Virus Win32:Trojan-gen {Other} détecté !

Résolu
Bonjour,
Mon antivirus avast ! vient de détecter ce Win32:Trojan-gen {Other}
Impossible de le mettre en quarantaine car, le message est : Le processus ne peut pas accéder à ce fichier car ce fichier est deja utilisé par un autre processus
Le nom du fichier infecté est : C:\WINDOWS\system32\xxyxYpnN.dll
JE ne comprends rien, j'aitrès peur, je tiens à mon ordinateur et à mes données.
J'ai installé hier microsoft office 2007 téléchargé, c'est peut etre ca ???

S'il vous plait, j'ai vraiment besoin d'aide !!

Merci d'avance !
Configuration: Windows XP
Internet Explorer 6.0

57 réponses

Résumé de la discussion

Une alerte d Avast signale la détection de Win32:Trojan-gen {Other} sur C:\WINDOWS\system32\xxyxYpnN.dll et empêche la mise en quarantaine car le fichier est utilisé par un autre processus, lien avec l'installation d'Office 2007 sous Windows XP. Plusieurs réponses recommandent de désactiver puis réactiver la restauration système pour permettre le nettoyage, de vérifier les outils ajoutés comme des barres d’outils et d’envisager l’usage d’un antivirus différent. Des outils et procédures complémentaires, tels que SmitFraudFix en mode sans échec et des scans ciblés, sont évoqués pour supprimer les composants malveillants et nettoyer les traces dans les dossiers système et navigateurs. D'autres échanges évoquent aussi la prudence concernant les téléchargements et la nécessité de maintenir le système et les données protégés, notamment par des sauvegardes régulières et l'emploi d'un antivirus à jour.

Bobot (l’IA à votre service)
  1. Salut !!
    Bon je crois je que je viens de faire ce que tu m'as demandé, mais ca doit me dire koi ??
    j'ai fait "do a scan only"
    et apres ??
    -1
    1. Contributeur
      tu poste le rapport
      -1
      1. ok, désolée, je dois paraitre qqn qui y connait rien, mais en fait j'ai une grande liste avec des cases decochées et j'arrive pas à faire copier coller....
        -1
        1. Mais ds la rapport (si ce ke je vois est bien le rapport), il a plusieurs fichiers portant le nom de C:\WINDOWS\system32\ avec quelque chose d'autre quemon fichier infesté derrière....
          -1
          1. Contributeur
            Mais tu me met tout et je vais te dire si tu es infecté!!!!
            Et si tu es infecté, la marche à suivre!
            -1
            1. Ok
              Je le refais, est ce ke je peux faire "Do a system scan and save a logfile " ??
              Pace ke le résultat précédent, je peux pas te le transmettre, refuse le copier coller
              1
              1. Contributeur
                Oui, tu dois, et pour "fixer" les lignes ensuite, tu devra faire un scan seulement et cocher les lignes que je t'ai dites okay?
                -1
                1. voila ce ke me sors le logfile :

