Your computer is infected

OK

@++

Oh lala je sais meme aps si le tres tres tres grand merci suffit tellement je suis heureux lol.

Il n'y plus aucune trace de virus.

Merci 1 000 000 de fois.

Et peut être a une prochaine

Bonne soirée @+

-;)

Ok d'accord

Bah un tres tres grand Merci

un merci suffit

oui c long ...

C super long, ou c que j'ai un Pc de merde xD.

Sinon a par sa vu que tu ma aider comme un pro, j'aurai voulu savoir si il etait possible de te rendre un service,un don ou je ne sais quoi?

ok @++

Ok no problem, il est en cours d'analyse

je voudrais que tu refasse un scan malewarebyte mais complet cette fois

Re,

Enfaite sunbelt firewall rentrais en conflit je l'ai désinstaller et c bon,

Voici le rapport:

ComboFix 08-07-31.06 - Rolande 2008-08-01 19:21:50.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.520 [GMT 2:00]
Endroit: C:\Documents and Settings\Rolande\Bureau\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Autorun.inf
C:\ffojc.com
C:\hgu.bat
C:\qxbx9blb.com
C:\v.exe
C:\WINDOWS\iexplore.exe
C:\WINDOWS\system32\ckvo0.dll
C:\WINDOWS\system32\mcrh.tmp
D:\Autorun.inf
D:\hgu.bat

.
((((((((((((((((((((((((((((( Fichiers créés 2008-07-01 to 2008-08-01 ))))))))))))))))))))))))))))))))))))
.

