Publicités incessantes !

Résolu
dan24 -  
 Utilisateur anonyme -
Bonjour,

Depuis quelque temps, j'ai des tonnes de publicités provenant de internet explorer qui s'incurstent dans mon ordinateur
j'ai essayer d'installer la barre de firefox mais rien à faire ça marche pas !

Aidez moi s'il vous plait !

Un rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:51:31, on 13/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\WINDOWS\mrofinu1423.exe
D:\Documents and Settings\Windows\dqofvv.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Windows Live\Messenger\msnmsgr.exe
D:\Program Files\Free Download Manager\fdm.exe
D:\Program Files\Free Download Manager\fum\fum.exe
D:\Program Files\Free Download Manager\FUM\fumoei.exe
D:\DOCUME~1\Windows\MESDOC~1\ASKS~1\svchost.exe
D:\WINDOWS\system32\??sks\d?xplore.exe
D:\Documents and Settings\Windows\Application Data\SpeedRunner\SpeedRunner.exe
D:\Documents and Settings\Windows\Application Data\Microsoft\Windows\suigpk.exe
D:\Program Files\Eroca\Eroca.exe
D:\Program Files\JavaCore\JavaCore.exe
D:\Program Files\Svconr\Svconr.exe
D:\Program Files\GetModule\GetModule18.exe
D:\Program Files\GetPack\GetPack18.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
D:\Documents and Settings\Windows\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe,D:\WINDOWS\system32\%%%.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: testCPV6 - {15421B84-3488-49A7-AD18-CBF84A3EFAF6} - D:\Program Files\Spcron\Spc.dll
O2 - BHO: (no name) - {3B69DD7E-5C0B-4003-BA11-9CA298AFCF19} - D:\Program Files\MSN\diqatubem777444.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AC17BF32-75DE-760F-F93D-0AA2E19C4992} - D:\WINDOWS\system32\azfiais.dll
O2 - BHO: 0 - {C46B50DE-7FAE-4BB6-E9B6-78487DC8F0A4} - D:\Program Files\WindowsUpdate\lagurigyz.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - D:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: (no name) - {F6424E54-896C-4F7E-B1EB-1E8BF9B349BB} - D:\Program Files\MSN\diqatubem821058.dll
O4 - HKLM\..\Run: [Flash Media] D:\WINDOWS\system32\%%%.exe
O4 - HKLM\..\Run: [runner1] D:\WINDOWS\mrofinu1423.exe 61A847B5BBF7281336993B466188719AB689201522886B092CBD44BD8689220221DD325762E901F3D2933202228B284662EA4EBF968956185EFC412806867680AEDE604D64C2661373FD13E0DCD66A47
O4 - HKLM\..\Run: [Nvidia] D:\Documents and Settings\Windows\dqofvv.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Free Download Manager] "D:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [Free Upload Manager] "D:\Program Files\Free Download Manager\fum\fum.exe" -autorun
O4 - HKCU\..\Run: [Free Uploader Oe Integration] D:\Program Files\Free Download Manager\FUM\fumoei.exe
O4 - HKCU\..\Run: [Auti] "D:\DOCUME~1\Windows\MESDOC~1\ASKS~1\svchost.exe" -vt yazb
O4 - HKCU\..\Run: [Rvjk] D:\WINDOWS\system32\??sks\d?xplore.exe
O4 - HKCU\..\Run: [SpeedRunner] D:\Documents and Settings\Windows\Application Data\SpeedRunner\SpeedRunner.exe
O4 - HKCU\..\Run: [SfKg6wIP] D:\Documents and Settings\Windows\Application Data\Microsoft\Windows\suigpk.exe
O4 - HKCU\..\Run: [Eroca] D:\Program Files\Eroca\Eroca.exe
O4 - HKCU\..\Run: [JavaCore] D:\Program Files\\JavaCore\\JavaCore.exe
O4 - HKCU\..\Run: [Svconr] D:\Program Files\Svconr\Svconr.exe
O4 - HKCU\..\Run: [GetModule18] "D:\Program Files\GetModule\GetModule18.exe"
O4 - HKCU\..\Run: [GetPack18] "D:\Program Files\GetPack\GetPack18.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://D:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://D:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://D:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://D:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - D:\Program Files\Free Download Manager\FUM\fumiebtn.dll
O10 - Unknown file in Winsock LSP: d:\windows\system32\nwprovau.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Unknown owner - D:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

--
End of file - 6572 bytes

Merci d'avance
Configuration: Windows XP
Firefox 2.0.0.14

21 réponses

  • 1
  • 2
  1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    slt

    tu es gavé!!! c'est pas gagné!!! tu n'as aucun antivirus, aucune protection!!!!

    _____________

    Télécharge MSNFix de Laurent
    http://sosvirus.changelog.fr/MSNFix.zip

    Décompresse-le et double clic sur le fichier MSNFix.bat.
    - Exécute l'option R.
    --Si l'infection est détectée, exécute l'option N
    - Sauvegarde ce rapport puis fais un copier/coller de ce rapport sur le forum.

    Note :
    Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal
    Sauvegarder et fermer le rapport pour que Windows termine de se lancer normalement.

    envoyer le fichier [b] C:\DOCUME~1\florian\Bureau\Upload_Me.zip /b sur http://upload.changelog.fr pour faire evoluer msnfix

    ______________

    Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
    Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
    • Redémarre ton ordinateur
    • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
    • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
    • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
    • Choisis ton compte.
    Déroule la liste des instructions ci-dessous :
    • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
    • Appuie sur Y pour commencer le processus de nettoyage.
    • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
    • Appuie sur une touche pour redémarrer le PC.
    • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
    • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
    • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
    • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
    • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

    _____________

    scan avec
    MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    _____________

    mettre a jour internet explorer
    https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

    _______________

    télécharge combofix (par sUBs) ici :

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    et enregistre le sur le bureau.

    déconnecte toi d'internet et ferme toutes tes applications.

    désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

    double-clique sur combofix.exe et suis les instructions

    à la fin, il va produire un rapport C:\ComboFix.txt

    réactive ton parefeu, ton antivirus, la garde de ton antispyware

    copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

    Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

    Tu as un tutoriel complet ici :

    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

    __________________

    installe un antivirus : antivir
    https://www.malekal.com/avira-free-security-antivirus-gratuit/

    __________________

    recolle un hijakchits et dis tes soucis
    0
    1. PIKATOUT Messages postés 2053 Statut Membre 353
       
      Bonjour jlp jlp,

      j'en reste muet,depuit mai 2007 tu a une moyenne de 400 interventions par semaine;il ne suffit pas d'avoir des connaissances faut-il avoir le coeur d'aider les autre.CHAPEAU BAS jlp jlp.
      0
      1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041 > PIKATOUT Messages postés 2053 Statut Membre
         
        merci !
        0
  2. dan24 Messages postés 11 Statut Membre
     
    Excuse moi
    j'étais absent !

    Ouè c'est vrai que j'ai pas d'antivirus :/

    Merci pour ton aide jlpjlp !
    jvais essayer de suivre tes conseils !
    0
  3. dan24 Messages postés 11 Statut Membre
     
    Rapport avec Msnfix :

    MSNFix 1.724

    D:\Documents and Settings\Windows\Bureau\msnfix\MSNFix
    Fix exécuté le 18/06/2008 - 14:15:07,70 By Windows
    mode normal

    ************************ Recherche les fichiers présents

    ... D:\WINDOWS\system32\%%%.exe
    ... D:\DOCUME~1\Windows\APPLIC~1\SpeedRunner\SRUninstall.exe
    ... D:\Documents and Settings\Windows\??????.exe
    ... D:\Documents and Settings\Windows\????????.exe
    ... D:\WINDOWS\b???.exe

    ************************ Recherche les dossiers présents

    ... D:\Program Files\Spcron\
    ... D:\Program Files\Svconr\
    ... D:\Program Files\outerinfo\
    ... D:\DOCUME~1\Windows\APPLIC~1\SpeedRunner\
    ... D:\Program Files\ISM\
    ... D:\Program Files\QdrPack\

    ************************ Suppression des fichiers

    .. OK ... D:\DOCUME~1\Windows\APPLIC~1\SpeedRunner\SRUninstall.exe
    .. OK ... D:\Documents and Settings\Windows\??????.exe
    .. OK ... D:\Documents and Settings\Windows\????????.exe
    .. OK ... D:\WINDOWS\b???.exe
    .. OK ... D:\WINDOWS\system32\real.txt

