Supprimer antispyware 2009

Résolu
delph34 -  
Bonjour,
j'ai un virus antispyware 2009 sur mon ordi portable j'ai vista
j'ai fait un scan en mode sans echec avec malwarebites dont voic le rapport
j'ai relancé l'ordi mais il est toujours là
Malwarebytes' Anti-Malware 1.29
Version de la base de données: 1298
Windows 6.0.6001 Service Pack 1

21/10/2008 00:09:16
mbam-log-2008-10-21 (00-08-58).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 121055
Temps écoulé: 17 minute(s), 32 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 6

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\qgtfvojuihsncln (Trojan.Shutdowner) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSServer (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cmds (Malware.Trace) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Users\delphine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\4K78U3FU\setup_100783_6777_[1].exe (Trojan.FakeAlert) -> No action taken.
C:\Users\delphine\AppData\Local\Temp\cbXRjHXn.dll (Trojan.Vundo) -> No action taken.
C:\Users\delphine\AppData\Local\Temp\ljJaXoMe.dll (Trojan.Vundo) -> No action taken.
C:\Users\delphine\AppData\Local\Temp\tmp0001a7a3 (Trojan.Vundo) -> No action taken.
C:\Users\delphine\AppData\Local\Temp\tuvTljHw.dll (Trojan.Vundo) -> No action taken.
C:\Windows\System32\qgtfvojuihsncln.exe (Trojan.Shutdowner) -> No action taken.

je ne sais plus quoi faire merci de m'aider
Configuration: Windows Vista
Internet Explorer 7.0

65 réponses

Résumé de la discussion

Un logiciel considéré comme spyware, antispyware 2009, est détecté sur un portable Windows Vista, et Malwarebytes signale éléments malveillants tels que Trojan.Shutdowner, Trojan.Agent et Trojan.Vundo dans le registre et fichiers temporaires. La meilleure réponse préconise d'exécuter ComboFix en mode sans connexion et en langue française, puis de redémarrer si nécessaire et de partager le rapport affiché pour poursuivre le nettoyage. Le processus recommande de déconnecter le réseau, fermer les applications, puis laisser ComboFix effectuer le scan et générer un fichier de log, après quoi réactiver la protection en temps réel. En pratique, ComboFix peut nécessiter un redémarrage et produit un rapport utile; d'autres outils peuvent être requis si des éléments persistent après le nettoyage et nécessitent une analyse ultérieure.

Bobot (l’IA à votre service)
  1. Destrio5 Modérateur
    Salut,

    - Télécharge HijackThis v2.0.2 sur ton Bureau :
    http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

    - Double-clique sur HJTInstall afin de lancer l'installation.

    - Clique sur Install ensuite sur I Accept.

    - Clique sur Do a system scan and save a logfile.

    - Le bloc-notes s'ouvrira, fais un copier/coller de tout son contenu ici dans ton prochain message.
    1. E..T Contributeur
      Bonsoir,
      Bienvenue sur le forum delph34.
      No action taken. Tu n'as rien supprimé à la fin du scan.
      Réouvres Malwarebytes' Anti-Malware va sur l'onglet quarantaine et supprimes tout.

      Puis Télécharge sur le Bureau HijackThis
      Clique sur ce lien http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

      Enregistre HJTInstall.exe sur ton bureau.
      //!!\\Renomme hijackthis//!!\\ Regarde tout est expliqué >> https://forums.cnetfrance.fr

      Double-clique sur "HJT.exe" pour lancer le programme

      Accepte en cliquant sur le bouton "I Accept"

      Ensuite clique sur "do a system scan and save a logfile" et postes le rapport obtenu ici.

      A toute.
      @++
      1. totobetourne
        bonsoir

        tu nous montre le rapport avant avoir tout supprimer.
        no action taken :aucune action de prise

        il faudrait voir.
        quarantined and deleted successfully:en quarantaine et destruction reussie

        enleve ce qui est en quarantaine.

        montre nous le rapport hijack
        1. delph34 Auteur
          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 00:35:57, on 21/10/2008
          Platform: Windows Vista SP1 (WinNT 6.00.1905)
          MSIE: Internet Explorer v7.00 (7.00.6001.18000)
          Boot mode: Normal

