Bonjour à tous,

Hier j'ai cliquer sur un lien de barre d'outils par erreur, celle-ci a commencé à s'installer, j'ai tout de suite interrompu. Mais j'ai choppe un virus avast a essayé de le bloqué mais en vain.

Ceci a infecté mon Firefox avec deux modules de merde, Data Manager et QuestScan. J'ai fait un scan avec malawaresbytes et supprimé QuestScan. Les deux sont apparus via une barre d'outils toolbare je ne sais quoi.

Mais j'ai encore un virus qui se regerene a chaque fois j'ai essayé de supprimer dans le registre mais impossible. Cela a RALENTI mon pc enormement, m'ouvre des pages internet avec pub sans cesse SPAM, et je crois qu'il bloque d'une certaine façon avast également et qu'il a contourné la protection.

Je ne sais pas comment m'en débarasser, merci à tous sont qui voudront bien m'aider et surtout qui sont compétents pour cela afin de pénétrer dans le systeme et détruire enfin ce "virus". j'ai vraiment besoin de quelq'un svp...je n'y arrive pas seul malgré ma bonne volonté et différents essais.

Ce data management est dans mes modules firefox et IMPOSSIBLE DE DESINSTALLER, j'ai fait restauration systeme desintallé tous les composants de firefox, essayé la nouvelle version etc, j'ai desintallé avast, installé kaspersky scanné de tous les cotés et supprimés les quelques petits tracking cookies, mais ce cheval de troie n'apparait pas ou comme inactif alors qu'il est tout à fait actif croyait moi.. le module reste ici je pense que c'est la base du problème dans Outils= module complementaires= Datamngr 1.0

Je vous joins le dernier message d'avast.

ADRESSE URL MALVEILLANTE BLOQUE

objet :216. 245. 211. 148 borders.php

infection: URL MAL

Processus : C:\Users\RMY~1\AppData\Local\Temp\Utx.ex

je suis sur firefox 3.16 avec windows 7.

Merci d'avance. Rémy

Voici le premier rapport malawares que j'ai effectué avant suppresion, je ne sais pas si j'ai bien fait, j'ai essayé de mon coté. le voici

alwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Version de la base de données: 6846

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

13/06/2011 13:02:32
mbam-log-2011-06-13 (13-02-32).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 371952
Temps écoulé: 53 minute(s), 2 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 14
Fichier(s) infecté(s): 214

