM domain: AUTORITE NT
PID: 1180 name: C:\Windows\System32\svchost.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 896 name: C:\Windows\System32\PSIService.exe owner: SYSTEM domain: AUTORITE NT
PID: 2080 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 2116 name: C:\Windows\System32\svchost.exe owner: SYSTEM domain: AUTORITE NT
PID: 2180 name: C:\Windows\System32\SearchIndexer.exe owner: SYSTEM domain: AUTORITE NT
PID: 2268 name: C:\Program Files\AVG\AVG9\avgemc.exe owner: SYSTEM domain: AUTORITE NT
PID: 2344 name: C:\Program Files\AVG\AVG9\avgnsx.exe owner: SYSTEM domain: AUTORITE NT
PID: 2676 name: C:\Program Files\AVG\AVG9\avgcsrvx.exe owner: SYSTEM domain: AUTORITE NT
PID: 2776 name: C:\Windows\System32	askeng.exe owner: SYSTEM domain: AUTORITE NT
PID: 3084 name: C:\Windows\System32\wbem\unsecapp.exe owner: SYSTEM domain: AUTORITE NT
PID: 3164 name: C:\Windows\System32\wbem\WmiPrvSE.exe owner: SYSTEM domain: AUTORITE NT
PID: 3412 name: C:\Windows\System32	askeng.exe owner: client domain: PC-de-client
PID: 3428 name: C:\Windows\System32\dwm.exe owner: client domain: PC-de-client
PID: 3508 name: C:\Windows\explorer.exe owner: client domain: PC-de-client
PID: 3788 name: C:\hp\support\hpsysdrv.exe owner: client domain: PC-de-client
PID: 3796 name: C:\Windows\RtHDVCpl.exe owner: client domain: PC-de-client
PID: 3804 name: C:\Program Files\Common Files\Java\Java Update\jusched.exe owner: client domain: PC-de-client
PID: 3816 name: C:\Program Files\HP\HP Software Update\hpwuSchd2.exe owner: client domain: PC-de-client
PID: 3824 name: C:\Windows\vVX3000.exe owner: client domain: PC-de-client
PID: 3840 name: C:\Program Files\AVG\AVG9\avgtray.exe owner: client domain: PC-de-client
PID: 3848 name: C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe owner: client domain: PC-de-client
PID: 3876 name: C:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe owner: client domain: PC-de-client
PID: 3928 name: C:\Windows\System32undll32.exe owner: client domain: PC-de-client
PID: 3956 name: C:\Program Files\DivX\DivX Update\DivXUpdate.exe owner: client domain: PC-de-client
PID: 4012 name: C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe owner: client domain: PC-de-client
PID: 4032 name: C:\Program Files\Windows Sidebar\sidebar.exe owner: client domain: PC-de-client
PID: 4044 name: C:\Windows\ehome\ehtray.exe owner: client domain: PC-de-client
PID: 4076 name: C:\Program Files\Windows Media Player\wmpnscfg.exe owner: client domain: PC-de-client
PID: 2200 name: C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe owner: client domain: PC-de-client
PID: 2712 name: C:\Windows\ehome\ehmsas.exe owner: client domain: PC-de-client
PID: 2912 name: C:\Program Files\Windows Media Player\wmpnetwk.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 4472 name: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe owner: client domain: PC-de-client
PID: 5624 name: C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe owner: SYSTEM domain: AUTORITE NT
PID: 2828 name: C:\Program Files\IncrediMail\bin\IncMail.exe owner: client domain: PC-de-client
PID: 4848 name: C:\Program Files\IncrediMail\bin\ImApp.exe owner: client domain: PC-de-client
PID: 5816 name: C:\Program Files\Windows Live\Messenger\msnmsgr.exe owner: client domain: PC-de-client
PID: 5472 name: C:\Program Files\Internet Explorer\iexplore.exe owner: client domain: PC-de-client
PID: 5148 name: C:\Program Files\Internet Explorer\iexplore.exe owner: client domain: PC-de-client
PID: 3752 name: C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe owner: client domain: PC-de-client

