Virus present .... comment nettoyer ordinateur?

Bonjour Daniela F

Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
Lance le, clique sur [Suppression] puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=

@+

Bonjour Daniela F

Oublie Adwcleaner

Ou en es tu de tes soucis?
Quelques problèmes encore?

@+

Bonjour,

desolé pour le retard en repondre, mais j'ai essayé le programme plusieurs de fois, il a bien identifié au moins 8 menaces differents, j'ai suprimmé a chaque fois. Mais, les virus sont presents et j'ai essayé de réinitialiser mon navigateur, mais je n'ai pas reussi. La fenêtre pour pouvoir initialiser ne apparait pas. L'internet Explorer j'ai reussi, mais les virus sont lá. Bon, merci pour l'aide, en tout cas.

Bonjour Guillaume5188,

déjà, merci pour l'aide.
Je viens de le faire.

le rapport :

# AdwCleaner v2.109 - Logfile created 02/02/2013 at 14:54:07
# Updated 26/01/2013 by Xplode
# Operating system : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# User : Daniela - DANIELA-PC
# Boot Mode : Normal
# Running from : C:\Users\Daniela\Downloads\adwcleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****

***** [Registry] *****

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Registry is clean.

-\\ Mozilla Firefox v18.0.1 (pt-PT)

File : C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\utbstwcy.default-1359729302708\prefs.js

[OK] File is clean.

File : C:\Users\Convidado\AppData\Roaming\Mozilla\Firefox\Profiles\v6pdk9ta.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v [Unable to get version]

File : C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [8696 octets] - [29/01/2013 21:39:51]
AdwCleaner[R2].txt - [8756 octets] - [29/01/2013 21:40:46]
AdwCleaner[R3].txt - [1335 octets] - [30/01/2013 10:23:36]
AdwCleaner[R4].txt - [1391 octets] - [30/01/2013 15:24:15]
AdwCleaner[R5].txt - [1525 octets] - [02/02/2013 14:53:29]
AdwCleaner[R6].txt - [1525 octets] - [02/02/2013 14:54:58]
AdwCleaner[S1].txt - [8531 octets] - [29/01/2013 21:41:31]
AdwCleaner[S2].txt - [1397 octets] - [30/01/2013 10:24:30]
AdwCleaner[S3].txt - [1451 octets] - [30/01/2013 15:25:03]
AdwCleaner[S4].txt - [1516 octets] - [02/02/2013 14:54:07]

########## EOF - C:\AdwCleaner[S4].txt - [1576 octets] ##########

.... et dans une autre rapport d'autre programme , j'ai comme menaces :

babylon.toolbar,win32.myapp,facebook.messenger,microsoft.windowsSecurityCentre_disable,P2P.MediaGet,SweetIM.

merci une fois de plus.

Re

Télécharge Malwaresbytes anti malware ici
https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

* Potasse le tuto pour te familiariser avec le prg :

https://forum.pcastuces.com/sujet.asp?f=31&s=3

(cela dis, il est très simple d'utilisation).

relance Malwaresbytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

* Lance Malwarebyte's. Sous Vista ;Seven ou Windows 8 (clic droit de la souris « exécuter en tant que administrateur »)

*Procèdes à une mise à jour

*Fais un examen dit "Complet"

--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "Afficher les résultats" " .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .

Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

@+

Bonsoir,

merci pour les consigues,

le rapport :
Malwarebytes Anti-Malware (Essai) 1.70.0.1100
www.malwarebytes.org

Version de la base de données: v2013.02.02.06

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Daniela :: DANIELA-PC [administrateur]

Protection: Désactivé

02-02-2013 17:08:23
mbam-log-2013-02-02 (17-08-23).txt

Type d'examen: Examen complet (C:\|D:\|E:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 567813
Temps écoulé: 3 heure(s), 26 minute(s), 18 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

merci pour l'attention, une fois de plus. :)

A +

Re

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

Serveur N°2

Ou

http://www.premiumorange.com/zeb-help-process/zhpdiag.html
en bas de la page ZHP avec un numéro de version.

Une fois le téléchargement achevé,

Double-clique sur l'icône pour lancer le programme. Sous Vista ; Seven ou Windows 8 clic droit « exécuter en tant que administrateur »

Clique sur la loupe pour lancer l'analyse.

Laisse l'outil travailler, il peut être assez long.

Ferme ZHPDiag en fin d'analyse.

Pour transmettre le rapport clique sur ce lien:
http://pjjoint.malekal.com/

Si problème utilise un des suivants

https://forums-fec.be/upload
https://www.cjoint.com/

Regarde sur le bureau

Sélectionne le fichier ZHPDiag.txt.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.com/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

Merci

@+

Bonjour :)

le lien est :

https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130203_d14h6k12z7f10

merci a vous aussi.

A+

Bonjour

Utilisation de l'outil ZHPFix :

* Copie tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )
-------------------------------------------------------------------------------------------------