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\Windows\System32\MPK (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\program files (x86)\mozilla firefox\extensions\{f0e1168a-b4b5-484c-b77e-0d28e6b64096} (Adware.QuestScan) -> Quarantined and deleted successfully.
c:\program files (x86)\mozilla firefox\extensions\{f0e1168a-b4b5-484c-b77e-0d28e6b64096}\chrome (Adware.QuestScan) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\$RECYCLE.BIN\s-1-5-21-1180267896-602104061-3370570733-1000\$RYG776H\superantispyware4\superantispyware professional v4.26.1006\patch-keymaker\patch-keymaker.exe (Dont.Steal.Our.Software.A) -> Quarantined and deleted successfully.
d:\Rémy\logiciels\malwarebyte\anti-malware\malwarebytes anti-malware v1.38\Keygen\keygen.exe (Dont.Steal.Our.Software) -> Quarantined and deleted successfully.
d:\Rémy\logiciels\ms office 2007 enterprise sp1\CRACK\Keygen.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
d:\Rémy\logiciels\super_antispyware\superantispyware4\superantispyware professional v4.26.1006\patch-keymaker\patch-keymaker.exe (Dont.Steal.Our.Software.A) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\brazilian.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\French.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\German.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\icon_1.ico (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Italian.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Japanese.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\libeay32.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\lnkmst.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\logstart.vbs (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\loguninstall.vbs (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\MPK.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Mpk64.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\MPK64.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\mpknetinstall.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\MPKView.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\portuguese.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Romanian.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Spanish.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\sqlite3.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\ssleay32.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\trial_standart.ini (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\unins000.dat (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\unins000.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\unins000.msg (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\zlib1.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\alarms.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\clipboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\computer.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\delivery.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\file.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\filters.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\imhelp.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\internet.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\invisible.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\keyboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\logging.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\log_size.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\need_update_net.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\password.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\programs.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\screenshot.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\settings_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\update.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\English\users_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\alarms.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\clipboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\computer.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\delivery.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\file.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\filters.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\imhelp.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\internet.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\invisible.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\keyboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\logging.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\log_size.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\need_update_net.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\password.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\programs.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\screenshot.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\settings_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\German\users_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\alarms.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\clipboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\computer.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\delivery.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\filters.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\internet.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\invisible.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\keyboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\logging.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\log_size.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\password.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\programs.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\screenshot.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\settings_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Help\Spanish\users_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_em_english.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_em_english.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_em_german.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_em_german.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_em_spanish.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_em_spanish.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_english.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_english.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_german.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_german.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_pm_english.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_pm_english.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_pm_german.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_pm_german.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_pm_spanish.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_pm_spanish.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_russian.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_spanish.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\banner_spanish.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\english.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\german.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\upgrade_aeu.png (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\upgrade_aus.png (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\upgrade_eu.png (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\upgrade_us.png (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\vista_hide.bmp (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\System32\MPK\Images\xp_hide.bmp (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\brazilian.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\French.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\German.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\icon_1.ico (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Italian.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Japanese.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\libeay32.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\lnkmst.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\logstart.vbs (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\loguninstall.vbs (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\MPK.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Mpk64.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\MPK64.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\mpknetinstall.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\MPKView.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\portuguese.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Romanian.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Spanish.lng (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\sqlite3.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\ssleay32.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\trial_standart.ini (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\unins000.dat (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\unins000.exe (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\unins000.msg (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\zlib1.dll (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\alarms.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\clipboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\computer.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\delivery.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\file.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\filters.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\imhelp.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\internet.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\invisible.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\keyboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\logging.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\log_size.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\need_update_net.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\password.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\programs.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\screenshot.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\settings_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\update.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\English\users_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\alarms.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\clipboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\computer.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\delivery.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\file.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\filters.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\imhelp.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\internet.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\invisible.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\keyboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\logging.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\log_size.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\need_update_net.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\password.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\programs.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\screenshot.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\settings_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\German\users_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\alarms.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\clipboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\computer.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\delivery.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\filters.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\internet.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\invisible.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\keyboard.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\logging.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\log_size.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\password.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\programs.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\screenshot.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\settings_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Help\Spanish\users_node.htm (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_em_english.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_em_english.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_em_german.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_em_german.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_em_spanish.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_em_spanish.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_english.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_english.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_german.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_german.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_pm_english.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_pm_english.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_pm_german.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_pm_german.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_pm_spanish.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_pm_spanish.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_russian.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_spanish.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\banner_spanish.swf (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\english.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\german.gif (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\upgrade_aeu.png (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\upgrade_aus.png (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\upgrade_eu.png (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\upgrade_us.png (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\vista_hide.bmp (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\Windows\SysWOW64\MPK\Images\xp_hide.bmp (Refog.Keylogger) -> Quarantined and deleted successfully.
c:\program files (x86)\mozilla firefox\extensions\{f0e1168a-b4b5-484c-b77e-0d28e6b64096}\install.rdf (Adware.QuestScan) -> Quarantined and deleted successfully.
c:\program files (x86)\mozilla firefox\extensions\{f0e1168a-b4b5-484c-b77e-0d28e6b64096}\chrome\questscan.jar (Adware.QuestScan) -> Quarantined and deleted successfully.

Et voici le second rapport

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 6847

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

13/06/2011 17:15:45
mbam-log-2011-06-13 (17-15-45).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 123466
Temps écoulé: 1 heure(s), 10 minute(s), 30 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\$RECYCLE.BIN\s-1-5-21-1180267896-602104061-3370570733-1000\$RYG776H\superantispyware4\superantispyware professional v4.26.1006\patch-keymaker\patch-keymaker.exe (Dont.Steal.Our.Software.A) -> Quarantined and deleted successfully.