Startup items:
Name: msnmsgr
          imagepath: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
Name: {8C7461EF-2B13-11d2-BE35-3078302C2030}
          imagepath: Component Categories cache daemon
Name: WebCheck
          imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
Name: Windows Defender
          imagepath: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
Name: hpsysdrv
          imagepath: c:\hp\support\hpsysdrv.exe
Name: RtHDVCpl
          imagepath: RtHDVCpl.exe
Name: HP Health Check Scheduler
          imagepath: [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
Name: SunJavaUpdateSched
          imagepath: "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
Name: HP Software Update
          imagepath: c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
Name: 
Name: VX3000
          imagepath: C:\Windows\vVX3000.exe
Name: LifeCam
          imagepath: "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
Name: AVG9_TRAY
          imagepath: C:\PROGRA~1\AVG\AVG9\avgtray.exe
Name: Corel File Shell Monitor
          imagepath: C:\Program Files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
Name: QuickTime Task
          imagepath: "C:\Program Files\QuickTime\QTTask.exe" -atboottime
Name: DVDAgent
          imagepath: "c:\Program Files\Hewlett-Packard\Media\DVD\DVDAgent.exe"
Name: NvCplDaemon
          imagepath: RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
Name: NvMediaCenter
          imagepath: RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
Name: DivXUpdate
          imagepath: "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
Name: CanonMyPrinter
          imagepath: C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
Name: Adobe Reader Speed Launcher
          imagepath: "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Name: Nikon Transfer Monitor
          imagepath: C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
Name: AdobeCS4ServiceManager
          imagepath: "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
Name: 
          imagepath: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Name: 
          imagepath: C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

keaska · Answer

Bootexecute items:
Name: 
          imagepath: autocheck autochk *
Name: 
          imagepath: lsdelete

Running services:
Name: AeLookupSvc
          displayname: Expérience d'application
Name: AudioEndpointBuilder
          displayname: Générateur de points de terminaison du service Audio Windows
Name: Audiosrv
          displayname: Audio Windows
Name: avg9emc
          displayname: AVG Free E-mail Scanner
Name: avg9wd
          displayname: AVG Free WatchDog
Name: BFE
          displayname: Moteur de filtrage de base
Name: BITS
          displayname: Service de transfert intelligent en arrière-plan
Name: CryptSvc
          displayname: Services de chiffrement
Name: DcomLaunch
          displayname: Lanceur de processus serveur DCOM
Name: Dhcp
          displayname: Client DHCP
Name: Dnscache
          displayname: Client DNS
Name: DPS
          displayname: Service de stratégie de diagnostic
Name: EMDMgmt
          displayname: Service ReadyBoost
Name: Eventlog
          displayname: Journal d'événements Windows
Name: EventSystem
          displayname: Système d'événement COM+
Name: ezSharedSvc
          displayname: Easybits Shared Services for Windows
Name: fdPHost
          displayname: Hôte du fournisseur de découverte de fonctions
Name: FDResPub
          displayname: Publication des ressources de découverte de fonctions
Name: gpsvc
          displayname: Client de stratégie de groupe
Name: hidserv
          displayname: Accès du périphérique d'interface utilisateur
Name: HP Health Check Service
          displayname: HP Health Check Service
Name: IKEEXT
          displayname: Modules de génération de clés IKE et AuthIP
Name: iphlpsvc
          displayname: Assistance IP
Name: KtmRm
          displayname: Service KtmRm pour Distributed Transaction Coordinator
Name: LanmanServer
          displayname: Serveur
Name: LanmanWorkstation
          displayname: Station de travail
Name: Lavasoft Ad-Aware Service
          displayname: Lavasoft Ad-Aware Service
Name: LightScribeService
          displayname: LightScribeService Direct Disc Labeling Service
Name: lmhosts
          displayname: Assistance NetBIOS sur TCP/IP
Name: MMCSS
          displayname: Planificateur de classes multimédias
Name: MpsSvc
          displayname: Pare-feu Windows
Name: MSCamSvc
          displayname: MSCamSvc
Name: Netman
          displayname: Connexions réseau
Name: netprofm
          displayname: Service Liste des réseaux
Name: NlaSvc
          displayname: Connaissance des emplacements réseau
Name: nsi
          displayname: Service Interface du magasin réseau
Name: nvsvc
          displayname: NVIDIA Display Driver Service
Name: OMSI download service
          displayname: Sony Ericsson OMSI download service
Name: PcaSvc
          displayname: Service de l'Assistant Compatibilité des programmes
Name: PlugPlay
          displayname: Plug-and-Play
Name: PolicyAgent
          displayname: Agent de stratégie IPsec
Name: ProfSvc
          displayname: Service de profil utilisateur
Name: ProtexisLicensing
          displayname: ProtexisLicensing
Name: RasMan
          displayname: Gestionnaire de connexions d'accès distant
Name: RpcSs
          displayname: Appel de procédure distante (RPC)
Name: SamSs
          displayname: Gestionnaire de comptes de sécurité
Name: Schedule
          displayname: Planificateur de tâches
Name: seclogon
          displayname: Ouverture de session secondaire
Name: SENS
          displayname: Service de notification d'événements système
Name: ShellHWDetection
          displayname: Détection matériel noyau
Name: slsvc
          displayname: Licence du logiciel
Name: Spooler
          displayname: Spouleur d'impression
Name: SSDPSRV
          displayname: Découverte SSDP
Name: SstpSvc
          displayname: Service SSTP (Secure Socket Tunneling Protocol)
Name: stisvc
          displayname: Acquisition d'image Windows (WIA)
Name: SysMain
          displayname: Superfetch
Name: TabletInputService
          displayname: Service Panneau de saisie Tablet PC
Name: TapiSrv
          displayname: Téléphonie
Name: TermService
          displayname: Services Terminal Server
Name: Themes
          displayname: Thèmes
Name: TrkWks
          displayname: Client de suivi de lien distribué
Name: upnphost
          displayname: Hôte de périphérique UPnP
Name: UxSms
          displayname: Gestionnaire de sessions du Gestionnaire de fenêtrage
Name: W32Time
          displayname: Horloge Windows
Name: WdiSystemHost
          displayname: Hôte système de diagnostics
Name: WebClient
          displayname: WebClient
Name: WerSvc
          displayname: Service de rapport d'erreurs Windows
Name: Winmgmt
          displayname: Infrastructure de gestion Windows
Name: WMPNetworkSvc
          displayname: Service Partage réseau du Lecteur Windows Media
Name: WPDBusEnum
          displayname: Service Énumérateur d'appareil mobile
Name: wscsvc
          displayname: Centre de sécurité
Name: WSearch
          displayname: Windows Search
Name: wuauserv
          displayname: Windows Update
Name: wudfsvc
          displayname: Windows Driver Foundation - Infrastructure de pilote mode-utilisateur

