Virus voici mon rapport hijackthis
Destrio5 Messages postés 99820 Date d'inscription Statut Modérateur Dernière intervention -
voila je viens de chpoer un virus suite a l'intrduction d'unce carte memoire achetée d'occasion j'ai une pub pour du viagra a la place de ma page de demarrage je suis en ce moment meme en sans echec en prise en charge du reseau si pvous pouviez m'aider :)
rapport hijack
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:01:21, on 16/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode with network support
Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\windows\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Pierre\Mes documents\Téléchargements\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.fr/?gws_rd=ssl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sellhealth.com/banneduser.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13925&gct=&gc=1&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 92.241.176.188 advanced-virus-remover2009.com
O1 - Hosts: 92.241.176.188 www.advanced-virus-remover2009.com
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [WMUAgent.exe] C:\Program Files\WakeMeUp\WMUAgent.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - S-1-5-18 Startup: ctfmon.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: ctfmon.exe (User 'Default user')
O4 - Startup: ctfmon.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla Server.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: WakeMeUp! Service (svcWMU) - Highspheres.com - C:\Program Files\WakeMeUp\WMUSvc.exe
--
End of file - 5353 bytes
Configuration: Windows XP Firefox 3.5
32 réponses
- 1
- 2
Un utilisateur signale une infection par malware après l’insertion d’une carte mémoire d’occasion, avec une publicité Viagra sur la page de démarrage et partage un rapport HijackThis.
Le rapport HijackThis et le diagnostic FindyKill identifient des éléments malveillants dans les clés Run, des barres d’outils et des redirections des pages par défaut, avec des autoruns sur plusieurs lecteurs.
Les deux messages détaillent des ressources telles que des pages de démarrage et de recherche modifiées, des extensions BHO et des services suspects, et indiquent la suppression d’entrées malicieuses comme mesures de nettoyage.
Etat du système mentionné: Windows XP SP3 en mode sans échec avec réseau, Antivirus Avira présent mais obsolète, ce qui souligne la nécessité d’une vérification et d’une mise à jour des outils.
-
############################## | FindyKill V6.006 |
# User : Pierre (Administrateurs) # UNICORNI-107DA1
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 23:24:50 | 16/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | (!) Outdated ]
# C:\ # Disque fixe local # 105,1 Go (58,33 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local # 43,95 Go (43,88 Go free) # NTFS
# F:\ # Disque CD-ROM
# G:\ # Disque amovible # 1,89 Go (287,91 Mo free) # FAT
############################## | Processus actifs |
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\windows\System32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\Program Files\WakeMeUp\WMUSvc.exe
C:\windows\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\windows\system32\wscntfy.exe
################## | Fichiers # Dossiers infectieux |
Supprimé ! C:\windows\system32\autorun.inf
################## | C:\Documents and Settings\Pierre\Temporary Internet Files |
################## | All Drives ... |
Supprimé ! E:\Recycled\ctfmon.exe
Supprimé ! E:\autorun.inf
Supprimé ! G:\Recycled\ctfmon.exe
Supprimé ! G:\autorun.inf
################## | Autres ... |
################## | Registre # Clés Run infectieuses |
Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\ControlSet003\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKUS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\E\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[16/07/2009 23:47|--a------|2667] - C:\FindyKill.txt
[10/06/2009 02:02|-rahs----|0] - C:\IO.SYS
[10/06/2009 02:02|-rahs----|0] - C:\MSDOS.SYS
[03/08/2004 22:38|-rahs----|47564] - C:\NTDETECT.COM
[13/06/2009 13:29|-rahs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[21/06/2009 08:17|--a------|48] - C:\plug_in.ini
[16/07/2009 23:13|--a------|4431] - C:\rapport.txt
[24/04/2008 11:07|--a------|1410048] - G:\_DS_MENU.DAT
[18/07/2007 09:41|--a------|497728] - G:\_DS_MSHL.NDS
[30/09/2005 00:16|--a------|67108864] - G:\0113 - Ultimate Spider-Man (U).nds
[09/07/2009 15:30|--a------|524288] - G:\0113 - Ultimate Spider-Man (U).SAV
[02/10/2005 18:48|--a------|33554432] - G:\0119 Pokemon Dash (EU)(M5).nds
[07/07/2009 21:22|--a------|524288] - G:\0119 Pokemon Dash (EU)(M5).SAV
[15/10/2005 15:30|--a------|16777216] - G:\0133 Madagascar (EU).nds
[08/07/2009 07:58|--a------|524288] - G:\0133 Madagascar (EU).SAV
[26/10/2005 12:29|--a------|16777216] - G:\0145 Spider-Man 2 (EU).nds
[09/07/2009 15:14|--a------|524288] - G:\0145 Spider-Man 2 (EU).SAV
[18/11/2005 18:58|--a------|33554432] - G:\0181 Shrek - Super Slam (EU)(M6).nds
[04/07/2009 21:15|--a------|524288] - G:\0181 Shrek - Super Slam (EU)(M6).SAV
[19/11/2005 11:59|--a------|67108864] - G:\0185 Sonic Rush (EU)(M6).nds
[09/07/2009 22:43|--a------|524288] - G:\0185 Sonic Rush (EU)(M6).SAV
[24/11/2005 20:03|--a------|33554432] - G:\0201 - Mario Kart DS (E).nds
[13/07/2009 19:47|--a------|524288] - G:\0201 - Mario Kart DS (E).SAV
[25/12/1996 00:32|--a------|33554432] - G:\0225 - Battles of Prince of Persia (E) (M6).nds
[16/12/2005 12:16|--a------|8388608] - G:\0236 Ford Racing 3 (EU)(M5).nds
[25/12/1996 02:32|--a------|67108864] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).nds
[14/07/2009 08:18|--a------|524288] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).SAV
[05/02/2006 23:48|--a------|67108864] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).nds
[24/02/2006 19:02|--a------|33554432] - G:\0336 FIFA Street 2 (EU)(M3).nds
[08/07/2009 09:11|--a------|524288] - G:\0336 FIFA Street 2 (EU)(M3).SAV
[30/03/2006 16:58|--a------|67108864] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).nds
[28/09/2006 10:04|--a------|16777216] - G:\0580 - 42 Classici Senza Tempo - EURO.nds
[08/07/2009 09:23|--a------|524288] - G:\0580 - 42 Classici Senza Tempo - EURO.SAV
[29/09/2006 11:58|--a------|8388608] - G:\0581 - Nemurenai Yoru to Puzzle no Hi ni wa (J)(WRG).nds