    ************************ Fichiers suspects

    /!\ ces fichiers nécessitent un avis expérimenté avant toute intervention

    [D:\DOCUME~1\Windows\LOCALS~1\Temp\Naruto_404_Binktopia_.zip] 06EB67E7A4C688F888FE687AF753ECF2
    [D:\DOCUME~1\Windows\LOCALS~1\Temp\UpdateJavaCore.zip] AB0C874853E5AF3E431E700581D8CB66

    [color=#FF0000][b]==>/b/color SVP merci d'envoyer le fichier [b] D:\DOCUME~1\Windows\Bureau\Upload_Me.zip /b sur http://upload.changelog.fr

    Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 18062008_14200601.zip

    ************************ HKLM\...\Winlogon\Userinit

    Userinit = D:\WINDOWS\system32\userinit.exe,D:\WINDOWS\system32\%.exe

    Important : http://msnfix.changelog.fr/index.php/2008/05/18/32-alerte
    0
  4. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    une partie virée mais il en reste .................
    0
    1. py0413
       
      Bonjour,
      j'ai des publicités intempestives depuis qq jours et j'ai beau avoir plusieurs antivirus (ccleaner, adaware avgantispyware) rien n'y fait.
      Voici mon rapport hijackthis

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 15:06:24, on 18/06/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\Bluetooth Software\bin\btwdins.exe
      C:\Program Files\Symantec AntiVirus\DefWatch.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\PROGRA~1\Iomega\System32\AppServices.exe
      C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Symantec AntiVirus\Rtvscan.exe
      C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      C:\WINDOWS\system32\igfxtray.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\WINDOWS\system32\igfxpers.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\HP\QuickPlay\QPService.exe
      C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
      C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
      C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
      C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\PROGRA~1\HPQ\SHARED\HPQTOA~1.EXE
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Vidal\Communs\Vidal.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\PROGRA~1\SYMANT~1\VPTray.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\PROGRA~1\MICROS~4\wcescomm.exe
      C:\documents and settings\emilie & pierre-yves\local settings\application data\egkmaqy.exe
      C:\PROGRA~1\MICROS~4\rapimgr.exe
      C:\Program Files\Bluetooth Software\BTTray.exe
      C:\Program Files\Logitech\SetPoint\KEM.exe
      C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe
      C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
      C:\Program Files\Google\Google Updater\GoogleUpdater.exe
      C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www8.hp.com/fr/fr/home.html
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www8.hp.com/fr/fr/home.html
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb126\Dealio.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb126\Dealio.dll
      O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
      O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
      O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
      O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [vdlDeamon] C:\Program Files\Vidal\Communs\Vidal.exe
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
      O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
      O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Configuration de la neuf Box] C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~4\wcescomm.exe"
      O4 - HKCU\..\Run: [egkmaqy] c:\documents and settings\emilie & pierre-yves\local settings\application data\egkmaqy.exe egkmaqy
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: BTTray.lnk = ?
      O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
      O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
      O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
      O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
      O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Emilie & Pierre-Yves\Application Data\Dealio\kb126\res\DealioSearch.html
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\Logiciel Bluetooth\btsendto_ie_ctx.htm
      O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\Bluetooth Software\btsendto_ie_ctx.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Bluetooth Software\btsendto_ie.htm
      O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Bluetooth Software\btsendto_ie.htm
      O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb126\Dealio.dll
      O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb126\Dealio.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} - E:\Player\__CDS2.dll (file missing)
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\Bluetooth Software\bin\btwdins.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
      O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
      O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
      0
      1. Utilisateur anonyme > py0413
         
        bonjour pay0413

        l serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace
        Procèdes comme ceci :
        http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm

        A bientôt
        0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. dan24 Messages postés 11 Statut Membre
     
    Rapport avec SDFix

    [b]SDFix: Version 1.194 [/b]
    Run by Windows on 18/06/2008 at 14:36

    Microsoft Windows XP [version 5.1.2600]
    Running From: D:\SDFix

    [b]Checking Services [/b]:

    Restoring Windows Registry Values
    Restoring Windows Default Hosts File

    Rebooting

    [b]Checking Files [/b]:

    Trojan Files Found:

    D:\WINDOWS\system32\%%%.exe - Deleted
    D:\DOCUME~1\WINDOWS\APPLIC~1\MICROS~1\WINDOWS\SUIGPK.EXE - Deleted
    D:\PROGRA~1\WINDOW~2\LAGURI~1.DLL - Deleted
    D:\PROGRA~1\MSN\DIQATU~2.DLL - Deleted
    D:\PROGRA~1\MSN\DIQATU~1.DLL - Deleted
    D:\Documents and Settings\Windows\Application Data\SpeedRunner\config.cfg - Deleted
    D:\Documents and Settings\Windows\Application Data\SpeedRunner\config.MSNFix - Deleted
    D:\Documents and Settings\Windows\Application Data\SpeedRunner\SpeedRunner.exe - Deleted
    D:\Documents and Settings\Windows\Application Data\SpeedRunner\SRUninstall.exe - Deleted
    D:\Documents and Settings\Windows\Application Data\SpeedRunner\SRUninstall.MSNFix - Deleted
    D:\Program Files\GetModule\dicik.gz - Deleted
    D:\Program Files\GetModule\GetModule18.exe - Deleted
    D:\Program Files\GetModule\GetModule19.exe - Deleted
    D:\Program Files\GetModule\kwdik.gz - Deleted
    D:\Program Files\GetModule\pckik.dat - Deleted
    D:\Program Files\GetPack\dictame.gz - Deleted
    D:\Program Files\GetPack\GetPack18.exe - Deleted
    D:\Program Files\GetPack\GetPack19.exe - Deleted
    D:\Program Files\GetPack\trgtame.gz - Deleted
    D:\Program Files\iCheck\Uninstall.exe - Deleted
    D:\Program Files\ISM\ism.exe - Deleted
    D:\Program Files\ISM\Uninstall.exe - Deleted
    D:\Program Files\mjc\mjc.exe - Deleted
    D:\Program Files\QdrPack\bostrupd.exe - Deleted
    D:\Program Files\QdrPack\dictbs.gz - Deleted
    D:\Program Files\QdrPack\dictys.gz - Deleted
    D:\Program Files\QdrPack\QdrPack16.exe - Deleted
    D:\Program Files\QdrPack\QdrPack17.exe - Deleted
    D:\Program Files\QdrPack\trgtys.gz - Deleted
    D:\Program Files\Spcron\Spc.dll - Deleted
    D:\Program Files\Spcron\Spc.dll.lzma - Deleted
    D:\Program Files\zango\bin\10.3.37.0\HostOE.dll - Deleted
    D:\Program Files\zango\bin\10.3.37.0\ZangoSAHook.dll - Deleted
    D:\Program Files\Fichiers communs\Yazzle1560OinAdmin.exe - Deleted
    D:\Program Files\Fichiers communs\Yazzle1560OinUninstaller.MSNFix - Deleted
    D:\DOCUME~1\Windows\LOCALS~1\Temp\gettpa118.exe - Deleted
    D:\DOCUME~1\Windows\LOCALS~1\Temp\gettpa119.exe - Deleted
    D:\DOCUME~1\Windows\LOCALS~1\Temp\gettpa219.exe - Deleted
    D:\DOCUME~1\Windows\LOCALS~1\Temp\ismtpa17.exe - Deleted
    D:\Program Files\.autoreg - Deleted
    D:\Documents and Settings\Windows\real.txt - Deleted
    D:\WINDOWS\tk58.exe - Deleted

    Folder D:\Documents and Settings\Windows\Application Data\SpeedRunner - Removed
    Folder D:\Program Files\GetModule - Removed
    Folder D:\Program Files\GetPack - Removed
    Folder D:\Program Files\iCheck - Removed
    Folder D:\Program Files\ISM - Removed
    Folder D:\Program Files\mjc - Removed
    Folder D:\Program Files\QdrPack - Removed
    Folder D:\Program Files\Spcron - Removed

    Removing Temp Files

    [b]ADS Check [/b]:

    [b]Final Check [/b]:

    catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-06-18 14:51:31
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 0

    [b]Remaining Services [/b]:

    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "D:\\Program Files\\Messenger\\msmsgs.exe"="D:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
    "D:\\Program Files\\uTorrent\\uTorrent.exe"="D:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:æTorrent"
    "D:\\Program Files\\Free Download Manager\\fdm.exe"="D:\\Program Files\\Free Download Manager\\fdm.exe:*:Enabled:Free Download Manager"
    "D:\\Program Files\\Morpheus\\Morpheus.exe"="D:\\Program Files\\Morpheus\\Morpheus.exe:*:Enabled:Morpheus"
    "D:\\Program Files\\Ankama Games\\Dofus\\Dofus.exe"="D:\\Program Files\\Ankama Games\\Dofus\\Dofus.exe:*:Enabled:Dofus Client"
    "D:\\WINDOWS\\system32\\java.exe"="D:\\WINDOWS\\system32\\java.exe:*:Enabled:Java(TM) Platform SE binary"
    "D:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="D:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "D:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="D:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
    "D:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"="D:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe:*:Enabled:Veoh Client"
    "E:\\eMule\\emule.exe"="E:\\eMule\\emule.exe:*:Enabled:eMule"
    "D:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="D:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:Orb"
    "D:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="D:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:OrbTray"
    "D:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="D:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
    "D:\\Program Files\\eMule\\emule.exe"="D:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
    "D:\\Documents and Settings\\Windows\\dqofvv.exe"="D:\\Documents and Settings\\Windows\\dqofvv.exe:*:Enabled:Nvidia"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "D:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="D:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
    "D:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="D:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

    [b]Remaining Files [/b]:

    File Backups: - D:\SDFix\backups\backups.zip

    [b]Files with Hidden Attributes [/b]:

    Mon 21 Jan 2008 13,479 A..H. --- "D:\tpe\ªª\[Coolgrafik.com]_No_Clocks_1_0.zip"
    Thu 29 May 2008 230,400 ..SHR --- "D:\WINDOWS\system32\??sks\d?xplore.exe"
    Sat 29 Sep 2007 0 A.SH. --- "D:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
    Sun 13 Apr 2008 68,608 ..SHR --- "D:\Documents and Settings\Windows\Mes documents\?asks\svchost.exe"
    Wed 7 May 2008 0 A..H. --- "D:\WINDOWS\SoftwareDistribution\Download\24af2a69c06a4de03e35dc89d706475f\BIT41.tmp"
    Sun 20 Jan 2008 0 A..H. --- "D:\WINDOWS\SoftwareDistribution\Download\ad213d081e2675ef87a62c73b8abf209\BIT27.tmp"
    Thu 12 Jun 2008 277 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic109.tmp"
    Thu 12 Jun 2008 223 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic10A.tmp"
    Wed 28 May 2008 233 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic10D.tmp"
    Thu 12 Jun 2008 223 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic10E.tmp"
    Thu 12 Jun 2008 374 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic110.tmp"
    Wed 28 May 2008 223 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic113.tmp"
    Sun 25 May 2008 149 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic1613.tmp"
    Sun 8 Jun 2008 550 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic18C.tmp"
    Fri 6 Jun 2008 158 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic192.tmp"
    Fri 6 Jun 2008 223 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic199.tmp"
    Sat 7 Jun 2008 727 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic19A.tmp"
    Fri 6 Jun 2008 223 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic19B.tmp"
    Sat 7 Jun 2008 223 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic19E.tmp"
    Sat 7 Jun 2008 550 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic1A2.tmp"
    Sun 8 Jun 2008 124 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic1AD.tmp"
    Sat 7 Jun 2008 551 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic1F0.tmp"
    Sun 15 Jun 2008 221 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic223.tmp"
    Sat 31 May 2008 668 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic25A.tmp"
    Tue 17 Jun 2008 622 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic50F.tmp"
    Tue 17 Jun 2008 281 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic52F.tmp"
    Tue 17 Jun 2008 281 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic5C0.tmp"
    Thu 29 May 2008 550 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic75A.tmp"
    Thu 5 Jun 2008 272 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic76.tmp"
    Thu 5 Jun 2008 771 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic7B.tmp"
    Thu 5 Jun 2008 223 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic95.tmp"
    Thu 5 Jun 2008 223 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\tic97.tmp"
    Thu 29 May 2008 223 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\ticB11.tmp"
    Fri 6 Jun 2008 149 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\ticB7.tmp"
    Sun 25 May 2008 237 A..H. --- "D:\Documents and Settings\Windows\Local Settings\Temp\Free Download Manager\ticCD3.tmp"

    [b]Finished![/b]
    0
  7. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    le nettoyage se poursuit....
    0
  8. dan24 Messages postés 11 Statut Membre
     
    waoh
    il est long celui là !

    Malwarebytes' Anti-Malware 1.17
    Version de la base de données: 867

    16:49:50 18/06/2008
    mbam-log-6-18-2008 (16-49-50).txt

    Type de recherche: Examen complet (C:\|D:\|E:\|)
    Eléments examinés: 82164
    Temps écoulé: 18 minute(s), 17 second(s)

    Processus mémoire infecté(s): 1
    Module(s) mémoire infecté(s): 1
    Clé(s) du Registre infectée(s): 11
    Valeur(s) du Registre infectée(s): 2
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 7
    Fichier(s) infecté(s): 289

    Processus mémoire infecté(s):
    D:\Documents and Settings\Windows\Mes documents\?asks\svchost.exe (Adware.ClickSpring) -> Unloaded process successfully.

    Module(s) mémoire infecté(s):
    D:\Program Files\Mozilla Firefox\components\srff.dll (Adware.SurfAccuracy) -> Unloaded module successfully.