                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 10:00:56, on 15/10/2008
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                  C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  C:\Acer\Empowering Technology\admServ.exe
                  C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
                  C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
                  C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                  C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\WINDOWS\system32\wscntfy.exe
                  C:\WINDOWS\RTHDCPL.EXE
                  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                  C:\Program Files\Acer\Acer Arcade\PCMService.exe
                  C:\WINDOWS\system32\RUNDLL32.EXE
                  C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                  C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
                  C:\PROGRA~1\LAUNCH~1\LManager.exe
                  C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                  C:\Acer\Empowering Technology\admtray.exe
                  C:\Program Files\BroadJump\Client Foundation\CFD.exe
                  C:\Program Files\Club-Internet\Agent Wi-Fi V2\McciTrayApp.exe
                  C:\WINDOWS\system32\LVCOMSX.EXE
                  C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                  C:\Program Files\iTunes\iTunesHelper.exe
                  C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                  C:\WINDOWS\system32\rundll32.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  C:\Program Files\Club-Internet\Lanceur\lanceur.exe
                  C:\WINDOWS\system32\wbem\unsecapp.exe
                  C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
                  C:\DOCUME~1\AmAnDiNe\LOCALS~1\Temp\RtkBtMnt.exe
                  C:\Program Files\iPod\bin\iPodService.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
                  O3 - Toolbar: Acer eDataSecurity Management - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\WINDOWS\system32\ToolBand.dll
                  O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                  O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                  O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                  O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
                  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
                  O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
                  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
                  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
                  O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
                  O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
                  O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
                  O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                  O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                  O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
                  O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
                  O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
                  O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                  O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
                  O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
                  O4 - HKLM\..\Run: [Club-Internet_McciTrayApp] C:\Program Files\Club-Internet\Agent Wi-Fi V2\McciTrayApp.exe
                  O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                  O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                  O4 - HKLM\..\Run: [320d18a1] rundll32.exe "C:\WINDOWS\system32\lxavnrgr.dll",b
                  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                  O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
                  O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
                  O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM
                  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                  O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                  O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
                  O20 - AppInit_DLLs: dakifd.dll
                  O21 - SSODL: printers - {4A232647-8B03-42E4-906D-DE0DBB168EB4} - libcintle2.dll (file missing)
                  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
                  O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
                  O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
                  O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
                  O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                  O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                  O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
                  O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                  O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
                  O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                  O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
                  O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
                  O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
                  1
                  1. Contributeur
                    Fixe cela:
                    O4 - HKLM\..\Run: [320d18a1] rundll32.exe "C:\WINDOWS\system32\lxavnrgr.dll",b
                    O3 - Toolbar: Acer eDataSecurity Management - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\WINDOWS\system32\ToolBand.dll
                    O20 - AppInit_DLLs: dakifd.dll
                    O21 - SSODL: printers - {4A232647-8B03-42E4-906D-DE0DBB168EB4} - libcintle2.dll (file missing)

                    On dirait que le virus veut se cacher...
                    Fait un scan MBAM
                    -1
                    1. Je les ai coché
                      je fais "Fix Checked ??"
                      -1
                      1. Ok
                        Je refais le scan and save logfile?? je trouve pas ton scan MBAM
                        -1
                        1. j'ai refais pareil, voici le rapport :

                          Logfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 10:18:33, on 15/10/2008
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                          Boot mode: Normal

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                          C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                          C:\Acer\Empowering Technology\admServ.exe
                          C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
                          C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
                          C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
                          C:\WINDOWS\system32\nvsvc32.exe
                          C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                          C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
                          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\WINDOWS\system32\wscntfy.exe
                          C:\WINDOWS\RTHDCPL.EXE
                          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                          C:\Program Files\Acer\Acer Arcade\PCMService.exe
                          C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                          C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
                          C:\PROGRA~1\LAUNCH~1\LManager.exe
                          C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                          C:\Acer\Empowering Technology\admtray.exe
                          C:\Program Files\BroadJump\Client Foundation\CFD.exe
                          C:\Program Files\Club-Internet\Agent Wi-Fi V2\McciTrayApp.exe
                          C:\WINDOWS\system32\LVCOMSX.EXE
                          C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                          C:\Program Files\iTunes\iTunesHelper.exe
                          C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                          C:\WINDOWS\system32\rundll32.exe
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                          C:\Program Files\Club-Internet\Lanceur\lanceur.exe
                          C:\WINDOWS\system32\wbem\unsecapp.exe
                          C:\Program Files\Club-Internet\Dr Club Internet\bin\mpbtn.exe
                          C:\DOCUME~1\AmAnDiNe\LOCALS~1\Temp\RtkBtMnt.exe
                          C:\Program Files\iPod\bin\iPodService.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\Program Files\Internet Explorer\iexplore.exe
                          C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
                          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
                          O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                          O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                          O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                          O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
                          O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                          O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
                          O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
                          O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
                          O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
                          O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
                          O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
                          O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
                          O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
                          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                          O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                          O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
                          O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
                          O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
                          O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                          O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
                          O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
                          O4 - HKLM\..\Run: [Club-Internet_McciTrayApp] C:\Program Files\Club-Internet\Agent Wi-Fi V2\McciTrayApp.exe
                          O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                          O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
                          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                          O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
                          O4 - Global Startup: Docteur Club Internet.lnk = C:\Program Files\Club-Internet\Dr Club Internet\bin\matcli.exe
                          O8 - Extra context menu item: &Sample Toolband Serach - res://C:\WINDOWS\system32\ToolBand.dll/MENUSEARCH.HTM
                          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                          O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                          O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                          O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
                          O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
                          O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
                          O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
                          O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
                          O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
                          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                          O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
                          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                          O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
                          O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
                          O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
                          O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
                          O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
                          O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
                          O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
                          O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
                          -1
                          1. Le MBAM plante, il se bloque au bout d'un certain temps
                            Je sais plus koi faire
                            1
                            1. j'arrive pas à le fermer, il veut pas, mm en faisant fin de tache, tu coup je peux pas le relancer
                              1
                              1. Contributeur
                                Bizzarre....
                                Tu peux lancer scan rapide?
                                1
                                1. ca yest, voicile rapport !!