[07/10/2006 19:05|--a------|16777216] - G:\0593 - Kawaii Koinu DS (J)(WRG).nds
[28/06/2009 16:12|--a------|524288] - G:\0593 - Kawaii Koinu DS (J)(WRG).SAV
[26/10/2006 10:57|--a------|16777216] - G:\0631 - Soduko Gridmaster (E)(Supremacy).nds
[08/07/2009 09:22|--a------|524288] - G:\0631 - Soduko Gridmaster (E)(Supremacy).SAV
[17/03/2007 09:38|--a------|16777216] - G:\0917 - Flipper Critters (E).nds
[30/06/2009 19:34|--a------|524288] - G:\0917 - Flipper Critters (E).SAV
[07/05/2007 18:56|--a------|8388608] - G:\1054 - Barbie in the 12 Dancing Princesses (E).nds
[17/11/2008 22:34|--a------|524288] - G:\1054 - Barbie in the 12 Dancing Princesses (E).SAV
[02/06/2007 00:25|--a------|33554432] - G:\1123 - Le Code de la Route (F).nds
[16/07/2009 12:39|--a------|524288] - G:\1123 - Le Code de la Route (F).SAV
[19/12/2007 14:23|--a------|33554432] - G:\1853 - Bee Movie Le Jeu (F).nds
[29/06/2009 18:19|--a------|524288] - G:\1853 - Bee Movie Le Jeu (F).SAV
[07/02/2008 11:49|--a------|67108864] - G:\1996 - Mes Amis Disney (F).nds
[16/07/2009 12:31|--a------|524288] - G:\1996 - Mes Amis Disney (F).SAV
[25/12/1996 00:32|--a------|8388608] - G:\2096 - Dora the Explorer - Dora Saves the Mermaids (E).nds
[02/05/2008 13:17|--a------|8388608] - G:\2270 - 1 Contre 100 (F).nds
[08/07/2008 23:24|--a------|16777216] - G:\2441 - Koh-Lanta (F).nds
[10/07/2008 19:40|--a------|67108864] - G:\2464 - Intervilles (F).nds
[21/07/2008 21:00|--a------|33554432] - G:\2489 - Kung Fu Panda (F).nds
[07/07/2009 08:58|--a------|524288] - G:\2489 - Kung Fu Panda (F).SAV
[03/10/2008 11:47|--a------|16777216] - G:\2741 - Boule et Bill - Vive les Vacances (F).nds
[16/07/2009 12:44|--a------|524288] - G:\2741 - Boule et Bill - Vive les Vacances (F).SAV
[20/01/2009 20:28|--a------|33554432] - G:\3429 - Cookie Shop (E)(M2)(EXiMiUS).nds
[21/02/2009 00:27|--a------|28734] - G:\3429.jpg
[21/09/2008 13:27|--a------|524288] - G:\Asterix ALLEOLIMPIADI.SAV
[06/08/2008 17:46|--a------|16777216] - G:\Brain Training.nds
[04/07/2009 11:27|--a------|524288] - G:\Brain Training.SAV
[26/09/2007 13:56|--a------|33554432] - G:\FIFA_08.nds
[16/11/2008 20:29|--a------|524288] - G:\FIFA_08.SAV
[24/07/2008 00:26|--a------|33554432] - G:\Giulia Coach Di Benessere.nds
[29/06/2009 17:32|--a------|524288] - G:\Giulia Coach Di Benessere.SAV
[24/07/2008 02:28|--a------|33554432] - G:\Giulia Passione Baby Sitter.nds
[13/07/2009 21:21|--a------|524288] - G:\Giulia Passione Baby Sitter.SAV
[12/12/2007 14:27|--a------|134217728] - G:\I Simpson Il Videogioco.nds
[09/07/2009 22:47|--a------|524288] - G:\I Simpson Il Videogioco.SAV
[02/06/2007 13:55|--a------|8388608] - G:\Impossible Mission.nds
[28/06/2009 21:23|--a------|524288] - G:\Impossible Mission.SAV
[09/08/2007 21:03|--a------|16777216] - G:\La mia clinica veterinaria.nds
[15/11/2008 02:24|--a------|524288] - G:\La mia clinica veterinaria.SAV
[14/11/2007 15:39|--a------|33554432] - G:\Left or Right Ambidextrous.nds
[07/02/2008 16:07|--a------|33554432] - G:\Maths Training.nds
[26/07/2008 21:40|--a------|33554432] - G:\My Sims.nds
[28/06/2006 22:35|--a------|33554432] - G:\New Super Mario Brothers.nds
[16/07/2009 12:28|--a------|524288] - G:\New Super Mario Brothers.SAV
[26/07/2008 03:15|--a------|33554432] - G:\Pac'N Roll (E)(Trashman).nds
[16/07/2009 16:03|--a------|524288] - G:\Pac'N Roll (E)(Trashman).SAV
[26/07/2008 22:09|--a------|33554432] - G:\Puzzle League DS.nds
[07/10/2008 23:54|--a------|524288] - G:\Puzzle League DS.SAV
[17/09/2008 18:51|--a------|33554432] - G:\Ratatouille.nds
[29/06/2009 18:17|--a------|524288] - G:\Ratatouille.SAV
[01/06/2006 10:31|--a------|16777216] - G:\sm-bage.nds
[26/07/2008 19:46|--a------|8388608] - G:\Tennis Master.nds
[25/07/2008 22:51|--a------|16777216] - G:\Tetris DS.nds
[16/07/2009 12:41|--a------|524288] - G:\Tetris DS.SAV
[26/07/2008 22:59|--a------|33554432] - G:\WarioWare - Touched!.nds
[24/07/2008 06:42|--a------|16777216] - G:\Zoo tycoon 2.nds
[16/07/2009 15:25|--a------|524288] - G:\Zoo tycoon 2.SAV
[28/06/2009 13:42|--a------|4194304] - G:\_DS_MENU.SYS
[07/07/2009 11:47|--a------|524288] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).SAV
[28/06/2009 15:48|--a------|524288] - G:\0225 - Battles of Prince of Persia (E) (M6).SAV
[11/07/2009 09:28|--a------|524288] - G:\0236 Ford Racing 3 (EU)(M5).SAV
[28/06/2009 16:05|--a------|524288] - G:\2464 - Intervilles (F).SAV
[15/07/2009 10:12|--a------|524288] - G:\My Sims.SAV
[28/06/2009 16:47|--a------|524288] - G:\Left or Right Ambidextrous.SAV
[05/07/2009 11:47|--a------|524288] - G:\2270 - 1 Contre 100 (F).SAV
[01/07/2009 11:26|--a------|524288] - G:\2441 - Koh-Lanta (F).SAV
[01/07/2009 08:41|--a------|524288] - G:\WarioWare - Touched!.SAV
[14/07/2009 10:01|--a------|524288] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).SAV
[20/05/2009 17:34|--a------|134217728] - G:\[www.pokebase.net]PokemonPlatine.nds
[16/07/2009 21:46|--a------|524288] - G:\[www.pokebase.net]PokemonPlatine.SAV
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# E:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# G:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
################## | Etat / Services / Informations |
# Mode sans echec : OK
# Affichage des fichiers cachés : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | PEH ... |
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.006 ! | -
Bonjour,
--> Télécharge FindyKill (de Chiquitine29 & C_XX) sur ton Bureau.
--> Lance l'installation avec les paramètres par défaut.
--> Branche tes sources de données externes à ton PC (clé USB, disque dur externe, carte SD, etc...) sans les ouvrir.
--> Double-clique sur le raccourci FindyKill sur ton Bureau.
(Sous Vista, il faut cliquer droit sur le raccourci FindyKill et choisir Exécuter en tant qu'administrateur)
--> Au menu principal, choisis l'option 1 (Recherche).
--> Poste le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé à la racine du disque. -
bonsoir,
Vire les toolbar :
• Télécharge: https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2
• !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!
• Double-cliques sur l'.exe pour lancer l'installe et laisses toi guider
• Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .
• Choisis l'option 1 ( "recherche") et tapes "entrée" .
• Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité de son contenu dans ta prochaine réponse ...
