probleme avec le virus "bagle.gen" • page 4

[xerow]

je trouve pas ni le rapport ni les dossier a analyser
je regarderais demain la je vais aller me coucher je me leve de bonheur demain matin
merci et bonne nuit
a demain

[xerow]

j ai regarder dans programmes et fonctionnalite et il y avait bien les fichier mais il ete tous vide et pour le rapport elibagla je le trouve pas

[r@in | b0w]

Ok.

Fais un nouveau scan HiJackThis et postes le rapport.

[xerow]

voici le nouveau rapport hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:32:22, on 13/11/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:Windowssystem32Dwm.exe
C:WindowsSYSTEM32 askeng.exe
C:WindowsExplorer.EXE
C:WindowsRtHDVCpl.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program FilesHewlett-PackardHP Quick Launch ButtonsQLBCTRL.exe
C:Program FilesHpHP Software UpdatehpwuSchd2.exe
C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe
C:Program FilesHewlett-PackardHP Wireless AssistantWiFiMsg.exe
C:Program FilesJavajre1.6.0_07injusched.exe
C:WindowsSystem32 undll32.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesMotorolaSMSERIALsm56hlpr.exe
C:Program FilesBitDefenderBitDefender 2009dagent.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesHewlett-PackardDigital Imaginginhpqtra08.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:WindowsSystem32 undll32.exe
C:Program FilesHewlett-PackardSharedHpqToaster.exe
C:Program FilesHewlett-PackardDigital ImaginginhpqSTE08.exe
C:Windowssystem32wuauclt.exe
C:Program FilesBitDefenderBitDefender 2009seccenter.exe
C:Windowssystem32conime.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLLoginProxy.exe
C:Users
icoDesktopsniffle.exe.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://recherche.neuf.fr/
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://google.fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://recherche.neuf.fr/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayer pbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:Program FilesAVGAVG8avgssie.dll (file missing)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_07inssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:PROGRA~1AVGAVG8AVGTOO~1.DLL (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesWindows Live Toolbarmsntb.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesWindows Live Toolbarmsntb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:PROGRA~1AVGAVG8AVGTOO~1.DLL (file missing)
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:Program FilesBitDefenderBitDefender 2009IEToolbar.dll
O4 - HKLM..Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM..Run: [IAAnotif] C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe
O4 - HKLM..Run: [QlbCtrl] %ProgramFiles%Hewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe /Start
O4 - HKLM..Run: [UCam_Menu] "C:Program FilesCyberLinkYouCamMUITransferMUIStartMenu.exe" "C:Program FilesCyberLinkYouCam" update "SoftwareCyberLinkYouCam1.0"
O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 - HKLM..Run: [HP Health Check Scheduler] c:Program FilesHewlett-PackardHP Health CheckHPHC_Scheduler.exe
O4 - HKLM..Run: [HP Software Update] C:Program FilesHpHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [hpWirelessAssistant] C:Program FilesHewlett-PackardHP Wireless AssistantHPWAMain.exe
O4 - HKLM..Run: [WAWifiMessage] C:Program FilesHewlett-PackardHP Wireless AssistantWiFiMsg.exe
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre1.6.0_07injusched.exe"
O4 - HKLM..Run: [Windows Mobile-based device management] %WINDIR%WindowsMobilewmdcBase.exe
O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [WinampAgent] "C:Program FilesWinampwinampa.exe"
O4 - HKLM..Run: [LGPCSuiteLanucher] "C:Program FilesLG PC Suite 2LGPCSuiteLanucher_Setup.exe" /tray
O4 - HKLM..Run: [NvSvc] RUNDLL32.EXE C:Windowssystem32
vsvc.dll,nvsvcStart
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:Windowssystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:Windowssystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [flockbox] C:Program FilesMy Lockboxflockbox.exe /a
O4 - HKLM..Run: [PCDAS] C:Program FilesDefenzapcd-as.exe /10003
O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [SMSERIAL] C:Program FilesMotorolaSMSERIALsm56hlpr.exe
O4 - HKLM..Run: [BDAgent] "C:Program FilesBitDefenderBitDefender 2009dagent.exe"
O4 - HKLM..Run: [BitDefender Antiphishing Helper] "C:Program FilesBitDefenderBitDefender 2009IEShow.exe"
O4 - HKCU..Run: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
O4 - HKCU..Run: [HPADVISOR] C:Program FilesHewlett-PackardHP AdvisorHPAdvisor.exe autoRun
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesWindows LiveMessengerMsnMsgr.Exe" /background
O4 - HKUSS-1-5-18..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUSS-1-5-18..Run: [Shareaza] "C:Program FilesShareazaShareaza.exe" -tray (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:Program FilesHewlett-PackardDigital Imaginginhpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:Program FilesWindows Live Toolbarmsntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~3.0_0inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~3.0_0inssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:Windowsdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:Windowsdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~3Office12REFIEBAR.DLL
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.zebulon.fr/outils/antivirus/ ... nicode.cab
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www.ca.com/us/securityadvisor/vi ... ebscan.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:Program FilesAVGAVG8avgpp.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:Program FilesLavasoftAd-Aware 2007aawservice.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:Program FilesCommon FilesBitDefenderBitDefender Arrakis ServerinArrakis3.exe
O23 - Service: Boonty Games - Unknown owner - C:Program FilesCommon FilesBOONTY SharedServiceBoonty.exe (file missing)
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:Program FilesHewlett-PackardHP Quick Launch ButtonsCom4Qlb.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:Program FilesHP GamesMy HP Game ConsoleGameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:Program FilesHewlett-PackardHP Health Checkhphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:Program FilesHewlett-PackardSharedhpqWmiEx.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:Program FilesCommon FilesBitDefenderBitDefender Update Servicelivesrv.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:Program FilesCommon FilesSony SharedAVLibMSCSPTISRV.exe
O23 - Service: NMSAccessU - Unknown owner - C:Program FilesCDBurnerXPNMSAccessU.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:Program FilesCommon FilesSony SharedAVLibPACSPTISVR.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared FilesRichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:Program FilesCommon FilesSony SharedAVLibSPTISRV.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:Program FilesBitDefenderBitDefender 2009vsserv.exe