    Clé(s) du Registre infectée(s):
    HKEY_CLASSES_ROOT\AppID\{ff46f4ab-a85f-487e-b399-3f191ac0fe23} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{2e4a04a1-a24d-45ae-aca4-949778400813} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{63334394-3da3-4b29-a041-03535909d361} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\testcpv6.bho (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\testcpv6.bho.1 (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{ac17bf32-75de-760f-f93d-0aa2e19c4992} (Adware.ClickSpring) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ac17bf32-75de-760f-f93d-0aa2e19c4992} (Adware.ClickSpring) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\SpeedRunner (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\AppID\testCPV6.DLL (Trojan.BHO) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Auti (Adware.ClickSpring) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions\{59a40ac9-e67d-4155-b31d-4b7330fcd2d6} (Adware.PurityScan) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    D:\Program Files\Zango (Adware.180Solutions) -> Quarantined and deleted successfully.
    D:\Program Files\Zango\bin (Adware.180Solutions) -> Quarantined and deleted successfully.
    D:\Program Files\Zango\bin\10.3.37.0 (Adware.180Solutions) -> Quarantined and deleted successfully.
    D:\Program Files\Outerinfo (Adware.Outerinfo) -> Quarantined and deleted successfully.
    D:\Program Files\Outerinfo\FF (Adware.Outerinfo) -> Quarantined and deleted successfully.
    D:\Program Files\Outerinfo\FF\components (Adware.Outerinfo) -> Quarantined and deleted successfully.
    D:\Program Files\Svconr (Trojan.Agent) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    D:\Documents and Settings\Windows\Mes documents\?asks\svchost.exe (Adware.ClickSpring) -> Quarantined and deleted successfully.
    D:\Program Files\Mozilla Firefox\components\srff.dll (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
    D:\Program Files\Outerinfo\FF\components\FF.MSNFix (Adware.ZenoSearch) -> Quarantined and deleted successfully.
    D:\Program Files\Svconr\Svconr.MSNFix (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP189\A0047934.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP189\A0048934.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP189\A0048940.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP190\A0049052.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP190\A0049083.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP192\A0049133.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP192\A0049144.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP192\A0049145.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP192\A0050144.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP192\A0050154.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP192\A0050160.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP193\A0051249.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP193\A0051250.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP197\A0052250.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP197\A0052256.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP197\A0052268.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP197\A0052276.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052547.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052548.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052549.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052550.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052551.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052552.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052553.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052554.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052568.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052591.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0052599.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0054598.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP198\A0055599.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP199\A0056600.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP199\A0056611.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP199\A0057610.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP200\A0058622.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP200\A0060310.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP200\A0060320.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP200\A0060321.dll (Adware.Bestrevenue) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP200\A0060322.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP200\A0060323.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP201\A0062347.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP201\A0062352.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP201\A0064343.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP201\A0065343.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP202\A0067352.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP202\A0067353.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP202\A0067364.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP203\A0070373.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP203\A0071478.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP203\A0074527.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP203\A0074528.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP203\A0074529.dll (Adware.Bestrevenue) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP203\A0074530.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP203\A0074531.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP203\A0075553.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP203\A0076550.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0077574.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0077575.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078589.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078590.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078591.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078592.dll (Adware.Bestrevenue) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078593.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078594.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078595.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078596.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078597.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078598.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP204\A0078599.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0080610.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0080651.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0081665.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0081666.dll (Adware.Bestrevenue) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0081669.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0081670.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0084705.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0084706.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0088724.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0090735.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0090736.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0090741.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0090742.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0090743.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0090744.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP205\A0090745.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0096737.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0096743.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0096744.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0096745.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0096746.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0096747.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0096750.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0102811.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0102812.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0102813.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0108850.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0111863.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0111864.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0111865.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0111866.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0111867.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0111868.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0111869.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0111870.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0116885.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0117894.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0117895.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0117896.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0117898.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0117901.dll (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0117902.dll (Adware.Bestrevenue) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP206\A0117903.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP207\A0121926.exe (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP207\A0121927.exe (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP207\A0121928.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP207\A0122929.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP207\A0122930.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP207\A0122931.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP207\A0122932.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP210\A0123962.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP210\A0123963.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP210\A0123965.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0126954.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0129984.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0129985.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0129987.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0129988.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0129989.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0129990.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0129991.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0129992.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0129994.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0131001.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0131002.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0131018.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0131020.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0131023.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0131024.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0131025.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0131026.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP211\A0131027.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP213\A0140063.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP213\A0140064.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP213\A0140065.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP213\A0141085.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0143377.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148405.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148407.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148408.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148410.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148411.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148415.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148416.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148417.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148418.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148419.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0148420.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0151415.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0151416.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0151417.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0151418.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0151419.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0151420.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0151421.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0151422.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0153415.dll (Adware.ClickSpring) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0153416.exe (Adware.ClickSpring) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0156414.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0156415.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP214\A0158446.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0166478.exe (Trojan.DownLoader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0166479.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0166480.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0166481.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0166482.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0166483.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0166485.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0166489.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0166492.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0168531.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0168532.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0168533.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0168534.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0168535.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0168536.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP215\A0168537.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP216\A0170550.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP216\A0170551.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP218\A0176575.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP218\A0176585.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP220\A0177780.dll (Adware.Shoper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP222\A0180799.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP222\A0180800.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP222\A0180801.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP222\A0180802.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP222\A0180803.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP222\A0180804.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP222\A0180805.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP222\A0180806.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP222\A0180807.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP223\A0185816.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP223\A0185817.exe (Trojan.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP223\A0185818.exe (Adware.Insider) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP223\A0185819.exe (Adware.MJC) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP224\A0186815.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP224\A0186816.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP224\A0186817.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP224\A0186818.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP224\A0186819.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP224\A0186820.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP224\A0187830.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187839.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187840.exe (Adware.ClickSpring) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187842.dll (Adware.ZenoSearch) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187843.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187844.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187845.exe (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187848.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187849.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187856.exe (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187858.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187859.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187860.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187861.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187862.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187863.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187864.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187869.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187870.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187871.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187872.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187873.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187874.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187875.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187876.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187877.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187878.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187882.dll (Adware.ZenoSearch) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187890.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187892.exe (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187894.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187897.exe (Adware.ClickSpring) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187903.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187904.dll (Adware.TTC) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187905.dll (Adware.TTC) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187907.exe (Adware.SpeedRunner) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187908.exe (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187909.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187911.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187914.exe (Adware.SearchAid) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187916.exe (Adware.MJC) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187917.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187918.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187919.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187920.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187923.exe (Adware.ClickSpring) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187924.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187929.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187931.dll (Adware.TTC) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187932.dll (Adware.TTC) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187933.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187935.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187937.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187941.exe (Adware.SearchAid) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187942.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187943.dll (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187944.exe (Adware.MJC) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187945.exe (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187946.exe (Adware.ISM) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187950.dll (Adware.Agent) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187951.exe (Adware.SpeedRunner) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187952.exe (Adware.SurfAccuracy) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187953.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187954.exe (Trojan.BHO) -> Quarantined and deleted successfully.
    D:\System Volume Information\_restore{9723EAD3-3FC5-4E9A-88BE-9BDE469CB995}\RP225\A0187956.exe (Adware.ClickSpring) -> Quarantined and deleted successfully.
    D:\WINDOWS\b128.MSNFix (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\WINDOWS\b153.MSNFix (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\WINDOWS\b156.MSNFix (Adware.Agent) -> Quarantined and deleted successfully.
    D:\WINDOWS\mrofinu1423.MSNFix (Trojan.Downloader) -> Quarantined and deleted successfully.
    D:\WINDOWS\POTA777444.exe (Adware.TTC) -> Quarantined and deleted successfully.
    D:\WINDOWS\system32\azfiais.dll (Adware.ClickSpring) -> Quarantined and deleted successfully.
    D:\WINDOWS\system32\kegham.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    D:\Program Files\Outerinfo\Terms.MSNFix (Adware.Outerinfo) -> Quarantined and deleted successfully.
    D:\Program Files\Outerinfo\FF\chrome.MSNFix (Adware.Outerinfo) -> Quarantined and deleted successfully.
    D:\Program Files\Outerinfo\FF\install.MSNFix (Adware.Outerinfo) -> Quarantined and deleted successfully.
    D:\Program Files\Outerinfo\FF\components\OuterinfoAds.MSNFix (Adware.Outerinfo) -> Quarantined and deleted successfully.
    0
  9. dan24 Messages postés 11 Statut Membre
     
    Ah oui

    Auparavant,
    j'avais deja essayer de mettre a jour internet explorer mais j'avais pas réussi :'(
    Mon frere m'avait dit que mon pc ne peut pas fair de mise a jour internet explorer !

    et bien je saute une étape >_>

    ComboFix 08-06-16.5 - Windows 2008-06-18 17:05:08.1 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.104 [GMT 2:00]
    Endroit: D:\Documents and Settings\Windows\Bureau\ComboFix.exe
    * Création d'un nouveau point de restauration

    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    D:\Documents and Settings\Windows\Local Settings\Temporary Internet Files\bestwiner.stt
    D:\Documents and Settings\Windows\Local Settings\Temporary Internet Files\CPV.stt
    D:\Documents and Settings\Windows\Menu Démarrer\Programmes\Internet Speed Monitor
    D:\Documents and Settings\Windows\Menu Démarrer\Programmes\Internet Speed Monitor\Check Now.lnk
    D:\Documents and Settings\Windows\Menu Démarrer\Programmes\Internet Speed Monitor\Uninstall.lnk
    D:\Documents and Settings\Windows\Menu Démarrer\Programmes\Outerinfo
    D:\Documents and Settings\Windows\Menu Démarrer\Programmes\Outerinfo\Terms.lnk
    D:\Documents and Settings\Windows\Menu Démarrer\Programmes\Outerinfo\Uninstall.lnk
    D:\Documents and Settings\Windows\Mes documents\ASKS~1
    D:\Documents and Settings\Windows\Mes documents\ASKS~1\?asks\
    D:\Documents and Settings\Windows\Mes documents\ASKS~1\svchost.exe
    D:\Documents and Settings\Windows\Mes documents\TSKS~1
    D:\WINDOWS\system32\sks~1
    D:\WINDOWS\system32\sks~1\d?xplore.exe

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-05-18 to 2008-06-18 ))))))))))))))))))))))))))))))))))))
    .

    2008-06-18 14:59 . 2008-06-18 14:59 <REP> d-------- D:\Program Files\Malwarebytes' Anti-Malware
    2008-06-18 14:59 . 2008-06-18 14:59 <REP> d-------- D:\Documents and Settings\Windows\Application Data\Malwarebytes
    2008-06-18 14:59 . 2008-06-18 14:59 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-06-18 14:59 . 2008-06-10 19:02 34,296 --a------ D:\WINDOWS\system32\drivers\mbamcatchme.sys
    2008-06-18 14:59 . 2008-06-10 19:02 15,864 --a------ D:\WINDOWS\system32\drivers\mbam.sys
    2008-06-18 14:32 . 2008-06-18 14:32 <REP> d-------- D:\WINDOWS\ERUNT
    2008-06-18 14:28 . 2008-06-18 14:53 <REP> d-------- D:\SDFix
    2008-06-13 11:31 . 2008-02-16 13:35 237,568 --a------ D:\Program Files\Uninstall Morpheus Toolbar.dll
    2008-06-12 16:45 . 2008-06-12 16:47 1,374 --a------ D:\WINDOWS\imsins.BAK
    2008-06-07 13:38 . 2008-06-07 13:38 <REP> d-------- D:\Application Data
    2008-06-01 13:02 . 2008-06-01 13:02 <REP> d-------- D:\Documents and Settings\Windows\ShoppingReport
    2008-06-01 13:02 . 2008-06-01 13:02 <REP> d-------- D:\Documents and Settings\Windows\Application Data\Application Data

