Supprimer bagle, j'ai plus de sécurité

salut,

tu as du télécharger un crack ou recevoir un e-mail 'piégée'

pour commencer vire le !

ensuite,

Télécharge Combofix de sUBs : Renomme le avant toute installation, par exemple, nomme le "KillBagle". aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Sauvegarde le sur ton bureau et pas ailleurs !

Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic

Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.

-----------

Fais DEMARRER puis EXECUTER et tape mrt puis clique sur ok et suis la procedure

----------

* Téléchargez ELIBAGLA en bas de cette page http://www.zonavirus.com/datos/descargas/95/elibagla.asp
* Clique sur le bouton Descargar Elibagla cela va télécharger le fichier, placez le sur votre bureau.
* Double-cliquez dessus pour l'ouvrir
* Assurez-vous que dans le menu déroulant Unidad, vous avez bien C:\
* Vérifiquez aussi que l'option en bas de la fenêtre Eliminar Ficheros Automaticamente est bien cochée
* Cliquez sur le bouton Explorar pour lancer l'analyse

Si, dans le rapport,elibaga tu vois un texte semblable à celui-ci

Por favor, envienos una muestra del fichero
C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24
a "virus@satinfo.es". Gracias;

envoie ce(s) fichier(s) (dans l'exemple C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 ) à l'adresse e-mail indiquée (virus@satinfo.es).

et ils mettront a jour elibaga dans les 48 heures ce qui permettra de virer le virus que tu as!!!

dsl déja voila le rapport et j'ai lancé outil de supprésion

ComboFix 08-04-08.9 - Toinou 2008-04-09 11:21:28.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.254 [GMT 2:00]
Endroit: C:\Documents and Settings\Toinou\Bureau\combo-fix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
TimedOut: progfile.dat

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\drivers\down
C:\WINDOWS\system32\mdelk.exe
C:\WINDOWS\system32\NTSpool.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_SROSA

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-03-09 to 2008-04-09 ))))))))))))))))))))))))))))))))))))
.