          Running processes:
          C:\Windows\System32\smss.exe
          C:\Windows\system32\csrss.exe
          C:\Windows\system32\wininit.exe
          C:\Windows\system32\csrss.exe
          C:\Windows\system32\services.exe
          C:\Windows\system32\lsass.exe
          C:\Windows\system32\lsm.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\winlogon.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\SLsvc.exe
          C:\Windows\system32\svchost.exe
          C:\Program Files\Dell\DellDock\DockLogin.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\System32\WLTRYSVC.EXE
          C:\Windows\system32\WLANExt.exe
          C:\Windows\System32\bcmwltry.exe
          C:\Windows\System32\spoolsv.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\aestsrv.exe
          c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
          C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
          C:\Program Files\McAfee\MPF\MPFSrv.exe
          C:\Program Files\McAfee\MSK\MskSrver.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\Dwm.exe
          C:\Windows\system32\taskeng.exe
          C:\Windows\system32\taskeng.exe
          C:\Program Files\Dell Support Center\bin\sprtsvc.exe
          C:\Windows\system32\STacSV.exe
          C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter3.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\system32\SearchIndexer.exe
          C:\Windows\system32\taskeng.exe
          C:\Windows\system32\DRIVERS\xaudio.exe
          C:\Windows\Explorer.EXE
          C:\Program Files\Dell\DellDock\DellDock.exe
          C:\Windows\system32\conime.exe
          C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
          c:\PROGRA~1\mcafee.com\agent\mcagent.exe
          C:\Program Files\DellTPad\Apoint.exe
          C:\Windows\OEM02Mon.exe
          C:\Windows\System32\rundll32.exe
          C:\Windows\System32\rundll32.exe
          C:\Windows\System32\rundll32.exe
          C:\Windows\System32\WLTRAY.EXE
          C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          C:\Program Files\Dell\MediaDirect\PCMService.exe
          C:\Windows\System32\p2phost.exe
          C:\Program Files\Dell Support Center\bin\sprtcmd.exe
          C:\Windows\ehome\ehtray.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          C:\Program Files\DAEMON Tools Lite\daemon.exe
          C:\Program Files\Windows Media Player\wmpnscfg.exe
          C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
          C:\ProgramData\Solt Lake Software\Pro Antispyware 2009\proas2009.exe
          C:\Program Files\Digital Line Detect\DLG.exe
          C:\Windows\ehome\ehmsas.exe
          C:\Program Files\DellTPad\ApMsgFwd.exe
          C:\Program Files\DellTPad\Apntex.exe
          C:\Program Files\DellTPad\HidFind.exe
          C:\Program Files\Windows Media Player\wmpnetwk.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Program Files\Internet Explorer\IEUser.exe
          C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
          c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
          C:\Program Files\Windows Live\Messenger\usnsvc.exe
          C:\Windows\System32\wsqmcons.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
          C:\Windows\system32\wbem\wmiprvse.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6080828
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
          O1 - Hosts: ::1 localhost
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
          O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
          O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
          O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
          O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
          O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
          O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe
          O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
          O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
          O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
          O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
          O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
          O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [xjsditvzwjhsr] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\xokwxqkikro.dll"
          O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
          O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
          O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
          O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
          O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
          O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
          O4 - HKCU\..\Run: [Pro Antispyware 2009] "C:\ProgramData\Solt Lake Software\Pro Antispyware 2009\proas2009.exe" /autorun
          O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
          O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
          O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
          O13 - Gopher Prefix:
          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
          O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
          O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
          O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
          O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
          O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
          O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
          O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
          O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
          O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
          O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
          O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
          O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
          O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
          O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
          O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
          O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
          O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
          1. mik45
            voici mon rapport

            Malwarebytes' Anti-Malware 1.30
            Version de la base de données: 1323
            Windows 5.1.2600 Service Pack 2

            26/10/2008 17:04:56
            mbam-log-2008-10-26 (17-04-40).txt

            Type de recherche: Examen rapide
            Eléments examinés: 54811
            Temps écoulé: 5 minute(s), 54 second(s)

            Processus mémoire infecté(s): 0
            Module(s) mémoire infecté(s): 0
            Clé(s) du Registre infectée(s): 4
            Valeur(s) du Registre infectée(s): 1
            Elément(s) de données du Registre infecté(s): 0
            Dossier(s) infecté(s): 3
            Fichier(s) infecté(s): 41

            Processus mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Module(s) mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Clé(s) du Registre infectée(s):
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\antispywarexp2009 (Rogue.AntispywareXP) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> No action taken.
            HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> No action taken.
            HKEY_CLASSES_ROOT\WR (Malware.Trace) -> No action taken.

