J’ai éxécuté SECUSER, BIT DEFENDER et MALWAREBYTES qui ont détecté des virus et ont nettoyé. A chque redémarrage le WIFI ne fonctionne pas. Je fais EXECUTER REDIGIT HKEYLOCALMACHINE SYSTEM CURRENTCONTROLSET SERVICES NDISUIO puis à droite je modifie la valeur 3 au lieu de 4 (process trouvé sur les forums pour relancer le WIFI. Cela fonctionne une fois car après un nouveau démarrage ultérieure cela ne marche plus. Merci par avance pour votre aide.
Salut
Post un log hijackthis
Tu clique sur le fichier HiJackThis.exe
Tu clique sur I accept
Tu clique sur Do a system Scan and save a log file
A la fin du scan, un fichier texte s’ouvre et tu colle son contenu sur le forum.
Edité le 19/07/2008 à 17:20
Logiciel téléchargé mais impossible à ouvrir message "n’est pas une application WIN 32 valide !!!
Ok tu es toujours infecté
Télécharge combofix
Ferme tout les application et clique dessus.
Post le log quand il s’ouvrira (contenue fichier texte)
Fait mais échec même message d’erreur qu’avec le précédent…
Oui sa va le faire avec tout ce qu’on va essayer d’installer donc on va faire des scan online
Housecall scan et supprime tout ce qui est détecté et post le rapport
OK je le fais et je repost demain mais voici déjà le rapport MALWAYREBYTES si ça peut aider :
Malwarebytes’ Anti-Malware 1.21
Version de la base de données: 967
Windows 5.1.2600 Service Pack 2
16:32:51 19/07/2008
mbam-log-7-19-2008 (16-32-51).txt
Type de recherche: Examen complet (C:|D:|)
Eléments examinés: 69629
Temps écoulé: 53 minute(s), 43 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 8
Fichier(s) infecté(s): 205
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\drivecleaner 2006 free (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar{4e7bd74f-2b8d-469e-a0e8-ed6ab685fa7d} (Adware.2020Search) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser{4e7bd74f-2b8d-469e-a0e8-ed6ab685fa7d} (Adware.2020Search) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mule_st_key (Trojan.Agent) -> Delete on reboot.
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
C:\Program Files\dynamic toolbar (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2 (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\Fichiers communs\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
C:\Program Files\Video ActiveX Object (Trojan.Zlob) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\gilles\Application Data\m\shared (Trojan.Agent) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\Program Files\dynamic toolbar\PBFRV2\Cache\ErrorLog.txt (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\go.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\home.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\logo_pb.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\parent_off.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\parent_on.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\pbfrv2tb0200.cfg (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\popup_off.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\popup_on.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\search.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\services.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\skin.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\skin1.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\skin2.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\skin3.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\skin4.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\skin5.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\store.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\style.css (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\support.bmp (Adware.2020search) -> Quarantined and deleted successfully.
C:\Program Files\dynamic toolbar\PBFRV2\Cache\ticker.xml (Adware.2020search) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\199140.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14950140.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14959203.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14988343.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\14994609.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\150015.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15012531.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15124375.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15141812.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15161671.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15202437.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15207046.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\152156.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15238171.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15270546.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15310281.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15367875.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\15397390.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\154687.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\160734.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\161671.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\162296.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\168218.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\180687.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\182609.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\191468.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\198796.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\212796.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\218203.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\240234.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\248734.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\250921.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\271281.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\329218.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\331953.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\344093.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\360953.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\389843.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\411671.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\415859.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\439968.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\491828.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\510531.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\662421.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\downld\701812.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\data.oct (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\flec006.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\gilles\Application Data\m\list.oct (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\srvlist.oct (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoccerSaver 3.6a.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soccersprite 2.0.522.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoccerWinners Connections 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sociagami 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Social Bookmark Icons 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Social Bookmarking Tool for Windows Live Writer 2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Social Bookmarks Manager 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Social Publisher PRO 2.5.4.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Socialist Flora and Fauna 1.0.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocialPoster 01.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SociometryPro 2.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sock Monkey Demo Screensaver 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sock Proxy 1.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Socket Workbench 3.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketLock 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SockeToome 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketToMe 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketTools Enterprise Edition 4.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketTools Scripting Edition 5.00.5010.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketTools Secure Enterprise Edition 4.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketTools Secure Library Edition 4.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketTools Secure Scripting Edition 4.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketTools Secure Subscription 4.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketTools Secure Visual Edition 4.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketTools Standard Subscription 4.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketWatch 3.5b.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketWrench .NET Edition 5.00.5015.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocksChain 3.12.152.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SOCKShell 1.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sockso 0.7.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sockter 3.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocLab 2.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Socrates 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soda Tracker 1.0.4.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoccerMom Schedule 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Socialize! 1.2.0.9.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SocketTools Secure .NET Edition 5.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Socks Proxy Search 1.30.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SodeaSoft Gnt Planning 2007 1.2.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sofia Vergara Screensaver1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Checklists 1.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Switch 1.02.