--
End of file - 11798 bytes

[r@in | b0w]

_ Tu peux supprimer les lignes:

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:Program FilesAVGAVG8avgssie.dll (file missing)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:PROGRA~1AVGAVG8AVGTOO~1.DLL (file missing)
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesWindows LiveMessengerMsnMsgr.Exe" /background
O4 - HKUSS-1-5-18..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUSS-1-5-18..Run: [Shareaza] "C:Program FilesShareazaShareaza.exe" -tray (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background (User 'Default user')
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:Program FilesAVGAVG8avgpp.dll (file missing)
O23 - Service: Boonty Games - Unknown owner - C:Program FilesCommon FilesBOONTY SharedServiceBoonty.exe (file missing)

Réfère-toi au tutorial si besoin est pour supprimer ces lignes.


Ensuite, deux choses:


1_ Tu désinstalles Defenza, Mbam le remplace aisément. Je te mets le Mode d'emploi:

Tu télécharges Malwarebytes' Anti-Malware, tu l'installes puis tu procèdes à sa mise à jour.

Tu lances l'application en double-cliquant sur l'icône Malwarebytes' Anti Malware.

Tu cliques ensuite sur Exécuter un examen complet puis tu lances l'analyse en cliquant sur Rechercher.

_ Si l'utilitaire ne trouve rien de néfaste, cliques sur Ok. Le Bloc-notes va s'ouvrir avec le rapport d'analyse, celui-ci n'est pas intéressant car la machine est propre.
Tu peux fermer le Bloc-notes.

_ Si l'utilitaire trouve des éléments suspects, tu cliques sur Afficher les résultats puis sur Supprimer la sélection.
Tu enregistres le rapport d'analyse que tu nous copies-colles dans ton prochain message.