            Valeur(s) du Registre infectée(s):
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\brastk (Trojan.FakeAlert) -> No action taken.

            Elément(s) de données du Registre infecté(s):
            (Aucun élément nuisible détecté)

            Dossier(s) infecté(s):
            C:\Program Files\AntiSpywareXP2009 (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\data (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\Microsoft.VC80.CRT (Rogue.AntispywareXP) -> No action taken.

            Fichier(s) infecté(s):
            C:\Documents and Settings\Admin\Local Settings\Application Data\reykvqbg_navps.dat (Adware.Navipromo.H) -> No action taken.
            C:\Documents and Settings\Admin\Local Settings\Application Data\reykvqbg_nav.dat (Adware.Navipromo.H) -> No action taken.
            C:\Documents and Settings\Admin\Local Settings\Application Data\reykvqbg.dat (Adware.Navipromo.H) -> No action taken.
            C:\WINDOWS\karna.dat (Trojan.FakeAlert) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\AntiSpywareXP2009.cfg (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\AntiSpywareXP2009.exe (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\AVEngn.dll (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\htmlayout.dll (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\pthreadVC2.dll (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\Uninstall.exe (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\wscui.cpl (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\data\daily.cvd (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\Microsoft.VC80.CRT\msvcm80.dll (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\Microsoft.VC80.CRT\msvcp80.dll (Rogue.AntispywareXP) -> No action taken.
            C:\Program Files\AntiSpywareXP2009\Microsoft.VC80.CRT\msvcr80.dll (Rogue.AntispywareXP) -> No action taken.
            C:\Documents and Settings\Admin\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareXP2009.lnk (Rogue.Antispyware) -> No action taken.
            C:\WINDOWS\brastk.exe (Trojan.FakeAlert) -> No action taken.
            C:\WINDOWS\system32\_scui.cpl (Trojan.FakeAlert) -> No action taken.
            C:\WINDOWS\system32\wini10801.exe (Trojan.FakeAlert) -> No action taken.
            C:\WINDOWS\system32\brastk.exe (Trojan.FakeAlert) -> No action taken.
            C:\Documents and Settings\Admin\Local Settings\Temp\wrdwn2 (Trojan.FakeAlert) -> No action taken.
            C:\Documents and Settings\Admin\Local Settings\Temp\wrdwn3 (Trojan.FakeAlert) -> No action taken.
            C:\Documents and Settings\Admin\Local Settings\Temp\wrdwn4 (Trojan.FakeAlert) -> No action taken.
            C:\Documents and Settings\Admin\Local Settings\Temp\wrdwn5 (Trojan.FakeAlert) -> No action taken.
            C:\Documents and Settings\Admin\Local Settings\Temp\wrdwn6 (Trojan.FakeAlert) -> No action taken.
            C:\Documents and Settings\Admin\Local Settings\Temp\wrdwn7 (Trojan.FakeAlert) -> No action taken.
            C:\WINDOWS\system32\bvrgaojwsn_navps.dat (Adware.NaviPromo) -> No action taken.
            C:\WINDOWS\system32\dasmhrv_navps.dat (Adware.NaviPromo) -> No action taken.
            C:\WINDOWS\system32\bvrgaojwsn_nav.dat (Adware.NaviPromo) -> No action taken.
            C:\WINDOWS\system32\dasmhrv_nav.dat (Adware.NaviPromo) -> No action taken.
            C:\WINDOWS\system32\TDSSbubx.log (Trojan.TDSS) -> No action taken.
            C:\WINDOWS\system32\TDSScfum.dll (Rootkit.Agent) -> No action taken.
            C:\WINDOWS\system32\TDSSfxmp.dll (Rootkit.Agent) -> No action taken.
            C:\WINDOWS\system32\TDSSnmxh.log (Trojan.TDSS) -> No action taken.
            C:\WINDOWS\system32\TDSSnrsr.dll (Rootkit.Agent) -> No action taken.
            C:\WINDOWS\system32\TDSSofxh.dll (Rootkit.Agent) -> No action taken.
            C:\WINDOWS\system32\TDSSoiqh.dll (Rootkit.Agent) -> No action taken.
            C:\WINDOWS\system32\TDSSrhym.dll (Rootkit.Agent) -> No action taken.
            C:\WINDOWS\system32\TDSSriqp.dll (Rootkit.Agent) -> No action taken.
            C:\WINDOWS\system32\drivers\TDSSpaxt.sys (Rootkit.Agent) -> No action taken.
          2. Destrio5 Modérateur
            @mik45mik45 ---> Fais ton propre sujet sinon on ne te répondra pas.
        3. E..T Contributeur
          Bonsoir,
          Oh la il y a du monde ;-) je te laisse la place Destrio5,mais je suis ;)
          Je sors >>>>>>>>>>> []
          Bon courage.
          @++
          1. totobetourne
            bonsoir