[MD5.75CA7FF96BF5A316C3AF2DE6A412BD54] [APT] [{A142EEB6-E41F-40FD-83C8-430DB7563582}] (...) -- C:\WINDOWS\Telefone Sem Conta - Voz sobre IP para leigos\uninstall.exe
[MD5.00000000000000000000000000000000] [APT] [{02AFEEDC-E56C-4E77-A8B2-590F18688F1F}] (...) -- C:\Users\Daniela\Downloads\SOFT-diagnosaurus.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{148CCABD-4C34-417E-AEDE-A32616F1A73A}] (...) -- C:\Users\Daniela\Desktop\DAMN_NFO_Viewer_v2-10-0032-RC3.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{2EE4F16C-74DA-42D1-BEE9-205B386B1D2A}] (...) -- H:\converter.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{4B30E032-4DD3-4FBD-AAD1-3C1EA18EE67A}] (...) -- C:\Users\Daniela\Downloads\SecureW2_TTLS_333.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{4D1A6065-3695-49F0-9195-924E05BF8CBF}] (...) -- C:\Users\Daniela\Desktop\eMule0.49b-Installer1.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{5D5A4E64-2D3B-479A-8E61-F384045477C2}] (...) -- C:\Users\Daniela\Downloads\actualizacao_m1_7004.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{8026ED5B-CE7B-465D-B72B-DA0ED57BEE62}] (...) -- C:\Windows\system32\VodafoneUSBPP.cpl (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{9A984059-E6C0-4A8E-8572-DAD0F5DA6D46}] (...) -- C:\Program Files\Vodafone\Vodafone Toolbar\uninstall.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{F4A2B3AC-599D-4776-AF60-7A25CD23E6A8}] (...) -- E:\hpzsetup.exe (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\93280152.sys . (...) -- C:\WINDOWS\System32\Drivers\93280152.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\93280152.sys . (...) -- C:\WINDOWS\System32\Drivers\93280152.sys (.not file.)
O51 - MPSK:{1b9e167a-6c86-11de-8c49-001a6b6f6ed0}\AutoRun\command. (...) -- G:\ReCYCleR\update.exe (.not file.)
O51 - MPSK:{1d2a493e-ac30-11dc-b571-001a6b6f6ed0}\AutoRun\command. (...) -- C:\Windows\system32\Recycled\ctfmon.exe (.not file.)
O51 - MPSK:{307bb214-c396-11dd-bcf4-001a6b6f6ed0}\AutoRun\command - Orphean Key
O51 - MPSK:{5249d583-cb99-11dd-b942-001a6b6f6ed0}\AutoRun\command. (...) -- F:\cONViDaDO.exe (.not file.)
O51 - MPSK:{888b8a37-b0b8-11dd-8fe4-001a6b6f6ed0}\AutoRun\command - Orphean Key
O51 - MPSK:{e2a1e56a-78f9-11de-b88b-001a6b6f6ed0}\AutoRun\command - Orphean Key
M3 - MFPP: Plugins - [Daniela] -- C:\Program Files\Mozilla FireFox\searchplugins\avg_igeared.xml
O3 - Toolbar: (no name) - [HKLM]{CCC7A320-B3CA-4199-B1A6-9F516DD69829} Orphean Key
[HKCU\Software\YahooPartnerToolbar]

FirewallRAZ
Emptytemp
EmptyCLSID


--------------------------------------------------------------------------------------------
* Lance ZHPFix à partir du raccourci sur ton Bureau (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en tant qu'administrateur)

* Clique sur l'icone représentant le presse-papier ("coller le presse-papier")
le script doit automatiquement apparaitre dans ZHPFix, sinon, colle-le (Ctrl+v)
* Clique sur le bouton GO pour lancer le nettoyage
* Copie/colle la totalité du rapport dans ta prochaine réponse.

-> laisse travailler l'outil et ne touche à rien ...

-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...

( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt )

@+

Re Bonjour Guillaume5188,
je suis vraiment desolé, mais mon ordinateur est en portugais, j'ai vu qu'il y a des choses en portugais dans rapport. Un jour, je changerai la langue, donc quelque chose soit en anglais, soit en portugais, je fais la traduction :).

* telefone sem conta = telephone sans compte (dans memory process)

Rapport de ZHPFix 1.3.13 par Nicolas Coolman, Update du 26/01/2013
Fichier d'export Registre :
Run by Daniela at 03-02-2013 11:55:17
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

========== Memory Process ==========
DELETED Memory Process: C:\WINDOWS\Telefone Sem Conta - Voz sobre IP para leigos\uninstall.exe

========== Registry Key ==========
DELETED O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\93280152.sys . (...) -- C:\WINDOWS\System32\Drivers\93280152.sys (.not file.)
DELETED O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\93280152.sys . (...) -- C:\WINDOWS\System32\Drivers\93280152.sys (.not file.)
DELETED CLSID MPSK: {1b9e167a-6c86-11de-8c49-001a6b6f6ed0}
DELETED CLSID MPSK: {1d2a493e-ac30-11dc-b571-001a6b6f6ed0}
DELETED CLSID MPSK: {307bb214-c396-11dd-bcf4-001a6b6f6ed0}
DELETED CLSID MPSK: {5249d583-cb99-11dd-b942-001a6b6f6ed0}
DELETED CLSID MPSK: {888b8a37-b0b8-11dd-8fe4-001a6b6f6ed0}
DELETED CLSID MPSK: {e2a1e56a-78f9-11de-b88b-001a6b6f6ed0}
DELETED Key: HKCU\Software\YahooPartnerToolbar

========== Registry Value ==========
DELETED Toolbar: {CCC7A320-B3CA-4199-B1A6-9F516DD69829}
No Value in Standard Profile Register Key FirewallRaz :
No Value in Domain Profile Register Key FirewallRaz :
DELETED FirewallRaz (None) : {2EF45C24-F506-44A9-83EA-0958944F7912}
DELETED FirewallRaz (Public) : TCP Query User{86C3370A-4363-4709-93D9-FC2DBC84F125}C:\program files\vidal\vidalcd\system\runtime\bin\java.exe
DELETED FirewallRaz (Public) : UDP Query User{AB5ED195-5377-4245-A56F-AAF757F186D4}C:\program files\vidal\vidalcd\system\runtime\bin\java.exe
DELETED FirewallRaz (Public) : {F70A5C30-D246-4336-AC00-A58AE42F1C7A}
DELETED FirewallRaz (Public) : {42FFACDF-9D7F-469E-8DD0-946B419C4A0F}
DELETED FirewallRaz (Public) : TCP Query User{76F7FD9F-AFE5-46E9-8B18-BF060A0B19D2}C:\users\daniela\appdata\local\mediaget2\mediaget.exe
DELETED FirewallRaz (Public) : UDP Query User{2EA729F9-838F-46ED-A925-F9907AAE9914}C:\users\daniela\appdata\local\mediaget2\mediaget.exe
DELETED FirewallRaz (Private) : {C3F53D52-6C6D-4EDD-9E0D-B94F8196C035}
DELETED FirewallRaz (Private) : {5DC78278-BB50-484D-991A-81FA67962D39}
DELETED FirewallRaz (None) : {9C6B3B00-ECA9-470A-A6E1-6BC4BD3791DD}
DELETED FirewallRaz (Private) : TCP Query User{7ACEF1F0-7915-4439-906C-E0A107EFA5D5}C:\users\daniela\appdata\roaming\spotify\spotify.exe
DELETED FirewallRaz (Private) : UDP Query User{B7FB0F1E-FE3D-401B-99EF-3B872E563B5B}C:\users\daniela\appdata\roaming\spotify\spotify.exe
DELETED FirewallRaz (Private) : {21833C76-3846-4BA2-B49A-011C188528A1}
DELETED FirewallRaz (Private) : {0F63A778-9374-492C-A4EC-544C055D904C}
DELETED FirewallRaz (Private) : {91153772-5107-427E-A073-E85A916AB4EB}
DELETED FirewallRaz (Private) : {DF3F0288-8C3F-4163-B98F-33AD2D11A1FC}
DELETED FirewallRaz (Private) : {00D67ECC-6170-43DC-89DE-08997E215378}
DELETED FirewallRaz (Private) : {76B7875F-F548-4EFB-ABC8-B276DE287987}