D'autre part une autre attaque vient d'être signalé par avast

Infection de nouveau indiquant URL MAL

Voila j'attends de vos nouvelles, quelqu'un d'experimenté Svp merci

Maintenant, il met m'ouvre des fenetres de pub avec internet explorer de base que je n'ai jamais jamais utilisé et me renvoi toujours sur ce site :http://www.enterfactory.com/promo_w13461.html

D'autre part avast m'indique à plusieurs reprises ALORS QUE JE NE LANCE RIEN DU TOUT, vous lancez une application qui peut représenter un risque, nous vous recommandons de lancer cette application dans l'environnement virtualisé de la sandox pour eviter les risques :

C:\windows\Uwyzea.exe

Origine lancé par : C:windows\système32\tasken.exe

Et j'ai eu la meme chose également avec C:\Users\RMY~1\AppData\Local\Temp\Utx.ex

Cela m'empeche de vivre cela n'arrete pas d'ouvrir des fenetres, des essais d'intrusions etc, plus alertes avast

bonsoir,

edite un rapport ZHPDiag (AIDE AU DIAGNOSTIC lien dans ma signature)

Fichier joint : ZHPDiag.txt

Bonsoir, Merci pour votre aide Philae voici au dessus le fichier demandé

Hello,

Tu vois ce qui se passe quand on crake des logiciels .

d:\Rémy\logiciels\malwarebyte\anti-malware\malwarebytes anti-malware v1.38\Keygen\keygen.exe (Dont.Steal.Our.Software*) -> Quarantined and deleted successfully.

* ne vole pas notre software

Et encore, je suis certain qu'il y en plein d'autres.

labougie

Voici la seconde partie avec Malaware comme indiquée dans votre AIDE AU DIAGNOSTIQUE, cette fois si je n'ai touché à rien j'attends vos instructions. Cordialement

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Version de la base de données: 6848

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

13/06/2011 19:18:47
mbam-log-2011-06-13 (19-18-43).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 165507
Temps écoulé: 4 minute(s), 50 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 12
Fichier(s) infecté(s): 211

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\4ECYTQ9SIC (Trojan.FakeAlert.SA) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\QK9G0Z54EX (Trojan.FakeAlert.SA) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ (Hijack.Zones) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\4ECYTQ9SIC (Trojan.FakeAlert.SA) -> Value: 4ECYTQ9SIC -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\Windows\System32\MPK (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images (Refog.Keylogger) -> No action taken.

Fichier(s) infecté(s):
c:\Windows\Tasks\{22116563-108c-42c0-a7ce-60161b75e508}.job (Trojan.Downloader) -> No action taken.
c:\Windows\Tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}.job (Trojan.FraudPack) -> No action taken.
c:\Users\Rémy\AppData\Local\Temp\Utx.exe (Trojan.FakeAlert.SA) -> No action taken.
c:\Windows\System32\MPK\brazilian.lng (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\French.lng (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\German.lng (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\icon_1.ico (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Italian.lng (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Japanese.lng (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\libeay32.dll (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\lnkmst.exe (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\logstart.vbs (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\loguninstall.vbs (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\MPK.exe (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Mpk64.dll (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\MPK64.exe (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\mpknetinstall.exe (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\MPKView.exe (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\portuguese.lng (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Romanian.lng (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Spanish.lng (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\sqlite3.dll (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\ssleay32.dll (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\trial_standart.ini (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\unins000.dat (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\unins000.exe (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\unins000.msg (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\zlib1.dll (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\alarms.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\clipboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\computer.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\delivery.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\file.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\filters.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\imhelp.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\internet.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\invisible.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\keyboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\logging.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\log_size.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\need_update_net.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\password.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\programs.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\screenshot.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\settings_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\update.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\English\users_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\alarms.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\clipboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\computer.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\delivery.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\file.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\filters.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\imhelp.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\internet.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\invisible.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\keyboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\logging.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\log_size.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\need_update_net.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\password.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\programs.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\screenshot.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\settings_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\German\users_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\alarms.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\clipboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\computer.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\delivery.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\filters.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\internet.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\invisible.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\keyboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\logging.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\log_size.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\password.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\programs.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\screenshot.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\settings_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Help\Spanish\users_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_em_english.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_em_english.swf (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_em_german.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_em_german.swf (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_em_spanish.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_em_spanish.swf (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_english.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_english.swf (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_german.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_german.swf (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_pm_english.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_pm_english.swf (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_pm_german.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_pm_german.swf (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_pm_spanish.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_pm_spanish.swf (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_russian.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_spanish.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\banner_spanish.swf (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\english.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\german.gif (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\upgrade_aeu.png (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\upgrade_aus.png (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\upgrade_eu.png (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\upgrade_us.png (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\vista_hide.bmp (Refog.Keylogger) -> No action taken.
c:\Windows\System32\MPK\Images\xp_hide.bmp (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\brazilian.lng (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\French.lng (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\German.lng (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\icon_1.ico (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Italian.lng (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Japanese.lng (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\libeay32.dll (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\lnkmst.exe (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\logstart.vbs (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\loguninstall.vbs (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\MPK.exe (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Mpk64.dll (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\MPK64.exe (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\mpknetinstall.exe (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\MPKView.exe (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\portuguese.lng (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Romanian.lng (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Spanish.lng (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\sqlite3.dll (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\ssleay32.dll (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\trial_standart.ini (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\unins000.dat (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\unins000.exe (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\unins000.msg (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\zlib1.dll (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\alarms.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\clipboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\computer.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\delivery.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\file.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\filters.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\imhelp.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\internet.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\invisible.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\keyboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\logging.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\log_size.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\need_update_net.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\password.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\programs.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\screenshot.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\settings_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\update.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\English\users_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\alarms.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\clipboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\computer.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\delivery.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\file.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\filters.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\imhelp.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\internet.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\invisible.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\keyboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\logging.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\log_size.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\need_update_net.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\password.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\programs.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\screenshot.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\settings_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\German\users_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\alarms.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\clipboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\computer.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\delivery.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\filters.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\internet.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\invisible.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\keyboard.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\logging.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\log_size.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\password.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\programs.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\screenshot.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\settings_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Help\Spanish\users_node.htm (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_em_english.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_em_english.swf (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_em_german.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_em_german.swf (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_em_spanish.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_em_spanish.swf (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_english.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_english.swf (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_german.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_german.swf (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_pm_english.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_pm_english.swf (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_pm_german.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_pm_german.swf (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_pm_spanish.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_pm_spanish.swf (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_russian.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_spanish.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\banner_spanish.swf (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\english.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\german.gif (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\upgrade_aeu.png (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\upgrade_aus.png (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\upgrade_eu.png (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\upgrade_us.png (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\vista_hide.bmp (Refog.Keylogger) -> No action taken.
c:\Windows\SysWOW64\MPK\Images\xp_hide.bmp (Refog.Keylogger) -> No action taken.