            et moi je pue ou quoi?cela m etonnerait je sors de la douche.

            faut aussi desactiver l UAC avec vista avant le reste.
          3. Destrio5 Modérateur
            @E..T"cela m etonnerait je sors de la douche."
            ---> Moi également ;)
        4. delph34 Auteur
          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 00:35:57, on 21/10/2008
          Platform: Windows Vista SP1 (WinNT 6.00.1905)
          MSIE: Internet Explorer v7.00 (7.00.6001.18000)
          Boot mode: Normal

          Running processes:
          C:\Windows\System32\smss.exe
          C:\Windows\system32\csrss.exe
          C:\Windows\system32\wininit.exe
          C:\Windows\system32\csrss.exe
          C:\Windows\system32\services.exe
          C:\Windows\system32\lsass.exe
          C:\Windows\system32\lsm.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\winlogon.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\SLsvc.exe
          C:\Windows\system32\svchost.exe
          C:\Program Files\Dell\DellDock\DockLogin.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\System32\WLTRYSVC.EXE
          C:\Windows\system32\WLANExt.exe
          C:\Windows\System32\bcmwltry.exe
          C:\Windows\System32\spoolsv.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\aestsrv.exe
          c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
          C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
          C:\Program Files\McAfee\MPF\MPFSrv.exe
          C:\Program Files\McAfee\MSK\MskSrver.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\system32\Dwm.exe
          C:\Windows\system32\taskeng.exe
          C:\Windows\system32\taskeng.exe
          C:\Program Files\Dell Support Center\bin\sprtsvc.exe
          C:\Windows\system32\STacSV.exe
          C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter3.exe
          C:\Windows\system32\svchost.exe
          C:\Windows\System32\svchost.exe
          C:\Windows\system32\SearchIndexer.exe
          C:\Windows\system32\taskeng.exe
          C:\Windows\system32\DRIVERS\xaudio.exe
          C:\Windows\Explorer.EXE
          C:\Program Files\Dell\DellDock\DellDock.exe
          C:\Windows\system32\conime.exe
          C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
          c:\PROGRA~1\mcafee.com\agent\mcagent.exe
          C:\Program Files\DellTPad\Apoint.exe
          C:\Windows\OEM02Mon.exe
          C:\Windows\System32\rundll32.exe
          C:\Windows\System32\rundll32.exe
          C:\Windows\System32\rundll32.exe
          C:\Windows\System32\WLTRAY.EXE
          C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          C:\Program Files\Dell\MediaDirect\PCMService.exe
          C:\Windows\System32\p2phost.exe
          C:\Program Files\Dell Support Center\bin\sprtcmd.exe
          C:\Windows\ehome\ehtray.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          C:\Program Files\DAEMON Tools Lite\daemon.exe
          C:\Program Files\Windows Media Player\wmpnscfg.exe
          C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
          C:\ProgramData\Solt Lake Software\Pro Antispyware 2009\proas2009.exe
          C:\Program Files\Digital Line Detect\DLG.exe
          C:\Windows\ehome\ehmsas.exe
          C:\Program Files\DellTPad\ApMsgFwd.exe
          C:\Program Files\DellTPad\Apntex.exe
          C:\Program Files\DellTPad\HidFind.exe
          C:\Program Files\Windows Media Player\wmpnetwk.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Program Files\Internet Explorer\IEUser.exe
          C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
          c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
          C:\Program Files\Windows Live\Messenger\usnsvc.exe
          C:\Windows\System32\wsqmcons.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
          C:\Windows\system32\wbem\wmiprvse.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6080828
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
          O1 - Hosts: ::1 localhost
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
          O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
          O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
          O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
          O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
          O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
          O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe
          O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
          O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
          O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
          O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
          O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
          O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [xjsditvzwjhsr] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\xokwxqkikro.dll"
          O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
          O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
          O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
          O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
          O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
          O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
          O4 - HKCU\..\Run: [Pro Antispyware 2009] "C:\ProgramData\Solt Lake Software\Pro Antispyware 2009\proas2009.exe" /autorun
          O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
          O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
          O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
          O13 - Gopher Prefix:
          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
          O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
          O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
          O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
          O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
          O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
          O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
          O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
          O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
          O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
          O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
          O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
          O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
          O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
          O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
          O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
          O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
          O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
          1. delph34 Auteur
            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 00:35:57, on 21/10/2008
            Platform: Windows Vista SP1 (WinNT 6.00.1905)
            MSIE: Internet Explorer v7.00 (7.00.6001.18000)
            Boot mode: Normal

