Warning! spyware detected on your computer!

bibo198 -  
Bonjour,

j'ai un écran en bleu est sur mon bureau avec le msg warning! spyware detected on your computer!, je n'arrive pas à l'enlever malgrè plusieurs essais.
Quand je laisse mon ordi pendant 10 mn sans le toucher l'ecran est tout en bleu avec plusieur msg...
Si quelqu'un peut m'aider svp.
merci d'avance
Configuration: Windows XP
Internet Explorer 7.0

7 réponses

  1. cruchot10
    bonsoir

    quel est ton antivirus?
    0
    1. Utilisateur anonyme
      SALUT

      telecharge malwarbyte https://www.commentcamarche.net/telecharger/ 34055379 malwarebyte s anti malware a l'intallation verifie que mise a jour et lançer program et scan complet sont bien cocher a la fin du scan tu suprimes se qu'il trouve et tu postes le rapport genere

      Ensuite post un hijackthis.Clic sur le lien ci-dessous

      http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis
      0
      1. bibo198
        rebonsoir,

        ca fonctionne mieux maintenant, merci. je vous envoi quand mm le rapport de Malewyresbytes pour savoir si c vraiment fini.

        Malwarebytes' Anti-Malware 1.21
        Version de la base de données: 971
        Windows 5.1.2600 Service Pack 2

        23:45:11 20/07/2008
        mbam-log-7-20-2008 (23-45-11).txt

        Type de recherche: Examen complet (C:\|D:\|E:\|)
        Eléments examinés: 112365
        Temps écoulé: 1 hour(s), 21 minute(s), 11 second(s)

        Processus mémoire infecté(s): 0
        Module(s) mémoire infecté(s): 2
        Clé(s) du Registre infectée(s): 47
        Valeur(s) du Registre infectée(s): 19
        Elément(s) de données du Registre infecté(s): 3
        Dossier(s) infecté(s): 35
        Fichier(s) infecté(s): 45

        Processus mémoire infecté(s):
        (Aucun élément nuisible détecté)

        Module(s) mémoire infecté(s):
        C:\Program Files\Online_TV\tbOnl1.dll (Adware.Shopper) -> Unloaded module successfully.
        C:\WINDOWS\evgratsm.dll (Trojan.FakeAlert) -> Unloaded module successfully.

        Clé(s) du Registre infectée(s):
        HKEY_CLASSES_ROOT\CLSID\{40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} (Adware.Shopper) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} (Adware.Shopper) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} (Adware.Agent) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302} (Search.Hijack) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{B7C9058D-0F9C-32C0-83B6-740DFD8A6726} (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{e31f5c72-8e0d-4921-8375-9573746c170c} (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{69b98c68-d2b8-4a4e-9cb7-e85b6f3a7014} (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{f2bada0d-fd61-45ef-a994-64a073fd6613} (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.iebutton (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.iebutton.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{c9ccbb35-d123-4a31-affc-9b2933132116} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.hbinfoband (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.hbinfoband.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.iebuttona (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.iebuttona.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{a16ad1e9-f69a-45af-9462-b1c286708842} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.hbax (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.hbax.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{20ea9658-6bc3-4599-a87d-6371fe9295fc} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.rprtctrl (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\shoppingreport.rprtctrl.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\Interface\{8ad9ad05-36be-4e40-ba62-5422eb0d02fb} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\Interface\{d8560ac2-21b5-4c1a-bdd4-bd12bc83b082} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\Typelib\{cdca70d8-c6a6-49ee-9bed-7429d6c477a2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\Typelib\{d136987f-e1c4-4ccc-a220-893df03ec5df} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\Typelib\{e343edfc-1e6c-4cb5-aa29-e9c922641c80} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\multimedia software (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\shoppingreport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\TypeLib\{88a6bf68-b9b6-429b-a8b0-3cc5c6db948c} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\Interface\{8adabfcc-2174-46c8-8dc8-161780adeac5} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{3fcaeb7d-f8ae-4a67-ae6c-57ee1416bb6d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\CLSID\{5acd4bb4-bd8b-40ce-999f-ad466df41a4c} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\qndsfmao.bvqe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\qndsfmao.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Online Add-on (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CLASSES_ROOT\multimediaControls.chl (Trojan.Zlob) -> Quarantined and deleted successfully.

        Valeur(s) du Registre infectée(s):
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} (Adware.Shopper) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} (Adware.Shopper) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} (Adware.Shopper) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{f2bada0d-fd61-45ef-a994-64a073fd6613} (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{3fcaeb7d-f8ae-4a67-ae6c-57ee1416bb6d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\evgratsm (Trojan.FakeAlert) -> Delete on reboot.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphcr73j0eel0 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\smrhcv73j0eel0 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\kvxqmtre (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com (Trojan.Zlob) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\Control Panel\Desktop\wallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\Control Panel\Desktop\originalwallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\Control Panel\Desktop\convertedwallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe (Hijack.Wallpaper) -> Quarantined and deleted successfully.

