Fenêtres pub intempestives sur Win7

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 5875

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

25/02/2011 17:09:06
mbam-log-2011-02-25 (17-09-06).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 394693
Temps écoulé: 1 heure(s), 34 minute(s), 38 seconde(s)

Processus mémoire infecté(s): 3
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 8

Processus mémoire infecté(s):
c:\Users\Dom\AppData\Local\Temp\Rsh.exe (Trojan.Agent) -> 2500 -> Unloaded process successfully.
c:\Users\Dom\AppData\Local\Temp\Rsi.exe (Trojan.Agent) -> 2508 -> Unloaded process successfully.
c:\Users\Dom\AppData\Local\Temp\Rsg.exe (Trojan.Agent) -> 2516 -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\CE8SIIFGSU (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\NtWqIVLZEWZU (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ (Hijack.Zones) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\CE8SIIFGSU (Trojan.Agent) -> Value: CE8SIIFGSU -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\Users\Dom\AppData\Local\Temp\Rsh.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\Dom\AppData\Local\Temp\Rsi.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\Dom\AppData\Local\Temp\Rsg.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files (x86)\ultra mkv converter\patch-proxy.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
d:\Download\jdownloader 0.5.859\Incoming\cor.tar\cor\cor\corel paint shop pro photo x2 ultimate v12.5\k3ygen.exe (Trojan.Dropper.PGen) -> Quarantined and deleted successfully.
c:\Windows\Tasks\{22116563-108c-42c0-a7ce-60161b75e508}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\Windows\Tasks\{62c40aa6-4406-467a-a5a5-dfdf1b559b7a}.job (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Windows\Tasks\{bbaeaeaf-1275-40e2-bd6c-bc8f88bd114a}.job (Trojan.Downloader) -> Quarantined and deleted successfully.

Line 719 (File "C:\Users\Dom\Desktop\OneClick2RP.exe"):
Error: The resquested action with this object has failed

# DelFix v7.4 - Rapport créé le 26/02/2011 à 12:49
# Mis à jour le 09/02/11 à 23h par Xplode
# Système d'exploitation : Windows 7 Ultimate (64 bits) [version 6.1.7601] 
# Nom d'utilisateur : Dom - R70-DOM (Administrateur)
# Exécuté depuis : C:\Users\Dom\Desktop\malware\DelFix.exe
# Option [Suppression]


~~~~~~ Dossier(s) ~~~~~~

Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\Users\Dom\Desktop\OneClick2RP.exe
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~~~~~~ Autre ~~~~~~

-> Prefetch vidé

########## EOF - "C:\DelFixSuppr.txt" - [947 octets] ##########