Pc infecté !!!

[bluebeck]

Bonjour, je crois que j'ai téléchargé un fichier infecté dans Limewire et il y a plein de pop ups qui apparaissent. Mon antivirus a repéré un trojanhorse SHeur2.BDEE avec une clé de registre qui y est liée. De plus il y une fenêtre qui apparaît ponctuellement:
__________________________________________
Sous-système ms-dos 16 bits

C:windowssystem32 _c007 1.Exe
Le processeur NTVDM a rencontré une instruction non autorisée

cs: 0f8f IP: 010d OP: 6361 74696f
_____________________________________________

J'ai fait un scan avec HiJackthis, le voici:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:14:48, on 2009-09-16
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
c:program filesfichiers communslogitechlvmvfmLVPrcSrv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSSystem32spoolDRIVERSW32X863E_FATI9EA.EXE
C:Program FilesBellCanadaMcciTrayApp.exe
C:Program FilesFichiers communsRealUpdate_OB ealsched.exe
C:Program FilesFichiers communsLogitechLComMgrCommunications_Helper.exe
C:Program FilesLogitechQuickCam10QuickCam10.exe
C:Program FilesFichiers communsLogitechLComMgrLVComSX.exe
C:PROGRA~1AVGAVG8avgtray.exe
C:Program FilesJavajre1.6.0_07injusched.exe
C:Program FilesQuickTimeQTTask.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
C:PROGRA~1AVGAVG8avgwdsvc.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2inapache.exe
C:Program FilesCommon FilesMotiveMcciCMService.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2inapache.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerin
SvcLog.exe
C:PROGRA~1AVGAVG8avgrsx.exe
C:WINDOWSsystem32
vsvc32.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:WINDOWSsystem32svchost.exe
C:PROGRA~1AVGAVG8avgemc.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerin
SvcIp.exe
C:Program FilesAVGAVG8avgcsrvx.exe
C:Program FilesiPodiniPodService.exe
C:Program FilesLogitechQuickCam10COCIManager.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesJavajre1.6.0_07injucheck.exe
C:Documents and SettingsAlexandreMes documentseMuleemule.exe
C:Program FilesWindows LiveContactswlcomm.exe
C:WINDOWSsystem32 undll32.exe
C:PROGRA~1AVGAVG8avgnsx.exe
C:Program FilesiTunesiTunes.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe
C:Documents and SettingsAlexandreBureauHijackThis.exe

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = 127.0.0.1;*.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayer pbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:Program FilesAVGAVG8avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_07inssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [Ink Monitor] C:Program FilesEPSONInk MonitorInkMonitor.exe
O4 - HKLM..Run: [EPSON Stylus CX6600 Series] C:WINDOWSSystem32spoolDRIVERSW32X863E_FATI9EA.EXE /P26 "EPSON Stylus CX6600 Series" /O6 "USB001" /M "Stylus CX6600"
O4 - HKLM..Run: [BellCanada_McciTrayApp] C:Program FilesBellCanadaMcciTrayApp.exe
O4 - HKLM..Run: [TkBellExe] "C:Program FilesFichiers communsRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [LogitechCommunicationsManager] "C:Program FilesFichiers communsLogitechLComMgrCommunications_Helper.exe"
O4 - HKLM..Run: [LogitechQuickCamRibbon] "C:Program FilesLogitechQuickCam10QuickCam10.exe" /hide
O4 - HKLM..Run: [LVCOMSX] "C:Program FilesFichiers communsLogitechLComMgrLVComSX.exe"
O4 - HKLM..Run: [AVG8_TRAY] C:PROGRA~1AVGAVG8avgtray.exe
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_07injusched.exe"
O4 - HKLM..Run: [HomeKeyLogger] C:Program FilesHomeKeyLoggerKeyLogger.exe
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE RESEAU')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Startup: Last.fm Helper.lnk = C:Program FilesLast.fmLastFMHelper.exe
O4 - Global Startup: Assistant Internet.lnk = C:Program FilesNetAssistantinmatcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerRestrictions present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_07inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_07inssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net ... plugin.cab
O16 - DPF: {597F9140-0DC6-4657-A162-76EC0E7AEE81} (ActiveBroadcast Control) - http://www.meetstream.com/activex/28081 ... adcast.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 1008175125
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JSCDL ... 586-jc.cab
O16 - DPF: {BFD90062-6B5E-4F8F-87B1-5F022C14E32F} (ActiveReceiver Control) - http://www.meetstream.com/activex/28091 ... ceiver.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://www.driveragent.com/files/driveragent.cab
O16 - DPF: {FA30EC32-668B-4B60-B13C-4C84EB90C3C9} (ActiveID Control) - http://www.meetstream.com/activex/28081/activeid.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:Program FilesAVGAVG8avgpp.dll
O20 - AppInit_DLLs: C:WINDOWSSystem32digest32.dll
O20 - Winlogon Notify: 74c8e413670 - C:WINDOWSSystem32digest32.dll
O20 - Winlogon Notify: avgrsstarter - C:WINDOWSSYSTEM32avgrsstx.dll
O20 - Winlogon Notify: __c0060184 - C:WINDOWSsystem32\__c0060184.dat
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:PROGRA~1AVGAVG8avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:PROGRA~1AVGAVG8avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2inapache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesFichiers communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:program filesfichiers communslogitechlvmvfmLVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:Program FilesFichiers communsLogitechSrvLnchSrvLnch.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:Program FilesCommon FilesMotiveMcciCMService.exe
O23 - Service: NBService - Nero AG - C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesFichiers communsAheadLibNMIndexingService.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:Program FilesNVIDIA CorporationNetworkAccessManagerin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:Program FilesNVIDIA CorporationNetworkAccessManagerin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared FilesRichVideo.exe

