Bonjour,
mon pc est infecté. Tous les liens que je clique dans google sont redirigés vers d'autres sites.
Un gentil Guillaume avait commencé a m'aider sur un autre forum, mais je ne suis plus capable de lui répondre, mes messages n'apparaissent plus sur le site...
Je lui avait envoyé mon rapport hijackthis, et il m'avait demandé de télécharger Rkill & Malwarebyte
je les ai téléchargés, j'ai lancé Rkill et ensuite Malwarebyte. Voici mon rapport malwarebyte:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4052
Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 7.0.5730.13
06/08/2010 18:27:04
mbam-log-2010-08-06 (18-27-04).txt
Scan type: Full scan (C:\|H:\|)
Objects scanned: 203506
Time elapsed: 24 minute(s), 42 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 7
Folders Infected: 0
Files Infected: 4
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
C:\WINDOWS\system32\AntiWPA.dll (Trojan.I.Stole.Windows) -> Delete on reboot.
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\forceclassiccontrolpanel (Hijack.ControlPanelStyle) -> Quarantined and deleted successfully.
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 93.188.163.233,93.188.166.213 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{a586d46a-309b-44ec-82d4-ba3de4423a0f}\DhcpNameServer (Trojan.DNSChanger) -> Data: 93.188.163.233,93.188.166.213 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{a586d46a-309b-44ec-82d4-ba3de4423a0f}\NameServer (Trojan.DNSChanger) -> Data: 93.188.163.233,93.188.166.213 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{bba9c5bc-7d35-4c65-8ec5-9daaa700cdc0}\NameServer (Trojan.DNSChanger) -> Data: 93.188.163.233,93.188.166.213 -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Documents and Settings\Max\Mes documents\Downloads\Adobe.Photoshop.CS5.Extended.v12.Keygen.Only.EMBRACE-Deantjah\Keygen\keygen.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\Program Files\MagicISO\magic.iso.maker.v5.5.261-nope.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Program Files\Recycle\UNWISE.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\AntiWPA.dll (Trojan.I.Stole.Windows) -> Delete on reboot.