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-06-18 15:06 --------- d-----w D:\Documents and Settings\Windows\Application Data\Free Download Manager
    2008-06-14 09:12 --------- d-----w D:\Program Files\Free Download Manager
    2008-06-13 09:32 --------- d--h--w D:\Program Files\InstallShield Installation Information
    2008-06-13 09:32 --------- d-----w D:\Program Files\Fichiers communs\InstallShield
    2008-05-30 21:33 --------- d-----w D:\Program Files\Windows Live Safety Center
    2008-05-22 16:12 --------- d-----w D:\Documents and Settings\Windows\Application Data\uTorrent
    2008-05-17 07:31 --------- d-----w D:\Program Files\Fichiers communs\Real
    2008-05-17 07:29 --------- d-----w D:\Program Files\Veoh Networks
    2008-05-17 07:21 --------- d-----w D:\Program Files\DivX
    2008-05-17 07:20 --------- d-----w D:\Program Files\Fichiers communs\Adobe
    2008-05-08 12:28 202,752 ----a-w D:\WINDOWS\system32\drivers\rmcast.sys
    2008-05-07 05:15 1,293,824 ----a-w D:\WINDOWS\system32\quartz.dll
    2008-04-17 11:03 370,176 ----a-w D:\WINDOWS\system32\SETDA.tmp
    2008-04-17 11:03 370,176 ------w D:\WINDOWS\system32\SETBD.tmp
    2008-04-17 11:03 370,176 ------w D:\WINDOWS\system32\SET98.tmp
    2008-04-15 11:17 64,949 ----a-w D:\WINDOWS\BricoPackUninst.cmd
    2008-04-15 11:17 6,118 ----a-w D:\WINDOWS\BricoPackFoldersDelete.cmd
    2008-04-15 10:04 2,138 ----a-w D:\WINDOWS\system32\tmp.reg
    2008-04-12 22:04 9,296 ----a-w D:\WINDOWS\system32\yukqfw.exe
    2008-04-10 15:24 561 ---ha-w D:\os357577.bin
    2008-04-10 14:55 675,328 ----a-w D:\WINDOWS\isRS-000.tmp
    2008-04-10 05:35 9,296 ----a-w D:\WINDOWS\system32\djsyrt.exe
    2008-04-08 20:37 9,296 ----a-w D:\WINDOWS\system32\vxcrni.exe
    2008-04-06 19:19 9,296 ----a-w D:\WINDOWS\system32\qcosrn.exe
    2008-03-25 04:51 621,344 ----a-w D:\WINDOWS\system32\mswstr10.dll
    2008-03-25 04:51 194,144 ----a-w D:\WINDOWS\system32\msjint40.dll
    2008-03-20 08:09 1,845,376 ----a-w D:\WINDOWS\system32\win32k.sys
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3B69DD7E-5C0B-4003-BA11-9CA298AFCF19}]
    D:\Program Files\MSN\diqatubem777444.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C46B50DE-7FAE-4BB6-E9B6-78487DC8F0A4}]
    D:\Program Files\WindowsUpdate\lagurigyz.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F6424E54-896C-4F7E-B1EB-1E8BF9B349BB}]
    D:\Program Files\MSN\diqatubem821058.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="D:\WINDOWS\system32\ctfmon.exe" [2004-08-19 16:09 15360]
    "MsnMsgr"="D:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
    "Free Download Manager"="D:\Program Files\Free Download Manager\fdm.exe" [2007-09-18 23:35 2445359]
    "Free Upload Manager"="D:\Program Files\Free Download Manager\fum\fum.exe" [2007-07-29 20:13 253952]
    "Free Uploader Oe Integration"="D:\Program Files\Free Download Manager\FUM\fumoei.exe" [2007-06-10 19:02 40960]
    "Rvjk"="D:\WINDOWS\system32\??sks\d?xplore.exe" [ ]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Nvidia"="D:\Documents and Settings\Windows\dqofvv.exe" [ ]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="D:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 16:09 15360]
    "msnmsgr"="D:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]

    D:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    Adobe Gamma Loader.lnk - D:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2008-01-21 17:20:39 113664]

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "D:\\Program Files\\Messenger\\msmsgs.exe"=
    "D:\\Program Files\\uTorrent\\uTorrent.exe"=
    "D:\\Program Files\\Free Download Manager\\fdm.exe"=
    "D:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "D:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

    *Newly Created Service* - CATCHME
    .
    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-06-18 17:06:42
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************
    .
    Temps d'accomplissement: 2008-06-18 17:08:58
    ComboFix-quarantined-files.txt 2008-06-18 15:08:29

    Pre-Run: 10,089,623,552 octets libres
    Post-Run: 10,111,381,504 octets libres

    117 --- E O F --- 2008-06-14 10:30:24
    0
  10. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    installe un antivirus : antivir
    https://www.malekal.com/avira-free-security-antivirus-gratuit/

    __________________

    tu peux mettre a jour internet explorer sauf si windows que tu as n'es pas legal

    ____________________

    si tu ne le mets pas a jour ne surf plus avec mais avec firefox:
    http://www.01net.com/telecharger/windows/Internet/navigateur/fiches/42003.html
    ____________________

    Ferme tout tes navigateurs (donc copie ou imprime les instructions avant)

    Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :

    File::
    D:\Program Files\MSN\diqatubem777444.dll
    D:\Program Files\MSN\diqatubem821058.dll
    D:\WINDOWS\system32\??sks\d?xplore.exe
    D:\Program Files\WindowsUpdate\lagurigyz.dll

    Registry::

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3B69DD7E-5C0B-4003-BA11-9CA298AFCF19}]
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C46B50DE-7FAE-4BB6-E9B6-78487DC8F0A4}]
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F6424E54-896C-4F7E-B1EB-1E8BF9B349BB}]
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    40960]
    "Rvjk"=-

    Enregistre ce fichier sous le nom CFscript

    Fait un glisser/déposer de ce fichier CFscrïpt sur le fichier ComboFix.exe

    Clique sur le fichier CFScript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFScript vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.

    Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

    Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

    Ne touche à rien tant que le scan n'est pas terminé.

    Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

    Remets aussi un rapport Hijackthis

    Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

    __________________

    dis tes soucis
    0
  11. dan24 Messages postés 11 Statut Membre
     
    Voila Voila

    ComboFix 08-06-16.5 - Windows 2008-06-18 18:49:32.2 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.89 [GMT 2:00]
    Endroit: D:\Documents and Settings\Windows\Bureau\ComboFix.exe
    Command switches used :: D:\Documents and Settings\Windows\Bureau\CFscript.txt
    * Création d'un nouveau point de restauration

    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

    FILE ::
    D:\Program Files\MSN\diqatubem777444.dll
    D:\Program Files\MSN\diqatubem821058.dll
    D:\Program Files\WindowsUpdate\lagurigyz.dll
    .

    ((((((((((((((((((((((((((((( Fichiers créés 2008-05-18 to 2008-06-18 ))))))))))))))))))))))))))))))))))))
    .

    2008-06-18 17:16 . 2008-06-18 17:16 <REP> d-------- D:\Program Files\Avira
    2008-06-18 17:16 . 2008-06-18 17:16 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Avira
    2008-06-18 14:59 . 2008-06-18 14:59 <REP> d-------- D:\Program Files\Malwarebytes' Anti-Malware
    2008-06-18 14:59 . 2008-06-18 14:59 <REP> d-------- D:\Documents and Settings\Windows\Application Data\Malwarebytes
    2008-06-18 14:59 . 2008-06-18 14:59 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-06-18 14:59 . 2008-06-10 19:02 34,296 --a------ D:\WINDOWS\system32\drivers\mbamcatchme.sys
    2008-06-18 14:59 . 2008-06-10 19:02 15,864 --a------ D:\WINDOWS\system32\drivers\mbam.sys
    2008-06-18 14:32 . 2008-06-18 14:32 <REP> d-------- D:\WINDOWS\ERUNT
    2008-06-18 14:28 . 2008-06-18 14:53 <REP> d-------- D:\SDFix
    2008-06-13 11:31 . 2008-02-16 13:35 237,568 --a------ D:\Program Files\Uninstall Morpheus Toolbar.dll
    2008-06-12 16:45 . 2008-06-12 16:47 1,374 --a------ D:\WINDOWS\imsins.BAK
    2008-06-07 13:38 . 2008-06-07 13:38 <REP> d-------- D:\Application Data
    2008-06-01 13:02 . 2008-06-01 13:02 <REP> d-------- D:\Documents and Settings\Windows\ShoppingReport
    2008-06-01 13:02 . 2008-06-01 13:02 <REP> d-------- D:\Documents and Settings\Windows\Application Data\Application Data