--
End of file - 10705 bytes


___________________


Pouvez-vous m'indiquer la marche à suivre pour nettoyer mon pc? Merci à l'avance!

[danakil]

Salut !

Tu as une infection Combo

Fais ceci dans l'ordre :

1/ Supprime ce fichier en gras :

C:Documents and SettingsAlexandreBureauHijackThis.exe

HijackThis est mal placé.

2/ Télécharge ComboFix de sUBs sur ton Bureau et pas ailleurs.

*** Déconnectes toi d'internet et désactives ton antivirus pour que ComboFix puisse s'exécuter normalement ***

> Clic droit > Exécuter en tant qu'administrateur sur ComboFix.exe
et suis les instructions.
(Si demandé, sélectionne la langue et l'option 1 puis valide).

> Installe la console de récupération si proposé et continue.

!!! Ne touches à rien tant que le scan n'est pas terminé !!!

> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
(il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.)

NOTE : Le rapport se trouve également ici : C:ComboFix.txt


3/ Télécharge HJTInstall.exe sur ton Bureau.
> double-clics sur le fichier HJTInstall.exe afin de le lancer.
Il te proposera de l'installer par défaut dans Program Files >> Accepte
> Dans la nouvelle fenêtre sélectionne : Do a system scan and save a logfile
Tu vas obtenir un rapport >> copie le et colle le moi ici en réponse.

[bluebeck]

Bonjour, merci pour votre aide

Alors voici le rapport Combofix:

ComboFix 09-09-18.02 - Alexandre 2009-09-18 18:45.1.2 - NTFSx86
Microsoft Windows XP Edition familiale 5.1.2600.3.1252.2.1036.18.1918.1342 [GMT -4:00]
Lancé depuis: c:documents and settingsAlexandreBureauComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: ActiveArmor Firewall *disabled* {EDC10449-64D1-46c7-A59A-EC20D662F26D}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:docume~1ALEXAN~1LOCALS~1Tempgewhk1
c:docume~1ALEXAN~1LOCALS~1Tempjewhfwje
c:documents and settingsAlexandreApplication Data2000000066bf9ed670C.manifest
c:documents and settingsAlexandreApplication Data2000000066bf9ed670O.manifest
c:documents and settingsAlexandreApplication Data2000000066bf9ed670P.manifest
c:documents and settingsAlexandreApplication Data2000000066bf9ed670S.manifest
c:documents and settingsAlexandreApplication Dataurlredir.cfg
c:program filesFBrowserAdvisor
c:program filesFBrowsingAdvisor
c:program filesFBrowsingAdvisorIXPCOMEvents.xpt
c:program filesFBrowsingAdvisorLogo.png
c:program filesFBrowsingAdvisormain.db
c:program filesFBrowsingAdvisorunins000.dat
c:program filesFBrowsingAdvisorunins000.exe
c:program filesINSTALL.LOG
c:windowsAlcmtr.exe
c:windowsGnuHashes.ini
c:windowssystem32\__c00110AC.dat
c:windowssystem32\__c00111A3.dat
c:windowssystem32\__c001AE0A.exe
c:windowssystem32\__c001C008.dat
c:windowssystem32\__c001EEE9.exe
c:windowssystem32\__c00205D0.dat
c:windowssystem32\__c002B69.exe
c:windowssystem32\__c002C8F2.exe
c:windowssystem32\__c002D219.exe
c:windowssystem32\__c0034367.exe
c:windowssystem32\__c0035408.exe
c:windowssystem32\__c003AB64.exe
c:windowssystem32\__c0041406.exe
c:windowssystem32\__c0046CA3.exe
c:windowssystem32\__c0049E57.dat
c:windowssystem32\__c004A3B0.dat
c:windowssystem32\__c004DD48.exe
c:windowssystem32\__c005654A.exe
c:windowssystem32\__c0058950.exe
c:windowssystem32\__c005B6F5.dat
c:windowssystem32\__c0060184.dat
c:windowssystem32\__c006F890.exe
c:windowssystem32\__c00718FE.exe
c:windowssystem32\__c007396E.exe
c:windowssystem32\__c0078509.exe
c:windowssystem32\__c00786F2.exe
c:windowssystem32\__c008B7EC.exe
c:windowssystem32\__c008E39A.exe
c:windowssystem32\__c00B6E7C.exe
c:windowssystem32\__c00B8E86.exe
c:windowssystem32\__c00C6384.exe
c:windowssystem32\__c00C83F3.exe
c:windowssystem32\__c00C8C9C.exe
c:windowssystem32\__c00CB990.exe
c:windowssystem32\__c00D8796.exe
c:windowssystem32\__c00DF024.exe
c:windowssystem32\__c00E1BD1.exe
c:windowssystem32\__c00E477F.exe
c:windowssystem32\__c00E7CC4.exe
c:windowssystem32adssite-remove.exe
c:windowssystem32DIGEST32.DLL
c:windowssystem32GroupPolicy000.dat
c:windowssystem32LocalService293.crack.zip
c:windowssystem32LocalService293.crack.zip.kwd
c:windowssystem32LocalService294.keygen.zip
c:windowssystem32LocalService294.keygen.zip.kwd
c:windowssystem32LocalService295.serial.zip
c:windowssystem32LocalService295.serial.zip.kwd
c:windowssystem32LocalService296.setup.zip
c:windowssystem32LocalService296.setup.zip.kwd
c:windowssystem32LocalService298.music2.au
c:windowssystem32LocalService301.music.au
c:windowssystem32LocalService301.music.au.kwd
c:windowssystem32LocalService302.music2.au
c:windowssystem32LocalService302.music2.au.kwd
c:windowssystem32LocalService303.music3.au
c:windowssystem32LocalService303.music3.au.kwd
c:windowssystem32LocalService304.music4.au
c:windowssystem32LocalService304.music4.au.kwd
c:windowssystem32MEwA4HibSFcp3uu.vbs
C:xcrashdump.dat

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-08-18 au 2009-09-18 ))))))))))))))))))))))))))))))))))))
.

2009-09-18 11:17 . 2009-09-18 22:49 -------- d-sh--w- c:windowssystem32LocalService
2009-09-09 19:18 . 2009-09-09 19:18 17728 ---ha-w- c:windowssystem32mlfcache.dat
2009-09-09 19:02 . 2009-09-09 19:02 -------- d-----w- c:program filesiPod
2009-09-09 19:02 . 2009-09-09 19:03 -------- d-----w- c:program filesiTunes
2009-09-09 19:02 . 2009-09-09 19:03 -------- d-----w- c:documents and settingsAll UsersApplication Data{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-09-09 19:00 . 2009-08-28 23:42 2065696 ----a-w- c:windowssystem32usbaaplrc.dll
2009-09-09 18:33 . 2009-09-09 18:34 -------- d-----w- c:documents and settingsAll UsersApplication Data{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-09-09 18:32 . 2009-09-09 18:32 -------- d-----w- c:program filesBonjour
2009-09-08 22:05 . 2009-06-21 21:47 153088 -c----w- c:windowssystem32dllcache riedit.dll
2009-08-22 22:07 . 2009-08-22 22:07 -------- d-----w- C:f9af7cf929cefdf238d8
2009-08-22 22:07 . 2009-08-22 22:42 -------- d-----w- c:windowsSxsCaPendDel

