[syana]

Bonjour,

Mon PC est infecté : dès que je me connecte sur le net j'ai un écran bleu et mon ordi redémarre.
Pourtant je l'ai nettoyé avec AVS et Malware.
Ci dessous le log de Malware :
22:41:25 17/07/2008
mbam-log-7-17-2008 (22-41-25).txt

Scan type: Full Scan (C:\|)
Objects scanned: 62225
Time elapsed: 1 hour(s), 9 minute(s), 59 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 16

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\ATU72FGN\yflhrol[1].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\ATU72FGN\yflhrol[2].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\ATU72FGN\yflhrol[3].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\ATU72FGN\yflhrol[4].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\ATU72FGN\yflhrol[5].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UDWXGHCJ\yflhrol[1].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UDWXGHCJ\yflhrol[2].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UDWXGHCJ\yflhrol[3].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UDWXGHCJ\yflhrol[4].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\UDWXGHCJ\yflhrol[5].htm (Backdoor.Rustock) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WX4Z0PEL\mpvspl[1].htm (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WX4Z0PEL\mpvspl[2].htm (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WX4Z0PEL\mpvspl[3].htm (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WX4Z0PEL\mpvspl[4].htm (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WX4Z0PEL\mpvspl[5].htm (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\d.exe (Trojan.Agent) -> Quarantined and deleted successfully.
Qu'est-ce que je peux faire pour le désinfecter vraiment.

Merci

Syana

[josh_94]

Salut.

1° Passe un coup de ccleaner Tutoriel Comment utiliser CCleaner
Merci à Marie pour le tuto.

2°Télécharge et installe MalwareBytesAntiMalware
Met le à jour et lance une analyse compléte en mode sans échec (tapote la touche F8 dés l'affichage du BIOS, avant l'écran de chargement de windows).
Lorsque le scan sera fini :

• Clique sur le bouton Show Results en bas pour afficher les éléments détectés
  
• Les éléments détectés apparaissent sous forme de liste.
  
• Ces derniers sont tous cochés, pour les supprimer, clique sur le bouton Remove Selected en bas à gauche.
  
• Une barre de progression affiche l'avancement de la suppression
  
• Clique sur Oui pour continuer
  
• Un rapport de scan s'ouvre, sauvegarde le afin de pouvoir le récupérer en mode normal.

Poste le contenu du rapport sur le forum.
Tuto ici : http://www.pcentraide.com/index.php?showtopic=90755&pid=403804&st=0&#entry403804
Merci à Drago

3° Fais un scan en ligne avec bit defender.

• Utilise internet explorer et désactive ton antivirus le temps du scan.
  
• Poste moi le rapport qui sera généré s'il te plaît.
  
• Tutoriel ici : http://perso.orange.fr/rginformatique/sect...us/defender.htm ( Merci à Balltrap34 )
  

Note : en mode sans échec, tu n'as pas accès à internet, note la procédure au besoin

++
_________________

Je pars en vacance pour
un mois => soyez patient et ne vous inquietez pas