• ( le rapport est en outre sauvegardé ici -> C:\TB.txt )
• Tuto : https://sites.google.com/site/toolbarsd/aideenimages toolbarSD
puis un coup de nettoyage avec usbfix :
lien de telechargement et tuto
http://pagesperso-orange.fr/NosTools/usbfix.html -
findykill:
############################## | FindyKill V6.006 |
# User : Pierre (Administrateurs) # UNICORNI-107DA1
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 23:15:43 | 16/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | (!) Outdated ]
# C:\ # Disque fixe local # 105,1 Go (58,33 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local # 43,95 Go (43,88 Go free) # NTFS
# F:\ # Disque CD-ROM
# G:\ # Disque amovible # 1,89 Go (287,91 Mo free) # FAT
############################## | Processus actifs |
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\windows\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Pierre\Mes documents\Téléchargements\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | Registre Startup |
R1 - HKCU\..\Main: "Local Page"="C:\\windows\\system32\\blank.htm"
R1 - HKCU\..\Main: "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
R1 - HKCU\..\Main: "Start Page"="https://www.sellhealth.com/banneduser.php"
F2 - HKLM\..\logon:"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
F2 - HKLM\..\logon:"DefaultUserName"="pierre"
F2 - HKLM\..\logon:"AltDefaultUserName"="pierre"
F2 - HKLM\..\logon:"LegalNoticeCaption"=""
F2 - HKLM\..\logon:"LegalNoticeText"=""
04 - HKLM\..\Run: NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
04 - HKLM\..\Run: avgnt="C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run: WMUAgent.exe=C:\Program Files\WakeMeUp\WMUAgent.exe
04 - HKLM\..\Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
04 - HKCU\..\Run: ctfmon.exe#C:\windows\system32\ctfmon.exe#
04 - HKCU\..\Run: msnmsgr#"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background#
04 - HKCU\..\Run: uTorrent#"C:\Program Files\uTorrent\uTorrent.exe"#
################## | Fichiers # Dossiers infectieux |
Présent ! C:\windows\system32\autorun.inf
################## | C:\Documents and Settings\Pierre\Temporary Internet Files |
################## | All Drives ... |
Présent ! E:\Recycled\ctfmon.exe
Présent ! E:\autorun.inf
Présent ! G:\Recycled\ctfmon.exe
Présent ! G:\autorun.inf
################## | Registre # Clés Run infectieuses |
Présent ! HKLM\SYSTEM\CurrentControlSet\Services\FileZilla Server
Présent ! HKLM\SYSTEM\ControlSet001\Services\FileZilla Server
Présent ! HKLM\SYSTEM\ControlSet003\Services\FileZilla Server
Présent ! HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEZILLA_SERVER
Présent ! HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_FILEZILLA_SERVER
Présent ! HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_FILEZILLA_SERVER
################## | Registre # Mountpoints2 |
################## | Etat / Services / Informations |
# Affichage des fichiers cachés : OK
# Mode sans echec : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.006 ! | -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
Tu as bien mis ta carte mémoire infectée ?
-
Electricien ... ce n'est pasque des toolbars je le sais donc je vais suivre pas a pas les conseil de Destrio (merci a vous deux d'ailleurs car apres smitfraud, otmoveit je ne m'en sors tjr pas )
-
oui la carte est branchée via un adaptateur usb
-
Tu as AskBarDis, c'est pour cela qu'il t'a proposé Toolbar S&D. On verra ça après.
-
--> Branche tes disques amovibles à ton PC (clefs USB, disque dur externe, etc...) sans les ouvrir.
--> Double-clique sur le raccourci FindyKill sur ton Bureau.
(Sous Vista, il faut cliquer droit sur le raccourci FindyKill et choisir Exécuter en tant qu'administrateur)
--> Au menu principal, choisis l'option 2 (Suppression).
/!\ Il y aura un redémarrage, laisse travailler l'outil jusqu'à l'apparition du message "nettoyage effectué" /!\
--> Ensuite, poste le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé à la racine du disque. -
oui je me doute que j'ai des toolbar mais les icones sur mon bureau avec des lien de c** :) c pas toolbar ni mes barres windows qui devienne noires a la place d'etre bleues :p merci a toi destrio5 tu me depanne bin ce soir je t'envoi le rapport desque c'est fini
-
salut destrio05, je n'ai pas vu ton message, tu avais posté juste avant moi
mille excuse :-) -
Bon le logiciel met un petit bout de temps il est sur50% depuis 15 minutesalors j'ai sorti le 2eme pc :-) je sais pas si tu reste encore logtemps en ligne mais sinon on finira ça demain si tu n'as pas le temps :)
-
rapport:
############################## | FindyKill V6.006 |
# User : Pierre (Administrateurs) # UNICORNI-107DA1
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 23:24:50 | 16/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | (!) Outdated ]
# C:\ # Disque fixe local # 105,1 Go (58,33 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local # 43,95 Go (43,88 Go free) # NTFS
# F:\ # Disque CD-ROM
# G:\ # Disque amovible # 1,89 Go (287,91 Mo free) # FAT
############################## | Processus actifs |
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\windows\System32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\Program Files\WakeMeUp\WMUSvc.exe
C:\windows\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\windows\system32\wscntfy.exe
################## | Fichiers # Dossiers infectieux |
Supprimé ! C:\windows\system32\autorun.inf
################## | C:\Documents and Settings\Pierre\Temporary Internet Files |
################## | All Drives ... |
Supprimé ! E:\Recycled\ctfmon.exe
Supprimé ! E:\autorun.inf
Supprimé ! G:\Recycled\ctfmon.exe
Supprimé ! G:\autorun.inf
################## | Autres ... |
################## | Registre # Clés Run infectieuses |
Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\ControlSet003\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKUS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\E\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[16/07/2009 23:47|--a------|2667] - C:\FindyKill.txt
[10/06/2009 02:02|-rahs----|0] - C:\IO.SYS
[10/06/2009 02:02|-rahs----|0] - C:\MSDOS.SYS
[03/08/2004 22:38|-rahs----|47564] - C:\NTDETECT.COM
[13/06/2009 13:29|-rahs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[21/06/2009 08:17|--a------|48] - C:\plug_in.ini
[16/07/2009 23:13|--a------|4431] - C:\rapport.txt
[24/04/2008 11:07|--a------|1410048] - G:\_DS_MENU.DAT
[18/07/2007 09:41|--a------|497728] - G:\_DS_MSHL.NDS
[30/09/2005 00:16|--a------|67108864] - G:\0113 - Ultimate Spider-Man (U).nds
[09/07/2009 15:30|--a------|524288] - G:\0113 - Ultimate Spider-Man (U).SAV
[02/10/2005 18:48|--a------|33554432] - G:\0119 Pokemon Dash (EU)(M5).nds
[07/07/2009 21:22|--a------|524288] - G:\0119 Pokemon Dash (EU)(M5).SAV
[15/10/2005 15:30|--a------|16777216] - G:\0133 Madagascar (EU).nds
[08/07/2009 07:58|--a------|524288] - G:\0133 Madagascar (EU).SAV
[26/10/2005 12:29|--a------|16777216] - G:\0145 Spider-Man 2 (EU).nds
[09/07/2009 15:14|--a------|524288] - G:\0145 Spider-Man 2 (EU).SAV
[18/11/2005 18:58|--a------|33554432] - G:\0181 Shrek - Super Slam (EU)(M6).nds
[04/07/2009 21:15|--a------|524288] - G:\0181 Shrek - Super Slam (EU)(M6).SAV
[19/11/2005 11:59|--a------|67108864] - G:\0185 Sonic Rush (EU)(M6).nds
[09/07/2009 22:43|--a------|524288] - G:\0185 Sonic Rush (EU)(M6).SAV
[24/11/2005 20:03|--a------|33554432] - G:\0201 - Mario Kart DS (E).nds
[13/07/2009 19:47|--a------|524288] - G:\0201 - Mario Kart DS (E).SAV
[25/12/1996 00:32|--a------|33554432] - G:\0225 - Battles of Prince of Persia (E) (M6).nds
[16/12/2005 12:16|--a------|8388608] - G:\0236 Ford Racing 3 (EU)(M5).nds
[25/12/1996 02:32|--a------|67108864] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).nds
[14/07/2009 08:18|--a------|524288] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).SAV
[05/02/2006 23:48|--a------|67108864] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).nds
[24/02/2006 19:02|--a------|33554432] - G:\0336 FIFA Street 2 (EU)(M3).nds
[08/07/2009 09:11|--a------|524288] - G:\0336 FIFA Street 2 (EU)(M3).SAV
[30/03/2006 16:58|--a------|67108864] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).nds
[28/09/2006 10:04|--a------|16777216] - G:\0580 - 42 Classici Senza Tempo - EURO.nds
[08/07/2009 09:23|--a------|524288] - G:\0580 - 42 Classici Senza Tempo - EURO.SAV
[29/09/2006 11:58|--a------|8388608] - G:\0581 - Nemurenai Yoru to Puzzle no Hi ni wa (J)(WRG).nds
[07/10/2006 19:05|--a------|16777216] - G:\0593 - Kawaii Koinu DS (J)(WRG).nds
[28/06/2009 16:12|--a------|524288] - G:\0593 - Kawaii Koinu DS (J)(WRG).SAV
[26/10/2006 10:57|--a------|16777216] - G:\0631 - Soduko Gridmaster (E)(Supremacy).nds
[08/07/2009 09:22|--a------|524288] - G:\0631 - Soduko Gridmaster (E)(Supremacy).SAV
[17/03/2007 09:38|--a------|16777216] - G:\0917 - Flipper Critters (E).nds
[30/06/2009 19:34|--a------|524288] - G:\0917 - Flipper Critters (E).SAV
[07/05/2007 18:56|--a------|8388608] - G:\1054 - Barbie in the 12 Dancing Princesses (E).nds
[17/11/2008 22:34|--a------|524288] - G:\1054 - Barbie in the 12 Dancing Princesses (E).SAV
[02/06/2007 00:25|--a------|33554432] - G:\1123 - Le Code de la Route (F).nds
[16/07/2009 12:39|--a------|524288] - G:\1123 - Le Code de la Route (F).SAV
[19/12/2007 14:23|--a------|33554432] - G:\1853 - Bee Movie Le Jeu (F).nds
[29/06/2009 18:19|--a------|524288] - G:\1853 - Bee Movie Le Jeu (F).SAV
[07/02/2008 11:49|--a------|67108864] - G:\1996 - Mes Amis Disney (F).nds
[16/07/2009 12:31|--a------|524288] - G:\1996 - Mes Amis Disney (F).SAV
[25/12/1996 00:32|--a------|8388608] - G:\2096 - Dora the Explorer - Dora Saves the Mermaids (E).nds
[02/05/2008 13:17|--a------|8388608] - G:\2270 - 1 Contre 100 (F).nds
[08/07/2008 23:24|--a------|16777216] - G:\2441 - Koh-Lanta (F).nds
[10/07/2008 19:40|--a------|67108864] - G:\2464 - Intervilles (F).nds
[21/07/2008 21:00|--a------|33554432] - G:\2489 - Kung Fu Panda (F).nds
[07/07/2009 08:58|--a------|524288] - G:\2489 - Kung Fu Panda (F).SAV
[03/10/2008 11:47|--a------|16777216] - G:\2741 - Boule et Bill - Vive les Vacances (F).nds
[16/07/2009 12:44|--a------|524288] - G:\2741 - Boule et Bill - Vive les Vacances (F).SAV
[20/01/2009 20:28|--a------|33554432] - G:\3429 - Cookie Shop (E)(M2)(EXiMiUS).nds
[21/02/2009 00:27|--a------|28734] - G:\3429.jpg
[21/09/2008 13:27|--a------|524288] - G:\Asterix ALLEOLIMPIADI.SAV
[06/08/2008 17:46|--a------|16777216] - G:\Brain Training.nds
[04/07/2009 11:27|--a------|524288] - G:\Brain Training.SAV
[26/09/2007 13:56|--a------|33554432] - G:\FIFA_08.nds
[16/11/2008 20:29|--a------|524288] - G:\FIFA_08.SAV
[24/07/2008 00:26|--a------|33554432] - G:\Giulia Coach Di Benessere.nds
[29/06/2009 17:32|--a------|524288] - G:\Giulia Coach Di Benessere.SAV
[24/07/2008 02:28|--a------|33554432] - G:\Giulia Passione Baby Sitter.nds
[13/07/2009 21:21|--a------|524288] - G:\Giulia Passione Baby Sitter.SAV
[12/12/2007 14:27|--a------|134217728] - G:\I Simpson Il Videogioco.nds
[09/07/2009 22:47|--a------|524288] - G:\I Simpson Il Videogioco.SAV
[02/06/2007 13:55|--a------|8388608] - G:\Impossible Mission.nds
[28/06/2009 21:23|--a------|524288] - G:\Impossible Mission.SAV
[09/08/2007 21:03|--a------|16777216] - G:\La mia clinica veterinaria.nds
[15/11/2008 02:24|--a------|524288] - G:\La mia clinica veterinaria.SAV
[14/11/2007 15:39|--a------|33554432] - G:\Left or Right Ambidextrous.nds
[07/02/2008 16:07|--a------|33554432] - G:\Maths Training.nds
[26/07/2008 21:40|--a------|33554432] - G:\My Sims.nds
[28/06/2006 22:35|--a------|33554432] - G:\New Super Mario Brothers.nds