Il est possible que le programme te demande de redémarrer pour effectuer des suppressions supplémentaires, tu acceptes le redémarrage volontaire en cliquant sur Ok.


2_ Tu supprimes le dossier C:Program FilesCommon FilesBOONTY Shared.


Un conseil, si tu n'utilises pas Shaeraza pour acquérir des fichiers libres de droits, tu le désinstalles. C'est le plus grand vecteur de virus au monde.

Notamment les virus Bagle si tu vois ce que je veux dire...

[xerow]

je vois tres bien t inquiete pas
malware est en cours je te redit quoi des que c est fini

[xerow]

j ai un probleme
suite a une coupure de courant le pc s est donc eteint ( logique non!!)
et l analyse malwarebyte na pu s effectuer correctement
quand j ai pu rallumé le pc j ai voulu relancer l analyse mais c est devenu impossible
en effet meme quand je veut l effacer pour en re-installer a nouveau ca me marque impossible de creer un fichier temporaire
erreur 1393 la structure du disque est endommager ou illisible
y a t il un moyen de reparer ce dossier

[xerow]

voici le rapport malwarebyte

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1392
Windows 6.0.6001 Service Pack 1

13/11/2008 17:32:23
mbam-log-2008-11-13 (17-32-23).txt

Type de recherche: Examen complet (C:|D:|)
Eléments examinés: 198977
Temps écoulé: 1 hour(s), 11 minute(s), 39 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 134