        Elément(s) de données du Registre infecté(s):
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

        Dossier(s) infecté(s):
        C:\Program Files\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Program Files\ShoppingReport\Bin (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Program Files\ShoppingReport\Bin\2.0.26 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Program Files\ShoppingReport\cs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Program Files\Helper (Adware.BHO) -> Quarantined and deleted successfully.
        C:\Program Files\Video Add-on (Trojan.Zlob) -> Quarantined and deleted successfully.
        C:\Program Files\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\db (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\dwld (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\report (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\res1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKCU (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKLM (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\BrowserObjects (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Packages (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKCU (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKLM (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\BrowserObjects (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Packages (Rogue.Multiple) -> Quarantined and deleted successfully.

        Fichier(s) infecté(s):
        C:\Program Files\Online_TV\tbOnl1.dll (Adware.Shopper) -> Delete on reboot.
        C:\Program Files\Video Add-on\uninst.exe (Trojan.Zlob) -> Quarantined and deleted successfully.
        C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP450\A0102933.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\RP450\A0102944.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        C:\WINDOWS\erms.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\pphcr73j0eel0.exe.vzr (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        C:\Program Files\ShoppingReport\Uninst.exe (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Program Files\Video Add-on\ot.ico (Trojan.Zlob) -> Quarantined and deleted successfully.
        C:\Program Files\Video Add-on\ts.ico (Trojan.Zlob) -> Quarantined and deleted successfully.
        C:\Program Files\rhcv73j0eel0\database.dat (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Program Files\rhcv73j0eel0\license.txt (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Program Files\rhcv73j0eel0\MFC71.dll (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Program Files\rhcv73j0eel0\MFC71ENU.DLL (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Program Files\rhcv73j0eel0\msvcp71.dll (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Program Files\rhcv73j0eel0\msvcr71.dll (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Program Files\rhcv73j0eel0\rhcv73j0eel0.exe.local (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Program Files\rhcv73j0eel0\Uninstall.exe (Rogue.Multiple) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\Config.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\res1\WhiteList.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
        C:\WINDOWS\qndsfmao.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        C:\WINDOWS\evgratsm.dll (Trojan.FakeAlert) -> Delete on reboot.
        C:\WINDOWS\system32\blphcr73j0eel0.scr (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\phcr73j0eel0.bmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\dqncrnbrne_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\imyeoaoa_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\dqncrnbrne_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
        C:\WINDOWS\system32\imyeoaoa_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk (Rogue.AntivirusXP2008) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt1.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt2.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt3.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt4.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt5.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt6.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt7.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt9.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.ttA.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.ttB.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Local Settings\Temp\bindsrv2.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
        C:\Documents and Settings\ayoub ouais\Favoris\Online Security Test.url (Rogue.Link) -> Quarantined and deleted successfully.

        pour ce lui de htj je vous l'envoi tt de suite.
        0
    2. cruchot10
      bonsoir nanard

      bien vu l'infos mais précise de le faire en mode sans echec et de renomer hijackthis par ex hjt.exe au cas ou vundo serait dans le coin +1 quand meme
      0
      1. bibo198
        rapport hjt

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 00:06:57, on 21/07/2008
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16674)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
        C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
        C:\Program Files\Spyware Doctor\pctsAuxs.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Spyware Doctor\pctsSvc.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
        C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
        C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        C:\Program Files\HP\QuickPlay\QPService.exe
        C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
        C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
        C:\WINDOWS\vsnpstd3.exe
        C:\Program Files\MessengerPlus! 3\MsgPlus.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
        C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
        C:\Program Files\Spyware Doctor\pctsTray.exe
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
        C:\Program Files\Skype\Phone\Skype.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
        C:\Program Files\Winamp Remote\bin\OrbTray.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
        C:\Program Files\Winamp Remote\bin\Orb.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\WINDOWS\system32\wbem\wmiprvse.exe
        C:\WINDOWS\System32\alg.exe
        C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
        C:\WINDOWS\system32\wbem\wmiprvse.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8bsourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = cache.portable.iae.univ-poitiers.fr:3128
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
        R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
        O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll (file missing)
        O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
        O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
        O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
        O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
        O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
        O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
        O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
        O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
        O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
        O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
        O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
        O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
        O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
        O4 - HKLM\..\Run: [Pinnacle WebUpdater] "C:\Program Files\Pinnacle\Shared Files\Programs\WebUpdater\WebUpdater.exe" -s -f=UpdateVersion.xml -url=http://cdn.pinnaclesys.com/SupportFiles
        O4 - HKLM\..\Run: [PMCRemote] C:\Program Files\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe
        O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
        O4 - HKLM\..\Run: [efdsyjkv] c:\windows\system32\efdsyjkv.exe efdsyjkv
        O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
        O4 - HKCU\..\Run: [PMCS] "C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe"
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
        O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
        O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
        O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
        O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
        O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.79\AMVConverter\grab.html
        O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html
        O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
        O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.79\MediaManager\grab.html
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=https://www8.hp.com/fr/fr/home.html
        O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061023/qtinstall.info.apple.com/qtactivex/qtplugin.cab
        O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://www.m6video.fr/1click/install/files/installer2.cab
        O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        O20 - AppInit_DLLs: MsgPlusLoader.dll C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe (file missing)
        O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
        O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
        O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
        0
    3. bibo198
      salut,