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-18 22:22 . 2008-06-01 19:13 -------- d-----w- c:documents and settingsAll UsersApplication Dataavg8
2009-09-17 22:20 . 2009-06-24 18:45 -------- d-----w- c:documents and settingsAlexandreApplication Datagtk-2.0
2009-09-16 20:18 . 2007-10-03 04:29 -------- d-----w- c:documents and settingsAlexandreApplication DataLimeWire
2009-09-16 20:16 . 2009-09-16 20:16 523264 --sha-w- c:windowssystem3240.tmp
2009-09-10 20:01 . 2007-10-03 03:39 -------- d-----w- c:documents and settingsAll UsersApplication DataApple
2009-09-09 19:03 . 2007-10-04 05:22 -------- d-----w- c:documents and settingsAlexandreApplication DataApple Computer
2009-09-09 19:02 . 2008-04-02 02:37 -------- d-----w- c:program filesFichiers communsApple
2009-09-09 19:01 . 2008-01-20 20:41 -------- d-----w- c:program filesQuickTime
2009-08-28 23:42 . 2008-04-02 02:37 40448 ----a-w- c:windowssystem32driversusbaapl.sys
2009-08-23 20:57 . 2007-09-29 14:04 25216 ----a-w- c:documents and settingsAlexandreLocal SettingsApplication DataGDIPFONTCACHEV1.DAT
2009-08-22 22:10 . 2006-03-02 12:00 92210 ----a-w- c:windowssystem32perfc00C.dat
2009-08-22 22:10 . 2006-03-02 12:00 528154 ----a-w- c:windowssystem32perfh00C.dat
2009-08-18 22:04 . 2008-06-01 19:13 11952 ----a-w- c:windowssystem32avgrsstx.dll
2009-08-18 22:04 . 2008-06-01 19:13 335240 ----a-w- c:windowssystem32driversavgldx86.sys
2009-08-18 22:04 . 2008-06-01 19:13 27784 ----a-w- c:windowssystem32driversavgmfx86.sys
2009-08-08 22:24 . 2007-11-14 02:59 -------- d-----w- c:documents and settingsAll UsersApplication DataDVD Shrink
2009-08-05 09:00 . 2006-03-02 12:00 205312 ----a-w- c:windowssystem32mswebdvd.dll
2009-08-02 06:06 . 2009-08-02 06:06 -------- d-----w- c:program filesRAR Password Cracker
2009-07-25 22:42 . 2009-07-25 22:34 -------- d-----w- c:program filesWideStep Software
2009-07-17 19:03 . 2006-03-02 12:00 58880 ----a-w- c:windowssystem32atl.dll
2009-07-14 03:43 . 2006-03-02 12:00 286208 ----a-w- c:windowssystem32wmpdxm.dll
2009-06-29 15:57 . 2006-03-02 12:00 827392 ----a-w- c:windowssystem32wininet.dll
2009-06-29 15:57 . 2006-03-02 12:00 78336 ----a-w- c:windowssystem32ieencode.dll
2009-06-29 15:57 . 2006-03-02 12:00 17408 ----a-w- c:windowssystem32corpol.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"NvCplDaemon"="c:windowssystem32NvCpl.dll" [2006-10-22 7700480]
"Ink Monitor"="c:program filesEPSONInk MonitorInkMonitor.exe" [2004-05-05 262210]
"EPSON Stylus CX6600 Series"="c:windowsSystem32spoolDRIVERSW32X863E_FATI9EA.EXE" [2004-03-01 98304]
"BellCanada_McciTrayApp"="c:program filesBellCanadaMcciTrayApp.exe" [2007-11-19 1468928]
"TkBellExe"="c:program filesFichiers communsRealUpdate_OB ealsched.exe" [2008-04-06 185896]
"LogitechCommunicationsManager"="c:program filesFichiers communsLogitechLComMgrCommunications_Helper.exe" [2006-06-26 497200]
"LogitechQuickCamRibbon"="c:program filesLogitechQuickCam10QuickCam10.exe" [2006-06-26 614960]
"LVCOMSX"="c:program filesFichiers communsLogitechLComMgrLVComSX.exe" [2006-06-26 243248]
"AVG8_TRAY"="c:progra~1AVGAVG8avgtray.exe" [2009-08-18 2007832]
"SunJavaUpdateSched"="c:program filesJavajre1.6.0_07injusched.exe" [2008-06-10 144784]
"QuickTime Task"="c:program filesQuickTimeQTTask.exe" [2009-09-05 417792]
"iTunesHelper"="c:program filesiTunesiTunesHelper.exe" [2009-09-09 305440]