========== Repertory ==========
DELETED Folder: C:\Users\Daniela\AppData\Local\{00F85473-37B9-4F9A-9D48-937990779E6B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{056A008D-A529-44E5-84CF-071D8DD07B36}
DELETED Folder: C:\Users\Daniela\AppData\Local\{059AB6EC-ED63-410A-A29D-E66DDA45A5DE}
DELETED Folder: C:\Users\Daniela\AppData\Local\{07824708-A0D7-426E-8D68-71B34FA10D4F}
DELETED Folder: C:\Users\Daniela\AppData\Local\{07C318F9-9FDE-42B5-9362-F343BE749884}
DELETED Folder: C:\Users\Daniela\AppData\Local\{08857DE8-18A7-4004-AF79-BD225607565B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{08EFCBF3-11D2-4986-9BDF-4387705CA1E6}
DELETED Folder: C:\Users\Daniela\AppData\Local\{0AD8BABA-ADD8-41C0-9DF7-3B8C28834BA1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{0C108251-5F19-42F1-B342-EF8947E191C7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{0ED6AB4B-85FD-4848-B78A-7FFC6A0A4724}
DELETED Folder: C:\Users\Daniela\AppData\Local\{105ABA34-29EE-4C38-BA31-135E34E14ECF}
DELETED Folder: C:\Users\Daniela\AppData\Local\{11CA2A66-6E01-45A5-A3A6-FCD8FDB60A96}
DELETED Folder: C:\Users\Daniela\AppData\Local\{12660027-E883-4C0C-8231-B45E56E3499A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{128292A4-E5FD-430C-8838-D849ACBBE89A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{12D34AD5-682E-4F06-A487-67810A1EFB34}
DELETED Folder: C:\Users\Daniela\AppData\Local\{13012ADE-AD9E-474F-8877-AD295510439A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1345124D-4649-4429-B0AD-2E52469B9A6B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{13CB68EE-0546-4E9A-A5B4-31371B6B8B85}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1562352E-C7DF-4B1E-9349-48496333F57C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{158A1BA8-7181-42B1-90AF-B4F82FA86E9F}
DELETED Folder: C:\Users\Daniela\AppData\Local\{18024565-E093-4B87-B131-2E51F40074EE}
DELETED Folder: C:\Users\Daniela\AppData\Local\{18ED043B-DBA1-4F47-9F07-CFC067632E45}
DELETED Folder: C:\Users\Daniela\AppData\Local\{191418A2-A348-4F22-828B-22537E689993}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1AC21A22-8D4D-44E1-A16B-904DC35BFC00}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1AD19201-1BCA-4B33-94AE-D65725D67C9E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1BC5D0E5-BFD8-41FA-97D1-A6D2DA6E5D12}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1BE7EB0D-B60A-4160-8822-5E5C5DDA931E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1E340A87-A6FA-4EF6-AE16-758D083DFAAB}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1EC81658-ED4C-4E7A-A2CC-3AC3EE2006F1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1ECB5BB1-9F10-4A5F-8417-5BE4B82F3288}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1FBC3A9C-7DB2-425E-98B5-8C7FE6D628BB}
DELETED Folder: C:\Users\Daniela\AppData\Local\{1FFB3626-DCC0-42AA-9CE6-E4421E784C95}
DELETED Folder: C:\Users\Daniela\AppData\Local\{2218D832-CDB7-4FA6-B860-0C82B95F13E7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{232922F5-CE9E-4340-9121-0BCDE17671CB}
DELETED Folder: C:\Users\Daniela\AppData\Local\{23C9B239-6606-4771-8570-DD7379845024}
DELETED Folder: C:\Users\Daniela\AppData\Local\{24344A01-329E-4B59-852A-E758D6EDCF70}
DELETED Folder: C:\Users\Daniela\AppData\Local\{27B0B77D-3EBD-4559-9A0D-C7A0AF231555}
DELETED Folder: C:\Users\Daniela\AppData\Local\{2879D3A2-2511-420F-8402-136209C89126}
DELETED Folder: C:\Users\Daniela\AppData\Local\{28A51BE2-D014-49D5-A386-0B95118A22FE}
DELETED Folder: C:\Users\Daniela\AppData\Local\{29FA7653-ADBD-4155-A0EA-8153B250939E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{2AE1C521-1CEB-49F5-8B15-88EF804B5CD2}
DELETED Folder: C:\Users\Daniela\AppData\Local\{2D4476CE-2BC6-4CF6-80D0-0AD385BFFCF8}
DELETED Folder: C:\Users\Daniela\AppData\Local\{2DD46371-9CDD-4AB9-8357-22AB55BA3C06}
DELETED Folder: C:\Users\Daniela\AppData\Local\{30B3402D-105B-4BB6-9B70-66D3A92B2F03}
DELETED Folder: C:\Users\Daniela\AppData\Local\{313187CB-8429-43C1-8DB2-68D1B250F803}
DELETED Folder: C:\Users\Daniela\AppData\Local\{32109E30-C9AF-46BA-A1A2-344F0B7796FC}
DELETED Folder: C:\Users\Daniela\AppData\Local\{32C7FAF6-EA1B-4642-97F6-D5367371B763}
DELETED Folder: C:\Users\Daniela\AppData\Local\{32CACB95-59EE-439B-8675-2B8069F74010}
DELETED Folder: C:\Users\Daniela\AppData\Local\{35789AE4-40A3-4D92-81DE-046726C32696}
DELETED Folder: C:\Users\Daniela\AppData\Local\{39386987-6473-4558-AE35-8684E9A4DBD0}
DELETED Folder: C:\Users\Daniela\AppData\Local\{39400A78-241B-486F-9711-E16E991D5010}
DELETED Folder: C:\Users\Daniela\AppData\Local\{399CC4F4-9F52-4C39-8EF3-F070720172C9}
DELETED Folder: C:\Users\Daniela\AppData\Local\{3B1043E2-09A8-4A59-906C-C699A2367C2C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{3B4550BC-55EE-41D0-8AA7-492342C32158}
DELETED Folder: C:\Users\Daniela\AppData\Local\{3E0A1F43-2374-404C-ADFA-3FBE02A4D8AB}
DELETED Folder: C:\Users\Daniela\AppData\Local\{42031B38-15DA-47F9-B322-19CB65B0CE2C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{43440567-6167-46A0-8C4F-356CE2BDF459}
DELETED Folder: C:\Users\Daniela\AppData\Local\{43B043F6-1309-4EB4-B467-3B73F1200AA6}
DELETED Folder: C:\Users\Daniela\AppData\Local\{44F8DFA7-5865-4841-8CA8-A0F857D94858}
DELETED Folder: C:\Users\Daniela\AppData\Local\{47FECD25-77B5-4A78-9C1A-F2CD617AE086}
DELETED Folder: C:\Users\Daniela\AppData\Local\{4CD9C626-823E-433C-ADFE-B183C571531B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{4E7D3845-AE8A-4480-A169-ED1991EAF352}
DELETED Folder: C:\Users\Daniela\AppData\Local\{4F520FC5-BAA2-46FD-8B48-21849D2E184D}
DELETED Folder: C:\Users\Daniela\AppData\Local\{510FA8C3-BCFE-495C-B7D9-DCDB2A3BDDC7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{5463BB29-7D85-48D8-9D26-568662F444C0}
DELETED Folder: C:\Users\Daniela\AppData\Local\{56349092-6AF2-4483-A979-259127B12D20}
DELETED Folder: C:\Users\Daniela\AppData\Local\{569EFCD0-0035-4991-9D73-50424322ED4A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{58D160A8-A7E8-4241-B961-E9560A3A417B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{59F2DE52-12CC-41FE-B89C-0FBE41BFC528}
DELETED Folder: C:\Users\Daniela\AppData\Local\{5A6E9370-B69F-4F07-817D-12B85B201FA0}
DELETED Folder: C:\Users\Daniela\AppData\Local\{5B4F416C-5AC7-49B6-81C0-0B7FD76956BE}
DELETED Folder: C:\Users\Daniela\AppData\Local\{5B7BBB04-38AE-41B9-8D59-611219CC0BE2}
DELETED Folder: C:\Users\Daniela\AppData\Local\{5C932E30-8BC3-4832-8CF3-C51DA7597A78}
