SOS Rapport FindyKill
Résolu
Bonjour,
Avant tout merci aux personnes qui auront la patience de m'aider.
Depuis hier, plus possible d'ouvvrir mon anti virus, certains programmes sont obsoletes.
Mais on ne peut pas dire que le pc rame, par contre il ronronne bizarrement.
Impossible d'executer HijackThis.
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe n'est pas une application Win32 valide.
############################## [ FindyKill V4.717 ]
# User : Filip (Administrateurs) # FILIP-1AE19C767
# Update on 17/02/09 by Chiquitine29
# Start at: 15:06:39 | 24/02/2009
# Processeur Intel Pentium III Xeon
# Microsoft Windows XP dition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 6.0.2900.2180
# Windows Firewall Status : Disabled
# A:\ # Lecteur de disquettes 3 « pouces
# C:\ # Disque fixe local (SYSTEME NET) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local (INTER NET) # NTFS
# F:\ # Disque fixe local (DOCS NET) # NTFS
# G:\ # Disque fixe local (ARCHIVE NET) # NTFS
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\M-Audio MA_CMIDI\MA_CMIDI_Inst.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Documents and Settings\Filip\Application Data\m\flec006.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wintems.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## [ Processus infectieux stoppés ]
"C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe" (1768)
"C:\Documents and Settings\Filip\Application Data\m\flec006.exe" (2060)
"C:\WINDOWS\system32\wintems.exe" (2492)
################## [ Fichiers / Dossiers infectieux C:\ ]
################## [ C:\WINDOWS ]
################## [ C:\WINDOWS\system32 ]
Found ! - C:\WINDOWS\system32\mdelk.exe
Found ! - C:\WINDOWS\system32\wintems.exe
Found ! - C:\WINDOWS\system32\ban_list.txt
################## [ C:\WINDOWS\system32\drivers ]
Found ! - "C:\WINDOWS\system32\drivers\down"
################## [ C:\.. Application Data ... ]
Found ! - "C:\Documents and Settings\Filip\Application Data\m\flec006.exe"
Found ! - "C:\Documents and Settings\Filip\Application Data\m\list.oct"
Found ! - "C:\Documents and Settings\Filip\Application Data\m\data.oct"
Found ! - "C:\Documents and Settings\Filip\Application Data\m\srvlist.oct"
Found ! - "C:\Documents and Settings\Filip\Application Data\m\shared"
Found ! - "C:\Documents and Settings\Filip\Application Data\m"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers\srosa2.sys"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers\wfsintwq.sys"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers\downld"
################## [ Registre / Clés infectieuses ]
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\Local AppWizard-Generated Applications\key_generator
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\Local AppWizard-Generated Applications\MsnMsgr
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\DateTime4
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\FFC
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\MuleAppData
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\key_generator
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\MsnMsgr
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\DateTime4
Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | drvsyskit
Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | german.exe
Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | mule_st_key
# Infection active : HKLM\SYSTEM\...\Services\srosa -> Start = 0x1
# Infection active : HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1
################## [ Recherche dans supports amovibles]
# Presence des fichiers :
################## [ Registre / Mountpoint2 ]
# -> Not found !
################## [ ! Fin du rapport # FindyKill V4.717 ! ]
Avant tout merci aux personnes qui auront la patience de m'aider.
Depuis hier, plus possible d'ouvvrir mon anti virus, certains programmes sont obsoletes.
Mais on ne peut pas dire que le pc rame, par contre il ronronne bizarrement.
Impossible d'executer HijackThis.
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe n'est pas une application Win32 valide.
