vercoquin

Je te confirme que suite à cette action mon problème est résolu. Encore merci pour tes conseils rapides et avisés !

Merci pour ta réponse rapide. Voici le rapport d'analyse MBAM. Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 5831 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 21/02/2011 22:30:15 mbam-log-2011-02-21 (22-30-15).txt Type d'examen: Examen complet (C:\|E:\|) Elément(s) analysé(s): 222916 Temps écoulé: 59 minute(s), 57 seconde(s) Processus mémoire infecté(s): 2 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 4 Elément(s) de données du Registre infecté(s): 1 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 112 Processus mémoire infecté(s): c:\documents and settings\Thierry\application data\dwm.exe (Trojan.Downloader) -> 684 -> Unloaded process successfully. c:\documents and settings\Thierry\application data\microsoft\conhost.exe (Backdoor.Bot) -> 3488 -> Unloaded process successfully. Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\conhost (Backdoor.Bot) -> Value: conhost -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load (Trojan.Agent) -> Value: Load -> Delete on reboot. HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Value: Shell -> Delete on reboot. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (PUM.Bad.Proxy) -> Value: ProxyServer -> Delete on reboot. Elément(s) de données du Registre infecté(s): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Load (Backdoor.Bot) -> Bad: (C:\DOCUME~1\Thierry\LOCALS~1\Temp\csrss.exe) Good: () -> Quarantined and deleted successfully. Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): c:\documents and settings\Thierry\application data\dwm.exe (Trojan.Downloader) -> Quarantined and deleted successfully. c:\documents and settings\Thierry\application data\microsoft\conhost.exe (Backdoor.Bot) -> Delete on reboot. c:\Documents and Settings\Thierry\Local Settings\Temp\csrss.exe (Backdoor.Bot) -> Delete on reboot. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP101\A0026439.exe (Trojan.Downloader) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP102\A0026461.exe (Backdoor.Bot) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP103\A0026531.exe (Trojan.Downloader) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP104\A0026667.exe (Trojan.Downloader) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP104\A0026672.exe (Backdoor.Bot) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP110\A0027130.exe (Backdoor.Bot) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP111\A0027361.exe (Backdoor.Bot) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP111\A0027381.exe (Backdoor.Bot) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026141.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026142.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026143.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026144.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026145.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026163.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026146.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026147.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026148.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026149.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026150.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026151.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026152.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026153.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026154.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026155.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026156.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026157.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026158.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026159.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026160.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026161.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026162.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026164.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026165.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026166.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026167.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026168.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026169.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026170.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026171.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026172.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\system volume information\_restore{d1b64eb7-bcfa-414b-b18e-b7646f172f82}\RP98\A0026173.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\216 skydeck a go! go!.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\alive 2007 [deluxe edition] disc 1.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\all beauty is our enemy.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\blood on our hands [justice remix].exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\bluedrum torso.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\dave holland quintet.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\der zufriedengestellte aeolus bwv 205, recitativo (b) ja, ja! die stunden si...exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\deskplan 1.0.6.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\di daa daa (single version) (pulsedriver vs.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\hard & dark (dj activator remix) - dj stefano bonato.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\double dare ya.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\dracula's castle.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\fabolous ft. ne-yo - make me better.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\in the highways.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\intermezzi adriana lecouvreur.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\into the cold voids of eternit.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\IRPal 2.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\it s your world.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\it'll be me babe.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\jerry cantrell - i've seen all of this world i care to see.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\juice (know the ledge).exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\laura ya no vive aqui.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\macushla mavourneen.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\main title film version (fro...exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\malcolm clarke - sea devil guard.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\never too much (remix) (feat. three six mafia, yung joc, oj da juiceman, project pat).exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\nine9nine.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\psychpath (leftfield remix 3).exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\reel people feat angela johnson-you used to hold me so tight.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\Silentum.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\tab slideshow 2.0.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\the lost anthology (cd 1).exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\Tiny Tot.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\visible world.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\wild flower (guitar dub).exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\with or without you - double you.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\9528.iso (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\a ghost is born.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\a most excellent charm in solemn endurance.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\a space odyssey - 260.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\acoustic in lisbon (bootleg).exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\aria, chorus- 'jurez, donc, par l'auguste symbole.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\astrix&sub6 - control me.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\beatrice - romeo - requiem ( barenboim - paris ) - cd6.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\besos de perro.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\birth of the sun.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\hej ha hej ha.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\en aquel hotel jamaicano.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\en marklig affar - cd 4.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\carnal sins.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\cinq negresses dans une auto.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\come to poppa.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\commited for life (ep).exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\lsi megaraid v2.17.0.32.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\peter howell - dead traitor - pondering president.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\Tragedie.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\when you are gone (jackie `oh`).exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\dieselboy - system upgrade.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\distant moments.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\cont con mi coraz.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\corp 09 under fire - 30.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\ijuswannachill.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\fire on drogheda.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\focus-o essencial de miucha e tom.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\lene marlin.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\give me some time.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\gratefully dead.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\WINDOWS\system32\config\systemprofile\local settings\application data\application policy service\incoming\green island serenade (bonus).exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.

Bonjour, j'ai le processus crss.exe en double. présent une fois avec user system et une fois avec le user connecté sous Windows. D'autre part le proxy de mon navigateur est systématiquement reconfiguré au redémarrage vers un proxy local. l'utilisation de mon navigateur s'en trouve ralentie et parfois perturbée, le navigateur affichant parfois des pages publicitaires. Merci de votre aide.