            Running processes:
            C:\Windows\System32\smss.exe
            C:\Windows\system32\csrss.exe
            C:\Windows\system32\wininit.exe
            C:\Windows\system32\csrss.exe
            C:\Windows\system32\services.exe
            C:\Windows\system32\lsass.exe
            C:\Windows\system32\lsm.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\system32\winlogon.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\System32\svchost.exe
            C:\Windows\System32\svchost.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\system32\SLsvc.exe
            C:\Windows\system32\svchost.exe
            C:\Program Files\Dell\DellDock\DockLogin.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\System32\WLTRYSVC.EXE
            C:\Windows\system32\WLANExt.exe
            C:\Windows\System32\bcmwltry.exe
            C:\Windows\System32\spoolsv.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\system32\aestsrv.exe
            c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
            C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
            C:\Program Files\McAfee\MPF\MPFSrv.exe
            C:\Program Files\McAfee\MSK\MskSrver.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\system32\Dwm.exe
            C:\Windows\system32\taskeng.exe
            C:\Windows\system32\taskeng.exe
            C:\Program Files\Dell Support Center\bin\sprtsvc.exe
            C:\Windows\system32\STacSV.exe
            C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter3.exe
            C:\Windows\system32\svchost.exe
            C:\Windows\System32\svchost.exe
            C:\Windows\system32\SearchIndexer.exe
            C:\Windows\system32\taskeng.exe
            C:\Windows\system32\DRIVERS\xaudio.exe
            C:\Windows\Explorer.EXE
            C:\Program Files\Dell\DellDock\DellDock.exe
            C:\Windows\system32\conime.exe
            C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
            c:\PROGRA~1\mcafee.com\agent\mcagent.exe
            C:\Program Files\DellTPad\Apoint.exe
            C:\Windows\OEM02Mon.exe
            C:\Windows\System32\rundll32.exe
            C:\Windows\System32\rundll32.exe
            C:\Windows\System32\rundll32.exe
            C:\Windows\System32\WLTRAY.EXE
            C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
            C:\Program Files\Dell\MediaDirect\PCMService.exe
            C:\Windows\System32\p2phost.exe
            C:\Program Files\Dell Support Center\bin\sprtcmd.exe
            C:\Windows\ehome\ehtray.exe
            C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            C:\Program Files\Windows Live\Messenger\msnmsgr.exe
            C:\Program Files\DAEMON Tools Lite\daemon.exe
            C:\Program Files\Windows Media Player\wmpnscfg.exe
            C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
            C:\ProgramData\Solt Lake Software\Pro Antispyware 2009\proas2009.exe
            C:\Program Files\Digital Line Detect\DLG.exe
            C:\Windows\ehome\ehmsas.exe
            C:\Program Files\DellTPad\ApMsgFwd.exe
            C:\Program Files\DellTPad\Apntex.exe
            C:\Program Files\DellTPad\HidFind.exe
            C:\Program Files\Windows Media Player\wmpnetwk.exe
            C:\Program Files\Internet Explorer\IEXPLORE.EXE
            C:\Program Files\Internet Explorer\IEUser.exe
            C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
            C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
            C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
            c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
            C:\Program Files\Windows Live\Messenger\usnsvc.exe
            C:\Windows\System32\wsqmcons.exe
            C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
            C:\Windows\system32\wbem\wmiprvse.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6080828
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
            O1 - Hosts: ::1 localhost
            O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
            O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
            O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
            O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
            O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
            O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
            O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
            O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
            O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
            O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe
            O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
            O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
            O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
            O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
            O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
            O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
            O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
            O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
            O4 - HKLM\..\Run: [xjsditvzwjhsr] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\xokwxqkikro.dll"
            O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
            O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
            O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
            O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
            O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
            O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
            O4 - HKCU\..\Run: [Pro Antispyware 2009] "C:\ProgramData\Solt Lake Software\Pro Antispyware 2009\proas2009.exe" /autorun
            O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
            O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
            O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
            O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
            O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
            O13 - Gopher Prefix:
            O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
            O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
            O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
            O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
            O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
            O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
            O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
            O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
            O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
            O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
            O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
            O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
            O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
            O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
            O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
            O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
            O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
            O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
            O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
            1. mik45
              moi aussi j'ai un probleme avec anispyware 2009 j'ai en vi de m'en débaraser au plus vite
          2. E..T Contributeur
            j'espère que j'ai fait ce qu'il fallait >> en trois exemplaire ;)
            Bonne suite.
            ++
            2. E..T Contributeur
              Destrio, regarde >> ;-)