keaska · Answer

GREEN DAY , je suis de mariage aujourd'hui, donc je ne pourrais pas venir avant Dimanche soir , j'espère que tu ne m'oubliera pas d'ici là ., et qu'on réussira a supprimer cette fenêtre avec son agresseur dedans. ;-))  
Je te souhaite un excellent week end 

A+  ;-))

green day · Answer

Bonjour Keaska,

Ok pas de problème.
De même, un excellent week end à toi aussi et bonne fête ;-)

@+

keaska · Answer

Bonsoir Green day 

j'espère que tu as passé un bon week end . 

Alors voici les nouvelles . après avoir lancé adaware une fois de plus et malwarbytes une autre fois , j'ai pu réactiver mon anti virus AVG , mes logiciels se sont mis a refonctionner et la fenêtre persistante a enfin disparue . j'ai fais un nettoyage  et réparé les erreurs (clés ect ...) avec ccleaner . Depuis plus rien ! 
Qu'en penses tu ? il me semble que c'est bon signe .

green day · Answer

Salut Keaska,

Ça va merci ;-)
Désolée pour la réponse tardive ...

Je suppose que malwarebyte a neutralisé les fichiers téléchargés qui étaient infectés.

Petite vérification : 

Téléchargez Dr.Web CureIt! sur votre Bureau. 

=> ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe 

# Double-cliquez sur drweb-cureit.exe et cliquez sur Commencer le scan. 
# Ce scan rapide permet l'analyse des processus chargés en mémoire; s'il trouve des processus infectés, cliquez sur le bouton Oui pour Tout à l'invite. 
# Lorsque le scan rapide est terminé, cliquez sur Options > Changer la configuration. 
# Choisissez l'onglet Scanner, et décochez Analyse heuristique. 
# De retour à la fenêtre principale : choisissez Analyse complète. 
# Cliquez la flèche verte sur la droite et le scan débutera. Une publicité apparaît quelquefois, fermez-la. 
# Cliquez Oui pour Tout si un fichier est détecté. 
# A la fin du scan, si des infections sont trouvées, cliquez sur Tout sélectionner, puis sur Désinfecter. Si la désinfection est impossible, cliquez sur Quarantaine. 
# Au menu principal de l'outil, en haut à gauche, cliquez sur le menu Fichier et choisissez Enregistrer le rapport. 
# Sauvegardez le rapport sur votre Bureau. Ce dernier se nommera DrWeb.csv. 
# Fermez Dr.Web CureIt! 
# Redémarrez votre ordinateur (très important) car certains fichiers peuvent être déplacés/réparés au redémarrage. 
# Suite au redémarrage, postez (Copiez/Collez) le contenu du rapport de l'outil Dr.Web dans votre prochaine réponse sur votre sujet svp


@+

;-)

Win32. trogansky.wildtagent

20 réponses

Discussions similaires

Newsletters