[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
"CTFMON.EXE"="c:windowssystem32CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindows ntcurrentversionwinlogon
otifyavgrsstarter]
2009-08-18 22:04 11952 ----a-w- c:windowssystem32avgrsstx.dll

[HKLM~startupfolderC:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Reader Synchronizer.lnk]
path=c:documents and settingsAll UsersMenu DémarrerProgrammesDémarrageAdobe Reader Synchronizer.lnk
backup=c:windowspssAdobe Reader Synchronizer.lnkCommon Startup

[HKLM~startupfolderC:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=c:documents and settingsAll UsersMenu DémarrerProgrammesDémarrageLancement rapide d'Adobe Reader.lnk
backup=c:windowspssLancement rapide d'Adobe Reader.lnkCommon Startup

[HKLM~startupfolderC:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinZip Quick Pick.lnk]
path=c:documents and settingsAll UsersMenu DémarrerProgrammesDémarrageWinZip Quick Pick.lnk
backup=c:windowspssWinZip Quick Pick.lnkCommon Startup

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringSymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringSymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
"%windir%\system32\sessmgr.exe"=
"c:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\BitTorrent_DNA\dna.exe"=
"c:\Program Files\LimeWire\LimeWire.exe"=
"c:\Documents and Settings\Alexandre\Mes documents\eMule\emule.exe"=
"c:\Program Files\DNA\btdna.exe"=
"c:\Program Files\Real\RealPlayer\realplay.exe"=
"c:\Program Files\AVG\AVG8\avgupd.exe"=
"c:\Program Files\AVG\AVG8\avgemc.exe"=
"c:\Program Files\Windows Live\Messenger\wlcsdk.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Bonjour\mDNSResponder.exe"=
"c:\Program Files\iTunes\iTunes.exe"=

R1 AvgLdx86;AVG AVI Loader Driver x86;c:windowssystem32driversavgldx86.sys [2008-06-01 335240]
R1 AvgTdiX;AVG8 Network Redirector;c:windowssystem32driversavgtdix.sys [2008-06-01 108552]
R2 avg8emc;AVG8 E-mail Scanner;c:progra~1AVGAVG8avgemc.exe [2008-07-06 908056]
R2 avg8wd;AVG8 WatchDog;c:progra~1AVGAVG8avgwdsvc.exe [2008-07-06 297752]
.
Contenu du dossier 'Tâches planifiées'

2009-05-23 c:windowsTasksAppleSoftwareUpdate.job
- c:program filesApple Software UpdateSoftwareUpdate.exe [2007-08-29 17:34]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = 127.0.0.1;*.local
Trusted Zone: montrealwebcam.comwww
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {597F9140-0DC6-4657-A162-76EC0E7AEE81} - hxxp://www.meetstream.com/activex/28081 ... adcast.cab
DPF: {BFD90062-6B5E-4F8F-87B1-5F022C14E32F} - hxxp://www.meetstream.com/activex/28091 ... ceiver.cab
DPF: {FA30EC32-668B-4B60-B13C-4C84EB90C3C9} - hxxp://www.meetstream.com/activex/28081/activeid.cab
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-HomeKeyLogger - c:program filesHomeKeyLoggerKeyLogger.exe
Notify-74c8e413670 - c:windowsSystem32digest32.dll
AddRemove-Assistant Internet - c:progra~1NETASS~1Uninstall.exe
AddRemove-FBrowsingAdvisor_is1 - c:program filesFBrowsingAdvisorunins000.exe
AddRemove-HijackThis - c:docume~1ALEXAN~1LOCALS~1TempRar$EX00.640HijackThis.exe
AddRemove-WinRAR archiver - c:documents and settingsAlexandreBureauuninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-18 18:51
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(3592)
c:windowssystem32eappprxy.dll
c:windowssystem32WPDShServiceObj.dll
c:program filesArcSoftPhotoImpression 5sharepihook.dll
c:windowssystem32PortableDeviceTypes.dll
c:windowssystem32PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:program filesAVGAVG8avgtray.exe
c:program filesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
c:program filesBonjourmDNSResponder.exe
c:program filesNVIDIA CorporationNetworkAccessManagerApache GroupApache2inApache.exe
c:program filesCommon FilesMotiveMcciCMService.exe
c:program filesAVGAVG8avgrsx.exe
c:progra~1AVGAVG8avgnsx.exe
c:program filesNVIDIA CorporationNetworkAccessManagerin
SvcLog.exe
c:windowssystem32
vsvc32.exe
c:program filesCyberLinkShared FilesRichVideo.exe
c:program filesNVIDIA CorporationNetworkAccessManagerApache GroupApache2inApache.exe
c:program filesNVIDIA CorporationNetworkAccessManagerin
SvcIp.exe
c:program filesAVGAVG8avgcsrvx.exe
c:program filesiPodiniPodService.exe
c:windowssystem32wscntfy.exe
c:program filesLogitechQuickCam10COCIManager.exe
.
**************************************************************************
.
Heure de fin: 2009-09-18 18:55 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-09-18 22:55

