PC infecte par PC Privacy Cleaner

je ne sais plus si je te l avais déjà donné mais voici mon site web si un jour tu as besoin d aide : http://forum-aide-contre-virus.be

@+

Bonjour Geoffrey,

Voici le raport :

Malwarebytes' Anti-Malware 1.25
Version de la base de données: 1062
Windows 5.1.2600 Service Pack 2
17:49:52 2008-08-18
mbam-log-08-18-2008 (17-49-52).txt
Type de recherche: Examen complet (C:\|)
Eléments examinés: 134596
Temps écoulé: 1 hour(s), 10 minute(s), 41 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 4
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 49
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\{5222008a-dd62-49c7-a735-7bd18ecc7350} (Rogue.VirusRemover) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{7d5dd829-6c90-42c5-b54c-2afa82f988ba} (Rogue.Installer) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\virusremover2008 (Rogue.VirusRemove) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\virusremover2008 (Rogue.VirusRemove) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\a0699a1d (Trojan.Vundo) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.Homepage) -> Bad: (http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\Documents and Settings\Propriétaire\Application Data\errorsafefrenchnewreleaseinstall[1].exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Mes documents\Mes vidéos\Antivirus2008PRO.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Program Files\eChanblard\EvID4226Patch.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Program Files\PCHealthCenter\0.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Program Files\PCHealthCenter\1.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Program Files\PCHealthCenter\2.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Program Files\PCHealthCenter\3.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Program Files\PCHealthCenter\4.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Program Files\PCHealthCenter\5.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Program Files\PCHealthCenter\7.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\ateqoflr.exe.vir (Trojan.Vapsup) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\edpw.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\wbqxfpgl.dll.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\csdjzo.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\ehohon.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\hkceuiqr.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\iifghGYs.dll.vir (Trojan.Vundo) -> Delete on reboot.
C:\QooBox\Quarantine\C\WINDOWS\system32\lsfxvirf.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\tdsslog.dll.vir (Trojan.Agent) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\tdssmain.dll.vir (Trojan.DNSChanger) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\urqNEXoL.dll.vir (Trojan.Vundo) -> Delete on reboot.
C:\QooBox\Quarantine\C\WINDOWS\system32\xhsccjfm.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\WINDOWS\system32\xxyyATKA.dll.vir (Trojan.Vundo) -> Delete on reboot.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1077\A0174119.dll (Trojan.Vundo) -> Delete on reboot.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175182.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175183.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175184.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175185.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175186.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175187.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175188.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175198.dll (Trojan.DNSChanger) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175199.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175201.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175203.exe (Trojan.Vapsup) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175207.dll (Trojan.Vundo) -> Delete on reboot.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175208.dll (Trojan.Vundo) -> Delete on reboot.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175209.dll (Trojan.Vundo) -> Delete on reboot.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175210.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175212.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175213.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175214.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175216.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175273.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D7D2BBA4-25F4-4AFC-A214-B1CB6EDA2267}\RP1078\A0175211.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareExpert.lnk (Rogue.Antispyware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Bureau\AntiSpywareExpert.lnk (Rogue.Antispyware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Bureau\antivirus-2008pro.lnk (Rogue.Antivirus) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Bureau\PCPrivacyCleaner.lnk (Rogue.PCPrivacyCleaner) -> Quarantined and deleted successfully.

Salut !!

est ce que tu as encore des problemes ??

Pour le moment pas de probleme tout est ok.

ok..si tu n as plus de problemes tu peux faire ceci stp :

<gras>Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques : </gras>

Télécharge toolscleaner sur ton Bureau :

<gras>(c est le numéro 15 en bas de la page)</gras> : http://forum-aide-contre-virus.be/divers.html

* Double-clique sur ToolsCleaner2.exe et laisse le travailler
* Clique sur Recherche et laisse le scan se terminer.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options facultatives.
* Clique sur Quitter, pour que le rapport puisse se créer.
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse


<gras>Désactive et réactive la Restauration du système :</gras>

1 Dans la barre des tâches de Windows, clique sur Démarrer.

2 Clique avec le bouton droit de la souris sur Poste de travail puis clique sur Propriétés.

3 Dans l'onglet Restauration du système, coche "Désactiver la Restauration du système"

4 Clique sur Appliquer.

5 Ensuite décoche "Désactiver la restauration du systeme"

6 clique sur appliquer puis ok

7 vas créer un point de restauration dans accessoires----outils systeme----restauration du systeme.

Bonjour Geoffrey,

Voila le dernier rapport que tu m'as demande :

-->- Recherche:
C:\Qoobox: trouvé !
C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\SmitFraudFix.exe: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\MsnFix: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\SmitFraudfix: trouvé !
C:\Documents and Settings\Propriétaire\Bureau\MSNFIX\MsnFix: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users\Bureau\Navilog1.lnk: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
C:\Documents and Settings\Propriétaire\Bureau\ComboFix.exe: Erreur de suppression !
C:\Documents and Settings\Propriétaire\Bureau\SmitFraudFix.exe: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Qoobox: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
C:\Documents and Settings\Propriétaire\Bureau\MsnFix: supprimé !
C:\Documents and Settings\Propriétaire\Bureau\SmitFraudfix: supprimé !
C:\Program Files\Navilog1: supprimé !

J'ai cree un point de restauration a la date d'aujourdhui en signifiant bien qu'il avait ete cree apres nettoyage des virus.

Agnes

c est ok Agnes

N hésite pas à revenir si un jour tu rencontrais encore des problemes, tu es la bienvenue...

Bonne soirée @+

Ok je retiens ton adresse email au cas ou j'aurais encore besoin de tes services.
Je te souhaite beaucoup de reussite dans ta vie.
Mille mercis, c'est super ce que tu fais.
Agnes