Hello labougie oui il y a tous ceci d'infecté, j'ai toujours plein de pages qui s'ouvre avec internet explorer vraiment bizar.

Et pour tes infos je n'ai que deux trucs " cracker" malaware bytes pour la version professionel et Superantyspare. On me les avait donné pour mieux protéger mon PC.

C'est raté hehe alors que pouvez-vous me conseiller grands membres du groupe de sécurité..sans vous je suis perdu c'est du chinois. Merci encore

Labougie a écrit :

Hello,

Tu vois ce qui se passe quand on crake des logiciels .

d:\Rémy\logiciels\malwarebyte\anti-malware\malwarebytes anti-malware v1.38\Keygen\keygen.exe (Dont.Steal.Our.Software*) -> Quarantined and deleted successfully.

* ne vole pas notre software

Et encore, je suis certain qu'il y en plein d'autres.

labougie

Salut,

Les choses se répètent

Fill

Bonjour Fill, non. c'est un PC tout neuf 100% officiel celui-ci puisque l'autre ma laché ( et comme je te l'avais déjà indiqué j'avais achété le pc d'occaz l'autre fois et ne savais pas que la version xp n'était pas d'origine)

Quand je dis que j'ai juste télécharger une barre toolbar par erreur c'est la vérité rien de plus. Voilà donc j'ai juste 2 Keygen sur ce PC qui était destiné seulement a pouvoir protéger au mieux mon PC contre les virus. Voilà.

Désolé si j'ai fait des erreurs..Merci

Que dois-je faire avec ce rapport Malawares? Fill, la Bougie, Philae? Merci à vous

Ah oui fill concernant tes 4 regles... Les Keygen ont été supprimé depuis un moment.

Et je ne crois vraiment pas que ce soit la cause de mon problème actuel.

Cordialement.

re bonsoir,

moi je ne passe plus maintenant que pour faire avancer un peu les sujets, je ne désinfecte plus les pc. Attends qu'un GS repasse

Tres bien Merci.

Personne ne veut me guider? Merci

Keya a écrit :

Personne ne veut me guider? Merci

Re,

Pas pour moi. Des cracks, ça refroidit mes ardeurs. Labougie poursuivra peut-être.