############################## [ FindyKill V4.717 ]
# User : Filip (Administrateurs) # FILIP-1AE19C767
# Update on 17/02/09 by Chiquitine29
# Start at: 15:06:39 | 24/02/2009
# Processeur Intel Pentium III Xeon
# Microsoft Windows XP dition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 6.0.2900.2180
# Windows Firewall Status : Disabled
# A:\ # Lecteur de disquettes 3 « pouces
# C:\ # Disque fixe local (SYSTEME NET) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local (INTER NET) # NTFS
# F:\ # Disque fixe local (DOCS NET) # NTFS
# G:\ # Disque fixe local (ARCHIVE NET) # NTFS
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\M-Audio MA_CMIDI\MA_CMIDI_Inst.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Documents and Settings\Filip\Application Data\m\flec006.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wintems.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## [ Processus infectieux stoppés ]
"C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe" (1768)
"C:\Documents and Settings\Filip\Application Data\m\flec006.exe" (2060)
"C:\WINDOWS\system32\wintems.exe" (2492)
################## [ Fichiers / Dossiers infectieux C:\ ]
################## [ C:\WINDOWS ]
################## [ C:\WINDOWS\system32 ]
Found ! - C:\WINDOWS\system32\mdelk.exe
Found ! - C:\WINDOWS\system32\wintems.exe
Found ! - C:\WINDOWS\system32\ban_list.txt
################## [ C:\WINDOWS\system32\drivers ]
Found ! - "C:\WINDOWS\system32\drivers\down"
################## [ C:\.. Application Data ... ]
Found ! - "C:\Documents and Settings\Filip\Application Data\m\flec006.exe"
Found ! - "C:\Documents and Settings\Filip\Application Data\m\list.oct"
Found ! - "C:\Documents and Settings\Filip\Application Data\m\data.oct"
Found ! - "C:\Documents and Settings\Filip\Application Data\m\srvlist.oct"
Found ! - "C:\Documents and Settings\Filip\Application Data\m\shared"
Found ! - "C:\Documents and Settings\Filip\Application Data\m"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers\srosa2.sys"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers\wfsintwq.sys"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe"
Found ! - "C:\Documents and Settings\Filip\Application Data\drivers\downld"
################## [ Registre / Clés infectieuses ]
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\Local AppWizard-Generated Applications\key_generator
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\Local AppWizard-Generated Applications\MsnMsgr
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\DateTime4
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\FFC
Found ! - HKEY_USERS\S-1-5-21-117609710-1788223648-839522115-1004\Software\MuleAppData
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\key_generator
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\MsnMsgr
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\DateTime4
Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | drvsyskit
Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | german.exe
Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | mule_st_key
# Infection active : HKLM\SYSTEM\...\Services\srosa -> Start = 0x1
# Infection active : HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1
################## [ Recherche dans supports amovibles]
# Presence des fichiers :
################## [ Registre / Mountpoint2 ]
# -> Not found !
################## [ ! Fin du rapport # FindyKill V4.717 ! ]
Configuration: Windows XP Internet Explorer 6.0
7 réponses
-
Contributeur sécuritéavec tout ça c'est normale que ça marche pas :
Etape 3/
Branche toutes tes sources de données externes au PC (clés USB, disques durs externes, lecteurs mp3, iPod...) sans les ouvrir- Relance FindyKill,
- Cette fois, sélectionne l'option 2 (Suppression) au menu principal.
- Il y aura 2 redémarrages, laisse travailler l'outil jusqu'à l'apparition du message "Nettoyage effectué !"
- Ensuite poste le rapport C:\FindyKill.txt
Après tu pourras faire un hiajckthis. -
merci Pimprennelle de me prendre en charge. Je te precise que je suis HyperNovice
voici le rapport FindyKill option 2
############################## [ FindyKill V4.717 ]
# User : Filip (Administrateurs) # FILIP-1AE19C767
# Update on 17/02/09 by Chiquitine29
# Start at: 15:47:33 | 24/02/2009
# Processeur Intel Pentium III Xeon
# Microsoft Windows XP dition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 6.0.2900.2180
# Windows Firewall Status : Disabled
# A:\ # Lecteur de disquettes 3 « pouces
# C:\ # Disque fixe local (SYSTEME NET) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local (INTER NET) # NTFS
# F:\ # Disque fixe local (DOCS NET) # NTFS
# G:\ # Disque fixe local (ARCHIVE NET) # NTFS
# H:\ # Disque amovible # FAT32
############################## [ Active Processes ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\M-Audio MA_CMIDI\MA_CMIDI_Inst.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## [ Infected Files / Folders C:\ ]
################## [ C:\WINDOWS ]
################## [ C:\WINDOWS\system32 ]
Deleted ! - C:\WINDOWS\system32\mdelk.exe
Deleted ! - C:\WINDOWS\system32\wintems.exe
Deleted ! - C:\WINDOWS\system32\ban_list.txt
################## [ C:\WINDOWS\system32\drivers ]
Deleted ! - "C:\WINDOWS\system32\drivers\down"
################## [ C:\.. Application Data ... ]
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\flec006.exe"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\list.oct"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\data.oct"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\srvlist.oct"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\shared"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers\srosa2.sys"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers\wfsintwq.sys"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers\downld"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers"
################## [ Registry / Infected keys ]
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_CURRENT_USER\Software\bisoft
Deleted ! - HKEY_CURRENT_USER\Software\DateTime4
Deleted ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\key_generator
Deleted ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\MsnMsgr
Deleted ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
################## [ Cleaning Removable drives ]
# Deleting files :
################## [ Registry / Mountpoint2 ]