2008-08-01 18:35 . 2008-08-01 18:35 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-01 18:35 . 2008-08-01 18:35 <REP> d-------- C:\Documents and Settings\Rolande\Application Data\Malwarebytes
2008-08-01 18:35 . 2008-08-01 18:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-01 18:35 . 2008-07-30 20:07 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-01 18:35 . 2008-07-30 20:07 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-08-01 18:32 . 2008-08-01 18:32 <REP> d-------- C:\Program Files\Trend Micro
2008-08-01 17:35 . 2008-08-01 17:35 <REP> d-------- C:\Program Files\Sunbelt Software
2008-08-01 17:35 . 2008-06-21 04:54 269,736 -ra------ C:\WINDOWS\system32\drivers\SbFw.sys
2008-08-01 17:35 . 2008-06-21 04:54 65,576 --a------ C:\WINDOWS\system32\drivers\SbFwIm.sys
2008-08-01 17:29 . 2008-08-01 17:29 <REP> d-------- C:\WINDOWS\system32\GroupPolicy
2008-08-01 17:28 . 2008-08-01 17:32 <REP> d-------- C:\Program Files\Hitman Pro
2008-08-01 17:22 . 2008-08-01 17:22 19,919 --a------ C:\Program Files\Fichiers communs\koba.bat
2008-08-01 17:22 . 2008-08-01 17:22 18,009 --a------ C:\WINDOWS\system32\veziheqaby.scr
2008-08-01 17:22 . 2008-08-01 17:22 14,044 --a------ C:\WINDOWS\system32\byku.vbs
2008-08-01 17:22 . 2008-08-01 17:22 12,943 --a------ C:\WINDOWS\system32\hupe.dat
2008-08-01 17:22 . 2008-08-01 17:22 12,658 --a------ C:\Program Files\Fichiers communs\dysuhasora.exe
2008-08-01 17:22 . 2008-08-01 17:22 11,261 --a------ C:\Documents and Settings\All Users\Application Data\yquqys.dll
2008-08-01 17:22 . 2008-08-01 17:22 11,169 --a------ C:\WINDOWS\ikezut.dat
2008-08-01 17:22 . 2008-08-01 17:22 10,239 --a------ C:\WINDOWS\tuka._sy
2008-08-01 16:29 . 2008-07-27 22:29 172,295 --a------ C:\WINDOWS\system32\_scui.cpl
2008-08-01 16:19 . <REP> C:\Documents and Settings\Administrateur\Application Data\Dossier de téléchargement Share-to-Web
2008-08-01 07:49 . 2008-08-01 07:49 12,555 --a------ C:\Documents and Settings\Rolande\Application Data\jidopi.dat
2008-08-01 07:42 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-08-01 07:42 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-08-01 07:42 . 2008-05-29 09:35 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
2008-08-01 07:42 . 2008-05-18 21:40 82,944 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-08-01 07:42 . 2008-07-02 13:33 82,432 --a------ C:\WINDOWS\system32\IEDFix.C.exe
2008-08-01 07:42 . 2008-05-23 18:21 81,920 --a------ C:\WINDOWS\system32\404Fix.exe
2008-08-01 07:42 . 2003-06-05 21:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2008-08-01 07:42 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-08-01 07:42 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-07-31 20:26 . 2008-07-31 20:26 19,963 --a------ C:\WINDOWS\system32\vimajodos._dl
2008-07-31 20:26 . 2008-07-31 20:26 19,592 --a------ C:\Documents and Settings\All Users\Application Data\akemowuz.bat
2008-07-31 20:26 . 2008-07-31 20:26 19,429 --a------ C:\Documents and Settings\All Users\Application Data\iqewudunut.dat
2008-07-31 20:26 . 2008-07-31 20:26 17,151 --a------ C:\Documents and Settings\All Users\Application Data\osyzevuqab.pif
2008-07-31 20:26 . 2008-07-31 20:26 16,689 --a------ C:\WINDOWS\jykota.ban
2008-07-31 20:26 . 2008-07-31 20:26 14,934 --a------ C:\WINDOWS\system32\unab.inf
2008-07-31 20:26 . 2008-07-31 20:26 14,248 --a------ C:\WINDOWS\system32\bicetadaxa.reg
2008-07-31 20:26 . 2008-07-31 20:26 13,589 --a------ C:\WINDOWS\ijavyx.ban
2008-07-31 20:26 . 2008-07-31 20:26 12,486 --a------ C:\Program Files\Fichiers communs\dyjoqary.sys
2008-07-31 20:26 . 2008-07-31 20:26 11,842 --a------ C:\WINDOWS\ganymyxipe.vbs
2008-07-31 20:26 . 2008-07-31 20:26 11,611 --a------ C:\WINDOWS\system32\aranik.bin
2008-07-31 20:04 . 2008-07-31 20:15 <REP> d-------- C:\Program Files\eToro
2008-07-31 20:02 . 2008-07-31 20:02 <REP> d-------- C:\WINDOWS\PokerRNG
2008-07-31 20:02 . 2008-07-31 20:15 <REP> d-------- C:\Program Files\PokerRNG
2008-07-21 09:45 . 2008-07-21 09:45 77,312 -r-hs---- C:\WINDOWS\system32\ckvo1.dll
2008-07-21 05:04 . 2008-07-21 10:15 118,782 -r-hs---- C:\ybj8df.exe
2008-07-21 05:04 . 2008-07-21 05:04 77,312 -r-hs---- C:\WINDOWS\system32\ckvo2.dll
2008-07-21 04:36 . 2008-07-21 04:36 119,202 -r-hs---- C:\f0.cmd
2008-07-10 18:18 . 2008-07-10 18:47 117,255 -r-hs---- C:\[u]0[/u]gjn3yw.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-01 17:27 83,061,024 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-08-01 17:11 --------- d-----w C:\Program Files\Mozilla Firefox 3 Beta 3
2008-08-01 17:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-08-01 17:01 3,172,896 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
2008-08-01 17:01 299,240 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2008-08-01 17:01 1,118,168 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-08-01 16:16 3,680 ----a-w C:\WINDOWS\system32\tmp.reg
2008-07-31 18:18 --------- d-----w C:\Program Files\FlashGet
2008-07-31 17:15 --------- d-----w C:\Program Files\eMule
2008-06-29 17:30 112,227 --sh--r C:\klp8j6i.com
2008-06-25 16:59 --------- d-----w C:\Documents and Settings\Rolande\Application Data\utorrent
2008-06-23 17:00 --------- d-----w C:\Program Files\PKR
2008-06-21 02:54 66,600 ----a-r C:\WINDOWS\system32\drivers\sbhips.sys
2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-08 06:37 107,736 --sh--r C:\iefqwp.cmd
2008-06-07 16:59 --------- d-----w C:\Program Files\uTorrent
2008-06-04 15:53 --------- d-----w C:\Documents and Settings\Rolande\Application Data\Ariane Software
2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-10-28 16:25 94208]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:54 15360]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 13:35 90112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe" [2002-11-22 21:29 188416]
"HPHmon04"="C:\WINDOWS\system32\hphmon04.exe" [2002-11-22 21:28 348160]
"HPHUPD04"="C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe" [2002-11-22 21:50 49152]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
"ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-16 18:15 221184]
"ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-02-16 18:15 81920]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 22:34 868352]
"HerculesCamService"="C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe" [2007-01-17 19:07 102400]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-02-01 00:13 385024]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 14:10 267048]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 15:21 61952 C:\WINDOWS\system32\HdAShCut.exe]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-09-21 04:10 55824 C:\WINDOWS\KHALMNPR.Exe]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2007-12-06 21:32:09 784912]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2007-11-15 11:10 72208 c:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Rolande^Menu Démarrer^Programmes^Démarrage^Adobe Gamma.lnk]
path=C:\Documents and Settings\Rolande\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2007-04-04 00:29 165784 C:\Program Files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-02-19 14:10 267048 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2001-07-09 10:50 155648 C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando]
--a------ 2007-09-01 08:58 4420936 C:\Program Files\Pando Networks\Pando\pando.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PKR Pal]
--a------ 2008-06-23 17:00 2273896 C:\Program Files\PKR\pkrpal.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Share-to-Web Namespace Daemon]
--a------ 2002-04-17 10:42 69632 C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\Pando Networks\\Pando\\pando.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\utorrent\\utorrent.exe"=
"C:\\Program Files\\RealVNC\\VNC4\\winvnc4.exe"=
"C:\\Program Files\\PeerTV\\mplayer.exe"=
"C:\\Program Files\\FlashGet\\FlashGet.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"4669:UDP"= 4669:UDP:eMule
"6346:TCP"= 6346:TCP:shareaza
"6346:UDP"= 6346:UDP:shareaza

