Probleme de spyware - Page 2

[b]SDFix: Version 1.212 [/b]
Run by GILLES RAT on 04/08/2008 at 12:01

Microsoft Windows XP [version 5.1.2600]
Running From: C:\DOCUME~1\GILLES~1\Bureau\SDFix

[b]Checking Services [/b]:

Restoring Default Security Values
Restoring Default Hosts File
Restoring Default HomePage Value
Restoring Default Desktop Components Value
Restoring Default Desktop Wallpaper

Rebooting

[b]Checking Files [/b]:

Trojan Files Found:

C:\Program Files\rhcn53j0e7a5\database.dat - Deleted
C:\Program Files\rhcn53j0e7a5\license.txt - Deleted
C:\Program Files\rhcn53j0e7a5\MFC71.dll - Deleted
C:\Program Files\rhcn53j0e7a5\MFC71ENU.DLL - Deleted
C:\Program Files\rhcn53j0e7a5\msvcp71.dll - Deleted
C:\Program Files\rhcn53j0e7a5\msvcr71.dll - Deleted
C:\Program Files\rhcn53j0e7a5\rhcn53j0e7a5.exe - Deleted
C:\Program Files\rhcn53j0e7a5\rhcn53j0e7a5.exe.local - Deleted
C:\Program Files\rhcn53j0e7a5\Uninstall.exe - Deleted
C:\WINDOWS\SYSTEM32\PHCJ53~1.BMP - Deleted
C:\Program Files\RichVideoCodec\MultiLoader.dll - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt1066.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt1077.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt1089.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt109C.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt10C1.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt10F7.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt11C1.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt1272.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt12E1.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt1362.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt157C.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt1604.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt1661.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.tt19B7.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttB47.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttB98.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttBC5.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttBF8.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttC14.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttC1E.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttC45.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttC5D.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttCC7.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttFBE.tmp - Deleted
C:\DOCUME~1\GILLES~1\LOCALS~1\Temp\.ttB47.tmp.vbs - Deleted
C:\Documents and Settings\GILLES RAT\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk - Deleted
C:\Documents and Settings\GILLES RAT\real.txt - Deleted
C:\WINDOWS\dat.txt - Deleted
C:\WINDOWS\search_res.txt - Deleted
C:\WINDOWS\system32\RichVideoCodec.dll - Deleted
C:\WINDOWS\system32\nvrsul32.dll - Deleted

Folder C:\Program Files\RichVideoCodec - Removed

Removing Temp Files

[b]ADS Check [/b]:

Ca me met ca dans Report de SDFix

Ok.

- Télécharge et installe MalwareByte's Anti-Malware :
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

- Mets-le à jour

- Redémarre en mode sans échec (Recommandé) :
https://www.malekal.com/demarrer-windows-mode-sans-echec/

- Choisis ta session habituelle

- Fais un scan complet avec MalwareByte's Anti-Malware

- Supprime tout ce que le logiciel trouve, enregistre le rapport

- Redémarre en mode normal et poste le rapport ici

Tutorial :
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

C'est bon avec Avast le spyware a été supprimer.

Je te conseille quand même de faire le scan.