DELETED Folder: C:\Users\Daniela\AppData\Local\{5D9A4600-7E34-4908-9196-32E0680559F5}
DELETED Folder: C:\Users\Daniela\AppData\Local\{5EE254F5-E829-4BA4-85F8-4D61F2439FE7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{5FABFD4C-AA70-4925-9868-507916F68788}
DELETED Folder: C:\Users\Daniela\AppData\Local\{5FE36DB3-3EC5-42A2-8069-2D2217943553}
DELETED Folder: C:\Users\Daniela\AppData\Local\{603A58E3-211D-45FD-93AD-9C1957105779}
DELETED Folder: C:\Users\Daniela\AppData\Local\{60CFCEE9-7194-439B-8DF6-0F387FCC1BC6}
DELETED Folder: C:\Users\Daniela\AppData\Local\{61EBBE49-B415-457D-9C1B-9DE96028FE80}
DELETED Folder: C:\Users\Daniela\AppData\Local\{62004AE6-ED5D-454E-BF3F-77797655DA28}
DELETED Folder: C:\Users\Daniela\AppData\Local\{635DB11E-7FE1-4432-B386-CA9BE3931B47}
DELETED Folder: C:\Users\Daniela\AppData\Local\{63AC16C9-EC14-4867-9C6A-161A463DE7D1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{642E1269-62AC-49CC-966E-2AF3AAD4DB06}
DELETED Folder: C:\Users\Daniela\AppData\Local\{64C828AB-E49F-4F9B-A611-2E29DC502525}
DELETED Folder: C:\Users\Daniela\AppData\Local\{6883A707-8A2B-4BC8-A201-358947C26AC8}
DELETED Folder: C:\Users\Daniela\AppData\Local\{6A4235D1-A65E-4D2E-A950-D9E201D7742E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{6A454161-B0CA-4123-BA11-0EFE4EE07AD4}
DELETED Folder: C:\Users\Daniela\AppData\Local\{6A88F4DC-028C-4CC7-A6DB-C1A3411E1D00}
DELETED Folder: C:\Users\Daniela\AppData\Local\{72465F66-4CB8-453C-858A-089C6530788F}
DELETED Folder: C:\Users\Daniela\AppData\Local\{725F3E96-54C1-4F6A-8C2C-BAB5CD01D1BD}
DELETED Folder: C:\Users\Daniela\AppData\Local\{74EDD352-A2EC-4D40-B41D-9E2597BD157B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{77941AFF-787E-44BB-BA78-307177C50DF2}
DELETED Folder: C:\Users\Daniela\AppData\Local\{78877FA9-BD5D-4340-B551-5E46B701CF2F}
DELETED Folder: C:\Users\Daniela\AppData\Local\{78ED3583-C9DC-43C9-A8D3-6608DDA61723}
DELETED Folder: C:\Users\Daniela\AppData\Local\{78EF2193-0BF9-498A-B753-6A97DC079156}
DELETED Folder: C:\Users\Daniela\AppData\Local\{79080FE2-93C2-4318-91EA-EE35034FDACF}
DELETED Folder: C:\Users\Daniela\AppData\Local\{7E861D95-C3A5-442D-8CB2-91A41A5F6198}
DELETED Folder: C:\Users\Daniela\AppData\Local\{7E96823C-ADC2-4D95-8280-7CE006946F13}
DELETED Folder: C:\Users\Daniela\AppData\Local\{80536051-17AA-41F8-9D9E-61E58C66772A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{868CB70B-9FAB-496D-BAF5-F87FF2AEDCE6}
DELETED Folder: C:\Users\Daniela\AppData\Local\{88227AE7-90A7-4617-B04F-BAC45C85F30F}
DELETED Folder: C:\Users\Daniela\AppData\Local\{885A8C49-C9AC-4C35-8099-B26302ED3501}
DELETED Folder: C:\Users\Daniela\AppData\Local\{897C4EB4-FB83-40CE-9D64-A147EB4144B8}
DELETED Folder: C:\Users\Daniela\AppData\Local\{898ADF3A-652E-4CFD-8EEF-485E0E01DFE0}
DELETED Folder: C:\Users\Daniela\AppData\Local\{8A70EABE-EF7C-495E-B5FE-30E8D519303A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{8AC71CF2-E7ED-423B-9829-F9490756DAB1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{8B71CDA2-C928-4652-A5D6-269EDDBC7F08}
DELETED Folder: C:\Users\Daniela\AppData\Local\{8F889421-A402-4214-A46C-C04174EA6BB1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{904CD62A-A29D-469C-B1C5-78DE5A809C53}
DELETED Folder: C:\Users\Daniela\AppData\Local\{90EF4058-73EF-4541-859E-6B9F313B8282}
DELETED Folder: C:\Users\Daniela\AppData\Local\{90FD8054-D1E1-4E1A-8AF7-D99CAAB5CC89}
DELETED Folder: C:\Users\Daniela\AppData\Local\{9159A7AD-A904-4968-8588-818328B88A8A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{9190424C-A8EC-41B7-9677-06C0549EB55C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{91B187CB-3BF7-4EA6-AC2B-08511359367C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{92A685F9-CD56-4924-B7BC-6E2CE9C4129C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{934439BC-3682-4D27-9474-A86B016248F8}
DELETED Folder: C:\Users\Daniela\AppData\Local\{93AD5A12-8B52-47CF-AC70-B6BB49B6600B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{955FB0A9-3D4B-4DFE-B0FE-050313F83863}
DELETED Folder: C:\Users\Daniela\AppData\Local\{96A515E6-940B-45BF-876E-CACE3BF4D4FB}
DELETED Folder: C:\Users\Daniela\AppData\Local\{971B77AA-3BDC-4EB8-A955-B13F1810AF54}
DELETED Folder: C:\Users\Daniela\AppData\Local\{97965905-8C7B-4FE2-BE78-3194ADB7E386}
DELETED Folder: C:\Users\Daniela\AppData\Local\{983E4B42-8008-41A1-B4E8-5D555B3BEDD7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{9A16DDC2-04D3-4B79-B714-67EBC30BF682}
DELETED Folder: C:\Users\Daniela\AppData\Local\{9A2D7D47-16DC-46B0-BC84-C363444E5EE0}
DELETED Folder: C:\Users\Daniela\AppData\Local\{9ED99317-5DE0-4EE3-B7F4-BF5EB80B5563}
DELETED Folder: C:\Users\Daniela\AppData\Local\{9F55D985-64D0-471A-BAB3-515BE6508691}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A04F9769-9261-43AA-AE87-9613979D9BAA}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A073ECF1-DB22-4C40-89A3-213B494C6E90}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A09A973E-95D0-47C9-A92B-853828A05D24}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A1E7DC28-094F-4A58-AE82-F22DAC9C10D7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A2FAF286-05D1-4AC6-8E35-79801789D973}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A35DE2A2-5D5D-4C37-9F58-3D5A161C8DA6}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A4837FBB-FC6C-4C7F-B921-A4108E5C092C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A484235A-01FA-4676-945C-FA7C5CEA175E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A562799A-6673-4D72-B660-898398E749B9}
DELETED Folder: C:\Users\Daniela\AppData\Local\{A7EFFDF0-86A6-455A-8B0C-F8810C41DD3E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{AA3A1DA3-9C5F-4CCF-830E-26D9F698C7E9}
DELETED Folder: C:\Users\Daniela\AppData\Local\{AAE76053-B621-4ABB-A5D7-FD58AF40C46F}
DELETED Folder: C:\Users\Daniela\AppData\Local\{AB30F6D9-5A47-4B31-9AA9-C56B02B1CCB1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{ADB87DBC-85DA-460A-A2EE-510DF2E862E4}
DELETED Folder: C:\Users\Daniela\AppData\Local\{ADBB319B-A032-474B-9DB1-0EDEE2BF2407}
DELETED Folder: C:\Users\Daniela\AppData\Local\{AE5ACE35-502E-4FDB-AB85-F53543CDEE2E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{AE64282A-2EE1-435A-9334-B46B3568960D}
DELETED Folder: C:\Users\Daniela\AppData\Local\{AEA41B11-A827-4E56-AF5C-3BFE692728D8}