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-06-18 16:52 --------- d-----w D:\Documents and Settings\Windows\Application Data\Free Download Manager
    2008-06-14 09:12 --------- d-----w D:\Program Files\Free Download Manager
    2008-06-13 09:32 --------- d--h--w D:\Program Files\InstallShield Installation Information
    2008-06-13 09:32 --------- d-----w D:\Program Files\Fichiers communs\InstallShield
    2008-05-30 21:33 --------- d-----w D:\Program Files\Windows Live Safety Center
    2008-05-22 16:12 --------- d-----w D:\Documents and Settings\Windows\Application Data\uTorrent
    2008-05-17 07:31 --------- d-----w D:\Program Files\Fichiers communs\Real
    2008-05-17 07:29 --------- d-----w D:\Program Files\Veoh Networks
    2008-05-17 07:21 --------- d-----w D:\Program Files\DivX
    2008-05-17 07:20 --------- d-----w D:\Program Files\Fichiers communs\Adobe
    2008-05-08 12:28 202,752 ----a-w D:\WINDOWS\system32\drivers\rmcast.sys
    2008-05-07 05:15 1,293,824 ----a-w D:\WINDOWS\system32\quartz.dll
    2008-04-17 11:03 370,176 ----a-w D:\WINDOWS\system32\SETDA.tmp
    2008-04-17 11:03 370,176 ------w D:\WINDOWS\system32\SETBD.tmp
    2008-04-17 11:03 370,176 ------w D:\WINDOWS\system32\SET98.tmp
    2008-04-15 11:17 64,949 ----a-w D:\WINDOWS\BricoPackUninst.cmd
    2008-04-15 11:17 6,118 ----a-w D:\WINDOWS\BricoPackFoldersDelete.cmd
    2008-04-15 10:04 2,138 ----a-w D:\WINDOWS\system32\tmp.reg
    2008-04-10 15:24 561 ---ha-w D:\os357577.bin
    2008-04-10 14:55 675,328 ----a-w D:\WINDOWS\isRS-000.tmp
    2008-04-10 05:35 9,296 ----a-w D:\WINDOWS\system32\djsyrt.exe
    2008-04-08 20:37 9,296 ----a-w D:\WINDOWS\system32\vxcrni.exe
    2008-04-06 19:19 9,296 ----a-w D:\WINDOWS\system32\qcosrn.exe
    2008-03-25 04:51 621,344 ----a-w D:\WINDOWS\system32\mswstr10.dll
    2008-03-25 04:51 194,144 ----a-w D:\WINDOWS\system32\msjint40.dll
    2008-03-20 08:09 1,845,376 ----a-w D:\WINDOWS\system32\win32k.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-06-18_17.08.12,84 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2008-06-18 12:50:04 2,048 --s-a-w D:\WINDOWS\bootstat.dat
    + 2008-06-18 15:09:38 2,048 --s-a-w D:\WINDOWS\bootstat.dat
    + 2008-01-21 16:12:56 41,792 ----a-w D:\WINDOWS\system32\drivers\avgntdd.sys
    + 2008-01-21 16:11:28 22,336 ----a-w D:\WINDOWS\system32\drivers\avgntmgr.sys
    + 2008-03-04 11:28:53 79,424 ----a-w D:\WINDOWS\system32\drivers\avipbb.sys
    + 2007-03-01 08:34:22 28,352 ----a-w D:\WINDOWS\system32\drivers\ssmdrv.sys
    .
    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3B69DD7E-5C0B-4003-BA11-9CA298AFCF19}]
    D:\Program Files\MSN\diqatubem777444.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="D:\WINDOWS\system32\ctfmon.exe" [2004-08-19 16:09 15360]
    "MsnMsgr"="D:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
    "Free Download Manager"="D:\Program Files\Free Download Manager\fdm.exe" [2007-09-18 23:35 2445359]
    "Free Upload Manager"="D:\Program Files\Free Download Manager\fum\fum.exe" [2007-07-29 20:13 253952]
    "Free Uploader Oe Integration"="D:\Program Files\Free Download Manager\FUM\fumoei.exe" [2007-06-10 19:02 40960]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Nvidia"="D:\Documents and Settings\Windows\dqofvv.exe" [ ]
    "avgnt"="D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="D:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 16:09 15360]
    "msnmsgr"="D:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]

    D:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    Adobe Gamma Loader.lnk - D:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2008-01-21 17:20:39 113664]

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "D:\\Program Files\\Messenger\\msmsgs.exe"=
    "D:\\Program Files\\uTorrent\\uTorrent.exe"=
    "D:\\Program Files\\Free Download Manager\\fdm.exe"=
    "D:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "D:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

    *Newly Created Service* - ANTIVIRSCHEDULER
    *Newly Created Service* - ANTIVIRSERVICE
    *Newly Created Service* - AVGIO
    *Newly Created Service* - AVGNTFLT
    *Newly Created Service* - AVIPBB
    *Newly Created Service* - SSMDRV
    .
    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-06-18 18:51:18
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************
    .
    Temps d'accomplissement: 2008-06-18 18:54:44
    ComboFix-quarantined-files.txt 2008-06-18 16:54:23
    ComboFix2.txt 2008-06-18 15:08:58

    Pre-Run: 10,399,109,120 octets libres
    Post-Run: 10,391,453,696 octets libres

    117 --- E O F --- 2008-06-14 10:30:24

    _______________________________________________________________________________
    _______________________________________________________________________________
    _______________________________________________________________________________

    Puis

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:58:26, on 18/06/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    D:\WINDOWS\System32\smss.exe
    D:\WINDOWS\system32\winlogon.exe
    D:\WINDOWS\system32\services.exe
    D:\WINDOWS\system32\lsass.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\System32\svchost.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    D:\WINDOWS\system32\ctfmon.exe
    D:\Program Files\Windows Live\Messenger\msnmsgr.exe
    D:\Program Files\Free Download Manager\fdm.exe
    D:\Program Files\Free Download Manager\fum\fum.exe
    D:\Program Files\Free Download Manager\FUM\fumoei.exe
    D:\WINDOWS\system32\wuauclt.exe
    D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    D:\WINDOWS\explorer.exe
    D:\Program Files\Mozilla Firefox\firefox.exe
    D:\Documents and Settings\Windows\Bureau\HiJackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: (no name) - {3B69DD7E-5C0B-4003-BA11-9CA298AFCF19} - D:\Program Files\MSN\diqatubem777444.dll (file missing)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - D:\Program Files\Free Download Manager\iefdm2.dll
    O4 - HKLM\..\Run: [Nvidia] D:\Documents and Settings\Windows\dqofvv.exe
    O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Free Download Manager] "D:\Program Files\Free Download Manager\fdm.exe" -autorun
    O4 - HKCU\..\Run: [Free Upload Manager] "D:\Program Files\Free Download Manager\fum\fum.exe" -autorun
    O4 - HKCU\..\Run: [Free Uploader Oe Integration] D:\Program Files\Free Download Manager\FUM\fumoei.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://D:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Télécharger avec Free Download Manager - file://D:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://D:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://D:\Program Files\Free Download Manager\dlfvideo.htm
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - D:\Program Files\Free Download Manager\FUM\fumiebtn.dll
    O10 - Unknown file in Winsock LSP: d:\windows\system32\nwprovau.dll
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O23 - Service: Adobe LM Service - Unknown owner - D:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    0
  12. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    relance hijackthis fais do a system scan only et selectionne ces lignes et fais fix cheked

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: (no name) - {3B69DD7E-5C0B-4003-BA11-9CA298AFCF19} - D:\Program Files\MSN\diqatubem777444.dll (file missing)
    O4 - HKLM\..\Run: [Nvidia] D:\Documents and Settings\Windows\dqofvv.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

    _______________

    colle un rapport avec ANTIVIR et dis moi tes souci actuels
    0
  13. dan24 Messages postés 11 Statut Membre
     
    Merci beaucoup jlpjlp !
    Je n'ai plus de publicités qui s'affichent !

    mais d'apres le rapport avec Antivir, j'ai pleins d'infections
    le mieux est la mise en quarantaine ou supprimer ?

