Probleme virus empêchant démarrage anti virus

Question

Bonjour,
Voilà mon problème, j'ai téléchargé un programme sur internet mais malheureusement ce programme contenait un virus. Je possède avast édition familiale et AVG anti spyware qui étaient jusqu'alors actifs. Mais, dès que ce virus a agi, il a désactivé le bouclier résident d'avast, enlevé la protection d'AVG et a également désactivé le centre de sécurité Windows... euh ... :(
J'ai fait une analyse complète de mon ordinateur avec Malwarebytes' Anti-Malware puis j'ai mis en quarantaine tous les virus et trojans puis je les ai supprimés.
Aucun changement quand j'ai essayé de démarrer tout programme ayant un lien avec la sécurité de l'ordi, il ne démarrent pas.
Je pense avoir supprimé le virus (peut-être) mais il a eu le temps de désactiver des fonctions sur la sécurité.
Je voudrais donc savoir si quelqu'un peut m'aider sur ce problème parce que je ne sais plus quoi faire...
Je remercie d'avance celui ou celle qui m'aidera à réparer ce problème !
Siegfried46 ^^

totobetourne · Accepted Answer

Réouvre FindyKill , choisi cette fois ci l option 2 (Suppression)

/!\ il y aura 2 redémarrage, laisse travailler l outils jusqu a l apparition du message "nettoyage terminé"

-------> ensuite post le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

totobetourne · Answer

bnojour


1)pour vista si infection.

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection: IMPORTANT A NE SURTOUT PAS OUBLIER):

- Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide.

http://www.laboratoire-microsoft.org/tips-23933-desactiver-uac-vista.html 



2)as tu telecharger un crack, dis ce qu il  en est?



3)telecharge cela:util pour voir ce que peut etre l infection et agir ensuite.

http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

installe le normallement comme tout autre programme dans c/programme/...............
clique sur do a scan and save a logfile, tu obtiens un rapport que tu colles.

Siegfried46 · Answer

1) J'ai désactivé le contrôle de compte d'utilisateur
2 ) J'ai téléchargé un keygen pour un écran de veille qu'il ne durait que 60 sec. s'il n'était pas enregistré je sais c'est mal et c'était sur eMule ! Je ne le referai plus...
3) J'ai installé Hijackthis mais quand je le lance il me dit le message d'erreur suivant : "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe n'est pas une application Win32 valide." (Cela est dû au virus, j'en suis presque sûr car je crois qu'il a désactivé certains services de windows...)

Voila ^^ J'espère vous aider à m'aider :)

Siegfried46

totobetourne · Answer

ok 

pas mal de nouveau type d infection bagle, j espere qu il n est pas trop dur a enlever.

 Télécharges FindyKill de Chiquitine29 

Fais un clique droit sur le lien et choisis "enregistrer la cible sous ...." , destination le bureau .

http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe


Note importante : si tu as le prg Elibagla sur ton PC , supprimes le ( risque de conflit entre les deux outils ) .

--> Entre dans le dossier " FindyKill "

Double clic sur " FindyKill.bat " (et pas sur autre chose!) pour lancer l'outil .

->choisis l'option 1 . Puis laisses travailler ...

Une fois terminé, postes le rapport FindyKill.txt qui est généré ...

( Note : le rapport est sauvegardé à la racine du disque -> C:\FindyKill.txt )

Siegfried46 · Answer

Bonjour ! Voici le rapport :



----------------- FindyKill V4.710 ------------------

* User : Tommy - PC-DE-TOMMY
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 21/12/08 par Chiquitine29
* Recherche effectuée à 11:04:12 le 29/12/2008
* Windows Vista - Internet Explorer 7.0.6001.18000
 
((((((((((((((((( *** Recherche *** ))))))))))))))))))  
 
 
--------------- [ Processus actifs ] ----------------  
 

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32
vvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32undll32.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32	askeng.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\oopmagent.exe
C:\Program Files\QuickTime\qttask.exe
C:\Windows\System32undll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Users\Tommy\AppData\Roaming\drivers\winupgro.exe
C:\Users\Tommy\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\ehome\ehmsas.exe
C:\Users\Tommy\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Users\Tommy\AppData\Roaming\drivers\downld\1008937.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conime.exe
 