[16/07/2009 12:28|--a------|524288] - G:\New Super Mario Brothers.SAV
[26/07/2008 03:15|--a------|33554432] - G:\Pac'N Roll (E)(Trashman).nds
[16/07/2009 16:03|--a------|524288] - G:\Pac'N Roll (E)(Trashman).SAV
[26/07/2008 22:09|--a------|33554432] - G:\Puzzle League DS.nds
[07/10/2008 23:54|--a------|524288] - G:\Puzzle League DS.SAV
[17/09/2008 18:51|--a------|33554432] - G:\Ratatouille.nds
[29/06/2009 18:17|--a------|524288] - G:\Ratatouille.SAV
[01/06/2006 10:31|--a------|16777216] - G:\sm-bage.nds
[26/07/2008 19:46|--a------|8388608] - G:\Tennis Master.nds
[25/07/2008 22:51|--a------|16777216] - G:\Tetris DS.nds
[16/07/2009 12:41|--a------|524288] - G:\Tetris DS.SAV
[26/07/2008 22:59|--a------|33554432] - G:\WarioWare - Touched!.nds
[24/07/2008 06:42|--a------|16777216] - G:\Zoo tycoon 2.nds
[16/07/2009 15:25|--a------|524288] - G:\Zoo tycoon 2.SAV
[28/06/2009 13:42|--a------|4194304] - G:\_DS_MENU.SYS
[07/07/2009 11:47|--a------|524288] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).SAV
[28/06/2009 15:48|--a------|524288] - G:\0225 - Battles of Prince of Persia (E) (M6).SAV
[11/07/2009 09:28|--a------|524288] - G:\0236 Ford Racing 3 (EU)(M5).SAV
[28/06/2009 16:05|--a------|524288] - G:\2464 - Intervilles (F).SAV
[15/07/2009 10:12|--a------|524288] - G:\My Sims.SAV
[28/06/2009 16:47|--a------|524288] - G:\Left or Right Ambidextrous.SAV
[05/07/2009 11:47|--a------|524288] - G:\2270 - 1 Contre 100 (F).SAV
[01/07/2009 11:26|--a------|524288] - G:\2441 - Koh-Lanta (F).SAV
[01/07/2009 08:41|--a------|524288] - G:\WarioWare - Touched!.SAV
[14/07/2009 10:01|--a------|524288] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).SAV
[20/05/2009 17:34|--a------|134217728] - G:\[www.pokebase.net]PokemonPlatine.nds
[16/07/2009 21:46|--a------|524288] - G:\[www.pokebase.net]PokemonPlatine.SAV
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# E:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# G:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
################## | Etat / Services / Informations |
# Mode sans echec : OK
# Affichage des fichiers cachés : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | PEH ... |
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.006 ! | -
rapport:
############################## | FindyKill V6.006 |
# User : Pierre (Administrateurs) # UNICORNI-107DA1
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 23:24:50 | 16/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | (!) Outdated ]
# C:\ # Disque fixe local # 105,1 Go (58,33 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local # 43,95 Go (43,88 Go free) # NTFS
# F:\ # Disque CD-ROM
# G:\ # Disque amovible # 1,89 Go (287,91 Mo free) # FAT
############################## | Processus actifs |
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\windows\System32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\Program Files\WakeMeUp\WMUSvc.exe
C:\windows\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\windows\system32\wscntfy.exe
################## | Fichiers # Dossiers infectieux |
Supprimé ! C:\windows\system32\autorun.inf
################## | C:\Documents and Settings\Pierre\Temporary Internet Files |
################## | All Drives ... |
Supprimé ! E:\Recycled\ctfmon.exe
Supprimé ! E:\autorun.inf
Supprimé ! G:\Recycled\ctfmon.exe
Supprimé ! G:\autorun.inf
################## | Autres ... |
################## | Registre # Clés Run infectieuses |
Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\ControlSet003\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKUS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\E\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[16/07/2009 23:47|--a------|2667] - C:\FindyKill.txt
[10/06/2009 02:02|-rahs----|0] - C:\IO.SYS
[10/06/2009 02:02|-rahs----|0] - C:\MSDOS.SYS
[03/08/2004 22:38|-rahs----|47564] - C:\NTDETECT.COM
[13/06/2009 13:29|-rahs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[21/06/2009 08:17|--a------|48] - C:\plug_in.ini
[16/07/2009 23:13|--a------|4431] - C:\rapport.txt
[24/04/2008 11:07|--a------|1410048] - G:\_DS_MENU.DAT
[18/07/2007 09:41|--a------|497728] - G:\_DS_MSHL.NDS
[30/09/2005 00:16|--a------|67108864] - G:\0113 - Ultimate Spider-Man (U).nds
[09/07/2009 15:30|--a------|524288] - G:\0113 - Ultimate Spider-Man (U).SAV
[02/10/2005 18:48|--a------|33554432] - G:\0119 Pokemon Dash (EU)(M5).nds
[07/07/2009 21:22|--a------|524288] - G:\0119 Pokemon Dash (EU)(M5).SAV
[15/10/2005 15:30|--a------|16777216] - G:\0133 Madagascar (EU).nds
[08/07/2009 07:58|--a------|524288] - G:\0133 Madagascar (EU).SAV
[26/10/2005 12:29|--a------|16777216] - G:\0145 Spider-Man 2 (EU).nds
[09/07/2009 15:14|--a------|524288] - G:\0145 Spider-Man 2 (EU).SAV
[18/11/2005 18:58|--a------|33554432] - G:\0181 Shrek - Super Slam (EU)(M6).nds
[04/07/2009 21:15|--a------|524288] - G:\0181 Shrek - Super Slam (EU)(M6).SAV
[19/11/2005 11:59|--a------|67108864] - G:\0185 Sonic Rush (EU)(M6).nds
[09/07/2009 22:43|--a------|524288] - G:\0185 Sonic Rush (EU)(M6).SAV
[24/11/2005 20:03|--a------|33554432] - G:\0201 - Mario Kart DS (E).nds
[13/07/2009 19:47|--a------|524288] - G:\0201 - Mario Kart DS (E).SAV
[25/12/1996 00:32|--a------|33554432] - G:\0225 - Battles of Prince of Persia (E) (M6).nds
[16/12/2005 12:16|--a------|8388608] - G:\0236 Ford Racing 3 (EU)(M5).nds
[25/12/1996 02:32|--a------|67108864] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).nds
[14/07/2009 08:18|--a------|524288] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).SAV
[05/02/2006 23:48|--a------|67108864] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).nds
[24/02/2006 19:02|--a------|33554432] - G:\0336 FIFA Street 2 (EU)(M3).nds
[08/07/2009 09:11|--a------|524288] - G:\0336 FIFA Street 2 (EU)(M3).SAV