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Panic Station 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softalk Share Server 1.0.5.276.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softany Screensaver Remover 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sodeasoft Planning Free 3.0.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SodeaSoft Planning Pro 2007 6.2.15.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sodium Admin 0.5.1 Beta.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoEasyAccounting 2006.86.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SofCheck Inspector 2.1268.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sofia 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sofia Vergara Screensaver2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Sofia Vergara Screensaver3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Adobe CS2 Icons 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Ambulance for Outlook Express 1.22.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Calendar 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Catcher 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Icons 2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Alarm Clock Pro 3.8.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Big Ben Chimes 1.0.0.6.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Binary Converter 1.6.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Currency Calculator Pro 2.6.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Keyboard Hotkey Professional 2.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Lock Up Professional 3.1.0.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Remote Shutdown Professional Client 2.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Remote Shutdown Professional Server 2.5.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft PC Shutdown Professional 3.9.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Power File Splitter and Renamer 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Power ShutDown 2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Power Style 3.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Sea Drop-Down Menu 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft Shines 3D 2.02.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft XP Icons 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft’n Site Autosubmitter 3.12.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft-eReader 1.42.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Alarm Clock 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Bookmark Converter 1.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Camotion 1.01.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Cleaner 1.01.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Duplicate File Finder 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Fuel Calculator 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Mail Check 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 MP3 Player 1.0.7.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Notebook 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softabar Command Line Email Client 1.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softabar Command Line RSS Reader 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softabar Password Manager 2.0.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softaholic’s CheckMail 2.1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softaholic’s ClipboardSaver 2.0.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softalk Organizer 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soccer News Google Gadget 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soccer News Vista Gadget 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soccer Pro 2006 1.1.2684.29688.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soccer Roster Assistant 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soccer Scoreboard 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soccer Team Icons.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoccerMom 2008 R2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoccerMom Contacts 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Password Manager 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Process Viewer 1.00.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 RAM Defragmenter 1.02.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 RAM Deframenter 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Renamer 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Shredder 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Split Join 1.02.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Switch Off 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Tasks 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Uninstaller 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Unnecessary File Finder 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Wallpaper Changer 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft191 Wallpaper Manager 1.02.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft193 Password Manager 1.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft193 Shredder 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Soft193 Switch Off 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftAmbulance for Outlook Express 1.4.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftAmbulance Free Eraser 1.02.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftAmbulance Partition Doctor 1.55.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftAmbulance Photo Undelete 1.7.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftAmbulance Wiperaser 1.13.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftaMedCab 1.0x.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softany Monitor Control 2.05.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softany Txt2Htm2Chm 1.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftAtlas DownLoad Accelerator 1.60.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftAtlas Google Booster 2.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftBanking 1.2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftBankingLITE 1.2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\SoftBooking 1.1.9.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\gilles\Application Data\m\shared\Softboy.net On Screen Keyboard 2.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\srosa.sys (Rootkit.Bagle) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\hldrrr.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\mdelk.exe (Trojan.Spammer) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wintems.exe (Trojan.Spammer) -> Delete on reboot.
C:\WINDOWS\system32\kvxtfnhx_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\kvxtfnhx_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
Réessaye hijackthis pour voir si sa c’est améliorer
j’ai essayé les deux mais toujours rien…et le même message d’erreur
Fait le scan avec housecall que je t’ai proposer au dessus
OK je vais essayer et je me reconnecte demain matin car suis obligé d’y aller.
merci bien par avance pour l’aide;)
Ok, a demain alors
De rien, bonne soirée
tu as fais les scan et log en mode sans échec?
Pour répondre à JANUS ELOI non je les ai tous fais en mode normal
Pour le scan HOUSECALL, je suis arrivé à la fin du processus avec désinfection mais je n’ai pas obtenu le rapport, je suis encore connecté et après avoir fait gestionnaire de tâches HOUSE est toujours en cours d’éxécution…que dois je faire ?
je ne suis pas arriver à demarrer WINDOW en mode sans échec. J’ai eu un message sur fond bleu signalant un problème au niveau du disque dur dont :
STOP:0X0000007B(0XF793C528,0X0000034,0X0000000,0X00000000)
J’ai redémarré le PC à l’aide de l’interrupteur
INACCESSIBLE_BOOT_DEVICE - code : 0x0000007B
[1] Windows est incapable de localiser la partition ou le lecteur de démarrage. Ce problème survient après le repartitionnement d’un disque, l’ajout d’un nouveau disque, la mise à jour du contrôleur de disque ou le déplacement de WIndows sur un autre disque
[2] Le problème pourrait aussi être dû à un virus.
[3] Windows XP ou Vista - Ce problème peut survenir après un changement de carte mère. Réinstallez Windows.
[4] Windows XP ou Vista - Si l’erreur suurvient au cours d’une installation automatique de Windows où vous avez défini l’option Repartitionner sur Oui, réinstallez Windows sans demander le repartionnement. L’erreur est due à un pilote de contrôleur de mémoire non compatible.
[5] Windows XP - Si le problème survient après la désinstallation d’Easy CD Creator Platinium Edition,
je confirme que c’est bien un virus dans la mesure où les autres possibilités ne s’appliquent pas à mon cas
que dois je faire alors ?
post un rapport hijackthis
Cela ne marche toujours pas j’ai le message “n’est pas une application WIN32 valide”
Salut,
On va faire un truc risqué mais qui peut marché, on va passée par le compte root.
- Allume ton PC comme d’habitude
2)Clique sur “démarrer----->déconnexion (ou fermer la session)”
Ensuite, tu as 2 possibilité:
-
Les comptes sont afficher avec des petites images.
Il faut que tu laisse ctrl+alt+suppr appuyé jusqu’à l’apparition d’une fenêtre de login. Elle est composé de 2 lignes: Login et Mot de passe
Dan login, tu met “administrateur” et dans mot de passe, tu met rien ou bien le mot de passe “administrateur” choisi lors de l’installation de windows -
Tu as déjà la fenêtre de login, relis la fin du 1)
ATTENTION: Ce compte est réservé à l’administrateur et te donne accès à tout les paramètre possible et imaginable. Ce compte n’est donc pas à utiliser en usage courant et est réservé aux opérations de maintenance/réparation. Je te déconseille donc d’aller sur internet avec ce compte pour éviter une infection plus poussé de ton PC.
Maintenant réessaie Hijackthis et change de compte pour poster.
@+ 
PS: Ton PC est une véritable écurie!! :ane:
Edité le 20/07/2008 à 14:39