Warning spywre detected on your computer

Résolu
Bonjour,

aidez moi svp depuis hier un ecran bleu apparait sur mon pc et je n'arrive a acceder au menu demarrage, j'ai essayer smitfraudix et navilog1 sans succes comment faire. si je reformate je perds toutes mes données.
le message est le suivant : " warning spyware detected on your computer ! install an antivirus or spyware remover to clean your computer. merci a l'avance.Configuration: Windows xp familiale
Internet Explorer 7.0
Configuration: Windows Vista
Internet Explorer 7.0

9 réponses

  • Votes
  • Date
  • Date décroissante
  1. Salut,

    Télécharge HijackThis ici :

    -> http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

    -> Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

    -> Clique sur Install ensuite sur I Accept

    -> Clique sur Do a scan system and save log file

    -> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse

    -> Si soucis :

    Tutoriel d´instalation :

    -> https://forums.cnetfrance.fr

    Tutoriel d´utilisation :

    -> https://forums.cnetfrance.fr

    Post le rapport généré ici stp...

    1. merci d'avoir repondu aussi vite

      voila le rapport :
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 18:04:01, on 07/08/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16674)
      Boot mode: Safe mode

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL (file missing)
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL (file missing)
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL (file missing)
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL (file missing)
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
      O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
      O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
      O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
      O4 - HKLM\..\Run: [WireLessMouse] C:\Program Files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe
      O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [lphc9uhj0e74r] C:\WINDOWS\system32\lphc9uhj0e74r.exe
      O4 - HKLM\..\Run: [SMrhccuhj0e74r] C:\Program Files\rhccuhj0e74r\rhccuhj0e74r.exe
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\RunOnce: [tmp197671] cmd /Q /C "C:\WINDOWS\tmp197640.bat"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [Skype] "C:\PROGRA~1\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [DialMessenger] "C:\Program Files\DialMessenger\dialmessenger.exe" -background
      O4 - HKCU\..\Run: [MsgCenterExe] "C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" -osboot
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O21 - SSODL: HUcLOoMSvG - {F433E3D6-5E99-497C-3FBC-918CC3AFF4BD} - C:\WINDOWS\system32\xxz.dll (file missing)
      O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-series Mouse And Keyboard\KMWDSrv.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
      O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
      O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
      1. Telecharge malwarebytes

        -> http://www.malwarebytes.org/mbam/program/mbam-setup.exe

        Tu l´instale; le programme va se mettre automatiquement a jour.

        Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

        Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".

        Puis click sur "rechercher".

        Laisse le scanner le pc...

        Si des elements on ete trouvés > click sur supprimer la selection.

        si il t´es demandé de redemarrer > click sur "yes".

        A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.
        Copie et colle le rapport stp.

        PS : les rapport sont aussi rangé dans l onglet rapport/log
        1. voila le dernier rapport
          Malwarebytes' Anti-Malware 1.24
          Version de la base de données: 1012
          Windows 5.1.2600 Service Pack 2

          18:50:50 07/08/2008
          mbam-log-8-7-2008 (18-50-37).txt

          Type de recherche: Examen rapide
          Eléments examinés: 47134
          Temps écoulé: 26 minute(s), 46 second(s)

          Processus mémoire infecté(s): 0
          Module(s) mémoire infecté(s): 0
          Clé(s) du Registre infectée(s): 29
          Valeur(s) du Registre infectée(s): 9
          Elément(s) de données du Registre infecté(s): 2
          Dossier(s) infecté(s): 39
          Fichier(s) infecté(s): 29

          Processus mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Module(s) mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Clé(s) du Registre infectée(s):
          HKEY_CLASSES_ROOT\shoppingreport.iebutton (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\shoppingreport.iebutton.1 (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\CLSID\{c9ccbb35-d123-4a31-affc-9b2933132116} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\shoppingreport.hbinfoband (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\shoppingreport.hbinfoband.1 (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\CLSID\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.Shopping.Report) -> No action taken.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\shoppingreport.iebuttona (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\shoppingreport.iebuttona.1 (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\CLSID\{a16ad1e9-f69a-45af-9462-b1c286708842} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\shoppingreport.hbax (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\shoppingreport.hbax.1 (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\CLSID\{20ea9658-6bc3-4599-a87d-6371fe9295fc} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\shoppingreport.rprtctrl (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\shoppingreport.rprtctrl.1 (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\Interface\{8ad9ad05-36be-4e40-ba62-5422eb0d02fb} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\Interface\{d8560ac2-21b5-4c1a-bdd4-bd12bc83b082} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\Typelib\{cdca70d8-c6a6-49ee-9bed-7429d6c477a2} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\Typelib\{d136987f-e1c4-4ccc-a220-893df03ec5df} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\Typelib\{e343edfc-1e6c-4cb5-aa29-e9c922641c80} (Adware.Shopping.Report) -> No action taken.
          HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> No action taken.
          HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> No action taken.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\shoppingreport (Adware.Shopping.Report) -> No action taken.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhccuhj0e74r (Rogue.Multiple) -> No action taken.
          HKEY_LOCAL_MACHINE\SOFTWARE\rhccuhj0e74r (Rogue.Multiple) -> No action taken.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> No action taken.
          HKEY_CURRENT_USER\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> No action taken.
          HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> No action taken.