Avant-CF: 168 190 431 232 octets libres
Après-CF: 169 489 735 680 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)WINDOWS
[operating systems]
h:cmdconsBOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)WINDOWS="Microsoft Windows XP

[bluebeck]

Et voici le rapport HJTI:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:00:27, on 2009-09-18
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32spoolDRIVERSW32X863E_FATI9EA.EXE
C:Program FilesBellCanadaMcciTrayApp.exe
C:Program FilesFichiers communsRealUpdate_OB ealsched.exe
C:Program FilesFichiers communsLogitechLComMgrCommunications_Helper.exe
C:Program FilesLogitechQuickCam10QuickCam10.exe
C:Program FilesFichiers communsLogitechLComMgrLVComSX.exe
C:PROGRA~1AVGAVG8avgtray.exe
C:Program FilesJavajre1.6.0_07injusched.exe
C:Program FilesQuickTimeQTTask.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
C:PROGRA~1AVGAVG8avgwdsvc.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2inapache.exe
C:Program FilesCommon FilesMotiveMcciCMService.exe
C:PROGRA~1AVGAVG8avgrsx.exe
C:PROGRA~1AVGAVG8avgnsx.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerin
SvcLog.exe
C:WINDOWSsystem32
vsvc32.exe
C:Program FilesCyberLinkShared FilesRichVideo.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2inapache.exe
C:PROGRA~1AVGAVG8avgemc.exe
C:Program FilesNVIDIA CorporationNetworkAccessManagerin
SvcIp.exe
C:Program FilesAVGAVG8avgcsrvx.exe
C:Program FilesiPodiniPodService.exe
C:WINDOWSsystem32wscntfy.exe
C:Program FilesLogitechQuickCam10COCIManager.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSexplorer.exe
C:WINDOWSsystem32
otepad.exe
C:Program FilesJavajre1.6.0_07injucheck.exe
C:Program Filesinternet exploreriexplore.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = 127.0.0.1;*.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayer pbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:Program FilesAVGAVG8avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_07inssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [Ink Monitor] C:Program FilesEPSONInk MonitorInkMonitor.exe
O4 - HKLM..Run: [EPSON Stylus CX6600 Series] C:WINDOWSSystem32spoolDRIVERSW32X863E_FATI9EA.EXE /P26 "EPSON Stylus CX6600 Series" /O6 "USB001" /M "Stylus CX6600"
O4 - HKLM..Run: [BellCanada_McciTrayApp] C:Program FilesBellCanadaMcciTrayApp.exe
O4 - HKLM..Run: [TkBellExe] "C:Program FilesFichiers communsRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [LogitechCommunicationsManager] "C:Program FilesFichiers communsLogitechLComMgrCommunications_Helper.exe"
O4 - HKLM..Run: [LogitechQuickCamRibbon] "C:Program FilesLogitechQuickCam10QuickCam10.exe" /hide
O4 - HKLM..Run: [LVCOMSX] "C:Program FilesFichiers communsLogitechLComMgrLVComSX.exe"
O4 - HKLM..Run: [AVG8_TRAY] C:PROGRA~1AVGAVG8avgtray.exe
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_07injusched.exe"
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Startup: Last.fm Helper.lnk = C:Program FilesLast.fmLastFMHelper.exe
O4 - Global Startup: Assistant Internet.lnk = C:Program FilesNetAssistantinmatcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_07inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.6.0_07inssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net ... plugin.cab
O16 - DPF: {597F9140-0DC6-4657-A162-76EC0E7AEE81} (ActiveBroadcast Control) - http://www.meetstream.com/activex/28081 ... adcast.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 1008175125
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://joedeefoster.spaces.live.com/Pho ... nPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JSCDL ... 586-jc.cab
O16 - DPF: {BFD90062-6B5E-4F8F-87B1-5F022C14E32F} (ActiveReceiver Control) - http://www.meetstream.com/activex/28091 ... ceiver.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://www.driveragent.com/files/driveragent.cab
O16 - DPF: {FA30EC32-668B-4B60-B13C-4C84EB90C3C9} (ActiveID Control) - http://www.meetstream.com/activex/28081/activeid.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:Program FilesAVGAVG8avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:WINDOWSSYSTEM32avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:PROGRA~1AVGAVG8avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:PROGRA~1AVGAVG8avgwdsvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:Program FilesNVIDIA CorporationNetworkAccessManagerApache GroupApache2inapache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesFichiers communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:program filesfichiers communslogitechlvmvfmLVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:Program FilesFichiers communsLogitechSrvLnchSrvLnch.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:Program FilesCommon FilesMotiveMcciCMService.exe
O23 - Service: NBService - Nero AG - C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesFichiers communsAheadLibNMIndexingService.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:Program FilesNVIDIA CorporationNetworkAccessManagerin
SvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:Program FilesNVIDIA CorporationNetworkAccessManagerin
SvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared FilesRichVideo.exe