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:WindowsSystem32driversdownld (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingm (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmshared (Trojan.Agent) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:UserslindaLocal SettingsApplication Dataeufveuev_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:UserslindaLocal SettingsApplication Dataeufveuev_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:UserslindaLocal SettingsApplication Dataeufveuev.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmlist.oct (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsrvlist.oct (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmshared4Neurons Eraser 1.0 (KeyGen).zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmshared9L0-606_Practice_Exam_Testing_Engine_Software_1.0_(With_Crack).zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedAgent_Card_Maker_1.20_Build_040722_(Key+Serial).zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedAjaxium 1.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedAlgolab Photo Vector 1.98.74.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedAll_My_Software_1.6.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedAmerica_Online_(AOL)_7.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedArmed Forces Screensaver 1.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedAsset_Navigator_4.5.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedAVG.Anti-Virus.7.5.+.Kg.(x32.x64)(40).+++++.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedAvg.Free.E.Anti.Spyware.7.5.0.50.Serial.Patch.Freddy.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedAzureus SpeedUp Pro 2.6.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedBabya Publisher 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedBlue Cat's Stereo Parametr'EQ 3.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedBookkeeping for REALTORS 2.0.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedBoox_1.0.3.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedBoyer-Moore_Search_Implementation_1.12.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedBREAKTRU_FRACTIONS_N_DECIMALS_7.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedBubblet_1.8.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedCitroen Sports Screensaver 9.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedCode_Visual_to_Flowchart_4.1_build_1218.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedComplete File Recovery 1.3.0.116.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedCPU_RightMark_Lite_2005_1.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedCrack_Panda_Platinium_Internet_Segurity_V.8.05.01_Garantizado_por_Luismi.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedCredit Card Online Validator 2.11.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedCS-RCS Basic 5.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedCypressLogic XML Parser 2.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedData_Processing_Suite_2.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedDbObjFind 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedDeskman_5.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedDeskUtilities_1.40.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedDisk Size Manager 2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedDiv_Divx_Fix_Repair_Joiner_3.23.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedDOLVector 5.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedDragon_Quest_Screensaver_1.0_(Serial).zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedEasy Gallery Generator 2.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedEasy-to-use_PDF_to_Text_Converter_1.0_[Cracked].zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedEasy_CD_Clone_1.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedEsperanto Dictionary and Parser 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedeTrust_Antivirus_r8_8.0.403.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedEvening_Meditation_3D_Screensaver_1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedFancy_Movies_Editor_Pro_4.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedFilePocket 1.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedFormitecho Calculator 2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedFrazzled_1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedGenius's_Puzzle_Pack_3.7.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedGoogle News Opera Widget 1.02.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedGreekTranscoder 1.0.4.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedGS-Base_7.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedGYZ Personal Database 1.1.1 Cracked.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedHalo2_GameList_1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedHoyle_Slots_&_Video_Poker_1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedi-Fetch_1.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedIcon Constructor - advanced icon maker 3.54.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedInbound_Links_Monitor_3.1.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedIntellitabs for Word 2.2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedIsland Screensaver Memories 1.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharediWellsoft 3GP Video Converter 1.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedJiWire_Toolbar_for_Internet_Explorer_beta_1.081506.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedKandyan Vista Icons 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedKeyLaunch_2.1.7.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedKeywords From MailRu Suggest 3.0.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedKonvertor_eps2xxx_2.05_[Crack].zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedLet's_Clean_Up!_2005_4.0.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedLinks_Lord_1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedLutz_Roeder's_Writer_0.4.0.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMagic_Ellipses_Screensaver_1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMax_Secure_Spyware_Detector_17.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMediaDex Standard 2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMicrosoft Antigen for SharePoint 9.00.1399.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMinute Timer 1.6.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMipsis_Warehouse_Inventory_Manager_3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMmm 2.02.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMorpheus Photo Warper 3.10.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMovavi PSP Video Suite 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMoyea Youtube Player 1.0.0.18.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedMy FB Contacts 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedNetLimiter 2 Lite 2.0.10.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedNewCADtools2_2.2_Serial.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedNiko_Pirosmani_-_Wallpapers_3.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedNorton.AntiVirus.2006.With.Full.Activation.for.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedOmni_Page_Professional_15.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedOutlook Express Tweaker 1.01.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPageFocus_Pro_6.86.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPDF Creator Pilot 3.9.953.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPDF Text Viewer 2.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPDF-Tools 3.6 build 119.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPDF_Creator_Pilot_3.60.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPhotoMeister_2.6.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPingShark 1.01.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPirem_CD_Cataloguer_1.4.0.8.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPoker Master 2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedPortable Simplyzip 1.1 Beta 69.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedQuoteme 1.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedRAM Riser 4.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedRand() 0.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedRead 2000 American Newspapers 4.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedRoulette Screensaver 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedSacrifice_Defend_map.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedSamurai Set Vol. 1 1.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedSauce Reader 2.0.2 beta.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedSessionLog 5.7.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedSofte Virtual Printer 1.00.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedSothink_SlidingMenu_2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedSprintbit_File_Manager_3.1.25.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedStartUp Juggler 2.01.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedStartup_Faster!_2004_2.1.6.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedStellar_Phoenix_Solaris-Intel_1.0_(KeyGen).zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedStream_Patrol_-_Windows_Media_Streams_Monitor_2.0_(With_Crack).zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedStyleBuilder 2.02 beta.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedSuperSync 1.5.0.4.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedSymantec.Norton.AntiVirus.2005.v.11.crack.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedTimeTools NTP Server Monitoring 1.0.001.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedTobi_On_The_Run_1.5.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedTomeBase 1.14.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedTransparent Scroll Bars Active X Control 1.0 (Cracked).zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedUNA 1.0 Build 7159.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedUr_IT_Mate_Quick_Info_1.2.2.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedUsage Monitor 1.8.0.3.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedUserTime_1.2.005_[Key].zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedViewRemote 2.15.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedVirtual Salesman 3 3.3.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedWebCanvas 2006.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedWebGuide_4.0.20.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedWin-ProLi 1.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedWinKey Disabler 2.1.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedX360 Video Capture ActiveX OCX 2.0.zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmsharedXimpa_Sample_Rate_Converter_2.1.0.4_(Serial).zip (Trojan.Agent) -> Quarantined and deleted successfully.
C:UserslindaAppDataRoamingmshared[p2p-illusion.com]Mcafee.AntiVirus.2007.Plus(antonf).zip (Trojan.Agent) -> Quarantined and deleted successfully.

[r@in | b0w]

C'est bien la même machine qu'avant?