2008-04-09 01:24 . 2008-04-09 01:24 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft
2008-04-09 00:57 . 2008-04-09 01:05 <REP> d-------- C:\fixwareout
2008-04-09 00:46 . 2008-04-09 00:46 <REP> d-------- C:\Documents and Settings\Toinou\Application Data\ESET
2008-04-09 00:22 . 2008-04-09 00:22 <REP> d-------- C:\Program Files\ESET
2008-04-09 00:22 . 2008-04-09 00:22 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ESET
2008-04-09 00:09 . 2008-04-09 00:09 <REP> d-------- C:\pebuilder3110a
2008-04-08 20:46 . 2008-04-08 20:46 <REP> d-------- C:\SOPHTEMP
2008-04-08 19:48 . 2008-04-08 19:48 <REP> d-------- C:\VundoFix Backups
2008-04-08 18:18 . 2004-08-27 10:01 688,128 --a------ C:\WINDOWS\system32\drivers\mdelk.exe
2008-04-08 18:12 . 2008-04-08 23:21 <REP> d-------- C:\WINDOWS\system32\drivers\downld
2008-04-07 12:57 . 2008-04-07 12:57 <REP> d-------- C:\Program Files\Microsoft Silverlight
2008-04-01 16:07 . 2008-04-09 11:36 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-04-01 16:07 . 2008-04-01 16:07 1,409 --a------ C:\WINDOWS\QTFont.for
2008-03-31 18:42 . 2008-03-31 18:43 <REP> d-------- C:\Program Files\PDFCreator
2008-03-31 18:42 . 1998-06-24 01:00 137,000 --a------ C:\WINDOWS\system32\MSMAPI32.OCX
2008-03-31 18:42 . 2001-10-28 17:42 116,224 --a------ C:\WINDOWS\system32\pdfcmnnt.dll
2008-03-31 18:42 . 1998-07-06 01:00 23,552 --a------ C:\WINDOWS\system32\MSMPIDE.DLL
2008-03-31 13:58 . 2008-03-31 13:58 <REP> d-------- C:\Program Files\SweetIM
2008-03-31 13:58 . 2008-03-31 13:58 <REP> d-------- C:\Documents and Settings\All Users\Application Data\SweetIM
2008-03-31 13:41 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2008-03-31 13:38 . 2008-03-31 13:38 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-03-27 18:31 . 2008-03-27 18:31 <REP> d-------- C:\Program Files\SAGEM WiFi manager
2008-03-27 18:31 . 2007-01-16 14:52 20,608 --a------ C:\WINDOWS\system32\drivers\BRGSp50.sys
2008-03-27 18:31 . 2007-01-16 14:52 17,664 --a------ C:\WINDOWS\system32\drivers\ZDPSp50.sys
2008-03-27 18:30 . 2008-03-27 18:30 <REP> d-------- C:\Program Files\SAGEM
2008-03-27 18:28 . 2007-01-10 11:14 450,560 --a------ C:\WINDOWS\system32\drivers\WlanBZXP.sys
2008-03-27 18:27 . 2008-03-27 18:27 <REP> d-------- C:\Program Files\Securitoo
2008-03-25 13:46 . 2005-06-17 11:26 114,688 --a------ C:\WINDOWS\system32\WLANUTL.dll
2008-03-22 14:04 . 2008-03-22 14:06 <REP> d-------- C:\Program Files\Dofus
2008-03-21 17:46 . 2008-03-21 18:04 <REP> d-------- C:\Program Files\MP3Gain
2008-03-21 13:59 . 2008-03-21 14:04 <REP> d-------- C:\Program Files\Avanquest update
2008-03-21 13:59 . 2008-03-21 13:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\BVRP Software
2008-03-21 13:58 . 2007-11-02 12:47 109,992 --a------ C:\WINDOWS\system32\drivers\s916mdm.sys
2008-03-21 13:58 . 2007-11-02 12:47 103,976 --a------ C:\WINDOWS\system32\drivers\s916mgmt.sys
2008-03-21 13:58 . 2007-11-02 12:47 100,008 --a------ C:\WINDOWS\system32\drivers\s916obex.sys
2008-03-21 13:58 . 2007-11-02 12:47 83,496 --a------ C:\WINDOWS\system32\drivers\s916bus.sys
2008-03-21 13:58 . 2007-11-02 12:47 15,016 --a------ C:\WINDOWS\system32\drivers\s916mdfl.sys
2008-03-21 13:58 . 2007-11-02 12:47 12,200 --a------ C:\WINDOWS\system32\drivers\s916whnt.sys
2008-03-21 13:58 . 2007-11-02 12:47 12,200 --a------ C:\WINDOWS\system32\drivers\s916wh.sys
2008-03-21 13:58 . 2007-11-02 12:47 12,200 --a------ C:\WINDOWS\system32\drivers\s916cmnt.sys
2008-03-21 13:58 . 2007-11-02 12:47 12,200 --a------ C:\WINDOWS\system32\drivers\s916cm.sys
2008-03-21 13:57 . 2008-03-21 18:49 <REP> d-------- C:\Program Files\Sony Ericsson
2008-03-21 13:57 . 2008-03-21 13:57 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Sony Ericsson
2008-03-19 12:20 . 2008-03-19 12:20 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\AdobeUM
2008-03-13 20:26 . 2008-03-13 20:26 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-03-13 16:52 . 2008-03-13 16:52 30,728 --a------ C:\WINDOWS\system32\drivers\epfwndis.sys
2008-03-13 16:44 . 2008-03-13 16:44 29,704 --a------ C:\WINDOWS\system32\drivers\easdrv.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-09 09:38 --------- d-----w C:\Documents and Settings\Toinou\Application Data\Tor
2008-04-09 09:07 --------- d-----w C:\Documents and Settings\Toinou\Application Data\EoRezo
2008-04-08 21:59 --------- d-----w C:\Documents and Settings\Toinou\Application Data\Vidalia
2008-04-08 21:49 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-04-08 21:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-04-08 16:54 --------- d-----w C:\Program Files\eMule
2008-04-01 01:01 --------- d-----w C:\Program Files\Windows Live
2008-03-31 20:23 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-03-31 12:18 --------- d-----w C:\Program Files\MSN Messenger
2008-03-31 11:33 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-31 11:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-27 20:20 --------- d-----w C:\Program Files\DivX
2008-03-27 19:31 --------- d-----w C:\Program Files\Java
2008-03-27 16:53 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-03-27 16:30 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-27 09:19 --------- d-----w C:\Program Files\Spyware Doctor
2008-03-11 20:32 --------- d-----w C:\Program Files\MessengerDiscovery
2008-03-06 19:28 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype
2008-03-06 18:37 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
2008-03-06 18:37 --------- d-----w C:\Documents and Settings\Toinou\Application Data\skypePM
2008-03-06 12:43 --------- d-----w C:\Program Files\Orange
2008-03-06 12:41 --------- d-----w C:\Program Files\Fichiers communs\France Telecom
2008-03-06 12:29 --------- d-----w C:\Program Files\Inventel
2008-03-03 13:09 --------- d-----w C:\Documents and Settings\Vosg1\Application Data\Grisoft
2008-02-29 12:13 --------- d-----w C:\Program Files\Everest Poker
2008-02-20 02:17 --------- d-----w C:\Program Files\Microsoft SQL Server
2008-02-20 01:40 --------- d-----w C:\Program Files\Fichiers communs\ConducteurPrive
2008-02-19 02:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-02-19 02:01 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-02-18 15:59 --------- d-----w C:\Program Files\Microsoft.NET
2008-02-18 15:53 --------- d-----w C:\Program Files\Microsoft SQL Server 2005 Mobile Edition
2008-02-18 15:53 --------- d-----w C:\Program Files\Microsoft Device Emulator
2008-02-18 15:42 --------- d-----w C:\Program Files\Microsoft Visual Studio 8