R1 oreans32;oreans32;C:\WINDOWS\system32\drivers\oreans32.sys [2007-04-19 06:18]
R1 sbhips;Sunbelt HIPS Driver;C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 04:54]
R2 ACEDRV08;ACEDRV08;C:\WINDOWS\system32\drivers\ACEDRV08.sys [2007-07-10 13:40]
R2 SbPF.Launcher;SbPF.Launcher;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-07-01 10:51]
R2 SPF4;Sunbelt Personal Firewall 4;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-07-01 10:51]
R3 APL531;Hercules Dualpix HD Webcam;C:\WINDOWS\system32\Drivers\HDvid.sys [2006-12-08 14:02]
R3 camfilt;camfilt;C:\WINDOWS\system32\Drivers\camfilt.sys [2006-11-16 16:01]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 04:54]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;D:\Common\Database\bin\fbserver.exe [2005-11-17 14:18]
S3 hitmanpro2;Hitman Pro 2 Driver;C:\Program Files\Hitman Pro\hitmanpro2.sys [2006-11-03 13:02]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2d445fea-ab10-11db-8974-0013d4fc1e7e}]
\Shell\AutoRun\command - F:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6a53edb7-e8f0-11da-8819-0013d4fc1e7e}]
\Shell\AutoRun\command - K:\AutoRun.exe TMM50

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{733fa348-5766-11dd-860f-0013d4fc1e7e}]
\Shell\AutoRun\command - H:\f0.cmd
\Shell\explore\Command - H:\f0.cmd
\Shell\open\Command - H:\f0.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b997759e-c820-11db-89be-0013d4fc1e7e}]
\Shell\AutoRun\command - G:\LaunchU3.exe -a
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'

2008-07-26 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 15:57]

2008-08-01 C:\WINDOWS\Tasks\HP Usg Daily.job
- C:\Program Files\hp photosmart 11\printer\Hphusg04.exe [2002-11-22 21:50]