Faut que tu arrêtes d'installer des trucs alors parce que là, le rapport est plutôt long!

Fais une nouvelle analyse Mbam pour voir s'il trouve encore des trucs à éradiquer.

[xerow]

le nouveau rapport mbam

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1395
Windows 6.0.6001 Service Pack 1

13/11/2008 21:12:31
mbam-log-2008-11-13 (21-12-31).txt

Type de recherche: Examen complet (C:|)
Eléments examinés: 196503
Temps écoulé: 3 hour(s), 15 minute(s), 51 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

[r@in | b0w]

Je pense que tout est bon

Si tu as supprimé les lignes HiJackThis que je t'ai donné précédemment, c'est ok.


Pour terminer la désinfection et optimiser Windows:


_ Désinstallation des utilitaires utilisés:

Les programmes utilisés pour la désinfection ne sont pas à utiliser quotidiennement.

Pour les désinstaller, il faut aller dans le Panneau de configuration puis, via Ajouter/Supprimer des programmes, sélectionner les utilitaires et cliquer sur Désinstaller.

Pour une suppression effective, penses à supprimer leurs dossiers respectifs, la plupart à la racine de ta partition principale.


_ Utilisation d'un navigateur internet alternatif:

Internet Explorer n'étant pas sûr, il est préférable d'installer un navigateur internet alternatif pour sécuriser ton surf.

Tu as le choix entre Mozilla Firefox, Apple Safari ou encore Opéra.

Il faudra ensuite définir ce navigateur internet alternatif comme navigateur par défaut.


_ Utilisation d'un pare-feu alternatif:

Il est recommandé de ne pas utiliser le pare-feu Windows et d'en prendre un plus efficace.

Le choix est large: Zone Alarm, Sunbelt, Ashampoo ou encore Sygate.

Après avoir sélectionné le pare-feu idéal, il faudra désactiver celui de Windows.


_ Nettoyage des points de restauration:

Dans un premier temps, il faut supprimer tous les points de restauration.

Pour cela, cliques sur Poste de travail puis Propriétés.
Onglet Restauration automatique du système, tu coches la ligne Désactiver la restauration du système puis tu valides par Ok.
Tu confirmes la suppression de tous les points de restauration, puis tu cliques sur Appliquer et/ou Ok.

Ensuite, il faut réactiver la restauration automatique du système.

Tu refais la manipulation précédente pour relancer les propriétés du Poste de travail.
Tu décoches la ligne puis cliques sur Appliquer & Ok.

Tu auras créer un point de restauration propre.


_ Nettoyage des fichiers temporaires & de la base de registre:

Pour cela, Ccleaner reste le moyen le plus sûr et pratique de tout nettoyer sans risques.

En suivant ce tutorial, cet utilitaire sera configuré correctement.

Il est aussi utile de purger régulièrement le dossier Prefetch en profitant de Ccleaner pour automatiser ce nettoyage.
Pour cela, il faut aller dans Options puis Personnaliser pour ajouter le dossier C:WindowsPREFETCH.


_ Un petit coup d'oeil à notre dossier Nettoyage peut être utile en supplément.

Et finalement, pour optimiser Windows XP, ce sujet sera intéressant.

[xerow]

tout a l air d etre ok
j ai reussi a mettre un antivirus ( en version d evaluation pour l instant)
il ne trouve aucun probleme
j en es profiter pour pour un grand nettoyage du syteme
il devrai tourner beaucoup mieux maintenant
un GRAND MERCI

[r@in | b0w]

De rien.

Si tu appliques les conseils postés plus haut (navigateur et pare-feu alternatif), tout ira bien.

Ne pas cliquer sans savoir et ne pas télécharger n'importe quoi

Bon surf.

[xerow]

j ai oublier de te demander si tu savais pourquoi je ne peut plus me connecter en wifi
j ai mis le pilote a jours mais c est toujours pareil

[r@in | b0w]

Problème suite à l'infection de Bagle.

Regarde ici si cela peut te dépanner.

Sinon, il faudra poster un nouveau sujet dans le forum Hardware.