[30/03/2006 16:58|--a------|67108864] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).nds
[28/09/2006 10:04|--a------|16777216] - G:\0580 - 42 Classici Senza Tempo - EURO.nds
[08/07/2009 09:23|--a------|524288] - G:\0580 - 42 Classici Senza Tempo - EURO.SAV
[29/09/2006 11:58|--a------|8388608] - G:\0581 - Nemurenai Yoru to Puzzle no Hi ni wa (J)(WRG).nds
[07/10/2006 19:05|--a------|16777216] - G:\0593 - Kawaii Koinu DS (J)(WRG).nds
[28/06/2009 16:12|--a------|524288] - G:\0593 - Kawaii Koinu DS (J)(WRG).SAV
[26/10/2006 10:57|--a------|16777216] - G:\0631 - Soduko Gridmaster (E)(Supremacy).nds
[08/07/2009 09:22|--a------|524288] - G:\0631 - Soduko Gridmaster (E)(Supremacy).SAV
[17/03/2007 09:38|--a------|16777216] - G:\0917 - Flipper Critters (E).nds
[30/06/2009 19:34|--a------|524288] - G:\0917 - Flipper Critters (E).SAV
[07/05/2007 18:56|--a------|8388608] - G:\1054 - Barbie in the 12 Dancing Princesses (E).nds
[17/11/2008 22:34|--a------|524288] - G:\1054 - Barbie in the 12 Dancing Princesses (E).SAV
[02/06/2007 00:25|--a------|33554432] - G:\1123 - Le Code de la Route (F).nds
[16/07/2009 12:39|--a------|524288] - G:\1123 - Le Code de la Route (F).SAV
[19/12/2007 14:23|--a------|33554432] - G:\1853 - Bee Movie Le Jeu (F).nds
[29/06/2009 18:19|--a------|524288] - G:\1853 - Bee Movie Le Jeu (F).SAV
[07/02/2008 11:49|--a------|67108864] - G:\1996 - Mes Amis Disney (F).nds
[16/07/2009 12:31|--a------|524288] - G:\1996 - Mes Amis Disney (F).SAV
[25/12/1996 00:32|--a------|8388608] - G:\2096 - Dora the Explorer - Dora Saves the Mermaids (E).nds
[02/05/2008 13:17|--a------|8388608] - G:\2270 - 1 Contre 100 (F).nds
[08/07/2008 23:24|--a------|16777216] - G:\2441 - Koh-Lanta (F).nds
[10/07/2008 19:40|--a------|67108864] - G:\2464 - Intervilles (F).nds
[21/07/2008 21:00|--a------|33554432] - G:\2489 - Kung Fu Panda (F).nds
[07/07/2009 08:58|--a------|524288] - G:\2489 - Kung Fu Panda (F).SAV
[03/10/2008 11:47|--a------|16777216] - G:\2741 - Boule et Bill - Vive les Vacances (F).nds
[16/07/2009 12:44|--a------|524288] - G:\2741 - Boule et Bill - Vive les Vacances (F).SAV
[20/01/2009 20:28|--a------|33554432] - G:\3429 - Cookie Shop (E)(M2)(EXiMiUS).nds
[21/02/2009 00:27|--a------|28734] - G:\3429.jpg
[21/09/2008 13:27|--a------|524288] - G:\Asterix ALLEOLIMPIADI.SAV
[06/08/2008 17:46|--a------|16777216] - G:\Brain Training.nds
[04/07/2009 11:27|--a------|524288] - G:\Brain Training.SAV
[26/09/2007 13:56|--a------|33554432] - G:\FIFA_08.nds
[16/11/2008 20:29|--a------|524288] - G:\FIFA_08.SAV
[24/07/2008 00:26|--a------|33554432] - G:\Giulia Coach Di Benessere.nds
[29/06/2009 17:32|--a------|524288] - G:\Giulia Coach Di Benessere.SAV
[24/07/2008 02:28|--a------|33554432] - G:\Giulia Passione Baby Sitter.nds
[13/07/2009 21:21|--a------|524288] - G:\Giulia Passione Baby Sitter.SAV
[12/12/2007 14:27|--a------|134217728] - G:\I Simpson Il Videogioco.nds
[09/07/2009 22:47|--a------|524288] - G:\I Simpson Il Videogioco.SAV
[02/06/2007 13:55|--a------|8388608] - G:\Impossible Mission.nds
[28/06/2009 21:23|--a------|524288] - G:\Impossible Mission.SAV
[09/08/2007 21:03|--a------|16777216] - G:\La mia clinica veterinaria.nds
[15/11/2008 02:24|--a------|524288] - G:\La mia clinica veterinaria.SAV
[14/11/2007 15:39|--a------|33554432] - G:\Left or Right Ambidextrous.nds
[07/02/2008 16:07|--a------|33554432] - G:\Maths Training.nds
[26/07/2008 21:40|--a------|33554432] - G:\My Sims.nds
[28/06/2006 22:35|--a------|33554432] - G:\New Super Mario Brothers.nds
[16/07/2009 12:28|--a------|524288] - G:\New Super Mario Brothers.SAV
[26/07/2008 03:15|--a------|33554432] - G:\Pac'N Roll (E)(Trashman).nds
[16/07/2009 16:03|--a------|524288] - G:\Pac'N Roll (E)(Trashman).SAV
[26/07/2008 22:09|--a------|33554432] - G:\Puzzle League DS.nds
[07/10/2008 23:54|--a------|524288] - G:\Puzzle League DS.SAV
[17/09/2008 18:51|--a------|33554432] - G:\Ratatouille.nds
[29/06/2009 18:17|--a------|524288] - G:\Ratatouille.SAV
[01/06/2006 10:31|--a------|16777216] - G:\sm-bage.nds
[26/07/2008 19:46|--a------|8388608] - G:\Tennis Master.nds
[25/07/2008 22:51|--a------|16777216] - G:\Tetris DS.nds
[16/07/2009 12:41|--a------|524288] - G:\Tetris DS.SAV
[26/07/2008 22:59|--a------|33554432] - G:\WarioWare - Touched!.nds
[24/07/2008 06:42|--a------|16777216] - G:\Zoo tycoon 2.nds
[16/07/2009 15:25|--a------|524288] - G:\Zoo tycoon 2.SAV
[28/06/2009 13:42|--a------|4194304] - G:\_DS_MENU.SYS
[07/07/2009 11:47|--a------|524288] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).SAV
[28/06/2009 15:48|--a------|524288] - G:\0225 - Battles of Prince of Persia (E) (M6).SAV
[11/07/2009 09:28|--a------|524288] - G:\0236 Ford Racing 3 (EU)(M5).SAV
[28/06/2009 16:05|--a------|524288] - G:\2464 - Intervilles (F).SAV
[15/07/2009 10:12|--a------|524288] - G:\My Sims.SAV
[28/06/2009 16:47|--a------|524288] - G:\Left or Right Ambidextrous.SAV
[05/07/2009 11:47|--a------|524288] - G:\2270 - 1 Contre 100 (F).SAV
[01/07/2009 11:26|--a------|524288] - G:\2441 - Koh-Lanta (F).SAV
[01/07/2009 08:41|--a------|524288] - G:\WarioWare - Touched!.SAV
[14/07/2009 10:01|--a------|524288] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).SAV
[20/05/2009 17:34|--a------|134217728] - G:\[www.pokebase.net]PokemonPlatine.nds
[16/07/2009 21:46|--a------|524288] - G:\[www.pokebase.net]PokemonPlatine.SAV
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# E:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# G:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
################## | Etat / Services / Informations |
# Mode sans echec : OK
# Affichage des fichiers cachés : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | PEH ... |
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.006 ! | -
Je reste connecté encore au moins 4h.