                                  Malwarebytes' Anti-Malware 1.28
                                  Version de la base de données: 1271
                                  Windows 5.1.2600 Service Pack 2

                                  15/10/2008 11:21:55
                                  mbam-log-2008-10-15 (11-21-42).txt

                                  Type de recherche: Examen rapide
                                  Eléments examinés: 56544
                                  Temps écoulé: 4 minute(s), 16 second(s)

                                  Processus mémoire infecté(s): 0
                                  Module(s) mémoire infecté(s): 4
                                  Clé(s) du Registre infectée(s): 19
                                  Valeur(s) du Registre infectée(s): 2
                                  Elément(s) de données du Registre infecté(s): 2
                                  Dossier(s) infecté(s): 7
                                  Fichier(s) infecté(s): 137

                                  Processus mémoire infecté(s):
                                  (Aucun élément nuisible détecté)

                                  Module(s) mémoire infecté(s):
                                  C:\WINDOWS\system32\khfFWoOH.dll (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\swmkxnsv.dll (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\atvrao.dll (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\xxyxYpnN.dll (Trojan.Vundo) -> No action taken.

                                  Clé(s) du Registre infectée(s):
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9e777fc5-208f-4091-9527-b6a6c9735a52} (Trojan.Vundo.H) -> No action taken.
                                  HKEY_CLASSES_ROOT\CLSID\{9e777fc5-208f-4091-9527-b6a6c9735a52} (Trojan.Vundo.H) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{af7a0852-da86-4153-bb38-87e31c32d1a4} (Trojan.Vundo.H) -> No action taken.
                                  HKEY_CLASSES_ROOT\CLSID\{af7a0852-da86-4153-bb38-87e31c32d1a4} (Trojan.Vundo.H) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fd417378-f411-4b77-bbee-4893bb670d4c} (Trojan.Vundo.H) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\xxyxypnn (Trojan.Vundo.H) -> No action taken.
                                  HKEY_CLASSES_ROOT\CLSID\{fd417378-f411-4b77-bbee-4893bb670d4c} (Trojan.Vundo.H) -> No action taken.
                                  HKEY_CLASSES_ROOT\udcpchk.udcpchk (Rogue.DriveCleaner) -> No action taken.
                                  HKEY_CLASSES_ROOT\udcpchk.udcpchk.1 (Rogue.DriveCleaner) -> No action taken.
                                  HKEY_CLASSES_ROOT\Interface\{5954b2db-09a7-4023-847c-107539dc560d} (Rogue.DriveCleaner) -> No action taken.
                                  HKEY_CLASSES_ROOT\CLSID\{943b96a4-9bf6-42fe-8d0b-4bca71c3632f} (Rogue.DriveCleaner) -> No action taken.
                                  HKEY_CLASSES_ROOT\Typelib\{4f43b1f3-0ce8-493b-96d2-990cec05edbb} (Rogue.DriveCleaner) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
                                  HKEY_CURRENT_USER\SOFTWARE\drivecleaner 2006 free (Rogue.DriveCleaner) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\drivecleaner 2006 free (Rogue.DriveCleaner) -> No action taken.

                                  Valeur(s) du Registre infectée(s):
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\320d18a1 (Trojan.Vundo.H) -> No action taken.
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{fd417378-f411-4b77-bbee-4893bb670d4c} (Trojan.Vundo) -> No action taken.

                                  Elément(s) de données du Registre infecté(s):
                                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\khffwooh -> No action taken.
                                  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\khffwooh -> No action taken.

                                  Dossier(s) infecté(s):
                                  C:\Program Files\Fichiers communs\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Download (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\UpdateData (Rogue.DriveCleaner) -> No action taken.
                                  C:\Documents and Settings\AmAnDiNe\Application Data\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> No action taken.
                                  C:\Documents and Settings\AmAnDiNe\Application Data\DriveCleaner 2006 Free\Logs (Rogue.DriveCleaner) -> No action taken.