2008-08-01 C:\WINDOWS\Tasks\HP Usg Login.job
- C:\Program Files\hp photosmart 11\printer\Hphusg04.exe [2002-11-22 21:50]
.
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Rolande\Application Data\Mozilla\Firefox\Profiles\5gg8dv8y.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fr/
FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - C:\Program Files\Java\jre1.6.0_03\bin\npjava11.dll
FF -: plugin - C:\Program Files\Java\jre1.6.0_03\bin\npjava12.dll
FF -: plugin - C:\Program Files\Java\jre1.6.0_03\bin\npjava13.dll
FF -: plugin - C:\Program Files\Java\jre1.6.0_03\bin\npjava14.dll
FF -: plugin - C:\Program Files\Java\jre1.6.0_03\bin\npjava32.dll
FF -: plugin - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
FF -: plugin - C:\Program Files\Java\jre1.6.0_03\bin\npoji610.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\np-mswmp.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\np32dsw.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\npnul32.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\nppdf32.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\npqtplugin.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\npqtplugin2.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\npqtplugin3.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\npqtplugin4.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\npqtplugin5.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\npqtplugin6.dll
FF -: plugin - C:\Program Files\Mozilla Firefox 3 Beta 3\plugins\npqtplugin7.dll

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-01 19:27:02
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\SbFw]
"ImagePath"="system32\drivers\SbFw.sys"
.
Temps d'accomplissement: 2008-08-01 19:30:25
ComboFix-quarantined-files.txt 2008-08-01 17:29:57

Pre-Run: 1,482,338,304 octets libres
Post-Run: 1,415,786,496 octets libres

244 --- E O F --- 2008-07-24 06:23:50

Merci encore

oui refais

Alors la y'a un problème parce que j'ai tout mis dans le rapport :D.

J'ai du arreter combofix en cours.

Le plus simple c que je refasse une petite analyse non?

non tu recopie/colle le rapport au complet

ah mer** alors faut que je refasse tout?

Enfin juste CF je veut dire

le rapport n est pas complet

Ah c'est magnifique j'ai plus le VIRUS ALERT! ni de messsage toutes les 3s, un enorme merci

Sinon voici le rapport CF:

ComboFix 08-07-31.06 - Rolande 2008-08-01 18:55:37.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.458 [GMT 2:00]
Endroit: C:\Documents and Settings\Rolande\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\ffojc.com
C:\hgu.bat
C:\qxbx9blb.com
C:\v.exe
C:\WINDOWS\iexplore.exe
C:\WINDOWS\system32\ckvo0.dll
C:\WINDOWS\system32\mcrh.tmp
D:\Autorun.inf
D:\hgu.bat

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-07-01 to 2008-08-01 ))))))))))))))))))))))))))))))))))))
.

