Virus... pc infecté bloquant les antivirus...

Question

Bonjour,

J'ai un méchant virus malware depuis 2 jours...
(J'avais scanné le fichier avec Avast... j'avais toute confiance en lui... j'ai suis maintenant infecté) 

Sur ce lien :
http://www.virustotal.com/fr/analisis/85ac686d169ede8ee91ca5861be1afbf
J'ai fait analysé le fichier infecté, j'ai donc le nom du virus...
McAfee 	5481 	2009.01.02 	New Malware.jn
Panda 	9.0.0.4 	2009.01.02 	W32/Bagle.TT.worm
Symantec 	10 	2009.01.02 	Trojan.Mitglieder


Le problème c'est que ce virus empeche l'installation d'un nouveau antivirus
(d'apres threat expert :
Heuristically identified capability to terminate the following security related processes:
anti-trojan.exe
ants.exe
atwatch.exe
aupdate.exe
avengine.exe
avgcc32.exe
avgnt.exe
avguard.exe
avnt.exe
avp.exe
avpcc.exe
avsched32.exe
blackice.exe
ccapp.exe
ccproxy.exe
cleaner.exe
ctrl.exe
ent.exe
explore.exe
fameh32.exe
fch32.exe
fih32.exe
fnrb32.exe
fsaa.exe
fsav.exe
fsav32.exe
fsgk32.exe
fsm32.exe
fsma32.exe
fsmb32.exe
guard.exe
kavpf.exe
kpf4ss.exe
lockdown.exe
mcshield.exe
mpfservice.exe
navapsvc.exe
navapw32.exe
navw32.exe
nisserv.exe
nisum.exe
nod32.exe
nod32krn.exe
nt.exe
outpost.exe
pavfires.exe
pavproxy.exe
pccntmon.exe
persfw.exe
ray.exe
realmon.exe
smc.exe
svc.exe
taumon.exe
tds-3.exe
vbcons.exe
vsmon.exe
vsserv.exe
vsstat.exe
zapro.exe
zonealarm.exe

j'ai essayé d'installer : mcafee, drweb, avg, kazpersky...   >> chaque installations échouent ou alors un message d'erreur s'affiche lors du lancement du programme
j'ai reussi a installer : malwarebytes et a-squared qui n'ont pas trouvé le virus
)



J'ai essayé de supprimer mon virus par un scan d'antivirus sur internet (avec panda, il me l a reconnu mais n'a pas pu me desinfecté)

Je ne sais plus quoi faire...
J'aimerais ne pas reformater mon pc.
Si vous avez une idée, elle sera la bienvenue !!!

Merci,

Coco

crapoulou · Answer

Salut, Télécharge FindyKill (Merci à Chiquitine29 !!) = = = = >>> En cliquant ici <<< = = = = Fais un clic droit sur le lien, Enregistrer la cible sous (Internet Explorer) ou Enregistrer la cible du lien sous (Firefox) … Choisis d’enregistrer le fichier sur le bureau. Double clique sur FindyKill.exe Choisis l’option 1 (Recherche) Un rapport va s’ouvrir, poste le dans ta prochaine réponse. Note : Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\FindyKill.txt)

hamitou · Answer

essai Panda antirootkits : http://www.commentcamarche.net/telecharger/telecharger 34055026 panda anti rootkit

oubli pas de le mettre a jour

chimay8 · Answer

ouais,c'est probablement les effluves d'alcool qui embrume encore leurs cerveaux...ca va passer!!!

Cocobingo · Answer

Merci de vos réponses...

Finalement j'ai réussi a installer AhnLab V3 ... Le virus n'empêche pas cet antivirus à s'installer... et a réussi à le désinfecter.

je vais quand même faire un ptit scan avec findykill et pandaantirootkits... ca mange pas pain !

Et je ferais attention la prochaine fois :)

Encore merci pour votre aide !

chimay8 · Answer

si tu ne suis pas les recomandations de Crapoulou,tu te réinfecteras dans les quelques jours qui suivent
et ce n'est pas panda qui dégomme bagle

passe Findykill option 1 stp

Cocobingo · Answer

je pose quand même le rapport de findykill... il trouve des choses... mais je ne pourrais pas dire si c'est bien le virus...