--------------- [ Processus infectieux stoppés ] ----------------  
 

"C:\Users\Tommy\AppData\Roaming\drivers\downld\1008937.exe"  (2960)
"C:\Users\Tommy\AppData\Roaming\drivers\winupgro.exe"  (844)
"C:\Users\Tommy\AppData\Roaming\drivers\winupgro.exe"  (844)

 
--------------- [ Fichiers/Dossiers infectieux ] ----------------  
 
 
»»»» Presence des fichiers dans C: 
 
 
»»»» Presence des fichiers dans C:\Windows 
 
 
»»»» Presence des fichiers dans C:\Windows\Prefetch 
 
Found ! - C:\Windows\Prefetch\KEYHOLETV.EXE-C79ADB04.pf 
 
»»»» Presence des fichiers dans C:\Windows\system32 
 
Found ! [29/12/2008 10:47] - C:\Windows\system32\mdelk.exe 
Found ! [28/12/2008 16:51] - C:\Windows\system32\wintems.exe 
Found ! [29/12/2008 10:47] - C:\Windows\system32\ban_list.txt 
 
»»»» Presence des fichiers dans C:\Windows\system32\config\systemprofile\AppData\Roaming 
 
 
»»»» Presence des fichiers dans C:\Windows\system32\drivers 
 
 
»»»» Presence des fichiers dans C:\Users\Tommy\AppData\Roaming 
 
Found ! [29/12/2008 10:51] - "C:\Users\Tommy\AppData\Roaming\m\flec006.exe" 
Found ! [29/12/2008 10:51] - "C:\Users\Tommy\AppData\Roaming\m\list.oct" 
Found ! [29/12/2008 10:51] - "C:\Users\Tommy\AppData\Roaming\m\data.oct" 
Found ! [29/12/2008 10:51] - "C:\Users\Tommy\AppData\Roaming\m\srvlist.oct" 
Found ! [29/12/2008 11:00] - "C:\Users\Tommy\AppData\Roaming\m\shared" 
Found ! [28/12/2008 16:41] - "C:\Users\Tommy\AppData\Roaming\m" 
Found ! [28/12/2008 16:35] - "C:\Users\Tommy\AppData\Roaming\drivers" 
Found ! [29/12/2008 10:47] - "C:\Users\Tommy\AppData\Roaming\drivers\srosa.sys" 
Found ! [29/12/2008 10:46] - "C:\Users\Tommy\AppData\Roaming\drivers\srosa2.sys" 
Found ! [16/03/2006 04:10] - "C:\Users\Tommy\AppData\Roaming\drivers\winupgro.exe" 
Found ! [29/12/2008 10:53] - "C:\Users\Tommy\AppData\Roaming\drivers\downld" 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1008937.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1020312.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1021359.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1021437.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1119812.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1155218.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1155953.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1155968.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1167593.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1168953.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1169406.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1170109.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1173078.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1175187.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1194515.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1195812.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1196468.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1206687.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\121203.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\121875.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\123062.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\123078.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\123390.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\123453.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1236437.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1237359.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1238203.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1263078.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12662281.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12663156.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12663171.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12675421.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12718703.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12725375.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1273984.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1274359.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1274687.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\127687.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\128843.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12895312.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12931796.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12932484.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12932500.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12944640.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12945921.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\12946375.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\131031.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\131046.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\135515.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1442062.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1454656.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\145843.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1476062.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\147984.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1517968.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1543109.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1553281.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\1559359.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\220750.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\223484.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\224125.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\244765.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\245609.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\246234.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\246343.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\248156.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\248953.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\251656.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\266203.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\274750.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\281046.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\351671.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\352984.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\353109.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\367687.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\369171.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\369687.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\373078.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\416203.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\423484.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\424359.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\424687.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\426796.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\426828.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\430828.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\439890.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\441515.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\453609.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\454609.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\455296.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\459750.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\463828.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\470203.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\472468.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\473062.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\473703.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\484890.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\485359.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\485500.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\494843.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\497703.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\498171.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\498703.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\498875.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\500875.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\502546.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\523953.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\524968.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\525296.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\531546.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\534937.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\537296.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\537406.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\541671.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\551062.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\552765.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\553250.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\561218.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\562343.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\563187.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\578406.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\579609.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\579953.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\580625.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\584765.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\591875.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\593484.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\593562.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\601171.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\612203.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\613015.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\613687.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\630921.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\643671.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\644359.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\644765.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\644968.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\649484.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\649500.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\655453.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\703453.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\705312.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\706093.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\718828.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\748031.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\892140.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\925453.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\926703.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\926718.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\929250.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\930234.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\934531.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\942109.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\943421.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\943875.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\944578.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\947062.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\948921.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\953859.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\968703.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\969437.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\969765.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\974328.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\979593.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\987062.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\991578.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\992390.exe 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Roaming\drivers\downld\992968.exe 
 