              delph34,

              Télécharge sur le bureau virtumundobegone :
              http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe­­

              déconnecte internet et désactive ton antivirus le temps de la manipulation

              => Double clic sur VirtumundoBeGone.exe
              => Clic Continue ==> clic Start
              => Clic Oui
              => A la fin si Vundo est présent , le PC s’éteint et redémarre
              - Si Ecran bleu et message : Erreur fatale .. pas de problème
              => Poster le rapport VBG.TXT qui est sur le bureau

              @+
              4. E..T Contributeur
                je suis novice alors comment je deconnecte internet
                Bah coupe internet tout simplement ferme tes pages.
                1. delph34 Auteur
                  [10/21/2008, 0:54:38] - VirtumundoBeGone v1.5 ( "C:\Users\delphine\Downloads\VirtumundoBeGone.exe" )
                  [10/21/2008, 0:54:46] - Detected System Information:
                  [10/21/2008, 0:54:46] - Windows Version: 6.0.6001, Service Pack 1
                  [10/21/2008, 0:54:46] - Current Username: delphine (Admin)
                  [10/21/2008, 0:54:46] - Windows is in NORMAL mode.
                  [10/21/2008, 0:54:46] - Searching for Browser Helper Objects:
                  [10/21/2008, 0:54:46] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
                  [10/21/2008, 0:54:46] - BHO 2: {22BF413B-C6D2-4d91-82A9-A0F997BA588C} (Skype add-on (mastermind))
                  [10/21/2008, 0:54:46] - BHO 3: {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} (McAfee Phishing Filter)
                  [10/21/2008, 0:54:46] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
                  [10/21/2008, 0:54:46] - BHO 5: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} (scriptproxy)
                  [10/21/2008, 0:54:46] - BHO 6: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
                  [10/21/2008, 0:54:46] - WARNING: BHO has no default name. Checking for Winlogon reference.
                  [10/21/2008, 0:54:46] - No filename found. Continuing.
                  [10/21/2008, 0:54:46] - BHO 7: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
                  [10/21/2008, 0:54:46] - BHO 8: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
                  [10/21/2008, 0:54:46] - BHO 9: {CA6319C0-31B7-401E-A518-A07C3DB8F777} (CBrowserHelperObject Object)
                  [10/21/2008, 0:54:46] - Finished Searching Browser Helper Objects
                  [10/21/2008, 0:54:46] - Finishing up...
                  [10/21/2008, 0:54:46] - Nothing found! Exiting...