----------------- FindyKill V4.710 ------------------

* User : colin - NUGGETS
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 21/12/08 par Chiquitine29
* Recherche effectuée à 13:10:02 le 03/01/2009
* Windows XP - Internet Explorer 7.0.5730.13

((((((((((((((((( *** Recherche *** ))))))))))))))))))

--------------- [ Processus actifs ] ----------------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\ACD Systems\EN\DevDetect.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\AhnLab\Smart Update Utility\AhnSD.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\EXPERTool\TBPanel.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\AhnLab\Smart Update Utility\AhnSDsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\DOCUME~1\colin\LOCALS~1\Temp\AhnUn000.tmp

--------------- [ Fichiers/Dossiers infectieux ] ----------------

»»»» Presence des fichiers dans C:

»»»» Presence des fichiers dans C:\WINDOWS

»»»» Presence des fichiers dans C:\WINDOWS\Prefetch

Found ! - C:\WINDOWS\prefetch\143421.EXE-058B4E0B.pf
Found ! - C:\WINDOWS\prefetch\15778953.EXE-1919A1F1.pf
Found ! - C:\WINDOWS\prefetch\16036609.EXE-1B91EAF6.pf
Found ! - C:\WINDOWS\prefetch\3205656.EXE-28ED5E2A.pf
Found ! - C:\WINDOWS\prefetch\3328156.EXE-33EBDD2F.pf
Found ! - C:\WINDOWS\prefetch\3413703.EXE-05DB8C3A.pf
Found ! - C:\WINDOWS\prefetch\3457296.EXE-18296357.pf
Found ! - C:\WINDOWS\prefetch\483187.EXE-1ED4C936.pf
Found ! - C:\WINDOWS\prefetch\50640.EXE-11B1753F.pf
Found ! - C:\WINDOWS\prefetch\57578.EXE-06342E0C.pf
Found ! - C:\WINDOWS\prefetch\616968.EXE-29EDBCDA.pf
Found ! - C:\WINDOWS\prefetch\62015.EXE-0DFC9582.pf
Found ! - C:\WINDOWS\prefetch\66265.EXE-1C4F478C.pf
Found ! - C:\WINDOWS\prefetch\714859.EXE-2B9079EC.pf
Found ! - C:\WINDOWS\prefetch\746296.EXE-29B56A7D.pf
Found ! - C:\WINDOWS\prefetch\976156.EXE-14C83F36.pf
Found ! - C:\WINDOWS\prefetch\FLEC006.EXE-3A42604B.pf
Found ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Found ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf

»»»» Presence des fichiers dans C:\WINDOWS\system32

»»»» Presence des fichiers dans C:\WINDOWS\system32\config\systemprofile\AppData\Roaming

»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

»»»» Presence des fichiers dans C:\Documents and Settings\colin\Application Data

Found ! [03/01/2009 00:46] - "C:\Documents and Settings\colin\Application Data\m\list.oct"
Found ! [03/01/2009 00:47] - "C:\Documents and Settings\colin\Application Data\m\data.oct"
Found ! [03/01/2009 00:47] - "C:\Documents and Settings\colin\Application Data\m\srvlist.oct"
Found ! [03/01/2009 00:47] - "C:\Documents and Settings\colin\Application Data\m\shared"
Found ! [03/01/2009 01:17] - "C:\Documents and Settings\colin\Application Data\m"
Found ! [03/01/2009 00:37] - "C:\Documents and Settings\colin\Application Data\drivers"
Found ! [03/01/2009 00:37] - "C:\Documents and Settings\colin\Application Data\drivers\downld"
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\115796.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\116500.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\116812.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\122390.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\123109.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\123437.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\138593.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\139312.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\139625.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\14909218.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\14909265.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\14909281.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15454062.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15454500.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15454812.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15790296.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15802906.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15803234.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15879203.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15879218.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15894875.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15895828.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15896265.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15897046.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15897687.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15898140.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15963703.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15964125.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\15964437.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\16018921.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\16020015.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\16020828.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\16048796.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\16049468.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\16049812.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\1746656.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\1747093.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\1764875.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\1765484.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\1765765.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\252968.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\254468.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\254796.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\290875.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\296093.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\297578.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3327125.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3334781.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3336312.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3336625.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\335859.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\336562.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3370593.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3371671.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3371687.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3384609.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3385796.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3386234.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3387000.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3387671.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3388125.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3405734.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3406375.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3406687.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3426984.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3437125.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3438718.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3467281.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\348312.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\349500.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\349921.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3502312.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\3502453.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\350640.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\351343.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\351781.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\415765.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\416468.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\416765.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\427125.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\427937.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\428390.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\43234.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\43515.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\43734.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\44031.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\44046.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\44687.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\45328.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\45343.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\45843.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\46343.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\46453.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\47312.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\47375.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\488015.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\488875.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\489062.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\506453.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\507156.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\507234.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\52609.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\53203.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\55859.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\566296.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\567421.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\567453.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\57390.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\57406.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\579703.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\581078.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\581531.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\582234.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\582953.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\583515.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\649578.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\655390.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\656625.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\690750.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\691578.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\691921.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\727171.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\727421.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\727437.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\759593.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\760250.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\760390.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\838812.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\840765.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\872453.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\873546.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\873968.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\874750.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\875468.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\875921.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\939906.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\940640.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\940937.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\953937.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\954140.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\974781.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\986265.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\986843.exe
Found ! [03/01/2009 00:37] - C:\Documents and Settings\colin\Application Data\drivers\downld\986937.exe