2008-08-01 18:35 . 2008-08-01 18:35 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-01 18:35 . 2008-08-01 18:35 <REP> d-------- C:\Documents and Settings\Rolande\Application Data\Malwarebytes
2008-08-01 18:35 . 2008-08-01 18:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-01 18:35 . 2008-07-30 20:07 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-01 18:35 . 2008-07-30 20:07 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-08-01 18:32 . 2008-08-01 18:32 <REP> d-------- C:\Program Files\Trend Micro
2008-08-01 17:35 . 2008-08-01 17:35 <REP> d-------- C:\Program Files\Sunbelt Software
2008-08-01 17:35 . 2008-06-21 04:54 269,736 -ra------ C:\WINDOWS\system32\drivers\SbFw.sys
2008-08-01 17:35 . 2008-06-21 04:54 65,576 --a------ C:\WINDOWS\system32\drivers\SbFwIm.sys
2008-08-01 17:29 . 2008-08-01 17:29 <REP> d-------- C:\WINDOWS\system32\GroupPolicy
2008-08-01 17:28 . 2008-08-01 17:32 <REP> d-------- C:\Program Files\Hitman Pro
2008-08-01 17:22 . 2008-08-01 17:22 19,919 --a------ C:\Program Files\Fichiers communs\koba.bat
2008-08-01 17:22 . 2008-08-01 17:22 18,009 --a------ C:\WINDOWS\system32\veziheqaby.scr
2008-08-01 17:22 . 2008-08-01 17:22 14,044 --a------ C:\WINDOWS\system32\byku.vbs
2008-08-01 17:22 . 2008-08-01 17:22 12,943 --a------ C:\WINDOWS\system32\hupe.dat
2008-08-01 17:22 . 2008-08-01 17:22 12,658 --a------ C:\Program Files\Fichiers communs\dysuhasora.exe
2008-08-01 17:22 . 2008-08-01 17:22 11,261 --a------ C:\Documents and Settings\All Users\Application Data\yquqys.dll
2008-08-01 17:22 . 2008-08-01 17:22 11,169 --a------ C:\WINDOWS\ikezut.dat
2008-08-01 17:22 . 2008-08-01 17:22 10,239 --a------ C:\WINDOWS\tuka._sy
2008-08-01 16:29 . 2008-07-27 22:29 172,295 --a------ C:\WINDOWS\system32\_scui.cpl
2008-08-01 16:19 . <REP> C:\Documents and Settings\Administrateur\Application Data\Dossier de t‚l‚chargement Share-to-Web
2008-08-01 07:49 . 2008-08-01 07:49 12,555 --a------ C:\Documents and Settings\Rolande\Application Data\jidopi.dat
2008-08-01 07:42 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-08-01 07:42 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-08-01 07:42 . 2008-05-29 09:35 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
2008-08-01 07:42 . 2008-05-18 21:40 82,944 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-08-01 07:42 . 2008-07-02 13:33 82,432 --a------ C:\WINDOWS\system32\IEDFix.C.exe
2008-08-01 07:42 . 2008-05-23 18:21 81,920 --a------ C:\WINDOWS\system32\404Fix.exe
2008-08-01 07:42 . 2003-06-05 21:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2008-08-01 07:42 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-08-01 07:42 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-07-31 20:26 . 2008-07-31 20:26 19,963 --a------ C:\WINDOWS\system32\vimajodos._dl
2008-07-31 20:26 . 2008-07-31 20:26 19,592 --a------ C:\Documents and Settings\All Users\Application Data\akemowuz.bat
2008-07-31 20:26 . 2008-07-31 20:26 19,429 --a------ C:\Documents and Settings\All Users\Application Data\iqewudunut.dat
2008-07-31 20:26 . 2008-07-31 20:26 17,151 --a------ C:\Documents and Settings\All Users\Application Data\osyzevuqab.pif
2008-07-31 20:26 . 2008-07-31 20:26 16,689 --a------ C:\WINDOWS\jykota.ban
2008-07-31 20:26 . 2008-07-31 20:26 14,934 --a------ C:\WINDOWS\system32\unab.inf
2008-07-31 20:26 . 2008-07-31 20:26 14,248 --a------ C:\WINDOWS\system32\bicetadaxa.reg
2008-07-31 20:26 . 2008-07-31 20:26 13,589 --a------ C:\WINDOWS\ijavyx.ban
2008-07-31 20:26 . 2008-07-31 20:26 12,486 --a------ C:\Program Files\Fichiers communs\dyjoqary.sys
2008-07-31 20:26 . 2008-07-31 20:26 11,842 --a------ C:\WINDOWS\ganymyxipe.vbs
2008-07-31 20:26 . 2008-07-31 20:26 11,611 --a------ C:\WINDOWS\system32\aranik.bin
2008-07-31 20:04 . 2008-07-31 20:15 <REP> d-------- C:\Program Files\eToro
2008-07-31 20:02 . 2008-07-31 20:02 <REP> d-------- C:\WINDOWS\PokerRNG
2008-07-31 20:02 . 2008-07-31 20:15 <REP> d-------- C:\Program Files\PokerRNG
2008-07-21 09:45 . 2008-07-21 09:45 77,312 -r-hs---- C:\WINDOWS\system32\ckvo1.dll
2008-07-21 05:04 . 2008-07-21 10:15 118,782 -r-hs---- C:\ybj8df.exe
2008-07-21 05:04 . 2008-07-21 05:04 77,312 -r-hs---- C:\WINDOWS\system32\ckvo2.dll
2008-07-21 04:36 . 2008-07-21 04:36 119,202 -r-hs---- C:\f0.cmd
2008-07-10 18:18 . 2008-07-10 18:47 117,255 -r-hs---- C:\0gjn3yw.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-01 17:05 83,026,976 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-08-01 17:01 3,172,896 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
2008-08-01 17:01 299,240 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2008-08-01 17:01 1,118,168 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-08-01 16:48 --------- d-----w C:\Program Files\Mozilla Firefox 3 Beta 3
2008-08-01 16:47 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-08-01 16:16 3,680 ----a-w C:\WINDOWS\system32\tmp.reg
2008-08-01 14:19 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Dossier de téléchargement Share-to-Web
2008-07-31 18:18 --------- d-----w C:\Program Files\FlashGet
2008-07-31 17:15 --------- d-----w C:\Program Files\eMule
2008-06-29 17:30 112,227 --sh--r C:\klp8j6i.com
2008-06-25 16:59 --------- d-----w C:\Documents and Settings\Rolande\Application Data\utorrent
2008-06-23 17:00 --------- d-----w C:\Program Files\PKR
2008-06-21 02:54 66,600 ----a-r C:\WINDOWS\system32\drivers\sbhips.sys
2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-08 06:37 107,736 --sh--r C:\iefqwp.cmd
2008-06-07 16:59 --------- d-----w C:\Program Files\uTorrent
2008-06-04 15:53 --------- d-----w C:\Documents and Settings\Rolande\Application Data\Ariane Software
2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
.