DELETED Folder: C:\Users\Daniela\AppData\Local\{AECC53F7-2461-4494-8749-64B70380D4E1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{B1C1962D-0A3B-4FB9-B7B6-4C5D1B72AD6A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{B1F86643-0632-445F-8260-7B4DF366EBC7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{B1F9825D-9A9A-4399-A19B-15E27756A28D}
DELETED Folder: C:\Users\Daniela\AppData\Local\{B339D279-2567-4F1F-81E9-A577E90B32A7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{B45822D8-3319-4EE1-861D-0AFADFF2BDC1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{B4DC5394-277E-4FBA-BE4C-D28A3CD3B76D}
DELETED Folder: C:\Users\Daniela\AppData\Local\{B63087F4-3FEC-4CA4-BF07-F4333520C7D3}
DELETED Folder: C:\Users\Daniela\AppData\Local\{B6B01F70-626E-480D-8B31-157EC776B9A5}
DELETED Folder: C:\Users\Daniela\AppData\Local\{B6D1CEC0-9E8F-481C-9514-8C36D1D90959}
DELETED Folder: C:\Users\Daniela\AppData\Local\{BA235124-EBB7-4F68-A2F6-E31377FEB45D}
DELETED Folder: C:\Users\Daniela\AppData\Local\{BF93855E-90EF-4F0B-A64F-500B6EE46E93}
DELETED Folder: C:\Users\Daniela\AppData\Local\{BF9C0140-B104-4335-B834-252316C88588}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C1E01F28-8871-4E6F-A5C1-B951E2BEA07A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C24D1778-525A-46CA-B1B4-74FB987A7A7B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C2D57D33-D33D-45E7-834D-B4AD6259934E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C2EB2378-96B1-4AEB-A177-95C6E164B8FE}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C4D9FFBF-7D15-4362-81DF-DE73074540AA}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C726E884-51FC-4AD7-9571-983DF490B9A1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C754750E-603A-4E9B-AA85-A7D8F89B332E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C8EA2186-789B-4276-9386-A3272013019C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C93CB9D7-4BAD-484E-A7E5-AE6017032BE1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C9B6BDEC-4410-4FBD-94CF-D8547AA006E7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{C9FAA314-CC6A-4ABC-9FE9-5D4BDB01A84A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{CB9332ED-8CA6-4A25-A3B6-A0279A77DF11}
DELETED Folder: C:\Users\Daniela\AppData\Local\{CC1F12A4-476B-4345-BAED-2EE8BA399A97}
DELETED Folder: C:\Users\Daniela\AppData\Local\{CD0D62DE-5AC6-4486-86F2-9A5BC36272D5}
DELETED Folder: C:\Users\Daniela\AppData\Local\{CEDCF7C1-2374-4F36-A5C0-55F6BC7C8791}
DELETED Folder: C:\Users\Daniela\AppData\Local\{CEF000AC-D636-4AB2-9E07-AD5A6CAD6E9B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D09E1CBE-C2A0-4B04-A5A6-60F67AD18958}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D0B6DF06-5A02-4795-AAEA-14457122F993}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D217D355-C419-4E80-AF23-9D91794A7E53}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D26DA24A-888A-4A6E-8883-7B69384515BF}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D3179EC8-BABC-4428-A772-CD503ECACF8A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D3E5C768-F986-4195-80AB-022F5954FD41}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D4FBBE0D-9687-4934-94F6-972864EE88A1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D508B276-4EE9-428F-AEA7-D6290A0B3E0F}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D56761C0-EC4C-439F-92AB-BA8732C21CD7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D6245A8F-CE6C-4B2C-937A-37219C851ABA}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D70ED452-1637-4AFD-AB83-1A54CAC273E0}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D7706210-E42F-4811-A9DE-BDCE4836215C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D8CF03EC-566A-4B52-94B2-D4DEA183DFB8}
DELETED Folder: C:\Users\Daniela\AppData\Local\{D93688A0-D260-41B6-A6A4-975F4F972182}
DELETED Folder: C:\Users\Daniela\AppData\Local\{DEC64D5C-4282-4467-AC6E-4F2318E9F91B}
DELETED Folder: C:\Users\Daniela\AppData\Local\{E055ACE6-2DC2-488E-A777-78D7AB090A56}
DELETED Folder: C:\Users\Daniela\AppData\Local\{E17D6F59-E45A-494D-ADCA-33C885A88206}
DELETED Folder: C:\Users\Daniela\AppData\Local\{E4541882-89AE-4EBD-8E06-1DC0D84396B8}
DELETED Folder: C:\Users\Daniela\AppData\Local\{E545ABE8-71C6-4CC7-852C-14406D0402D1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{E702DE9C-052D-4110-9D8B-0C8F1192BF48}
DELETED Folder: C:\Users\Daniela\AppData\Local\{E803ADF3-8DCD-423C-9A8F-DD9AE1F22342}
DELETED Folder: C:\Users\Daniela\AppData\Local\{E8C39B62-71DA-4CEF-A8F0-FE17D4370B29}
DELETED Folder: C:\Users\Daniela\AppData\Local\{EAFC8BDD-7526-47CD-BA83-2EA7496016AA}
DELETED Folder: C:\Users\Daniela\AppData\Local\{ED1831E2-8B2F-4280-B61F-D0D1E0DCD6C4}
DELETED Folder: C:\Users\Daniela\AppData\Local\{EDC91E30-6B4B-4F47-BB15-CAA0A85CDDE8}
DELETED Folder: C:\Users\Daniela\AppData\Local\{EDF8E4F7-A0CD-420C-A24F-D373C87213F5}
DELETED Folder: C:\Users\Daniela\AppData\Local\{EF3EF0BF-4A96-4402-ABB8-9CECE1DF322D}
DELETED Folder: C:\Users\Daniela\AppData\Local\{EF5C84C8-9D6D-44E2-B5A9-B68C9326B193}
DELETED Folder: C:\Users\Daniela\AppData\Local\{F06486EA-E836-43AE-AFD1-12EAA396A87E}
DELETED Folder: C:\Users\Daniela\AppData\Local\{F3448BB2-9A72-4197-98AC-21819E4FD5F7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{F469AEBC-BFF1-4F38-B907-7B802F097291}
DELETED Folder: C:\Users\Daniela\AppData\Local\{F738BE0E-564A-44E6-993F-B098A56D0EC7}
DELETED Folder: C:\Users\Daniela\AppData\Local\{F825FCBD-2D60-4017-855E-D38DCCCAD125}
DELETED Folder: C:\Users\Daniela\AppData\Local\{F8C89EF0-2A66-45AF-9024-BDC6910394C1}
DELETED Folder: C:\Users\Daniela\AppData\Local\{F9F00AE3-42A4-42A6-A782-B809F99430B3}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FAC62DD8-8247-44EC-BEDD-451C04DA7B04}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FB7FB043-654A-494D-B212-64499281DC5C}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FBAD21C7-62D3-45C5-AAB6-0A74D7F5B408}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FC9DF987-89ED-4346-806C-6C1D39E6573D}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FC9E29E5-D529-4875-A1F2-725FEDB5832F}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FCE6670F-AF73-42C6-9891-6DC5CC11FCDE}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FDDB469E-1D80-4741-900F-9996563A0234}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FE0C8ED7-3BED-4448-9228-3E4913C8435A}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FE5C64D2-E385-42B2-9162-5B227B06154D}
DELETED Folder: C:\Users\Daniela\AppData\Local\{FF4DBFA4-7262-48A2-B8F0-D1D5A21D7748}