          Valeur(s) du Registre infectée(s):
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> No action taken.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.Shopping.Report) -> No action taken.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> No action taken.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\smrhccuhj0e74r (Rogue.Multiple) -> No action taken.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lphc9uhj0e74r (Trojan.FakeAlert) -> No action taken.
          HKEY_CURRENT_USER\Control Panel\Desktop\wallpaper (Hijack.Wallpaper) -> No action taken.
          HKEY_CURRENT_USER\Control Panel\Desktop\originalwallpaper (Hijack.Wallpaper) -> No action taken.
          HKEY_CURRENT_USER\Control Panel\Desktop\convertedwallpaper (Hijack.Wallpaper) -> No action taken.
          HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe (Hijack.Wallpaper) -> No action taken.

          Elément(s) de données du Registre infecté(s):
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.
          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

          Dossier(s) infecté(s):
          C:\Program Files\ShoppingReport (Adware.Shopping.Report) -> No action taken.
          C:\Program Files\ShoppingReport\Bin (Adware.Shopping.Report) -> No action taken.
          C:\Program Files\ShoppingReport\Bin\2.0.26 (Adware.Shopping.Report) -> No action taken.
          C:\Program Files\ShoppingReport\cs (Adware.Shopping.Report) -> No action taken.
          C:\Program Files\rhccuhj0e74r (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\db (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\dwld (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\report (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\res1 (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\db (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\dwld (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\report (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\res1 (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine\Autorun (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine\Autorun\HKCU (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine\Autorun\HKLM (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine\BrowserObjects (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\rhccuhj0e74r\Quarantine\Packages (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine\Autorun (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine\Autorun\HKCU (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine\Autorun\HKLM (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine\BrowserObjects (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\rhccuhj0e74r\Quarantine\Packages (Rogue.Multiple) -> No action taken.

          Fichier(s) infecté(s):
          C:\Program Files\ShoppingReport\Uninst.exe (Adware.Shopping.Report) -> No action taken.
          C:\Program Files\rhccuhj0e74r\database.dat (Rogue.Multiple) -> No action taken.
          C:\Program Files\rhccuhj0e74r\license.txt (Rogue.Multiple) -> No action taken.
          C:\Program Files\rhccuhj0e74r\MFC71.dll (Rogue.Multiple) -> No action taken.
          C:\Program Files\rhccuhj0e74r\MFC71ENU.DLL (Rogue.Multiple) -> No action taken.
          C:\Program Files\rhccuhj0e74r\msvcp71.dll (Rogue.Multiple) -> No action taken.
          C:\Program Files\rhccuhj0e74r\msvcr71.dll (Rogue.Multiple) -> No action taken.
          C:\Program Files\rhccuhj0e74r\rhccuhj0e74r.exe (Rogue.Multiple) -> No action taken.
          C:\Program Files\rhccuhj0e74r\rhccuhj0e74r.exe.local (Rogue.Multiple) -> No action taken.
          C:\Program Files\rhccuhj0e74r\Uninstall.exe (Rogue.Multiple) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\Config.xml (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\ShoppingReport\cs\res1\WhiteList.dbs (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\Config.xml (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.Shopping.Report) -> No action taken.
          C:\Documents and Settings\Invité\Application Data\ShoppingReport\cs\res1\WhiteList.dbs (Adware.Shopping.Report) -> No action taken.
          C:\WINDOWS\system32\blphc9uhj0e74r.scr (Trojan.FakeAlert) -> No action taken.
          C:\WINDOWS\system32\lphc9uhj0e74r.exe (Trojan.FakeAlert) -> No action taken.
          C:\WINDOWS\system32\phc9uhj0e74r.bmp (Trojan.FakeAlert) -> No action taken.
          C:\WINDOWS\system32\pphc9uhj0e74r.exe (Trojan.FakeAlert) -> No action taken.
          C:\Documents and Settings\NUMA\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk (Rogue.Antivirus2008) -> No action taken.
          1. No action taken = t as pas supprimé la selection ....
            1. il me semblait que oui maintenant le pc a redemarrer et l'ecran est tout bleu ... je recommence a nouveau ?
              je viens de redemarrer a nouveau et l'ecran reste bleu. je suis obligé de repasser en mode sans echec
              1. OUI Recommence de plus tu as fait un examen rapide et pas complet
                1. ok merci je recommence pour un tour et sincerement merci pour ton soutien