                  [10/21/2008, 0:57:20] - VirtumundoBeGone v1.5 ( "C:\Users\delphine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W9I01S4N\VirtumundoBeGone[1].exe" )
                  [10/21/2008, 0:57:23] - Detected System Information:
                  [10/21/2008, 0:57:23] - Windows Version: 6.0.6001, Service Pack 1
                  [10/21/2008, 0:57:23] - Current Username: delphine (Admin)
                  [10/21/2008, 0:57:23] - Windows is in NORMAL mode.
                  [10/21/2008, 0:57:23] - Searching for Browser Helper Objects:
                  [10/21/2008, 0:57:23] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Aide pour le lien d'Adobe PDF Reader)
                  [10/21/2008, 0:57:23] - BHO 2: {22BF413B-C6D2-4d91-82A9-A0F997BA588C} (Skype add-on (mastermind))
                  [10/21/2008, 0:57:23] - BHO 3: {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} (McAfee Phishing Filter)
                  [10/21/2008, 0:57:23] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
                  [10/21/2008, 0:57:23] - BHO 5: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} (scriptproxy)
                  [10/21/2008, 0:57:23] - BHO 6: {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
                  [10/21/2008, 0:57:23] - WARNING: BHO has no default name. Checking for Winlogon reference.
                  [10/21/2008, 0:57:23] - No filename found. Continuing.
                  [10/21/2008, 0:57:23] - BHO 7: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
                  [10/21/2008, 0:57:23] - BHO 8: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
                  [10/21/2008, 0:57:23] - BHO 9: {CA6319C0-31B7-401E-A518-A07C3DB8F777} (CBrowserHelperObject Object)
                  [10/21/2008, 0:57:23] - Finished Searching Browser Helper Objects
                  [10/21/2008, 0:57:23] - Finishing up...
                  [10/21/2008, 0:57:23] - Nothing found! Exiting...

                  j'ai pas pu desactiver internet ni l'antivirus
                  est ce grave ? :)
                  2. delph34 Auteur
                    Logfile of Trend Micro HijackThis v2.0.2
                    Scan saved at 00:35:57, on 21/10/2008
                    Platform: Windows Vista SP1 (WinNT 6.00.1905)
                    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                    Boot mode: Normal

                    Running processes:
                    C:\Windows\System32\smss.exe
                    C:\Windows\system32\csrss.exe
                    C:\Windows\system32\wininit.exe
                    C:\Windows\system32\csrss.exe
                    C:\Windows\system32\services.exe
                    C:\Windows\system32\lsass.exe
                    C:\Windows\system32\lsm.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\winlogon.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\SLsvc.exe
                    C:\Windows\system32\svchost.exe
                    C:\Program Files\Dell\DellDock\DockLogin.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\System32\WLTRYSVC.EXE
                    C:\Windows\system32\WLANExt.exe
                    C:\Windows\System32\bcmwltry.exe
                    C:\Windows\System32\spoolsv.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\aestsrv.exe
                    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
                    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
                    C:\Program Files\McAfee\MPF\MPFSrv.exe
                    C:\Program Files\McAfee\MSK\MskSrver.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\Dwm.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Program Files\Dell Support Center\bin\sprtsvc.exe
                    C:\Windows\system32\STacSV.exe
                    C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter3.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\system32\SearchIndexer.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Windows\system32\DRIVERS\xaudio.exe
                    C:\Windows\Explorer.EXE
                    C:\Program Files\Dell\DellDock\DellDock.exe
                    C:\Windows\system32\conime.exe
                    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
                    c:\PROGRA~1\mcafee.com\agent\mcagent.exe
                    C:\Program Files\DellTPad\Apoint.exe
                    C:\Windows\OEM02Mon.exe
                    C:\Windows\System32\rundll32.exe
                    C:\Windows\System32\rundll32.exe
                    C:\Windows\System32\rundll32.exe
                    C:\Windows\System32\WLTRAY.EXE
                    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                    C:\Program Files\Dell\MediaDirect\PCMService.exe
                    C:\Windows\System32\p2phost.exe
                    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
                    C:\Windows\ehome\ehtray.exe
                    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                    C:\Program Files\DAEMON Tools Lite\daemon.exe
                    C:\Program Files\Windows Media Player\wmpnscfg.exe
                    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
                    C:\ProgramData\Solt Lake Software\Pro Antispyware 2009\proas2009.exe
                    C:\Program Files\Digital Line Detect\DLG.exe
                    C:\Windows\ehome\ehmsas.exe
                    C:\Program Files\DellTPad\ApMsgFwd.exe
                    C:\Program Files\DellTPad\Apntex.exe
                    C:\Program Files\DellTPad\HidFind.exe
                    C:\Program Files\Windows Media Player\wmpnetwk.exe
                    C:\Program Files\Internet Explorer\IEXPLORE.EXE
                    C:\Program Files\Internet Explorer\IEUser.exe
                    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
                    c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
                    C:\Program Files\Windows Live\Messenger\usnsvc.exe
                    C:\Windows\System32\wsqmcons.exe
                    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
                    C:\Windows\system32\wbem\wmiprvse.exe