Merci mille fois

réouvre malewarebyte
va sur quarantaine
supprime tout

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-> Double clique sur combofix.exe.
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

-> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Voici le rapport mbam:

Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1015
Windows 5.1.2600 Service Pack 2

18:42:10 01/08/2008
mbam-log-8-1-2008 (18-42-10).txt

Type de recherche: Examen rapide
Eléments examinés: 42460
Temps écoulé: 4 minute(s), 58 second(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 3
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 14
Dossier(s) infecté(s): 9
Fichier(s) infecté(s): 37

Processus mémoire infecté(s):
C:\Program Files\XPSecurityCenter\xpsecuritycenter.exe (Rogue.Installer) -> Unloaded process successfully.
C:\WINDOWS\system32\braviax.exe (Trojan.FakeAlert) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\Program Files\XPSecurityCenter\XPSECURITYCENTER.DLL (Rogue.Multiple) -> Delete on reboot.
C:\Program Files\XPSecurityCenter\HTMLAYOUT.DLL (Rogue.XPSecurityCenter) -> Delete on reboot.
C:\Program Files\XPSecurityCenter\pthreadVC2.dll (Rogue.XPSecurityCenter) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winjyp32 (Dialer) ->

Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\XP_SecurityCenter (Rogue.XPSecurityCenter) -> Quarantined and deleted

successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\SecuriSoft SARL (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Ultimate Cleaner (Rogue.Ultimate.Cleaner) -> Quarantined and deleted

successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xp securitycenter (Rogue.Installer) ->

Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\buritos (Trojan.Agent) -> Quarantined and

deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.Downloader) -> Quarantined

and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.FakeAlert) -> Quarantined

and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId (Trojan.FakeAlert) -> Bad: (VIRUS

ALERT!) Good: (55274-641-0014547-23142) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat (Trojan.FakeAlert) -> Bad: (HH:mm: VIRUS ALERT!)