2008-02-18 15:41 --------- d-----w C:\Program Files\MSBuild
2008-02-18 15:41 --------- d-----w C:\Program Files\HTML Help Workshop
2008-02-18 15:40 --------- d-----w C:\Program Files\Fichiers communs\Merge Modules
2008-02-18 15:29 --------- d-----w C:\Program Files\Fichiers communs\Business Objects
2008-02-18 15:27 --------- d-----w C:\Program Files\CE Remote Tools
2008-02-18 15:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\PreEmptive Solutions
2008-02-17 21:12 --------- d-----w C:\Documents and Settings\Daniel\Application Data\Grisoft
2008-02-14 14:29 --------- d-----w C:\Documents and Settings\Nathalie\Application Data\AdobeUM
2008-02-14 09:13 --------- d-----w C:\Documents and Settings\Nathalie\Application Data\Grisoft
2008-02-13 20:07 --------- d-----w C:\Documents and Settings\Paul\Application Data\Grisoft
2008-02-13 18:57 --------- d-----w C:\Program Files\AutoCAD 2004
2008-02-13 18:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Autodesk
2008-02-13 18:42 --------- d-----w C:\Program Files\Add Remove Pro
2008-02-13 17:24 --------- d-----w C:\Program Files\Avira
2008-02-13 16:02 --------- d-----w C:\Program Files\Panda Security
2008-02-13 12:59 --------- d-----w C:\Documents and Settings\Toinou\Application Data\Grisoft
2008-02-13 12:51 --------- d-----w C:\Program Files\Nouveau dossier
2008-02-13 12:51 --------- d-----w C:\Program Files\Creative
2008-02-11 15:37 --------- d-----w C:\Documents and Settings\Toinou\Application Data\PC Tools
2008-02-11 14:57 --------- d-----w C:\Program Files\ConducteurPrive
2008-02-11 14:38 --------- d-----w C:\Documents and Settings\Vosg1\Application Data\DivX
2008-02-11 11:21 --------- d-----w C:\Program Files\Pinnacle
2008-02-11 11:09 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-02-10 15:14 --------- d-----w C:\Documents and Settings\Toinou\Application Data\ConducteurPrive
2008-02-10 14:55 --------- d-----w C:\Program Files\MSXML 6.0
2008-02-10 14:50 --------- d-----w C:\Documents and Settings\All Users\Application Data\ConducteurPrive
2008-02-10 14:50 --------- d-----r C:\Documents and Settings\All Users\Application Data\SalesMon
2008-02-01 09:17 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR
2008-01-30 23:32 737,280 -c--a-w C:\WINDOWS\iun6002.exe
2008-01-21 03:18 69,689 ----a-w C:\WINDOWS\UNZIP.DLL
2008-01-21 03:18 507,904 ----a-w C:\WINDOWS\TMUPDATE.DLL
2008-01-21 03:18 286,720 ----a-w C:\WINDOWS\PATCH.EXE
2008-01-17 00:22 164 ----a-w C:\install.dat
2007-05-01 16:14 56 --sh--r C:\WINDOWS\system32\EC659458FC.sys
2006-11-05 17:25 56 --sh--r C:\WINDOWS\system32\EE5933A6EE.sys
2006-11-07 18:39 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0F0E4578-3AF7-4001-8462-6377F5978A5B}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1ABFC339-DCD1-4125-84E7-8FB78C389FB4}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1DFC08F6-37A7-4795-A934-A619163EC8A8}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2B65D277-CFEB-4A70-B342-E6567C1668B7}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7F54D765-3F6C-439E-8C01-0163D4C0D288}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{97885670-9B7C-461B-B819-21251019E1D7}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF83FE31-236F-43FA-A597-A7D449E531FA}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2008-03-27 14:12 1164600 --a------ C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2008-03-27 14:12 1164600]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2008-03-27 14:12 1164600]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE.3]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.SWEETIE]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
"Vidalia"="C:\Program Files\Vidalia\vidalia.exe" [2007-02-08 03:38 11891712]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2004-08-27 10:01 688128]
"Uniblue SpyEraser"="C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe" [2007-12-03 16:39 1260296]
"STYLEXP"="C:\Program Files\TGTSoft\StyleXP\StyleXP.exe" [2005-08-18 15:15 1359872]
"Orb"="C:\Program Files\Winamp Remote\bin\OrbTray.exe" [2008-01-07 22:02 495616]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe" [2007-08-03 13:51 202024]
"SFS6"="C:\Program Files\Steganos Secure FileSharing 6\sfs.exe" [ ]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-04-08 23:48 2097488]
"Uniblue RegistryBooster2"="C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe" [2007-05-16 11:18 1856544]
"Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2007-12-03 14:21 3461120]
"Uniblue SpeedUpMyPC"="C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe" [2007-12-07 10:42 9479448]
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2007-11-20 16:29 360448]
"Creative Live! Cam Manager"="C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe" [2007-06-07 15:01 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EPSON Stylus D68 Series (Copie 1)"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.exe" [2005-01-25 06:00 98304]
"EPSON Stylus D68 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.exe" [2005-01-25 06:00 98304]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"DiskeeperSystray"="C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2005-11-22 17:38 221184]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-08-15 18:37 185784]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 17:41 45056]
"VC5Player"="C:\Program Files\HHVcdV5Sys\VC5Play.exe" [2003-09-04 13:44 176128]
"V0420Mon.exe"="C:\WINDOWS\V0420Mon.exe" [2007-04-30 03:00 32768]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 16:28 577536 C:\WINDOWS\soundman.exe]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-04-09 00:00 249896]
"SystrayORAHSS"="C:\Program Files\Orange\Systray\SystrayApp.exe" [2007-09-25 21:08 94208]
"ORAHSSSessionManager"="C:\Program Files\Orange\SessionManager\SessionManager.exe" [2007-09-25 20:10 102400]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 06:24 286720]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-12-20 17:16 37376]
"SpeedBitVideoAccelerator"="C:\Program Files\SpeedBit Video Accelerator\VideoAccelerator.exe" [ ]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 20:42 32768]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2007-03-01 16:57 153136]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-08-08 10:25 1828136]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-07-10 09:18 270648]
"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe" [2008-03-13 16:48 1443072]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]
@="Driver"