»»»» Presence des fichiers dans C:\Users\Tommy\AppData\Local\Temp 
 
 
»»»» Presence des fichiers dans C:\Users\Tommy\Local Settings\Temporary Internet Files\Content.IE5 
 
Found ! [28/12/2008 15:29] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\09CCIA4P\b64[1].jpg 
Found ! [28/12/2008 16:55] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\09CCIA4P\b64[2].jpg 
Found ! [28/12/2008 16:40] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\09CCIA4P\b64_1[1].jpg 
Found ! [28/12/2008 16:51] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\09CCIA4P\b64_3[1].jpg 
Found ! [28/12/2008 17:19] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\09CCIA4P\mxd[1].jpg 
Found ! [27/12/2008 21:12] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\26RB5A7K\b1652a4b6451e4c914ad51011f2b98dd023863b8[1].jpg 
Found ! [27/12/2008 21:12] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\26RB5A7K\b1652a4b6451e4c914ad51011f2b98dd023863b8_medium[1].jpg 
Found ! [28/12/2008 16:57] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\26RB5A7K\b64_1[1].jpg 
Found ! [28/12/2008 16:41] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\26RB5A7K\b64_2[1].jpg 
Found ! [28/12/2008 15:20] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Z5M40O8\b64[1].jpg 
Found ! [29/12/2008 10:51] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Z5M40O8\b64[2].jpg 
Found ! [28/12/2008 15:45] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Z5M40O8\b64_1[1].jpg 
Found ! [28/12/2008 17:26] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Z5M40O8\b64_1[2].jpg 
Found ! [29/12/2008 10:52] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Z5M40O8\b64_1[3].jpg 
Found ! [28/12/2008 15:16] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Z5M40O8\b64_3[1].jpg 
Found ! [28/12/2008 15:25] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Z5M40O8\b64_3[2].jpg 
Found ! [28/12/2008 17:20] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Z5M40O8\b64_3[3].jpg 
Found ! [28/12/2008 23:47] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Z5M40O8\b64_3[4].jpg 
Found ! [28/12/2008 16:39] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VW58E48E\b64[1].jpg 
Found ! [28/12/2008 17:25] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VW58E48E\b64[2].jpg 
Found ! [28/12/2008 17:27] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VW58E48E\b64_2[1].jpg 
Found ! [28/12/2008 23:53] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VW58E48E\b64_2[2].jpg 
Found ! [29/12/2008 10:53] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VW58E48E\b64_2[3].jpg 
Found ! [28/12/2008 23:47] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VW58E48E\b64_3[1].jpg 
Found ! [29/12/2008 10:47] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VW58E48E\b64_3[2].jpg 
Found ! [28/12/2008 16:41] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VW58E48E\mxd[1].jpg 
Found ! [28/12/2008 22:46] - C:\Users\Tommy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\AGN5J9SR\F9B7C49ACC5AC49D5F2BF50353B64[1].jpg 
 
--------------- [ Registre / Startup ] ----------------  
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersionun]
   Sidebar=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
   WindowsWelcomeCenter=rundll32.exe oobefldr.dll,ShowWelcomeCenter
   ehTray.exe=C:\Windows\ehome\ehTray.exe
   DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
   EA Core=C:\Program Files\Electronic Arts\EADM\Core.exe -silent
   SUPERAntiSpyware=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
   Steam="C:\Program Files\Steam\Steam.exe" -silent
   WMPNSCFG=C:\Program Files\Windows Media Player\WMPNSCFG.exe
   MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionun]
   Windows Defender=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
   SunJavaUpdateSched="C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
   ooquickpdfv7="C:\Windows\system32\oopmagent.exe"
   QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
   !AVG Anti-Spyware="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
   NvCplDaemon=RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
   NvMediaCenter=RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
 