      pour le logiciel malwarbyte, quand je clique sur le lien la page affiche: La page demandée ne se trouve plus à l'emplacement indiqué !
      0
      2. cruchot10
        va dans l'onglet sécurité et dans l'onglet rechercher tape malwarebyte
        0
        2. bibo198
          rebonsoir,

          ca fonctionne mieux maintenant, merci. je vous envoi quand mm le rapport de Malewyresbytes pour savoir si c vraiment fini.

          Malwarebytes' Anti-Malware 1.21
          Version de la base de données: 971
          Windows 5.1.2600 Service Pack 2

          23:45:11 20/07/2008
          mbam-log-7-20-2008 (23-45-11).txt

          Type de recherche: Examen complet (C:\|D:\|E:\|)
          Eléments examinés: 112365
          Temps écoulé: 1 hour(s), 21 minute(s), 11 second(s)

          Processus mémoire infecté(s): 0
          Module(s) mémoire infecté(s): 2
          Clé(s) du Registre infectée(s): 47
          Valeur(s) du Registre infectée(s): 19
          Elément(s) de données du Registre infecté(s): 3
          Dossier(s) infecté(s): 35
          Fichier(s) infecté(s): 45

          Processus mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Module(s) mémoire infecté(s):
          C:\Program Files\Online_TV\tbOnl1.dll (Adware.Shopper) -> Unloaded module successfully.
          C:\WINDOWS\evgratsm.dll (Trojan.FakeAlert) -> Unloaded module successfully.

          Clé(s) du Registre infectée(s):
          HKEY_CLASSES_ROOT\CLSID\{40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3­b} (Adware.Shopper) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Explorer\Browser Helper Objects\{40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} (Adware.Shopper) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}­ (Adware.Agent) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302}­ (Search.Hijack) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{B7C9058D-0F9C-32C0-83B6-740DFD8A672­6} (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{e31f5c72-8e0d-4921-8375-9573746c170­c} (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{69b98c68-d2b8-4a4e-9cb7-e85b6f3a701­4} (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{f2bada0d-fd61-45ef-a994-64a073fd661­3} (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.iebutton (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.iebutton.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{c9ccbb35-d123-4a31-affc-9b293313211­6} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.hbinfoband (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.hbinfoband.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{a7cddcdc-beeb-4685-a062-978f5e07cee­e} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.iebuttona (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.iebuttona.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{a16ad1e9-f69a-45af-9462-b1c28670884­2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.hbax (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.hbax.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{20ea9658-6bc3-4599-a87d-6371fe9295f­c} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.rprtctrl (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\shoppingreport.rprtctrl.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{100eb1fd-d03e-47fd-81f3-ee91287f946­5} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Interface\{8ad9ad05-36be-4e40-ba62-5422eb0­d02fb} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Interface\{aebf09e2-0c15-43c8-99bf-928c645­d98a0} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Interface\{d8560ac2-21b5-4c1a-bdd4-bd12bc8­3b082} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Typelib\{cdca70d8-c6a6-49ee-9bed-7429d6c47­7a2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Typelib\{d136987f-e1c4-4ccc-a220-893df03ec­5df} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Typelib\{e343edfc-1e6c-4cb5-aa29-e9c922641­c80} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Uninstall\multimedia software (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Uninstall\shoppingreport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Uninstall\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\TypeLib\{88a6bf68-b9b6-429b-a8b0-3cc5c6db9­48c} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\Interface\{8adabfcc-2174-46c8-8dc8-161780a­deac5} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{3fcaeb7d-f8ae-4a67-ae6c-57ee1416bb6­d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\CLSID\{5acd4bb4-bd8b-40ce-999f-ad466df41a4­c} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\qndsfmao.bvqe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\qndsfmao.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Online Add-on (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CLASSES_ROOT\multimediaControls.chl (Trojan.Zlob) -> Quarantined and deleted successfully.

