Avec ton dernier lien, VIRTUMONBEGONE voilà le rapport:
[05/19/2007, 20:59:27] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\FANNY\Mes documents\Logiciels\VirtumundoBeGone.exe" )
[05/19/2007, 20:59:34] - Detected System Information:
[05/19/2007, 20:59:34] - Windows Version: 5.1.2600, Service Pack 2
[05/19/2007, 20:59:34] - Current Username: Alex (Admin)
[05/19/2007, 20:59:34] - Windows is in SAFE mode with Networking.
[05/19/2007, 20:59:34] - Searching for Browser Helper Objects:
[05/19/2007, 20:59:34] - BHO 1: {1831F0A6-F64A-48EF-91AD-9A0B7ACD1D1a} ()
[05/19/2007, 20:59:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:34] - No filename found. Continuing.
[05/19/2007, 20:59:34] - BHO 2: {51248DEA-04B5-4AD8-AC08-547371D86740} ()
[05/19/2007, 20:59:35] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:35] - Checking for HKLM\...\Winlogon\Notify\ljjggdc
[05/19/2007, 20:59:35] - Found: HKLM\...\Winlogon\Notify\ljjggdc - This is probably Virtumundo.
[05/19/2007, 20:59:35] - Assigning {51248DEA-04B5-4AD8-AC08-547371D86740} MSEvents Object
[05/19/2007, 20:59:35] - BHO list has been changed! Starting over...
[05/19/2007, 20:59:35] - BHO 1: {1831F0A6-F64A-48EF-91AD-9A0B7ACD1D1a} ()
[05/19/2007, 20:59:35] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:35] - No filename found. Continuing.
[05/19/2007, 20:59:35] - BHO 2: {51248DEA-04B5-4AD8-AC08-547371D86740} (MSEvents Object)
[05/19/2007, 20:59:35] - ALERT: Found MSEvents Object!
[05/19/2007, 20:59:35] - BHO 3: {53707962-6F74-2D53-2644-206D7942484F} ()
[05/19/2007, 20:59:35] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:35] - Checking for HKLM\...\Winlogon\Notify\SDHelper
[05/19/2007, 20:59:35] - Key not found: HKLM\...\Winlogon\Notify\SDHelper, continuing.
[05/19/2007, 20:59:35] - BHO 4: {55DB983C-BDBF-426f-86F0-187B02DDA39B} ()
[05/19/2007, 20:59:35] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:35] - No filename found. Continuing.
[05/19/2007, 20:59:35] - BHO 5: {6BE29409-9418-46C6-A75F-8D43E0476FF7} ()
[05/19/2007, 20:59:35] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:35] - Checking for HKLM\...\Winlogon\Notify\ssqpp
[05/19/2007, 20:59:35] - Found: HKLM\...\Winlogon\Notify\ssqpp - This is probably Virtumundo.
[05/19/2007, 20:59:35] - Assigning {6BE29409-9418-46C6-A75F-8D43E0476FF7} MSEvents Object
[05/19/2007, 20:59:35] - BHO list has been changed! Starting over...
[05/19/2007, 20:59:35] - BHO 1: {1831F0A6-F64A-48EF-91AD-9A0B7ACD1D1a} ()
[05/19/2007, 20:59:35] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:35] - No filename found. Continuing.
[05/19/2007, 20:59:35] - BHO 2: {51248DEA-04B5-4AD8-AC08-547371D86740} (MSEvents Object)
[05/19/2007, 20:59:35] - ALERT: Found MSEvents Object!
[05/19/2007, 20:59:35] - BHO 3: {53707962-6F74-2D53-2644-206D7942484F} ()
[05/19/2007, 20:59:35] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:35] - Checking for HKLM\...\Winlogon\Notify\SDHelper
[05/19/2007, 20:59:35] - Key not found: HKLM\...\Winlogon\Notify\SDHelper, continuing.
[05/19/2007, 20:59:35] - BHO 4: {55DB983C-BDBF-426f-86F0-187B02DDA39B} ()
[05/19/2007, 20:59:35] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:35] - No filename found. Continuing.
[05/19/2007, 20:59:35] - BHO 5: {6BE29409-9418-46C6-A75F-8D43E0476FF7} (MSEvents Object)
[05/19/2007, 20:59:35] - ALERT: Found MSEvents Object!
[05/19/2007, 20:59:36] - BHO 6: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[05/19/2007, 20:59:36] - BHO 7: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
[05/19/2007, 20:59:36] - BHO 8: {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (Windows Live Toolbar Helper)
[05/19/2007, 20:59:36] - Finished Searching Browser Helper Objects
[05/19/2007, 20:59:36] - *** Detected MSEvents Object
[05/19/2007, 20:59:36] - Trying to remove MSEvents Object...
[05/19/2007, 20:59:37] - Terminating Process: IEXPLORE.EXE
[05/19/2007, 20:59:37] - Terminating Process: RUNDLL32.EXE
[05/19/2007, 20:59:37] - Disabling Automatic Shell Restart
[05/19/2007, 20:59:37] - Terminating Process: EXPLORER.EXE
[05/19/2007, 20:59:37] - Suspending the NT Session Manager System Service
[05/19/2007, 20:59:37] - Terminating Windows NT Logon/Logoff Manager
[05/19/2007, 20:59:38] - Re-enabling Automatic Shell Restart
[05/19/2007, 20:59:38] - File to disable: C:\WINDOWS\system32\ljjggdc.dll
[05/19/2007, 20:59:38] - Renaming C:\WINDOWS\system32\ljjggdc.dll -> C:\WINDOWS\system32\ljjggdc.dll.vir
[05/19/2007, 20:59:38] - File successfully renamed!