                                  Fichier(s) infecté(s):
                                  C:\WINDOWS\system32\khfFWoOH.dll (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\HOoWFfhk.ini (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\HOoWFfhk.ini2 (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\atvrao.dll (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\xxyxYpnN.dll (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\swmkxnsv.dll (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\vsnxkmws.ini (Trojan.Vundo.H) -> No action taken.
                                  C:\WINDOWS\system32\kafhejri.dll (Trojan.Vundo) -> No action taken.
                                  C:\WINDOWS\system32\dakifd.dll (Trojan.Vundo) -> No action taken.
                                  C:\WINDOWS\system32\yayayvtT.dll (Trojan.Vundo) -> No action taken.
                                  C:\WINDOWS\system32\tpucwlts.dll (Trojan.Vundo.H) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\unins000.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\unins000.exe (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\UDC2006.xml (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Activate.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\up.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\pv.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\vbpv.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\lapv.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\bnlink.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\license.rtf (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\readme.rtf (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\uninstall.ico (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\UDC6.url (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\support.url (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\manual.url (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\updater.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\err.log (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\sr.log (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Schedule.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\ScanReport.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\diagnosis.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\AE_CD_Cr.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\AReadr4.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\AReadr5.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\ASDSEEpv.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\ASPack.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\Babylon.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\BDelphi5.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\CatchUp.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\CBuildr5.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\CCGA.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\CManager.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\CuteFTP4.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\CuteHTML.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\DAcceler.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\DiscJug.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\ECDCreat4.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\Far.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\FFTsks.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\FlashFXP.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\FrntPage.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\FrontPEx.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\FtpEXP.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\FtpVoya.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\GetRight.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\GoZilla.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\GravMRU.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\HomeSite.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\HotDogPr.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\H_TxtPad.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\IconExtr.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\iMesh.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\ImgReady3.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\InsShExp.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\JASC_P_P.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\KaZaA.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\LView.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MacDir.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MacDrWea.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MicAng.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MicDes.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MMUnDisk.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MM_CON.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\Morpheus.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MPaint.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MPicPub.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MPImaGal.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MSExplorer.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MSoffice.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MSRegEdit.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MSWMP.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\MSWordPad.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\Nero.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\NetShow.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\NTBackup.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\PhotShel.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\PHPCoder.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\PowerZIP.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\RapidBr.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\RealAuPl.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\RealDown.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\SecurCRT.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\SL_BlWin.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\SmartClr.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\Sonique.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\StuffIt.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\TelepPro.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\UGifAnim.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\UltraEd.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\UMedStud.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\UPhImpV.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\UPhotoEx.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\UVidStud.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\VNC.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\WebFeret.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\WebReap.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\WinACE.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\WinGate.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\WinRAR.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\WinZIP.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\WiseInst.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\YahooPl.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\ZipMagic.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\pfilelst.xda (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\Appbase\wordslst.xda (Rogue.DriveCleaner) -> No action taken.
                                  C:\Program Files\DriveCleaner 2006 Free\UpdateData\upd0818122007.dat (Rogue.DriveCleaner) -> No action taken.
                                  C:\Documents and Settings\AmAnDiNe\Application Data\DriveCleaner 2006 Free\Logs\update.log (Rogue.DriveCleaner) -> No action taken.
                                  C:\WINDOWS\image077.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\image035.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\images78.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\image041.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\image098.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\image074.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\images54.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photo84.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photo48.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photos2007_31.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photo_album43.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photo78.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photos2007_70.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photo39.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photo_album97.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photo_album13.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photo_album52.zip (Backdoor.Bot) -> No action taken.
                                  C:\WINDOWS\photos2007_55.zip (Backdoor.Bot) -> No action taken.
                                  C:\Documents and Settings\AmAnDiNe\Local Settings\Temp\svchost.exe (Trojan.Agent) -> No action taken.
                                  1
                                  1. Y a t il qqn qui pourrait m'aider ???
                                    En tout cas, merci pour celui qui l'a déjà fait !!
                                    Mais mon soucis n'est tjs pas résolu !!

                                    Thanks
                                    0
                                    • 1
                                    • 2
                                    • 3