[HKLM\~\startupfolder\C:^Documents and Settings^Toinou^Menu Démarrer^Programmes^Démarrage^Ubisoft register.lnk]
backup=C:\WINDOWS\pss\Ubisoft register.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spyware-Secure]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
"C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
"C:\\Program Files\\MessengerDiscovery\\MessengerDiscovery Live.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager 1.0\\MediaManager.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

R0 uliagpkx;ULi AGP Bus Filter Driver;C:\WINDOWS\system32\DRIVERS\agpkx.sys [2005-05-03 18:31]
R1 vbev5mp;vbev5mp;C:\WINDOWS\system32\DRIVERS\vbev5mp.sys [2003-09-09 15:25]
R2 ALIEHCD;ULi PCI to USB Enhanced Host Controller;C:\WINDOWS\system32\Drivers\ALIEHCI.sys [2005-09-07 17:40]
R2 SLEE_503_DRIVER;Steganos Live Encryption Engine (Version 503) [Driver];C:\WINDOWS\system32\drivers\SLEE503.sys [2002-11-28 11:10]
R2 SQLWriter;Enregistreur VSS SQL Server;"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe" [2007-02-10 06:29]
R3 aliroothub;USB 2.0 Root Hub;C:\WINDOWS\system32\DRIVERS\AliRtHub.sys [2005-09-07 17:43]
R3 ULI5261XP;ULi M526X Ethernet NT Driver;C:\WINDOWS\system32\DRIVERS\ULILAN51.SYS [2005-03-22 21:36]
R3 V0420VID;Live! Cam Vista IM (VF0420);C:\WINDOWS\system32\DRIVERS\V0420Vid.sys [2007-05-31 03:32]
S3 AC97ALI;Service for AC'97 Driver (WDM);C:\WINDOWS\system32\drivers\ali55wdm.sys [2004-08-27 21:29]
S3 Bulk;HDJBulk;C:\WINDOWS\system32\Drivers\HDJBulk.sys []
S3 fbxusb;Carte réseau virtuelle FreeBox USB;C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 17:23]
S3 GVTDrv;GVTDrv;C:\WINDOWS\system32\drivers\GVTDrv.sys [2007-04-15 22:11]
S3 HDJAsioK;HDJAsioK;C:\WINDOWS\system32\Drivers\HDJAsioK.sys []
S3 HDJMidi;Hercules DJ Console MIDI;C:\WINDOWS\system32\DRIVERS\HDJMidi.sys []
S3 s916bus;Sony Ericsson Device 916 driver (WDM);C:\WINDOWS\system32\DRIVERS\s916bus.sys [2007-11-02 12:47]
S3 s916mdfl;Sony Ericsson Device 916 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\s916mdfl.sys [2007-11-02 12:47]
S3 s916mdm;Sony Ericsson Device 916 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\s916mdm.sys [2007-11-02 12:47]
S3 s916mgmt;Sony Ericsson Device 916 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\s916mgmt.sys [2007-11-02 12:47]
S3 s916obex;Sony Ericsson Device 916 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\s916obex.sys [2007-11-02 12:47]
S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys [2007-01-10 11:14]
S3 ZDCndis5;ZDCndis5 Protocol Driver;C:\WINDOWS\system32\ZDCndis5.SYS []
S4 msvsmon80;Débogueur distant Visual Studio 2005;"C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe" /service msvsmon80 []