========== File ==========
DELETED File: c:\windows\telefone sem conta - voz sobre ip para leigos\uninstall.exe
NOT FOUND File: c:\windows\system32\drivers\93280152.sys
DELETED c:\program files\mozilla firefox\searchplugins\avg_igeared.xml
DELETED Window Temporary:

========== Task ==========
DELETED Task: {A142EEB6-E41F-40FD-83C8-430DB7563582}
DELETED Task: {02AFEEDC-E56C-4E77-A8B2-590F18688F1F}
DELETED Task: {148CCABD-4C34-417E-AEDE-A32616F1A73A}
DELETED Task: {2EE4F16C-74DA-42D1-BEE9-205B386B1D2A}
DELETED Task: {4B30E032-4DD3-4FBD-AAD1-3C1EA18EE67A}
DELETED Task: {4D1A6065-3695-49F0-9195-924E05BF8CBF}
DELETED Task: {5D5A4E64-2D3B-479A-8E61-F384045477C2}
DELETED Task: {8026ED5B-CE7B-465D-B72B-DA0ED57BEE62}
DELETED Task: {9A984059-E6C0-4A8E-8572-DAD0F5DA6D46}
DELETED Task: {F4A2B3AC-599D-4776-AF60-7A25CD23E6A8}

========== Summary ==========
1 : Memory Process
9 : Registry Key
21 : Registry Value
219 : Repertory
4 : File
10 : Task