»»»» Presence des fichiers dans C:\DOCUME~1\colin\LOCALS~1\Temp

»»»» Presence des fichiers dans C:\Documents and Settings\colin\Local Settings\Temporary Internet Files\Content.IE5

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
ASRock OC Tuner=
GAINWARD=C:\Program Files\EXPERTool\TBPanel.exe /A
DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
MsnMsgr="C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
drvsyskit=C:\Documents and Settings\colin\Application Data\drivers\winupgro.exe
german.exe=C:\WINDOWS\system32\wintems.exe
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater=
<NO NAME>=

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
IAAnotif=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
RTHDCPL=RTHDCPL.EXE
Alcmtr=ALCMTR.EXE
NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz=nwiz.exe /install
NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
Device Detector=DevDetect.exe -autorun
GrooveMonitor="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
EoEngine=
SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
AHNSD="C:\Program Files\AhnLab\Smart Update Utility\AhnSD.exe"
avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=

[HKEY_CURRENT_USER\software\local appwizard-generated applications\AnyDVDtray]

--------------- [ Registre / Clés infectieuses ] ----------------

Found ! - HKEY_USERS\S-1-5-21-1801674531-1614895754-2147161785-1003\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-1801674531-1614895754-2147161785-1003\Software\FFC
Found ! - HKEY_USERS\S-1-5-21-1801674531-1614895754-2147161785-1003\Software\MuleAppData
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S
Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | drvsyskit
Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | german.exe

--------------- [ Etat / Services ] ----------------

Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

- sans echec non fonctionnel !!

Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal

- sans echec non fonctionnel !!

Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network

- sans echec non fonctionnel !!

+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

Ndisuio - Type de démarrage = 3

EapHost - Type de démarrage = 3

/!\ Ip6Fw - Type de démarrage = 4

SharedAccess - Type de démarrage = 3

wuauserv - Type de démarrage = 2

/!\ wscsvc - Type de démarrage = 4

--------------- [ Recherche dans supports amovibles] ----------------

+- Informations :

C: - Lecteur fixe

D: - Lecteur de CD-ROM

+- Contenu de l'autorun : D:\autorun.inf

[autorun]
open = Bin\assetup.exe
icon = asr.ico

+- presence des fichiers :

Found ! [19/05/2005 07:22][-r-------] - D:\autorun.inf

--------------- [ Registre / Mountpoint2 ] ----------------

-> Not found !

------------------- ! Fin du rapport ! --------------------

chimay8 · Answer

et comment que tu es encore infecté

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d'avoir été infectées sans les ouvrir
réouvre Findykill, 

choisis cette fois ci l'option 2 (suppression) 

il y aura 2 redémarrages, laisse travailler l'outils jusqu'a l'apparition du message "nettoyage effectué" 

un rapport va s'ouvrir, poste le dans ta prochaine réponse s-t-p 

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque
Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valides

chimay8 · Answer

tu peux poster le rapport de Antivir?

Cocobingo · Answer

jarrive pas à poster mon rapport... il est ptet trop long

chimay8 · Answer

pas grave

fais ceci

- Télécharge TrendMicro&#8482; HijackThis&#8482; de Merijn(prog de diagnostic) sur ton bureau. 
- Cette version est sans installateur! ( Zip à décompresser )
- Enregistre le sur ton bureau.

