Bonjour à tous,

Je suis utilisateur d'Avast antivirus et j'utilise le pare-feu Windows.
Jusqu'à présent, je n'avais jamais rencontré de problème d'infection. Cependant, depuis quelques jours je suis victime d'apparition de fenètres publicitaires intempestives malgré le réglage au maximum du blocage dans internet explorer, ce qui m'a conduit à installer un autre antivirus : Antivir, ainsi que Ccleaner, A.squared et aussi Malwarebites.
Mais aucune de ces actions n'est efficace & mon pc semble tourner plus lentement.
Je viens de faire une analyse avec Antivir et le rapport est le suivant :


Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: AHOJ

Version information:
BUILD.DAT : 8.1.0.308 16478 Bytes 28/05/2008 17:03:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 23:05:46
ANTIVIR2.VDF : 7.0.5.105 821248 Bytes 13/07/2008 17:51:40
ANTIVIR3.VDF : 7.0.5.106 2048 Bytes 13/07/2008 17:51:41
Engineversion : 8.1.0.64
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.46 283002 Bytes 09/07/2008 23:06:01
AESCN.DLL : 8.1.0.22 119157 Bytes 09/07/2008 23:06:00
AERDL.DLL : 8.1.0.20 418165 Bytes 09/07/2008 23:05:59
AEPACK.DLL : 8.1.1.6 364918 Bytes 09/07/2008 23:05:58
AEOFFICE.DLL : 8.1.0.20 192891 Bytes 09/07/2008 23:05:57
AEHEUR.DLL : 8.1.0.35 1298806 Bytes 09/07/2008 23:05:57
AEHELP.DLL : 8.1.0.15 115063 Bytes 09/07/2008 23:05:54
AEGEN.DLL : 8.1.0.29 307573 Bytes 09/07/2008 23:05:52
AEEMU.DLL : 8.1.0.6 430451 Bytes 09/07/2008 23:05:51
AECORE.DLL : 8.1.0.32 168311 Bytes 09/07/2008 23:05:50
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: dimanche 13 juillet 2008 19:52

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'MPAPI3s.exe' - '1' Module(s) have been scanned
Scan process 'NclRSSrv.exe' - '1' Module(s) have been scanned
Scan process 'NclUSBSrv.exe' - '1' Module(s) have been scanned
Scan process 'ServiceLayer.exe' - '1' Module(s) have been scanned
Scan process 'ashWebSv.exe' - '1' Module(s) have been scanned
Scan process 'ashMaiSv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'a2service.exe' - '1' Module(s) have been scanned
Scan process 'devldr32.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdater.exe' - '1' Module(s) have been scanned
Scan process 'PCSuite.exe' - '1' Module(s) have been scanned
Scan process 'PcSync2.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'a2guard.exe' - '1' Module(s) have been scanned
Scan process 'AliceAgent.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
44 processes with 44 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '25' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\System Volume Information\_restore{67A45890-6221-4B62-91F8-F98C24FA8A57}\RP413\A0089631.dll
[DETECTION] Is the Trojan horse TR/Trash.Gen
[NOTE] The file was moved to '48aa45a1.qua'!
C:\System Volume Information\_restore{67A45890-6221-4B62-91F8-F98C24FA8A57}\RP417\A0091951.dll
[DETECTION] Is the Trojan horse TR/Monderb.112256
[NOTE] The file was moved to '48aa4ab2.qua'!
C:\WINDOWS\system32\ndrsysfo.dll
[DETECTION] Is the Trojan horse TR/Monderb.112256
[NOTE] The file was moved to '48ec4c55.qua'!
Begin scan in 'D:\'


End of the scan: dimanche 13 juillet 2008 20:41
Used time: 49:27 min

The scan has been done completely.

5098 Scanning directories
192872 Files were scanned
3 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
3 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
192869 Files not concerned
951 Archives were scanned
2 Warnings
3 Notes

SVP, qui pourrait m'aider et m'indiquer la marche à suivre ?
Je précise que je suis presque ignare en informatique.
Merci à ceux qui accepteront de me consacrer un peu de temps.

Salut à tous ceux qui auront lu ce message.

slt

et bien ton antivirus a trouver 3 trojans mais attend l'aide d'un helper ils t'indiqueront la march a suivre pour desinfecter ton pc... passe a firefox internet explorer est un distributeur a spyware/malwares toutes ces pubs...et de plus sont bloquage de pop-pups en laisse passer des vertes et des pas mures...voila a+

J'ajoute le rapport d'analyse de Malwarebytes qui révèle 2 dossiers infectés (dois-je supprimer ces éléments ?) :

Malwarebytes' Anti-Malware 1.20
Version de la base de données: 935
Windows 5.1.2600 Service Pack 2

23:03:53 13/07/2008
mbam-log-7-13-2008 (23-03-44).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 77782
Temps écoulé: 24 minute(s), 26 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\Software\Adsl Software Ltd (Trojan.FakeAlert) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\All Users\Application Data\ADSL Software Ltd\WinSpywareProtect (Rogue.Multiple) -> No action taken.

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

si il te dit qu'ils sont infectés ils doivent alors apparaitre en rouge ds la liste a la fin du scan tu coches donc la case devant ces 2 fichiers et tu fait delete je crois je ne sais plus ce qui est marqué mais supprime les !

FireFox oui, mais ma femme va pousser des cris si je lui enlève son navigateur habituel !
Je préfère attendre de l'aide car jusqu'à présent je n'avais pas de soucis. Je pense qu'il faut peut-être que je protège mieux mon pc.

comme tu veut mais supprime ce que malwarebites t'a trouvé!

en plus je crois que c'est du Vundo...pas sur mais fait des recherche sur google sur trojan virtumone ou encore trojan vundo

a+ sur ce bonne nuit

OK, j'ai supprimé les éléments nuisibles qu'avait trouvé malwarebytes.
On verra si les fenêtres intempestives cessent.
Je reviendrai donner des nouvelles.

A plus tard. Salut !

Salut,

Je reviens donner des nouvelles et elles sont bonnes, puisque les problèmes ont cessé depuis mon dernier post.
C'est résolu. Merci XtreMBoOM !

A la prochaine....

Derien jeantilop,

c'est toi qui a tout fait comme un grand

a un de ces 4

Alors ça y est, je suis grand ?
Ouais, chui vachement content !!!

Merci, à une autre fois. Bon week-end !

Salut.