End of clean in 00mn 32s

========== Report File ==========

merci

A+

Re

as tu noté une amélioration,

@+

Re

:(

on peut pas mettre des huilles essentielles :)? reiki? hihi

je viens de tester, non. j'ai vu aussi dans internet explorer, c'est la même chose.

bon, mieux, je vais dire comme tout a commencé.....
---je voulais voir sur site transports, le plan des transports, m'a dit de mettre à jour l'acrobat.... là j'ai pris le sweetIM, après j'ai reussi a suprimmé....
---j'ai essayé l'instalé sur Mozilla firefox, un extra s'appelle "google.fr(le web)" , et là j'ai pris des virus que, a chaque fois que je veux voir un site, après une recherche, ..il redirigi...."Skip this page.." to conforama, ebay, ihavent..clicksor.

moi, je n'utilize pas des aplications sur facebook, je ne joue pas dans ordinateur ou dans internet. L'ordinateur a 6ans j'ai eu qu'un virus jusqu'ca aujourd'hui, j'ai jamais reinitialiser mon windows, il est toujours le même, depuis 1º jour.

avant, de mettre ici les questions, j'ai mis en route d'autres anti-virus, il y a un que m'a detecté plus infecctions que les autres.

En tout cas, merci l'attention donné mon problème.

A+

Re

Passons à la manière forte

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Ou ici : https://forospyware.com
>Renomme le pour l'enregistrer sur ton bureau en asdehi (tout simplement pour que l'infection ne le contre pas)
-> Double clique combofix.exe.(ou clic droit sous vista « exécuter en tant que... » )
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

- Installe le console de récupération comme demandé ;utile en cas de plantage

- Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordinateur (plantage complet)

::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes

@+

Re

"Renomme le pour l'enregistrer sur ton bureau en asdehi (tout simplement pour que l'infection ne le contre pas)" ... avant de changer... il y a déjà??? c'est normal?

après suivre les instructions, j'ai deux soucis :

1º aller l'internet avec le firefox ou internet explorer est possible, se je fais en tant qu'administrateur.

2º a chaque fois que si je vais sur certains choses sur deskpot : j'ai une fênetre que apparaître comme "une tentative ilegal d'operation ilegal dans une clé engistrement qu'a été marqué pour être eliminé".

autre chose, comment je change la langue do ComboFix? j'ai tout le rapport, en portugais. j'ai essayé de traduire.