    Avira AntiVir Personal
    Report file date: mercredi 18 juin 2008 21:01

    Scanning for 1346606 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 2) [5.1.2600]
    Boot mode: Normally booted
    Username: Windows
    Computer name: BINH

    Version information:
    BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
    AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
    AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
    LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
    LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
    ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
    ANTIVIR2.VDF : 7.0.4.195 2546176 Bytes 14/06/2008 15:20:46
    ANTIVIR3.VDF : 7.0.4.218 203264 Bytes 18/06/2008 15:20:47
    Engineversion : 8.1.0.55
    AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
    AESCRIPT.DLL : 8.1.0.40 266618 Bytes 18/06/2008 15:20:53
    AESCN.DLL : 8.1.0.21 119156 Bytes 18/06/2008 15:20:53
    AERDL.DLL : 8.1.0.20 418165 Bytes 18/06/2008 15:20:52
    AEPACK.DLL : 8.1.1.5 364918 Bytes 18/06/2008 15:20:51
    AEOFFICE.DLL : 8.1.0.18 192890 Bytes 18/06/2008 15:20:51
    AEHEUR.DLL : 8.1.0.30 1253750 Bytes 18/06/2008 15:20:50
    AEHELP.DLL : 8.1.0.15 115063 Bytes 18/06/2008 15:20:49
    AEGEN.DLL : 8.1.0.28 307572 Bytes 18/06/2008 15:20:49
    AEEMU.DLL : 8.1.0.6 430451 Bytes 18/06/2008 15:20:48
    AECORE.DLL : 8.1.0.31 168310 Bytes 18/06/2008 15:20:47
    AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
    AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
    AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
    AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
    SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
    RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
    RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

    Configuration settings for the scan:
    Jobname..........................: Local Drives
    Configuration file...............: d:\program files\avira\antivir personaledition classic\alldrives.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: on
    Scan boot sector.................: on
    Boot sectors.....................: C:, D:, E:, F:,
    Scan memory......................: on
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: off
    Scan all files...................: Intelligent file selection
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: mercredi 18 juin 2008 21:01

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
    Scan process 'firefox.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
    Scan process 'fumoei.exe' - '1' Module(s) have been scanned
    Scan process 'fum.exe' - '1' Module(s) have been scanned
    Scan process 'fdm.exe' - '1' Module(s) have been scanned
    Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'MDM.EXE' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    26 processes with 26 modules were scanned

    Starting master boot sector scan:
    Master boot sector HD0
    [INFO] No virus was found!

    Start scanning boot sectors:
    Boot sector 'C:\'
    [INFO] No virus was found!
    Boot sector 'D:\'
    [INFO] No virus was found!
    Boot sector 'E:\'
    [INFO] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '27' files ).

    Starting the file scan:

    Begin scan in 'C:\' <Ne pas utiliser>
    C:\svcipa.exe
    [DETECTION] Is the Trojan horse TR/Starter.AEY
    [NOTE] The file was moved to '48bc5c1c.qua'!
    Begin scan in 'D:\' <Systeme>
    D:\pagefile.sys
    [WARNING] The file could not be opened!
    D:\Documents and Settings\Windows\dqofvv.MSNFix
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '48c85c80.qua'!
    D:\Documents and Settings\Windows\ydmvwp.MSNFix
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '48c65c77.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.16367
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c71.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.26256
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c74.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.26388
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c77.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.26475
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c78.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.27070
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '49e85d31.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.35431
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c79.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.50477
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c7a.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.61386
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c7b.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.76335
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c7d.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.78324
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '49e85d36.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.82557
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c7f.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.88169
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c7e.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.89078
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '49e85d37.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.91883
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '49e85dc8.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.92917
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c81.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.93132
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '49e85dca.qua'!
    D:\Documents and Settings\Windows\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.96894
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '489a5c80.qua'!
    D:\Documents and Settings\Windows\Bureau\Upload_Me.zip
    [0] Archive type: ZIP
    --> DOCUME~1/Windows/Bureau/Upload_Me/b128.exe
    [DETECTION] Is the Trojan horse TR/Dldr.Agent.ezc.1
    --> DOCUME~1/Windows/Bureau/Upload_Me/b152.exe
    [DETECTION] Is the Trojan horse TR/Dldr.Agent.tkz
    --> DOCUME~1/Windows/Bureau/Upload_Me/b155.exe
    [DETECTION] Is the Trojan horse TR/BHO.bkm.1
    --> DOCUME~1/Windows/Bureau/Upload_Me/b157.exe
    [DETECTION] Is the Trojan horse TR/Dldr.Agent.jih.1
    --> DOCUME~1/Windows/Bureau/Upload_Me/b999.exe
    [DETECTION] Is the Trojan horse TR/Agent.CZF
    --> DOCUME~1/Windows/Bureau/Upload_Me/catchme.zip
    [1] Archive type: ZIP
    --> %0e+000xe
    [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    --> DOCUME~1/Windows/Bureau/Upload_Me/dqofvv.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> DOCUME~1/Windows/Bureau/Upload_Me/mrofinu1423.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> DOCUME~1/Windows/Bureau/Upload_Me/Svconr.exe
    [DETECTION] Is the Trojan horse TR/Proxy.Gen
    --> DOCUME~1/Windows/Bureau/Upload_Me/Yazzle1560OinUninstaller.exe
    [DETECTION] Contains detection pattern of the dropper DR/PurityScan.GP.1
    --> DOCUME~1/Windows/Bureau/Upload_Me/ydmvwp.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '48c55cb0.qua'!
    D:\Documents and Settings\Windows\Bureau\msnfix\MSNFix\18062008_14200601.zip
    [0] Archive type: ZIP
    --> backup/b128.exe
    [DETECTION] Is the Trojan horse TR/Dldr.Agent.ezc.1
    --> backup/b152.exe
    [DETECTION] Is the Trojan horse TR/Dldr.Agent.tkz
    --> backup/b155.exe
    [DETECTION] Is the Trojan horse TR/BHO.bkm.1
    --> backup/b157.exe
    [DETECTION] Is the Trojan horse TR/Dldr.Agent.jih.1
    --> backup/b999.exe
    [DETECTION] Is the Trojan horse TR/Agent.CZF
    --> backup/dqofvv.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> backup/mrofinu1423.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> backup/Svconr.exe
    [DETECTION] Is the Trojan horse TR/Proxy.Gen
    --> backup/Yazzle1560OinUninstaller.exe
    [DETECTION] Contains detection pattern of the dropper DR/PurityScan.GP.1
    --> backup/ydmvwp.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '48895c81.qua'!
    D:\Program Files\WindowsUpdate\proprygezix.html
    [DETECTION] Contains suspicious code HEUR/HTML.Malware
    [NOTE] The fund was classified as suspicious.
    [NOTE] The file was moved to '48c85e5a.qua'!
    D:\QooBox\Quarantine\D\Documents and Settings\Windows\Mes documents\ASKS~1\svchost.exe.vir
    [DETECTION] Is the Trojan horse TR/Dldr.PurityScan.FJ.2
    [NOTE] The file was moved to '48bc5e63.qua'!
    D:\SDFix\backups\backups.zip
    [0] Archive type: ZIP
    --> backups/%%%.exe
    [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    --> backups/lagurigyz.dll
    [DETECTION] Is the Trojan horse TR/BHO.AB.6
    --> backups/SpeedRunner.exe
    [DETECTION] Is the Trojan horse TR/Dldr.Agent.pbq
    --> backups/suigpk.exe
    [DETECTION] Is the Trojan horse TR/Dldr.Agent.qqn
    --> backups/tk58.exe
    [DETECTION] Is the Trojan horse TR/BHO.AB.4
    --> backups/Yazzle1560OinAdmin.exe
    --> Object
    [2] Archive type: RSRC
    --> Object
    [DETECTION] Is the Trojan horse TR/Dldr.Purity.BV.7
    --> Object
    [DETECTION] Is the Trojan horse TR/Dldr.PurityScan.FJ.2
    --> backups/Yazzle1560OinUninstaller.MSNFix
    [DETECTION] Contains detection pattern of the dropper DR/PurityScan.GP.1
    [NOTE] The file was moved to '48bc5e52.qua'!
    D:\WINDOWS\system32\djsyrt.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '48cc5fd4.qua'!
    D:\WINDOWS\system32\iy876F08.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '48915feb.qua'!
    D:\WINDOWS\system32\qcosrn.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '48c85feb.qua'!
    D:\WINDOWS\system32\vxcrni.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    [NOTE] The file was moved to '48bc600b.qua'!
    Begin scan in 'E:\' <DATA>
    Begin scan in 'F:\'
    Search path F:\ could not be opened!
    Le périphérique n'est pas prêt.