[HKEY_CURRENT_USER\software\local appwizard-generated applications\daemon]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\install_patch]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]
 
--------------- [ Registre / Clés infectieuses ] ----------------  
 
 
Found ! - HKEY_USERS\S-1-5-21-2016536796-1042062753-205223894-1000\Software\Local AppWizard-Generated Applications\install_patch 
Found ! - HKEY_USERS\S-1-5-21-2016536796-1042062753-205223894-1000\Software\Local AppWizard-Generated Applications\winupgro 
Found ! - HKEY_USERS\S-1-5-21-2016536796-1042062753-205223894-1000\Software\bisoft 
Found ! - HKEY_USERS\S-1-5-21-2016536796-1042062753-205223894-1000\Software\DateTime4 
Found ! - HKEY_USERS\S-1-5-21-2016536796-1042062753-205223894-1000\Software\FFC 
Found ! - HKEY_USERS\S-1-5-21-2016536796-1042062753-205223894-1000\Software\FirtR 
Found ! - HKEY_USERS\S-1-5-21-2016536796-1042062753-205223894-1000\Software\MuleAppData 
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\install_patch 
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA 
Found ! - HKEY_CURRENT_USER\Software\bisoft 
Found ! - HKEY_CURRENT_USER\Software\DateTime4 
Found ! - HKEY_CURRENT_USER\Software\FirtR 
Found ! - HKEY_CURRENT_USER\Software\MuleAppData   
Found ! - HKEY_CURRENT_USER\Software\FFC  
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S 
 
--------------- [ Etat / Services ] ---------------- 
 


+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ] 

 /!\ Ndisuio - Type de démarrage = 4 
 
 EapHost - Type de démarrage = 3 
 
 Wlansvc - Type de démarrage = 3 
 
 /!\ SharedAccess - Type de démarrage = 4 
 
 /!\ wuauserv - Type de démarrage = 4 
 
 /!\ wscsvc - Type de démarrage = 4 
 
 /!\ WinDefend - Type de démarrage = 4 
 
 
 
--------------- [ Recherche dans supports amovibles] ----------------  
 
 
+- Informations : 

C: - Lecteur fixe
H: - Lecteur fixe
 
+- Contenu de l'autorun : C:\autorun.inf  

[autorun]
;jwkdculzgmwoxvfqzfrekucdqoolyszzbgmxzoxzxadbvvdaawiuvzuviysq
shellexecute="resycled\boot.com c:"
;ueijejjziesvetvzwrltfkgcjbtbmozxpqjsceohvlgsemuhmmezfbkxdjwxirjplibgnilhdlimoxadylvyomllrpkeqdhsi
shell\Open\command="resycled\boot.com c:"
;
 
+- Contenu de l'autorun : H:\autorun.inf  

[autorun]
;lktgejzgmilesobfmbrqmqbrinfjmcmhpvikvuifygzegvtxlkdtigpdeuapxamahykazdnkghdrbabbdjn
shellexecute="resycled\boot.com h:"
;kditbuxskxxznlxsggzflrnonlkktoymkxpik
shell\Open\command="resycled\boot.com h:"
;lbdvrmlhyvonfqlkabigbhjyqaugchvlccshx
 
+- presence des fichiers :  

Found ! [28/12/2008 15:21][-r-hs----] - C:\autorun.inf 
Found ! [28/12/2008 15:21][-r-hs----] - H:\autorun.inf 
Found ! [30/11/2004 15:01][---hs----] - H:\info.exe 
 
 
--------------- [ Registre / Mountpoint2 ] ----------------  
 
 
-> Not found ! 
 
 
------------------- ! Fin du rapport ! --------------------

totobetourne · Answer

arretez de venir a je ne sais combien sur un topic on ne s y retrouve creer ton propre topic ,passe findykill en option 2 , tu obtiens un rapport que tu colles .merci.

Probleme virus empêchant démarrage anti virus

6 réponses

Discussions similaires

Newsletters