j'ai fait deux fois le scan, parce que j'ai eu de dificulté à ouvrir le rapport.
-----------------------------------------------------------------------------------------
ComboFix 13-02-02.05 - Daniela 03-02-2013 16:40:24.1.2 - x86
Microsoft® Windows Vista(TM) Home Premium 6.0.6002.2.1252.351.2070.18.2038.923 [GMT 1:00]
Executando de: c:\users\Daniela\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Criado um novo ponto de restauração (Création d'un nouveau point de restauration)
.
.
(((((((((((((((( Arquivos/Ficheiros criados de 2013-01-03 to 2013-02-03 )))))))))))))))))))))))))))) (Files / Fichiers créés)
.
.
2013-02-03 15:59 . 2013-02-03 16:04 -------- d-----w- c:\users\Daniela\AppData\Local\temp
2013-02-03 15:59 . 2013-02-03 15:59 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-02-03 15:59 . 2013-02-03 15:59 -------- d-----w- c:\users\Convidado\AppData\Local\temp
2013-02-03 15:07 . 2013-02-03 15:08 -------- d-----w- C:\asdehi
2013-02-02 14:35 . 2013-02-02 14:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-02-02 14:35 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-02-01 23:22 . 2013-02-01 23:22 -------- d-----w- C:\TDSSKiller_Quarantine
2013-02-01 19:00 . 2013-02-01 19:00 -------- d-----w- c:\program files\MSBuild
2013-01-31 09:18 . 2013-02-02 14:27 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2013-01-30 09:35 . 2013-01-30 09:35 -------- d-----w- c:\users\Daniela\AppData\Roaming\Malwarebytes
2013-01-30 09:35 . 2013-01-30 09:35 -------- d-----w- c:\programdata\Malwarebytes
2013-01-29 21:32 . 2013-01-29 21:32 -------- d-----w- c:\program files\Common Files\Java
2013-01-29 21:31 . 2013-01-29 21:31 -------- d-----w- c:\program files\Java
2013-01-29 21:03 . 2013-02-03 10:55 -------- d-----w- C:\ZHP
2013-01-29 21:03 . 2013-02-03 09:06 -------- d-----w- c:\program files\ZHPDiag
2013-01-24 16:40 . 2013-01-24 16:40 118784 --sha-r- c:\windows\system32\snmpapih.dll
2013-01-23 19:54 . 2013-01-23 19:54 -------- d-----w- c:\program files\Common Files\Skype
2013-01-22 08:42 . 2013-01-08 04:57 6991832 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{224790D7-6417-44E5-8CD8-A1A3B5989B53}\mpengine.dll
2013-01-14 22:03 . 2013-01-14 22:03 -------- d-----w- c:\program files\Common Files\Adobe
2013-01-10 10:27 . 2012-11-23 01:35 2048000 ----a-w- c:\windows\system32\win32k.sys
2013-01-10 10:20 . 2012-11-20 04:22 204288 ----a-w- c:\windows\system32\ncrypt.dll
2013-01-10 10:18 . 2012-11-02 10:19 1400832 ----a-w- c:\windows\system32\msxml6.dll
2013-01-06 08:48 . 2013-01-06 08:48 -------- d-----w- c:\users\Daniela\AppData\Local\Macromedia
.
.
.
((((((((((((((((((((((((((((((((((((( Relatório ( rapport) Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-29 21:32 . 2012-12-27 17:40 472808 ----a-w- c:\windows\system32\deployJava1.dll
2013-01-17 08:34 . 2012-06-05 23:35 697864 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-01-17 08:34 . 2011-06-15 18:13 74248 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-27 17:38 . 2012-12-27 17:40 859072 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-12-27 16:21 . 2012-12-27 16:21 547600 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-12-16 13:12 . 2012-12-28 10:11 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 10:50 . 2012-12-28 10:11 293376 ----a-w- c:\windows\system32\atmfd.dll
2012-11-14 02:09 . 2012-12-14 07:36 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-11-14 01:58 . 2012-12-14 07:36 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-11-14 01:57 . 2012-12-14 07:36 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-11-14 01:49 . 2012-12-14 07:36 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-11-14 01:48 . 2012-12-14 07:36 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-11-14 01:44 . 2012-12-14 07:36 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-13 01:29 . 2012-12-13 07:17 2048 ----a-w- c:\windows\system32\tzres.dll
2013-01-18 21:12 . 2013-01-18 21:12 262552 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((( Pontos de Carregamento do Registro ))))))))))))))))))))))))))))))))))))))) ( points de chargement de registre)
.
.
*Nota* entradas vazias e legítimas por padrão não são apresentadas (les éléments vides & initiaux légitimes ne sont pas affichés).
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\programdata\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-03-29 222128]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-04-03 165784]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18705664]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-05-27 1721640]
"RtHDVCpl"="RtHDVCpl.exe" [2007-03-01 4390912]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 472776]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2006-12-04 46704]
"CognizanceTS"="c:\progra~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll" [2003-12-22 17920]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-15 102400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-11 141848]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-11 133656]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\windows\SMINST\launcher.exe" [2006-11-07 44128]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=apshook.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli ASWLNPkg
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2008-02-11 19:13 166424 ----a-w- c:\windows\System32\hkcmd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2122693504-1896630735-3876363976-1000]
"EnableNotificationsRef"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
bthsvcs REG_MULTI_SZ BthServ
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Conteúdo da pasta 'Tarefas Agendadas' (Contenu du dossier'Tâches planifiées' )
.
2013-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-07 19:06]
.
2013-02-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-07 19:06]
.
2013-01-28 c:\windows\Tasks\HPCeeScheduleForDaniela.job
- c:\program files\Hewlett-Packard\SDP\Ceement\HPCEE.exe [2007-04-07 15:08]
.
2013-02-03 c:\windows\Tasks\Ioand.job
- c:\windows\system32\snmpapih.dll [2013-01-24 16:40]
.
.
------- Scan Suplementar ------- (scan suplementaire)
.
uStart Page = hxxp://www.google.pt/
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyServer = proxy.e-u:8080
uSearchURL,(Default) = hxxp://www.oquefazernainternet.com/q/%s
LSP: c:\windows\system32\wpclsp.dll
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\utbstwcy.default-1359729302708\
FF - prefs.js: browser.startup.homepage - www.google.pt
FF - ExtSQL: 2013-01-29 22:32; {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}; c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - ExtSQL: 2013-02-01 20:00; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
Procurando processos ocultos ...
.
Procurando entradas auto inicializáveis ocultas ...
.
Procurando ficheiros/arquivos ocultos ...
.
Varredura completada com sucesso
arquivos/ficheiros ocultos:
.
**************************************************************************
.
--------------------- CHAVES DO REGISTRO BLOQUEADAS (clés de registre bloquées)---------------------
.
[HKEY_USERS\S-1-5-21-2122693504-1896630735-3876363976-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*ÃÐA]
@Class="Shell"
.
[HKEY_USERS\S-1-5-21-2122693504-1896630735-3876363976-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*ÃÐA\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-2122693504-1896630735-3876363976-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.*ÃÐA]
@Allowed: (Read) (RestrictedCode)
"0"=hex:66,69,6c,65,3a,2f,2f,2f,43,3a,2f,55,73,65,72,73,2f,44,61,6e,69,65,6c,
61,2f,44,65,73,6b,74,6f,70,2f,44,6f,63,75,6d,65,6e,74,73,2f,44,65,6f,6c,69,\
"MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:0000008b
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs Carregadas Sob os Processos em Execução (DLLs chargées dans les processus en execution)---------------------
.
- - - - - - - > 'lsass.exe'(688)
c:\program files\Bioscrypt\VeriSoft\bin\ASWLNPkg.dll
c:\program files\Bioscrypt\VeriSoft\bin\ItMsg.dll
.
------------------------ Outros Processos em Execução ( autres processus en execution)------------------------
.
c:\windows\system32\rundll32.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\system32\SupportAppPT\ztemon_cd.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\system32\PSIService.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Bioscrypt\VeriSoft\Bin\AsGHost.exe
c:\windows\system32\PresentationSettings.exe
c:\windows\system32\conime.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\system32\sdclt.exe
.
**************************************************************************
.
Tempo para conclusão: 2013-02-03 17:13:20 - Máquina reiniciou
ComboFix-quarantined-files.txt 2013-02-03 16:12
ComboFix2.txt 2013-02-03 14:35
.
Pré-execução: 56.897.011.712 bytes livres
Pós execução: 56.784.891.904 bytes livres
.
- - End Of File - - 70B126E3CCDB490A74D3214D9B0870B1

-------------------------------------------------------------------------------------------
merci

A+

Re

[*] Télécharger sur le bureau RogueKiller (by tigzy)
[*] Quitter tous les programmes
[*] Lancer RogueKiller.exe.
[*] Attendre que le Prescan ait fini ...
[*] Cliquer sur Scan. Cliquer sur Rapport et copier coller le contenu du rapport

@+

Re

le rapport :

RogueKiller V8.4.4 [Feb 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Started in : Normal mode
User : Daniela [Admin rights]
Mode : Scan -- Date : 02/03/2013 18:14:16
| ARK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 1 ¤¤¤
[PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (proxy.e-u:8080) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD1600BEVS-60RST0 ATA Device +++++
--- User ---
[MBR] dc3133ec788f5d23cba3667c36f4c316
[BSP] 61340f744d729c6a795882a395332144 : HP tatooed MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 146028 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 299066040 | Size: 6597 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[5]_S_02032013_02d1814.txt >>
RKreport[1]_S_02032013_02d1757.txt ; RKreport[2]_D_02032013_02d1758.txt ; RKreport[3]_S_02032013_02d1812.txt ; RKreport[4]_D_02032013_02d1813.txt ; RKreport[5]_S_02032013_02d1814.txt

-----------------
merci

A+

Re

As tu encore des soucis de redirection?

@+

Re

oui.

Re

relance RogueKiller option Proxy RAZ et poste moi ce rapport

@+