    End of the scan: mercredi 18 juin 2008 21:20
    Used time: 19:03 min

    The scan has been done completely.

    3399 Scanning directories
    127574 Files were scanned
    54 viruses and/or unwanted programs were found
    1 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    29 files were moved to quarantine
    0 files were renamed
    1 Files cannot be scanned
    127520 Files not concerned
    996 Archives were scanned
    1 Warnings
    29 Notes
    0
  14. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    vire le dossier backups en allant dans poste de travail puis

    D:\SDFix\backups\

    __________________

    vire ce qui est dans le dossier quarantine

    D:\QooBox\Quarantine\

    ___________________

    vire ce qui est en quarantaine dans antivir et malwarebyte's

    ____________________
    lance tools cleaner et nettoie avec

    http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

    _____________________

    colle un nouveau rapport antivir

    retelecharge hijakchits et colle moi un nouveau rapport
    0
  15. dan24 Messages postés 11 Statut Membre
     
    Rapport hijakchits :

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:04:06, on 20/06/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    D:\WINDOWS\System32\smss.exe
    D:\WINDOWS\system32\winlogon.exe
    D:\WINDOWS\system32\services.exe
    D:\WINDOWS\system32\lsass.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\System32\svchost.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    D:\WINDOWS\Explorer.EXE
    D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    D:\WINDOWS\system32\ctfmon.exe
    D:\Program Files\Windows Live\Messenger\msnmsgr.exe
    D:\Program Files\Free Download Manager\fdm.exe
    D:\Program Files\Free Download Manager\fum\fum.exe
    D:\Program Files\Free Download Manager\FUM\fumoei.exe
    D:\Program Files\Mozilla Firefox\firefox.exe
    D:\WINDOWS\system32\wuauclt.exe
    D:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
    D:\Documents and Settings\Windows\Bureau\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - D:\Program Files\Free Download Manager\iefdm2.dll
    O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Free Download Manager] "D:\Program Files\Free Download Manager\fdm.exe" -autorun
    O4 - HKCU\..\Run: [Free Upload Manager] "D:\Program Files\Free Download Manager\fum\fum.exe" -autorun
    O4 - HKCU\..\Run: [Free Uploader Oe Integration] D:\Program Files\Free Download Manager\FUM\fumoei.exe
    O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "D:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
    O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://D:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Télécharger avec Free Download Manager - file://D:\Program Files\Free Download Manager\dllink.htm
    O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://D:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://D:\Program Files\Free Download Manager\dlfvideo.htm
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Upload - {FD4E2FF8-973C-4A19-89BD-8E86B3CFCFE1} - D:\Program Files\Free Download Manager\FUM\fumiebtn.dll
    O10 - Unknown file in Winsock LSP: d:\windows\system32\nwprovau.dll
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O23 - Service: Adobe LM Service - Unknown owner - D:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    0
  16. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    ok rien dans hijackthis. Encore des problèmes? Garde antivir et malwarebytes pour te protéger . Navigue avec firefox .
    0
  17. dan24 Messages postés 11 Statut Membre
     
    oh j'oublias le rapport de antivir

    Avira AntiVir Personal
    Report file date: vendredi 20 juin 2008 14:06

    Scanning for 1346606 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 2) [5.1.2600]
    Boot mode: Normally booted
    Username: Windows
    Computer name: BINH

    Version information:
    BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
    AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
    AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
    LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
    LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
    ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
    ANTIVIR2.VDF : 7.0.4.195 2546176 Bytes 14/06/2008 15:20:46
    ANTIVIR3.VDF : 7.0.4.218 203264 Bytes 18/06/2008 15:20:47
    Engineversion : 8.1.0.55
    AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
    AESCRIPT.DLL : 8.1.0.40 266618 Bytes 18/06/2008 15:20:53
    AESCN.DLL : 8.1.0.21 119156 Bytes 18/06/2008 15:20:53
    AERDL.DLL : 8.1.0.20 418165 Bytes 18/06/2008 15:20:52
    AEPACK.DLL : 8.1.1.5 364918 Bytes 18/06/2008 15:20:51
    AEOFFICE.DLL : 8.1.0.18 192890 Bytes 18/06/2008 15:20:51
    AEHEUR.DLL : 8.1.0.30 1253750 Bytes 18/06/2008 15:20:50
    AEHELP.DLL : 8.1.0.15 115063 Bytes 18/06/2008 15:20:49
    AEGEN.DLL : 8.1.0.28 307572 Bytes 18/06/2008 15:20:49
    AEEMU.DLL : 8.1.0.6 430451 Bytes 18/06/2008 15:20:48
    AECORE.DLL : 8.1.0.31 168310 Bytes 18/06/2008 15:20:47
    AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
    AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
    AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
    AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
    SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
    RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
    RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

    Configuration settings for the scan:
    Jobname..........................: Local Drives
    Configuration file...............: d:\program files\avira\antivir personaledition classic\alldrives.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: on
    Scan boot sector.................: on
    Boot sectors.....................: C:, D:, E:, F:,
    Scan memory......................: on
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: off
    Scan all files...................: Intelligent file selection
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: vendredi 20 juin 2008 14:06

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'AcroRd32.exe' - '1' Module(s) have been scanned
    Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
    Scan process 'firefox.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'fumoei.exe' - '1' Module(s) have been scanned
    Scan process 'fum.exe' - '1' Module(s) have been scanned
    Scan process 'fdm.exe' - '1' Module(s) have been scanned
    Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'MDM.EXE' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    27 processes with 27 modules were scanned

    Starting master boot sector scan:
    Master boot sector HD0
    [INFO] No virus was found!

    Start scanning boot sectors:
    Boot sector 'C:\'
    [INFO] No virus was found!
    Boot sector 'D:\'
    [INFO] No virus was found!
    Boot sector 'E:\'
    [INFO] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '27' files ).

    Starting the file scan:

    Begin scan in 'C:\' <Ne pas utiliser>
    Begin scan in 'D:\' <Systeme>
    D:\pagefile.sys
    [WARNING] The file could not be opened!
    Begin scan in 'E:\' <DATA>
    Begin scan in 'F:\'
    Search path F:\ could not be opened!
    Le périphérique n'est pas prêt.

    End of the scan: vendredi 20 juin 2008 14:31
    Used time: 25:50 min

    The scan has been done completely.

    3483 Scanning directories
    128922 Files were scanned
    0 viruses and/or unwanted programs were found
    0 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    0 files were moved to quarantine
    0 files were renamed
    1 Files cannot be scanned
    128922 Files not concerned
    991 Archives were scanned
    1 Warnings
    0 Notes
    0
  18. dan24 Messages postés 11 Statut Membre
     
    Oui apparemment, y'a plus de probleme
    Maintenant J'peux naviguer tranquillement sans publicités

    Merci pour ton Aide jlpjlp !
    0
  19. dan24 Messages postés 11 Statut Membre
     
    Merrciii beaucoup Jlpjlp ;)
    0
  20. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    de rien!
    0
  21. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    ok

    mettre a jour internet explorer
    https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

    _______________

    télécharge combofix (par sUBs) ici :

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    et enregistre le sur le bureau.

    déconnecte toi d'internet et ferme toutes tes applications.

    désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

    double-clique sur combofix.exe et suis les instructions

    à la fin, il va produire un rapport C:\ComboFix.txt

    réactive ton parefeu, ton antivirus, la garde de ton antispyware

    copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

    Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

    Tu as un tutoriel complet ici :

    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

    __________________

    installe un antivirus : antivir
    https://www.malekal.com/avira-free-security-antivirus-gratuit/

    __________________

    recolle un hijakchits et dis tes soucis
    -1
    1. Utilisateur anonyme
       
      salutations,
      si tu donne des liens d'un site comme "01.net" ! il n'a pas fini d'être infecté ...
      0
  • 1
  • 2

Discussions similaires

Message "Un bloqueur de publicité empêche la lecture..."
pistouri -
pistouri -

0 réponse
comment desactiver un bloqueur de pub
amour10 -
MPMP10 -

4 réponses
publicité intempestive
alost -
HelpiOS -

5 réponses
M6 Replay désactiver le bloqueur de publicité
katydel88 -
Mathieu -

14 réponses
Adblock plus et france.tv
boutxy -
anna -

3 réponses