Merci de votre aide
Alors tout d abord voici le rapport MBAM :
Malwarebytes’ Anti-Malware 1.50.1.1100
Version de la base de données: 6460
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
28/04/2011 04:05:52
mbam-log-2011-04-28 (04-05-52).txt
Type d’examen: Examen complet (C:|)
Elément(s) analysé(s): 205005
Temps écoulé: 35 minute(s), 37 seconde(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 7
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
c:\WINDOWS\system32\vqvnmemhxdthejbz.dll (Adware.AdRotator) -> Delete on reboot.
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID{3AAF3149-A088-33E5-76B5-FBD28B56085E} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{3AAF3149-A088-33E5-76B5-FBD28B56085E} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings{3AAF3149-A088-33E5-76B5-FBD28B56085E} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats{3AAF3149-A088-33E5-76B5-FBD28B56085E} (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\glodwzfqtk (Adware.AdRotator) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rbqdzpejheeqf (Adware.AdRotator) -> Value: rbqdzpejheeqf -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
c:\WINDOWS\system32\vqvnmemhxdthejbz.dll (Adware.AdRotator) -> Delete on reboot.
c:\documents and settings\barracuda\local settings\Temp\imgsrvc.exe (Adware.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\barracuda\local settings\Temp\microsoftsp5.debug.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\barracuda\local settings\Temp\drivers_pack_v3.25.63.exe (Adware.Agent) -> Quarantined and deleted successfully.
c:\system volume information_restore{6121caa6-585b-4660-af2f-a8e40127f2fa}\RP7\A0004885.exe (Adware.Agent) -> Quarantined and deleted successfully.
c:\system volume information_restore{6121caa6-585b-4660-af2f-a8e40127f2fa}\RP9\A0008077.exe (Malware.Packer) -> Quarantined and deleted successfully.
c:\documents and settings\barracuda\local settings\Temp\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully.
------------------------------------------------------------
Et voici ici le rapport ZHPDiag.txt : www.cijoint.fr…