[05/19/2007, 20:59:38] - Removing HKLM\...\Browser Helper Objects\{51248DEA-04B5-4AD8-AC08-547371D86740}
[05/19/2007, 20:59:38] - Removing HKCR\CLSID\{51248DEA-04B5-4AD8-AC08-547371D86740}
[05/19/2007, 20:59:38] - Adding Kill Bit for ActiveX for GUID: {51248DEA-04B5-4AD8-AC08-547371D86740}
[05/19/2007, 20:59:38] - Deleting ATLEvents/MSEvents Registry entries
[05/19/2007, 20:59:38] - Removing HKLM\...\Winlogon\Notify\ljjggdc
[05/19/2007, 20:59:38] - Searching for Browser Helper Objects:
[05/19/2007, 20:59:38] - BHO 1: {1831F0A6-F64A-48EF-91AD-9A0B7ACD1D1a} ()
[05/19/2007, 20:59:38] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:38] - No filename found. Continuing.
[05/19/2007, 20:59:38] - BHO 2: {53707962-6F74-2D53-2644-206D7942484F} ()
[05/19/2007, 20:59:38] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:38] - Checking for HKLM\...\Winlogon\Notify\SDHelper
[05/19/2007, 20:59:38] - Key not found: HKLM\...\Winlogon\Notify\SDHelper, continuing.
[05/19/2007, 20:59:38] - BHO 3: {55DB983C-BDBF-426f-86F0-187B02DDA39B} ()
[05/19/2007, 20:59:38] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:38] - No filename found. Continuing.
[05/19/2007, 20:59:38] - BHO 4: {6BE29409-9418-46C6-A75F-8D43E0476FF7} (MSEvents Object)
[05/19/2007, 20:59:38] - ALERT: Found MSEvents Object!
[05/19/2007, 20:59:38] - BHO 5: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[05/19/2007, 20:59:38] - BHO 6: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
[05/19/2007, 20:59:38] - BHO 7: {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (Windows Live Toolbar Helper)
[05/19/2007, 20:59:38] - Finished Searching Browser Helper Objects
[05/19/2007, 20:59:38] - *** Detected MSEvents Object
[05/19/2007, 20:59:38] - Trying to remove MSEvents Object...
[05/19/2007, 20:59:39] - Terminating Process: IEXPLORE.EXE
[05/19/2007, 20:59:39] - Terminating Process: RUNDLL32.EXE
[05/19/2007, 20:59:39] - Disabling Automatic Shell Restart
[05/19/2007, 20:59:39] - Terminating Process: EXPLORER.EXE
[05/19/2007, 20:59:39] - Suspending the NT Session Manager System Service
[05/19/2007, 20:59:40] - Terminating Windows NT Logon/Logoff Manager
[05/19/2007, 20:59:40] - Re-enabling Automatic Shell Restart
[05/19/2007, 20:59:40] - File to disable: C:\WINDOWS\system32\ssqpp.dll
[05/19/2007, 20:59:40] - Renaming C:\WINDOWS\system32\ssqpp.dll -> C:\WINDOWS\system32\ssqpp.dll.vir
[05/19/2007, 20:59:40] - File successfully renamed!
[05/19/2007, 20:59:40] - Removing HKLM\...\Browser Helper Objects\{6BE29409-9418-46C6-A75F-8D43E0476FF7}
[05/19/2007, 20:59:40] - Removing HKCR\CLSID\{6BE29409-9418-46C6-A75F-8D43E0476FF7}
[05/19/2007, 20:59:40] - Adding Kill Bit for ActiveX for GUID: {6BE29409-9418-46C6-A75F-8D43E0476FF7}
[05/19/2007, 20:59:40] - Deleting ATLEvents/MSEvents Registry entries
[05/19/2007, 20:59:40] - Removing HKLM\...\Winlogon\Notify\ssqpp
[05/19/2007, 20:59:40] - Searching for Browser Helper Objects:
[05/19/2007, 20:59:40] - BHO 1: {1831F0A6-F64A-48EF-91AD-9A0B7ACD1D1a} ()
[05/19/2007, 20:59:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:40] - No filename found. Continuing.
[05/19/2007, 20:59:40] - BHO 2: {53707962-6F74-2D53-2644-206D7942484F} ()
[05/19/2007, 20:59:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:40] - Checking for HKLM\...\Winlogon\Notify\SDHelper
[05/19/2007, 20:59:40] - Key not found: HKLM\...\Winlogon\Notify\SDHelper, continuing.
[05/19/2007, 20:59:40] - BHO 3: {55DB983C-BDBF-426f-86F0-187B02DDA39B} ()
[05/19/2007, 20:59:40] - WARNING: BHO has no default name. Checking for Winlogon reference.
[05/19/2007, 20:59:40] - No filename found. Continuing.
[05/19/2007, 20:59:40] - BHO 4: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[05/19/2007, 20:59:40] - BHO 5: {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
[05/19/2007, 20:59:40] - BHO 6: {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (Windows Live Toolbar Helper)
[05/19/2007, 20:59:40] - Finished Searching Browser Helper Objects
[05/19/2007, 20:59:40] - Finishing up...
[05/19/2007, 20:59:40] - A restart is needed.
[05/19/2007, 20:59:40] - Automatic Reboot on STOP Error is not set. User will have to manually restart.
[05/19/2007, 20:59:48] - Attempting to Restart via STOP error (Blue Screen!)
Avast interdiction accès fichier infecté