-
############################## | FindyKill V6.006 |
# User : Pierre (Administrateurs) # UNICORNI-107DA1
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 23:24:50 | 16/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | (!) Outdated ]
# C:\ # Disque fixe local # 105,1 Go (58,33 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local # 43,95 Go (43,88 Go free) # NTFS
# F:\ # Disque CD-ROM
# G:\ # Disque amovible # 1,89 Go (287,91 Mo free) # FAT
############################## | Processus actifs |
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\windows\System32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\Program Files\WakeMeUp\WMUSvc.exe
C:\windows\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\windows\system32\wscntfy.exe
################## | Fichiers # Dossiers infectieux |
Supprimé ! C:\windows\system32\autorun.inf
################## | C:\Documents and Settings\Pierre\Temporary Internet Files |
################## | All Drives ... |
Supprimé ! E:\Recycled\ctfmon.exe
Supprimé ! E:\autorun.inf
Supprimé ! G:\Recycled\ctfmon.exe
Supprimé ! G:\autorun.inf
################## | Autres ... |
################## | Registre # Clés Run infectieuses |
Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\ControlSet003\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKUS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\E\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[16/07/2009 23:47|--a------|2667] - C:\FindyKill.txt
[10/06/2009 02:02|-rahs----|0] - C:\IO.SYS
[10/06/2009 02:02|-rahs----|0] - C:\MSDOS.SYS
[03/08/2004 22:38|-rahs----|47564] - C:\NTDETECT.COM
[13/06/2009 13:29|-rahs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[21/06/2009 08:17|--a------|48] - C:\plug_in.ini
[16/07/2009 23:13|--a------|4431] - C:\rapport.txt
[24/04/2008 11:07|--a------|1410048] - G:\_DS_MENU.DAT
[18/07/2007 09:41|--a------|497728] - G:\_DS_MSHL.NDS
[30/09/2005 00:16|--a------|67108864] - G:\0113 - Ultimate Spider-Man (U).nds
[09/07/2009 15:30|--a------|524288] - G:\0113 - Ultimate Spider-Man (U).SAV
[02/10/2005 18:48|--a------|33554432] - G:\0119 Pokemon Dash (EU)(M5).nds
[07/07/2009 21:22|--a------|524288] - G:\0119 Pokemon Dash (EU)(M5).SAV
[15/10/2005 15:30|--a------|16777216] - G:\0133 Madagascar (EU).nds
[08/07/2009 07:58|--a------|524288] - G:\0133 Madagascar (EU).SAV
[26/10/2005 12:29|--a------|16777216] - G:\0145 Spider-Man 2 (EU).nds
[09/07/2009 15:14|--a------|524288] - G:\0145 Spider-Man 2 (EU).SAV
[18/11/2005 18:58|--a------|33554432] - G:\0181 Shrek - Super Slam (EU)(M6).nds
[04/07/2009 21:15|--a------|524288] - G:\0181 Shrek - Super Slam (EU)(M6).SAV
[19/11/2005 11:59|--a------|67108864] - G:\0185 Sonic Rush (EU)(M6).nds
[09/07/2009 22:43|--a------|524288] - G:\0185 Sonic Rush (EU)(M6).SAV
[24/11/2005 20:03|--a------|33554432] - G:\0201 - Mario Kart DS (E).nds
[13/07/2009 19:47|--a------|524288] - G:\0201 - Mario Kart DS (E).SAV
[25/12/1996 00:32|--a------|33554432] - G:\0225 - Battles of Prince of Persia (E) (M6).nds
[16/12/2005 12:16|--a------|8388608] - G:\0236 Ford Racing 3 (EU)(M5).nds
[25/12/1996 02:32|--a------|67108864] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).nds
[14/07/2009 08:18|--a------|524288] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).SAV
[05/02/2006 23:48|--a------|67108864] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).nds
[24/02/2006 19:02|--a------|33554432] - G:\0336 FIFA Street 2 (EU)(M3).nds
[08/07/2009 09:11|--a------|524288] - G:\0336 FIFA Street 2 (EU)(M3).SAV
[30/03/2006 16:58|--a------|67108864] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).nds
[28/09/2006 10:04|--a------|16777216] - G:\0580 - 42 Classici Senza Tempo - EURO.nds
[08/07/2009 09:23|--a------|524288] - G:\0580 - 42 Classici Senza Tempo - EURO.SAV
[29/09/2006 11:58|--a------|8388608] - G:\0581 - Nemurenai Yoru to Puzzle no Hi ni wa (J)(WRG).nds
[07/10/2006 19:05|--a------|16777216] - G:\0593 - Kawaii Koinu DS (J)(WRG).nds
[28/06/2009 16:12|--a------|524288] - G:\0593 - Kawaii Koinu DS (J)(WRG).SAV
[26/10/2006 10:57|--a------|16777216] - G:\0631 - Soduko Gridmaster (E)(Supremacy).nds
[08/07/2009 09:22|--a------|524288] - G:\0631 - Soduko Gridmaster (E)(Supremacy).SAV
[17/03/2007 09:38|--a------|16777216] - G:\0917 - Flipper Critters (E).nds
[30/06/2009 19:34|--a------|524288] - G:\0917 - Flipper Critters (E).SAV
[07/05/2007 18:56|--a------|8388608] - G:\1054 - Barbie in the 12 Dancing Princesses (E).nds
[17/11/2008 22:34|--a------|524288] - G:\1054 - Barbie in the 12 Dancing Princesses (E).SAV
[02/06/2007 00:25|--a------|33554432] - G:\1123 - Le Code de la Route (F).nds
[16/07/2009 12:39|--a------|524288] - G:\1123 - Le Code de la Route (F).SAV
[19/12/2007 14:23|--a------|33554432] - G:\1853 - Bee Movie Le Jeu (F).nds
[29/06/2009 18:19|--a------|524288] - G:\1853 - Bee Movie Le Jeu (F).SAV
[07/02/2008 11:49|--a------|67108864] - G:\1996 - Mes Amis Disney (F).nds
[16/07/2009 12:31|--a------|524288] - G:\1996 - Mes Amis Disney (F).SAV
[25/12/1996 00:32|--a------|8388608] - G:\2096 - Dora the Explorer - Dora Saves the Mermaids (E).nds
[02/05/2008 13:17|--a------|8388608] - G:\2270 - 1 Contre 100 (F).nds
[08/07/2008 23:24|--a------|16777216] - G:\2441 - Koh-Lanta (F).nds
[10/07/2008 19:40|--a------|67108864] - G:\2464 - Intervilles (F).nds
[21/07/2008 21:00|--a------|33554432] - G:\2489 - Kung Fu Panda (F).nds
[07/07/2009 08:58|--a------|524288] - G:\2489 - Kung Fu Panda (F).SAV
[03/10/2008 11:47|--a------|16777216] - G:\2741 - Boule et Bill - Vive les Vacances (F).nds
[16/07/2009 12:44|--a------|524288] - G:\2741 - Boule et Bill - Vive les Vacances (F).SAV
[20/01/2009 20:28|--a------|33554432] - G:\3429 - Cookie Shop (E)(M2)(EXiMiUS).nds
[21/02/2009 00:27|--a------|28734] - G:\3429.jpg
[21/09/2008 13:27|--a------|524288] - G:\Asterix ALLEOLIMPIADI.SAV
[06/08/2008 17:46|--a------|16777216] - G:\Brain Training.nds
[04/07/2009 11:27|--a------|524288] - G:\Brain Training.SAV
[26/09/2007 13:56|--a------|33554432] - G:\FIFA_08.nds
[16/11/2008 20:29|--a------|524288] - G:\FIFA_08.SAV
[24/07/2008 00:26|--a------|33554432] - G:\Giulia Coach Di Benessere.nds
[29/06/2009 17:32|--a------|524288] - G:\Giulia Coach Di Benessere.SAV
[24/07/2008 02:28|--a------|33554432] - G:\Giulia Passione Baby Sitter.nds
[13/07/2009 21:21|--a------|524288] - G:\Giulia Passione Baby Sitter.SAV
[12/12/2007 14:27|--a------|134217728] - G:\I Simpson Il Videogioco.nds
[09/07/2009 22:47|--a------|524288] - G:\I Simpson Il Videogioco.SAV
[02/06/2007 13:55|--a------|8388608] - G:\Impossible Mission.nds
[28/06/2009 21:23|--a------|524288] - G:\Impossible Mission.SAV
[09/08/2007 21:03|--a------|16777216] - G:\La mia clinica veterinaria.nds
[15/11/2008 02:24|--a------|524288] - G:\La mia clinica veterinaria.SAV
[14/11/2007 15:39|--a------|33554432] - G:\Left or Right Ambidextrous.nds
[07/02/2008 16:07|--a------|33554432] - G:\Maths Training.nds
[26/07/2008 21:40|--a------|33554432] - G:\My Sims.nds
