infecte par trojan virus Fermé

Question

bonjour besoin d'aide s ' il vous plait
envoie le bloc note apres avoir telecharge hijackthis
merci d ' avanceLogfile of HijackThis v1.99.1
Scan saved at 17:28:27, on 25/10/2006
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\System32\ishost.exe
C:\Program Files\PowerCodec\pmsngr.exe
C:\Program Files\PowerCodec\isamonitor.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Apps\ActivBoard\MMKeybd.exe
C:\WINDOWS\System32\ismini.exe
C:\Program Files\PowerCodec\pmmon.exe
C:\Program Files\PowerCodec\isamini.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Apps\ActivBoard\OSD.exe
C:\kybrdff_e31.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Apps\ActivBoard
hksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\jean michel\Local Settings\Temp\Répertoire temporaire 1 pour hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {7b4d79df-9ef0-429d-a0e9-d9b138c6a53b} - C:\Program Files\PowerCodec\isaddon.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: UCmore XP - The Search Accelerator - {44BE0690-5429-47f0-85BB-3FFD8020233E} - C:\Program Files\TheSearchAccelerator\UCMTSAIE.dll (file missing)
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [kojdfda3] RUNDLL32.EXE w006a839.dll,n 005dfd9e0000000a006a839
O4 - HKLM\..\Run: [keyboard] C:\kybrdff_e31.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [hsdkk.exe] C:\WINDOWS\System32\hsdkk.exe
O4 - HKLM\..\RunServices: [Managments Service] bvjdjqg.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - Global Startup: Contrôleur d’état.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O9 - Extra button: Suggestions - {2223664C-1942-4276-9A2D-E8D8F547C5D2} - res://EffiPeled (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B2377D1-6206-44FF-AC91-2EBD5B7BA5FD}: NameServer = 85.255.114.92 85.255.112.112
O17 - HKLM\System\CCS\Services\Tcpip\..\{D608A1BC-5DB7-4D7D-9830-652283BE12DE}: NameServer = 85.255.114.92,85.255.112.112
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.114.92 85.255.112.112
O17 - HKLM\System\CS1\Services\Tcpip\..\{3B2377D1-6206-44FF-AC91-2EBD5B7BA5FD}: NameServer = 85.255.114.92 85.255.112.112
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.114.92 85.255.112.112
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.114.92 85.255.112.112
O20 - Winlogon Notify: H323TSP - C:\WINDOWS\system32\guard.tmp (file missing)
O20 - Winlogon Notify: Reliability - C:\WINDOWS\system32\i206lcds1f06.dll (file missing)
O21 - SSODL: gaonic - {f31aee4a-1530-4fef-8537-79c6973bff9a} - C:\WINDOWS\System32	azth.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard
hksrv.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Window Plugin Service - Unknown owner - C:\WINDOWS\system32\lsscs.exe (file missing)

d0ne · Answer

salut a toi

refais un scan avec hijack this ( "do a scan only ) et coche seulement lles lignes que je t'indique et a la fin clic  sur " fix checked" 

C:\WINDOWS\System32\ishost.exe 

C:\kybrdff_e31.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com

O3 - Toolbar: UCmore XP - The Search Accelerator - {44BE0690-5429-47f0-85BB-3FFD8020233E} - C:\Program Files\TheSearchAccelerator\UCMTSAIE.dll (file missing)

O4 - HKLM\..\Run: [keyboard] C:\kybrdff_e31.exe

O4 - HKLM\..\Run: [hsdkk.exe] C:\WINDOWS\System32\hsdkk.exe

O9 - Extra button: Suggestions - {2223664C-1942-4276-9A2D-E8D8F547C5D2} - res://EffiPeled (file missing)

O20 - Winlogon Notify: H323TSP - C:\WINDOWS\system32\guard.tmp (file missing)

O20 - Winlogon Notify: Reliability - C:\WINDOWS\system32\i206lcds1f06.dll (file missing)

O23 - Service: Window Plugin Service - Unknown owner - C:\WINDOWS\system32\lsscs.exe (file missing)




Fais ce qui suit


A - ad-aware version 1.06
dispo a gauche de la page actuelle

démo
http://pageperso.aol.fr/balltrap34/adwseflash.zip

B - spybot version 1.4
dispo a gauche de la page actuelle
voir demo d utilisation
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
Télécharge ici :
https://www.ccleaner.com/ccleaner/download
Tutorial ici:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

D – Ewido

dispo a gauche de la page actuelle

tutorial
https://www.malekal.com/tutorial-et-guide-ewido-v4/
ou
http://www.infos-du-net.com/telecharger/Ewido-Anti-Malware.html

Mets le à jour en cliquant update now.
Fais un "complete system scan".
A la fin du scan, vérifie qu'il y est bien marqué "delete à côté de chaque malware et clique seulement sur : "Apply all actions"
Ensuite, clique sur "Save Report " puis "Save report as" et sauve le rapport dans tes documents.