                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6080828
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                    O1 - Hosts: ::1 localhost
                    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                    O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
                    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                    O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
                    O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
                    O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe
                    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                    O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
                    O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
                    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                    O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
                    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
                    O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
                    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                    O4 - HKLM\..\Run: [xjsditvzwjhsr] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\xokwxqkikro.dll"
                    O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
                    O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
                    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
                    O4 - HKCU\..\Run: [Pro Antispyware 2009] "C:\ProgramData\Solt Lake Software\Pro Antispyware 2009\proas2009.exe" /autorun
                    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                    O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
                    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
                    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                    O13 - Gopher Prefix:
                    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
                    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
                    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
                    O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
                    O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
                    O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
                    O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                    O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
                    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
                    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
                    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
                    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
                    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
                    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
                    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
                    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
                    O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
                    O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
                    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
                    1. E..T Contributeur
                      delph34,- Télécharge SmitfraudFix (de de S!Ri, balltrap34 et moe31) :
                      http://siri.urz.free.fr/Fix/SmitfraudFix.exe ou http://www.geekstogo.com/forum/files/file/6-smitfraudfix/

                      - Enregistre-le sur le bureau

                      - Double-clique sur SmitfraudFix.exe et choisis l'option 1 puis Entrée

                      - Un rapport sera généré, poste-le dans ta prochaine réponse.

                      [*] process.exe est détecté par certains antivirus comme étant un risktool. Il ne s'agit pas d'un virus mais d'un utilitaire destiné à mettre fin à des processus.[*]

                      ** Ne fais l'étape 2 que si on te le demande, on doit d'abord examiner le premier rapport de SmitfraudFix

                      @++

                      PS Merci à Destrio5 pour ce canned.
                      1. delph34 Auteur
                        C:\Windows\system32\Dwm.exe
                        C:\Windows\system32\taskeng.exe
                        C:\Windows\Explorer.EXE
                        C:\Program Files\Dell\DellDock\DellDock.exe
                        C:\Windows\system32\conime.exe
                        c:\PROGRA~1\mcafee.com\agent\mcagent.exe
                        C:\Program Files\DellTPad\Apoint.exe
                        C:\Windows\OEM02Mon.exe
                        C:\Windows\System32\rundll32.exe
                        C:\Windows\System32\rundll32.exe
                        C:\Windows\System32\rundll32.exe
                        C:\Windows\System32\WLTRAY.EXE
                        C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                        C:\Program Files\Dell\MediaDirect\PCMService.exe
                        C:\Windows\System32\p2phost.exe
                        C:\Program Files\Dell Support Center\bin\sprtcmd.exe
                        C:\Windows\ehome\ehtray.exe
                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                        C:\Program Files\DAEMON Tools Lite\daemon.exe
                        C:\Program Files\Windows Media Player\wmpnscfg.exe
                        C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
                        C:\ProgramData\Solt Lake Software\Pro Antispyware 2009\proas2009.exe
                        C:\Program Files\Digital Line Detect\DLG.exe
                        C:\Windows\ehome\ehmsas.exe
                        C:\Program Files\DellTPad\Apntex.exe
                        C:\Program Files\DellTPad\HidFind.exe
                        C:\Program Files\Internet Explorer\IEUser.exe
                        C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                        C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                        C:\Windows\System32\wsqmcons.exe
                        C:\Program Files\Internet Explorer\IEXPLORE.EXE
                        c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe
                        C:\Windows\system32\cmd.exe
                        C:\Windows\system32\cscript.exe

                        merci encore de votre patience
                        • 1
                        • 2
                        • 3
                        • 4

                        Discussions similaires

                        Supprimer l'historique de commandes et d'achats sur Amazon
                        Matthew5

                        25 réponses