Good: (HH:mm:ss) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowControlPanel

(Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowRun

(Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch

(Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp

(Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyDocs

(Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer

(Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuMorePrograms

(Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\StartMenuLogOff

(Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives (Hijack.Drives) ->

Bad: (12) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoToolbarCustomize

(Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders (Hijack.Explorer)

-> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\Checked

Value (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Program Files\Ultimate Cleaner (Rogue.Ultimate.Cleaner) -> Quarantined and deleted successfully.
C:\Program Files\XPSecurityCenter (Rogue.XPSecurityCenter) -> Quarantined and deleted successfully.
C:\Program Files\XPSecurityCenter\data (Rogue.XPSecurityCenter) -> Quarantined and deleted successfully.
C:\Program Files\XPSecurityCenter\Microsoft.VC80.CRT (Rogue.XPSecurityCenter) -> Quarantined and deleted

successfully.
C:\Documents and Settings\Rolande\Application Data\Ultimate Cleaner (Rogue.Ultimate.Cleaner) -> Quarantined

and deleted successfully.
C:\Documents and Settings\Rolande\Application Data\Ultimate Cleaner\backup (Rogue.Ultimate.Cleaner) ->

Quarantined and deleted successfully.
C:\Documents and Settings\Rolande\Application Data\Ultimate Cleaner\logs (Rogue.Ultimate.Cleaner) ->

Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SecuriSoft SARL (Rogue.WinSpywareProtect) ->

Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SecuriSoft SARL\WinSpywareProtect

(Rogue.WinSpywareProtect) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\XPSecurityCenter\xpsecuritycenter.exe (Rogue.Installer) -> Quarantined and deleted

successfully.
C:\Program Files\XPSecurityCenter\XPSECURITYCENTER.DLL (Rogue.Multiple) -> Quarantined and deleted

successfully.
C:\WINDOWS\elfv.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\karina.dat (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\karina.dat (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winivstr.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Temp\uninst.exe (Rogue.Installer) -> Quarantined and

deleted successfully.
C:\Program Files\XPSecurityCenter\htmlayout.dll (Rogue.XPSecurityCenter) -> Quarantined and deleted

successfully.
C:\Program Files\XPSecurityCenter\install.exe (Rogue.XPSecurityCenter) -> Quarantined and deleted

successfully.
C:\Program Files\XPSecurityCenter\pthreadVC2.dll (Rogue.XPSecurityCenter) -> Quarantined and deleted

successfully.
C:\Program Files\XPSecurityCenter\un.ico (Rogue.XPSecurityCenter) -> Quarantined and deleted successfully.
C:\Program Files\XPSecurityCenter\unzip32.dll (Rogue.XPSecurityCenter) -> Quarantined and deleted

successfully.
C:\Program Files\XPSecurityCenter\wscui.cpl (Rogue.XPSecurityCenter) -> Quarantined and deleted

successfully.
C:\Program Files\XPSecurityCenter\XP_SecurityCenter.cfg (Rogue.XPSecurityCenter) -> Quarantined and deleted

successfully.
C:\Program Files\XPSecurityCenter\data\daily.cvd (Rogue.XPSecurityCenter) -> Quarantined and deleted

successfully.
C:\Program Files\XPSecurityCenter\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest (Rogue.XPSecurityCenter) ->

Quarantined and deleted successfully.
C:\Program Files\XPSecurityCenter\Microsoft.VC80.CRT\msvcm80.dll (Rogue.XPSecurityCenter) -> Quarantined and

deleted successfully.
C:\Program Files\XPSecurityCenter\Microsoft.VC80.CRT\msvcp80.dll (Rogue.XPSecurityCenter) -> Quarantined and

deleted successfully.
C:\Program Files\XPSecurityCenter\Microsoft.VC80.CRT\msvcr80.dll (Rogue.XPSecurityCenter) -> Quarantined and

deleted successfully.
C:\WINDOWS\system32\winjyp32.dll (Dialer) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\buritos.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\f6cavn.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\1nkbd8h.bat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\00hoeav.com (Trojan.Agent) -> Quarantined and deleted successfully.
C:\xmnm2.cmd (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\amvo.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\amvo0.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\amvo1.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\amvo2.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\beep.sys (Fake.Beep.Sys) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dllcache\beep.sys (Fake.Beep.Sys) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\braviax.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\buritos.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\fdkowvbp.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\grswptdl.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\etc\.protected (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\.protected (Rogue.Multiple) -> Quarantined and deleted successfully.

Merci encore pour ton aide

oui réactive

Au faite petite question est ce que je dois activer la restauration système? Parce qu'elle est toujours désactivé.

Merci encore