Fill

re ,

Mais je n'ai rien cracker , je ne suis pas assez calquée pr ça.. je pensais que c'était un forum d'entre aide pas de jugement moral... et en plus j'ai rien cracké du tout, on m'a juste donné deux clefs pr utiliser des antivirus..

Keya a écrit :

re ,

Mais je n'ai rien cracker , je ne suis pas assez calquée pr ça.. je pensais que c'était un forum d'entre aide pas de jugement moral... et en plus j'ai rien cracké du tout, on m'a juste donné deux clefs pr utiliser des antivirus..

Re,

Ecoute, je n'ai pas envie de polémiquer et je ne porte aucun jugement moral. Quant à la mise en cause du forum lui-même, elle me parait un peu hasardeuse quand on voit les services qui y sont rendus au quotiiden .
Utiliser des cracks pour avoir des logiciels de sécurité, ça revient à porter un gilet pare-balle dans un réacteur nucléaire...
Je vois aussi que tu as le CS3, qui sont eux aussi crackés la plupart du temps.

• Ce forum aide gratuitement à la désinfection des machines en échange d'une prise de conscience des dangers liés à l'usage d'Internet. On n'est que rarement infecté accidentellement. C'est d'ailleurs rassurant pour tous ceux qui sont prudents. La plupart des sources d'infections sont véhiculées par les logiciels de partage de fichiers (torrent, p2p), par l'utilisation de cracks ou keygens et par des sites à contenus pornographiques. Je t'invite donc à changer en profondeur tes habitudes de surf, pas pour des raisons morales ou juridiques, mais simplement parce que si tu recommences, ta machine sera irrémédiablement ré-infectée, quelles que soient d'ailleurs les protections que tu pourrais envisager.
• Tu te demandes sans doute quel est l'intérêt de véhiculer des infections ? Pour les $$$, les € et les roubles.
• Une machine compromise peut être intégrée dans un botnet. Ces réseaux de machines zombies peuvent mener des attaques contre des sites Internet légitimes, envoyer du spam (pub ou pièces jointes infectieuses). Cette machine peut également être utilisée pour stocker des fichiers illégaux (peut-être pédo-pornographique), ou espionnée pour y dénicher des mots de passe ou des identifiants bancaires, paypal etc...
• Tape sur ce lien quelques-uns des noms d'infections décelées sur ta machine pour t'en convaincre : keylogger
• Le jeu en vaut-il la chandelle ? Je t'invite donc à désinstaller tous les logiciels de partage de fichiers et les cracks/keygens que tu peux avoir.
• J'aide les gens infectés accidentellement et de bonne foi. Maintenant, si tu te retrouves infecté pour les mêmes raisons, tu ne pourras plus dire que tu ne savais pas.

Bonne chance à toi pour la suite.

Fill

un keygen n'est pas une clé d'activation, c'est un CRACK.

Voici les meilleurs crackers que je connaisse, et ceux là ils sont vraiment très bon.

///

Perso dans ton cas pour repartir sur une bonne base, nous allons formatter ton pc. Pour cela il faut que tu me donnes la marque de ton pc.

labougie

Merci la bougie,

Donc j'ai un Asus Ul 80 series windows 7 64 bits.

Sympa tes crakers, ils font pas grands dégats ceux là au moins ^^

1. Tu vas commencer par graver tes dvd de restauration, comme cela en cas de problème matériel tu auras tout le matos nécessaire.

Utilise l'outil Asus pour cela.

• démarrer / asus / puis l'utilitaire "asus recovery"

Ensuite pour réinitialiser ton pc à l'origine, il te faut faire ceci; /!\ toutes tes données seront perdues.

Inutile de sauvegarder tes cracks ou autres keygens ou patch cs3 . Car si tu fais cela, ton pc redeviendra très vite infecté .

2. Pour restaurer ton Asus, au démarrage tapote la touche F9 et ensuite choisir france français suivant et attendre. .

Quand cela est terminé, mets à jours ton windows avec ceci.

charge et grave ce fichier => 7601.17514.101119-1850_Update_Sp_Wave1-GRMSP1.1_DVD.iso 1953.3Mo

Ensuite reviens par ici pour refaire un malwarebytes puis un zhpdiag .

labougie