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2008-04-08 09:13:15 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-04-09 09:50:00 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
"2008-04-03 04:22:00 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC Nag.job"
- C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe
"2007-12-25 05:22:55 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC.job"
- C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe
"2008-02-22 17:37:28 C:\WINDOWS\Tasks\Uniblue SpyEraser.job"
- C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe
.
**************************************************************************

catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-09 11:36:24
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\[u]0[/u]\FTRTSVC.exe
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\SLEE503.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\HHVcdV5Sys\VC5SecS.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\[u]0[/u]\AlertModule.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\QUICKENW\QWDLLS.EXE
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\[u]0[/u]\FTCOMModule.exe
C:\Program Files\Tor\tor.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\MessengerDiscovery\MessengerDiscovery Live.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-04-09 11:51:11 - machine was rebooted
ComboFix-quarantined-files.txt 2008-04-09 09:51:00
Pre-Run: 34,278,141,952 octets libres
Post-Run: 34,265,882,624 octets libres
.
2008-04-01 01:02:16 --- E O F ---

Salut,

Je voudrais savoir comment connaitre si EliBagle a fini de supprimer les bagles et qu'il n'est pas planté, car le nombre de

fichiers analysés est très inférieur au nombre analysé ?

Merci d'avance.

T'as un souci de bagle ???

si oui crée une nouvelle discussion sur le forum virus securité