--
End of file - 9830 bytes




__________________________

Y-a-t-il d'autres choses à faire? Merci du coup de main!

[danakil]

Salut !
Ton PC n'est plus infecté par Combo.
Cependant il reste des éléments pouvant rapidement réinstaller cette infection.

Applique cette procédure en images :
http://www.pc-infopratique.com/forum-in ... 46564.html
Poste moi le rapport de Suppression de la liste pour confirmation.
Ensuite nous fermerons ce sujet.

[bluebeck]

Bon, voici le rapport de Malwarebytes:


Malwarebytes' Anti-Malware 1.41
Version de la base de données: 2831
Windows 5.1.2600 Service Pack 3

2009-09-20 14:00:00
mbam-log-2009-09-20 (14-00-00).txt

Type de recherche: Examen complet (C:|H:|)
Eléments examinés: 186770
Temps écoulé: 1 hour(s), 1 minute(s), 35 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 14
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 3

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOTrowsingtool.browserwatcher (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTrowsingtool.browserwatcher.1 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTrowsingtool.precachebrowserhost (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTrowsingtool.precachebrowserhost.1 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTInterface{50a1aa3b-80e3-15cf-0f1a-83a98ad98fe9} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTInterface{7f68785e-4894-7bb2-5fde-cc3eee2ebc82} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTInterface{e698e657-649e-5d40-752d-9a3b78ea832a} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTAppID{84d39d08-a551-a4e5-c8d1-3327573d4640} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTCLSID{0daee015-a728-c212-9b8f-298391b8328e} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTCLSID{aaf21892-e4d8-e8ed-e36a-3a91e3b2db29} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExtStats{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.AntiVirus2008) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTAppIDBrowsingTool.dll (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTBitDownload (Trojan.Swizzor) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREBrowsingTool (Trojan.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:Documents and SettingsAlexandreMenu DémarrerProgrammesBitDownload (Trojan.Swizzor) -> Quarantined and deleted successfully.
C:WINDOWSsystem32LocalService (Worm.Archive) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:System Volume Information\_restore{BDA711A8-F90B-4EEA-B951-A44585BB2F41}RP273A0079429.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:WINDOWSsystem3240.tmp (Worm.P2P) -> Quarantined and deleted successfully.
C:Documents and SettingsAlexandreMenu DémarrerProgrammesBitDownloadBitDownload Downloads.lnk (Trojan.Swizzor) -> Quarantined and deleted successfully.

______________________

Vous aviez raison, mon pc fonctionnait bien mais il y avait encore des trucs infectés! Merci pour votre aide

[danakil]

Salut !

Maintenant on supprime les logiciels de scan et de suppression devenus inutiles sur ton PC.

Télécharge Pcnet2 sur ton Bureau.
> Dézippe le > Extraire ici ou Tout extraire.
> Double clique sur pcnet.bat > Sélectionne l'option 1
> Poste le rapport que tu vas obtenir.