# -> Not found !
################## [ Searching Other Infections ]
# Références de comparaison Bagle MD5 :
bb6c9c21 C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe
6578d3c880f067cfba0e33344ba9b271 C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe
################## [ ! End of Report # FindyKill V4.717 ! ] -
Contributeur sécurité
-
############################## [ FindyKill V4.717 ]
# User : Filip (Administrateurs) # FILIP-1AE19C767
# Update on 17/02/09 by Chiquitine29
# Start at: 15:47:33 | 24/02/2009
# Processeur Intel Pentium III Xeon
# Microsoft Windows XP dition familiale (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 6.0.2900.2180
# Windows Firewall Status : Disabled
# A:\ # Lecteur de disquettes 3 « pouces
# C:\ # Disque fixe local (SYSTEME NET) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local (INTER NET) # NTFS
# F:\ # Disque fixe local (DOCS NET) # NTFS
# G:\ # Disque fixe local (ARCHIVE NET) # NTFS
# H:\ # Disque amovible # FAT32
############################## [ Active Processes ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\M-Audio MA_CMIDI\MA_CMIDI_Inst.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## [ Infected Files / Folders C:\ ]
################## [ C:\WINDOWS ]
################## [ C:\WINDOWS\system32 ]
Deleted ! - C:\WINDOWS\system32\mdelk.exe
Deleted ! - C:\WINDOWS\system32\wintems.exe
Deleted ! - C:\WINDOWS\system32\ban_list.txt
################## [ C:\WINDOWS\system32\drivers ]
Deleted ! - "C:\WINDOWS\system32\drivers\down"
################## [ C:\.. Application Data ... ]
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\flec006.exe"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\list.oct"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\data.oct"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\srvlist.oct"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m\shared"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\m"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers\srosa2.sys"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers\wfsintwq.sys"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers\downld"
Deleted ! - "C:\Documents and Settings\Filip\Application Data\drivers"
################## [ Registry / Infected keys ]
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_CURRENT_USER\Software\bisoft
Deleted ! - HKEY_CURRENT_USER\Software\DateTime4
Deleted ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\key_generator
Deleted ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\MsnMsgr
Deleted ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
################## [ Cleaning Removable drives ]
# Deleting files :
################## [ Registry / Mountpoint2 ]
# -> Not found !
################## [ Searching Other Infections ]
# Références de comparaison Bagle MD5 :
bb6c9c21 C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe
6578d3c880f067cfba0e33344ba9b271 C:\Documents and Settings\Filip\Application Data\drivers\winupgro.exe
################## [ ! End of Report # FindyKill V4.717 ! ] -
je ne vois aucune des reponses. que se passe t'il ?
-
Contributeur sécuritéil y a un beug su ccm j'arrivais pas à voir tes messages, bon maintenant ceci :
Pour commencer : faire un petit nettoyage de l'ordi et du registre avec Ccleaner, regarde bien le Tuto CCleaner
Ensuite :
Télécharge le fichier d'installation d'HijackThis.
Enregistre HJTInstall.exe sur ton bureau.
Renomme Hijackthis en Tutu
Double-clique sur HJTInstall.exe (tutu) pour lancer le programme
Par défaut, il s'installera là :
C:\Program Files\Trend Micro\HijackThis
Accepte la licence en cliquant sur le bouton "I Accept"
Choisis l'option "Do a system scan and save a log file"
Clique sur "Save log" pour enregistrer le rapport qui s'ouvrira avec le bloc-note
Clique sur "Edition -> Sélectionner tout", puis sur "Edition -> Copier" pour copier tout le contenu du rapport
Colle le rapport que tu viens de copier sur ce forum
Ne fixe encore AUCUNE ligne, cela pourrait empêcher ton PC de fonctionner correctement
Tutoriaux (ne fixe rien pour le moment !!)
Pour ceux qui ont vista, ne pas oublier de désactiver Le contrôle des comptes utilisateurs
-
;)