Copie/colle le rapport



E - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)

http://www.bitdefender.fr/scan8/ie.html
Copie/COLLE le rapport entier

jmi45 · Answer

re bonjour 
merci de votre reponse
mais quel labeur pour enlever tout cela
apres avoir fait les etapes A B CD
JE VOUS ENVOIE LE RAPPORT D EWIDO
j ai voulu scanner avec bitdefender mais il fallait plus de 3 heures alors j 'ai arrete pour ce matin
refera plus tard---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

 + Created at:	09:02:24 26/10/2006

 + Scan result:	



C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP9\A0001389.exe -> Adware.AdURL : Cleaned with backup (quarantined).
C:\WINDOWS\icont.exe -> Adware.AdURL : Cleaned with backup (quarantined).
C:\WINDOWS\amVhbiBtaWNoZWw\asappsrv.dll -> Adware.CommAd : Cleaned with backup (quarantined).
C:\WINDOWS\amVhbiBtaWNoZWw\command.exe -> Adware.CommAd : Cleaned with backup (quarantined).
C:\Program Files\Safety Bar -> Adware.Generic : Cleaned with backup (quarantined).
C:\Program Files\Safety Bar\SafetyBar.dll -> Adware.Generic : Cleaned with backup (quarantined).
C:\Program Files\Safety Bar\Uninstall.bat -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{052b12f7-86fa-4921-8482-26c42316b522} -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{052b12f7-86fa-4921-8482-26c42316b522} -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Security Plugin 2006 -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Security Add-On -> Adware.IntCodec : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Public Messenger ver 2.03 -> Adware.IntCodec : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP18\A0005669.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP18\A0005670.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP18\A0005671.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP18\A0005672.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
C:\WINDOWS\system32
48o0el3ehq.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KH230DUF\deskbar_e[1].exe/deskbar.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP18\A0005678.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP9\A0002428.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\deskbar_e31.exe/deskbar.exe -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96} -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E} -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{D8C2D4B4-EEAF-4EC4-B1F8-9B6ED15D5A38} -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\TypeLib\{A4C8F181-6CDB-4DCC-9FC9-BB9933C81E1F} -> Adware.Softomate : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DBTB00001.DBTB00001Deskbar -> Adware.Softomate : Cleaned with backup (quarantined).
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KH230DUF\ucmoreiex[1].exe/IUCMORE.DLL -> Adware.Ucmore : Cleaned with backup (quarantined).
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KH230DUF\ucmoreiex[1].exe/UCMTSAIE.DLL -> Adware.Ucmore : Cleaned with backup (quarantined).
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\KH230DUF\ucmoreiex[1].exe/empty_00000001 -> Adware.Ucmore : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP9\A0001407.exe/IUCMORE.DLL -> Adware.Ucmore : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP9\A0001407.exe/UCMTSAIE.DLL -> Adware.Ucmore : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP9\A0001407.exe/empty_00000001 -> Adware.Ucmore : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP9\A0002423.dll -> Adware.Ucmore : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP9\A0002426.dll -> Adware.Ucmore : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{f31aee4a-1530-4fef-8537-79c6973bff9a} -> Adware.VirusBurst : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\gaonic -> Adware.VirusBurst : Cleaned with backup (quarantined).
C:\Documents and Settings\morgan\Local Settings\Temporary Internet Files\Content.IE5\2OSMCZGP\AppWrap[1].exe -> Adware.Zestyfind : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP18\A0005680.exe -> Adware.Zestyfind : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\bw2.com -> Adware.Zestyfind : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP17\A0004652.exe -> Downloader.Adload.fu : Cleaned with backup (quarantined).
C:\Documents and Settings\jean michel\Local Settings\Temporary Internet Files\Content.IE5\4PSFKVKF\WinAntiVirusPro2006FreeInstall_fr[1].exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Ignored.
C:\System Volume Information\_restore{30F2925A-EB9A-4CC7-BB41-0857648D64F4}\RP18\A0005667.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Ignored.
C:\Documents and Settings\jean michel\Cookies\jean michel@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@cz7.clickzs[1].txt -> TrackingCookie.Clickzs : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@estat[1].txt -> TrackingCookie.Estat : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@as1.falkag[1].txt -> TrackingCookie.Falkag : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@overture[2].txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned.
C:\Documents and Settings\LocalService\Cookies\system@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@weborama[1].txt -> TrackingCookie.Weborama : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@weborama[3].txt -> TrackingCookie.Weborama : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@weborama[1].txt -> TrackingCookie.Weborama : Cleaned.
C:\Documents and Settings\LocalService\Cookies\system@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\jean michel\Cookies\jean michel@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\morgan\Cookies\morgan@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.


::Report end

^^Marie^^ · Answer

Slt,

Pour avancer

Fais ce qui suit
Ton rapport Ewido va être soulagé par la suite

C -  Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..) 
Télécharge ici : 
https://www.ccleaner.com/ccleaner/download 
Tutorial ici: 
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php 

D – Ewido
https://www.malekal.com/tutorial-et-guide-ewido-v4/ 
ou
http://www.infos-du-net.com/telecharger/Ewido-Anti-Malware.html

Mets le à jour en cliquant update now.
Fais un "complete system scan". 
A la fin du scan, vérifie qu'il y est bien marqué "delete à côté de chaque malware et clique seulement sur : "Apply all actions" 
 Ensuite, clique sur "Save Report " puis "Save report as" et sauve le rapport dans tes documents. 

Copie/colle le rapport

Infecte par trojan virus

3 réponses

Discussions similaires