          Valeur(s) du Registre infectée(s):
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} (Adware.Shopper) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3­b} (Adware.Shopper) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{40d1c3a7-4ffb-4443-b3a0-a64b2df­7fc3b} (Adware.Shopper) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{9034a523-d068-4be8-a284-9df2­78be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{f2bada0d-fd61-45ef-a994-64a073f­d6613} (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b­59a9f9b2} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b­59a9f9b3} (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{3fcaeb7d-f8ae-4a67-ae6c-57ee1416bb6d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\ShellServiceObjectDelayLoad\evgratsm (Trojan.FakeAlert) -> Delete on reboot.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Run\lphcr73j0eel0 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\Run\smrhcv73j0eel0 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion­\ShellServiceObjectDelayLoad\kvxqmtre (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com (Trojan.Zlob) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\Control Panel\Desktop\wallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\Control Panel\Desktop\originalwallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\Control Panel\Desktop\convertedwallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe (Hijack.Wallpaper) -> Quarantined and deleted successfully.

          Elément(s) de données du Registre infecté(s):
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\­Explorer\Advanced\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\­Policies\System\NoDispBackgroundPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\­Policies\System\NoDispScrSavPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

          Dossier(s) infecté(s):
          C:\Program Files\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Program Files\ShoppingReport\Bin (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Program Files\ShoppingReport\Bin\2.0.26 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Program Files\ShoppingReport\cs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Program Files\Helper (Adware.BHO) -> Quarantined and deleted successfully.
          C:\Program Files\Video Add-on (Trojan.Zlob) -> Quarantined and deleted successfully.
          C:\Program Files\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\db (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\dwld (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\report (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\res1 (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKCU (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKLM (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\BrowserObjects (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\Invité\Application Data\rhcv73j0eel0\Quarantine\Packages (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0 (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKCU (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKLM (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\BrowserObjects (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\rhcv73j0eel0\Quarantine\Packages (Rogue.Multiple) -> Quarantined and deleted successfully.

          Fichier(s) infecté(s):
          C:\Program Files\Online_TV\tbOnl1.dll (Adware.Shopper) -> Delete on reboot.
          C:\Program Files\Video Add-on\uninst.exe (Trojan.Zlob) -> Quarantined and deleted successfully.
          C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\R­P450\A0102933.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          C:\System Volume Information\_restore{B8687C25-491C-4B92-A950-D228172F494F}\R­P450\A0102944.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          C:\WINDOWS\erms.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          C:\WINDOWS\system32\pphcr73j0eel0.exe.vzr (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          C:\Program Files\ShoppingReport\Uninst.exe (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Program Files\Video Add-on\ot.ico (Trojan.Zlob) -> Quarantined and deleted successfully.
          C:\Program Files\Video Add-on\ts.ico (Trojan.Zlob) -> Quarantined and deleted successfully.
          C:\Program Files\rhcv73j0eel0\database.dat (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Program Files\rhcv73j0eel0\license.txt (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Program Files\rhcv73j0eel0\MFC71.dll (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Program Files\rhcv73j0eel0\MFC71ENU.DLL (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Program Files\rhcv73j0eel0\msvcp71.dll (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Program Files\rhcv73j0eel0\msvcr71.dll (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Program Files\rhcv73j0eel0\rhcv73j0eel0.exe.local (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Program Files\rhcv73j0eel0\Uninstall.exe (Rogue.Multiple) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\Config.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\ShoppingReport\cs\res1\WhiteList.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully.
          C:\WINDOWS\qndsfmao.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          C:\WINDOWS\evgratsm.dll (Trojan.FakeAlert) -> Delete on reboot.
          C:\WINDOWS\system32\blphcr73j0eel0.scr (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          C:\WINDOWS\system32\phcr73j0eel0.bmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          C:\WINDOWS\system32\dqncrnbrne_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
          C:\WINDOWS\system32\imyeoaoa_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
          C:\WINDOWS\system32\dqncrnbrne_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
          C:\WINDOWS\system32\imyeoaoa_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk (Rogue.AntivirusXP2008) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt1.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt2.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt3.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt4.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt5.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt6.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt7.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.tt9.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.ttA.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\.ttB.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Local Settings\Temp\bindsrv2.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
          C:\Documents and Settings\ayoub ouais\Favoris\Online Security Test.url (Rogue.Link) -> Quarantined and deleted successfully.

          pour ce lui de htj je vous l'envoi tt de suite.
          0

          Discussions similaires

          usb device over current
          jean-michel

          39 réponses
          Boot failure detected
          Loshxn

          1 réponse
          suite au message "secure boot violation" impossible d'accéder à window
          Walloute

          9 réponses
          Boot failure detected
          Alex38440

          8 réponses
          Usb device over current status detected
          Kinito2108

          18 réponses