-A l'installation,
****Place le dans son répertoire par défaut, c'est à dire : C:\program files***

installer hijackthis correctement:
https://forums.cnetfrance.fr 

*** Ferme toute les fenêtres ouvertes , et déconnecte toi du web***

- Double-clique dessus
- Génère un rapport en suivant ces indications :
- Exécute le et clique sur "Do a scan and save log file".
- Le rapport s'ouvre sur le Bloc-Note.
- Colle le rapport ici, pour cela :
- Menu Edition / Selectionner Tout
- Menu Edition / copier
- Ici dans un nouveau message : clic droit / coller
- ** ne pas fixer de lignes sans notre avis **
Aide : N'hésite pas à consulter l'aide HiJackThis de Malekal_morte   
En image 

- Une fois installé, le renommer HJT.exe pour contrer une éventuelle infection de vundo

Cocobingo · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:23:40, on 03/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AhnLab\Smart Update Utility\AhnSDsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Fichiers communs\ACD Systems\EN\DevDetect.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\AhnLab\Smart Update Utility\AhnSD.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\EXPERTool\TBPanel.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\HJJJT.exe
C:\WINDOWS\system32
otepad.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AHNSD] "C:\Program Files\AhnLab\Smart Update Utility\AhnSD.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: WiFi Station.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: AhnLab Task Scheduler - AhnLab, Inc. - C:\Program Files\AhnLab\Smart Update Utility\AhnSDsv.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

chimay8 · Answer

t'as plus l'air infecté,
ta encore des blèmes?

relance Hijack(scan only) et coches ces lignes

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE      
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"       
O4 - Global Startup: WiFi Station.lnk = ?  
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE     
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install     
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime     
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"     
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"     
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe     
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')     
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')     
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')     
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')    


clic sur fix checked

Cocobingo · Answer

ok j'ai fais ce que tu m as dis...


je pense ne plus etre infecté !!!

merci beaucoup pour ton aide, et la rapidité de celle ci !!!

chimay8 · Answer

attends,c'est pas fini,
le nettoyage est important!

Cocobingo · Answer

qu est ce que je dois faire de plus???

chimay8 · Answer

Télécharge ToolsCleaner sur ton bureau. 
--> 
http://www.commentcamarche.net/telecharger/telechargement 34055291 toolscleaner

# Clique sur "Recherche" et laisse le scan agir ... 
# Clique sur "Suppression" pour finaliser. 
# Tu peux, si tu le souhaites, te servir des Options facultatives. 
# Clique sur Quitter pour obtenir le rapport. 
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

ensuite

Télécharges : - CCleaner (n'installe pas la barre d'outil Yahoo)
https://www.pcastuces.com/logitheque/ccleaner.htm 
Ce logiciel va permettre de supprimer tous les fichiers temporaires et de corrigé ton registre .Lors de l'installation, avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires" sauf les 2 première. 
Une fois le prg instalé et lancé, Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures"( Par la suite, laisse-le avec ses réglages par défaut. C'est tout ). 

Un tuto ( aide ): 
http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm 

---> Utilisation: 
! déconnectes toi et fermes toutes applications en cours ! 
* vas dans "nettoyeur" : fait analyse puis nettoyage 
* vas dans "registre" : fait chercher les erreurs et réparer ( plusieurs fois jusqu'à ce qu'il n'y est plus d'erreur ) . 

( CCleaner : soft à garder sur son PC , super utile pour de bons nettoyages ... )

***très important***

Suppression des points de restauration : 
1.Ouvre le Menu Démarrer 
2.Clique-droit sur Poste de travail 
3.Clique sur Propriétés 
4.Positionne-toi dans l'onglet Restauration du système 
5.Coche "Désactiver la restauration système" 
6.Valide par Ok 
7.Redémarre ton pc
8.Reproduis les manipulations 1 à 3 
9.Décoche "Désactiver la restauration système" 
10.Valide par Ok

sous vista
https://www.01net.com/actualites/


Ne pas oublier de créer un nouveau point de restauration en procédant comme indiqué sur le lien ci dessous 

https://www.vulgarisation-informatique.com/creer-point-restauration.php

 
si tu n as pas d autres soucis change le statut du sujet en resolu stp

Virus... pc infecté bloquant les antivirus...

16 réponses

Newsletters