[28/06/2006 22:35|--a------|33554432] - G:\New Super Mario Brothers.nds
[16/07/2009 12:28|--a------|524288] - G:\New Super Mario Brothers.SAV
[26/07/2008 03:15|--a------|33554432] - G:\Pac'N Roll (E)(Trashman).nds
[16/07/2009 16:03|--a------|524288] - G:\Pac'N Roll (E)(Trashman).SAV
[26/07/2008 22:09|--a------|33554432] - G:\Puzzle League DS.nds
[07/10/2008 23:54|--a------|524288] - G:\Puzzle League DS.SAV
[17/09/2008 18:51|--a------|33554432] - G:\Ratatouille.nds
[29/06/2009 18:17|--a------|524288] - G:\Ratatouille.SAV
[01/06/2006 10:31|--a------|16777216] - G:\sm-bage.nds
[26/07/2008 19:46|--a------|8388608] - G:\Tennis Master.nds
[25/07/2008 22:51|--a------|16777216] - G:\Tetris DS.nds
[16/07/2009 12:41|--a------|524288] - G:\Tetris DS.SAV
[26/07/2008 22:59|--a------|33554432] - G:\WarioWare - Touched!.nds
[24/07/2008 06:42|--a------|16777216] - G:\Zoo tycoon 2.nds
[16/07/2009 15:25|--a------|524288] - G:\Zoo tycoon 2.SAV
[28/06/2009 13:42|--a------|4194304] - G:\_DS_MENU.SYS
[07/07/2009 11:47|--a------|524288] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).SAV
[28/06/2009 15:48|--a------|524288] - G:\0225 - Battles of Prince of Persia (E) (M6).SAV
[11/07/2009 09:28|--a------|524288] - G:\0236 Ford Racing 3 (EU)(M5).SAV
[28/06/2009 16:05|--a------|524288] - G:\2464 - Intervilles (F).SAV
[15/07/2009 10:12|--a------|524288] - G:\My Sims.SAV
[28/06/2009 16:47|--a------|524288] - G:\Left or Right Ambidextrous.SAV
[05/07/2009 11:47|--a------|524288] - G:\2270 - 1 Contre 100 (F).SAV
[01/07/2009 11:26|--a------|524288] - G:\2441 - Koh-Lanta (F).SAV
[01/07/2009 08:41|--a------|524288] - G:\WarioWare - Touched!.SAV
[14/07/2009 10:01|--a------|524288] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).SAV
[20/05/2009 17:34|--a------|134217728] - G:\[www.pokebase.net]PokemonPlatine.nds
[16/07/2009 21:46|--a------|524288] - G:\[www.pokebase.net]PokemonPlatine.SAV
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# E:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# G:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
################## | Etat / Services / Informations |
# Mode sans echec : OK
# Affichage des fichiers cachés : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | PEH ... |
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.006 ! | -
voila le rapport
-
ya un blem je ne peux poster le rapport .... ata je reesaye:
<spoiler>
############################## | FindyKill V6.006 |
# User : Pierre (Administrateurs) # UNICORNI-107DA1
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 23:24:50 | 16/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | (!) Outdated ]
# C:\ # Disque fixe local # 105,1 Go (58,33 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local # 43,95 Go (43,88 Go free) # NTFS
# F:\ # Disque CD-ROM
# G:\ # Disque amovible # 1,89 Go (287,91 Mo free) # FAT
############################## | Processus actifs |
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\windows\System32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\Program Files\WakeMeUp\WMUSvc.exe
C:\windows\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\windows\system32\wscntfy.exe
################## | Fichiers # Dossiers infectieux |
Supprimé ! C:\windows\system32\autorun.inf
################## | C:\Documents and Settings\Pierre\Temporary Internet Files |
################## | All Drives ... |
Supprimé ! E:\Recycled\ctfmon.exe
Supprimé ! E:\autorun.inf
Supprimé ! G:\Recycled\ctfmon.exe
Supprimé ! G:\autorun.inf
################## | Autres ... |
################## | Registre # Clés Run infectieuses |
Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\ControlSet003\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKUS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\E\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[16/07/2009 23:47|--a------|2667] - C:\FindyKill.txt
[10/06/2009 02:02|-rahs----|0] - C:\IO.SYS
[10/06/2009 02:02|-rahs----|0] - C:\MSDOS.SYS
[03/08/2004 22:38|-rahs----|47564] - C:\NTDETECT.COM
[13/06/2009 13:29|-rahs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[21/06/2009 08:17|--a------|48] - C:\plug_in.ini
[16/07/2009 23:13|--a------|4431] - C:\rapport.txt
[24/04/2008 11:07|--a------|1410048] - G:\_DS_MENU.DAT
[18/07/2007 09:41|--a------|497728] - G:\_DS_MSHL.NDS
[30/09/2005 00:16|--a------|67108864] - G:\0113 - Ultimate Spider-Man (U).nds
[09/07/2009 15:30|--a------|524288] - G:\0113 - Ultimate Spider-Man (U).SAV
[02/10/2005 18:48|--a------|33554432] - G:\0119 Pokemon Dash (EU)(M5).nds
[07/07/2009 21:22|--a------|524288] - G:\0119 Pokemon Dash (EU)(M5).SAV
[15/10/2005 15:30|--a------|16777216] - G:\0133 Madagascar (EU).nds
[08/07/2009 07:58|--a------|524288] - G:\0133 Madagascar (EU).SAV
[26/10/2005 12:29|--a------|16777216] - G:\0145 Spider-Man 2 (EU).nds
[09/07/2009 15:14|--a------|524288] - G:\0145 Spider-Man 2 (EU).SAV
[18/11/2005 18:58|--a------|33554432] - G:\0181 Shrek - Super Slam (EU)(M6).nds
[04/07/2009 21:15|--a------|524288] - G:\0181 Shrek - Super Slam (EU)(M6).SAV
[19/11/2005 11:59|--a------|67108864] - G:\0185 Sonic Rush (EU)(M6).nds
[09/07/2009 22:43|--a------|524288] - G:\0185 Sonic Rush (EU)(M6).SAV
[24/11/2005 20:03|--a------|33554432] - G:\0201 - Mario Kart DS (E).nds
[13/07/2009 19:47|--a------|524288] - G:\0201 - Mario Kart DS (E).SAV
[25/12/1996 00:32|--a------|33554432] - G:\0225 - Battles of Prince of Persia (E) (M6).nds
[16/12/2005 12:16|--a------|8388608] - G:\0236 Ford Racing 3 (EU)(M5).nds
[25/12/1996 02:32|--a------|67108864] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).nds
[14/07/2009 08:18|--a------|524288] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).SAV
[05/02/2006 23:48|--a------|67108864] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).nds
[24/02/2006 19:02|--a------|33554432] - G:\0336 FIFA Street 2 (EU)(M3).nds
[08/07/2009 09:11|--a------|524288] - G:\0336 FIFA Street 2 (EU)(M3).SAV
[30/03/2006 16:58|--a------|67108864] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).nds
[28/09/2006 10:04|--a------|16777216] - G:\0580 - 42 Classici Senza Tempo - EURO.nds
[08/07/2009 09:23|--a------|524288] - G:\0580 - 42 Classici Senza Tempo - EURO.SAV
[29/09/2006 11:58|--a------|8388608] - G:\0581 - Nemurenai Yoru to Puzzle no Hi ni wa (J)(WRG).nds
[07/10/2006 19:05|--a------|16777216] - G:\0593 - Kawaii Koinu DS (J)(WRG).nds
[28/06/2009 16:12|--a------|524288] - G:\0593 - Kawaii Koinu DS (J)(WRG).SAV
[26/10/2006 10:57|--a------|16777216] - G:\0631 - Soduko Gridmaster (E)(Supremacy).nds
[08/07/2009 09:22|--a------|524288] - G:\0631 - Soduko Gridmaster (E)(Supremacy).SAV
[17/03/2007 09:38|--a------|16777216] - G:\0917 - Flipper Critters (E).nds
[30/06/2009 19:34|--a------|524288] - G:\0917 - Flipper Critters (E).SAV
[07/05/2007 18:56|--a------|8388608] - G:\1054 - Barbie in the 12 Dancing Princesses (E).nds
[17/11/2008 22:34|--a------|524288] - G:\1054 - Barbie in the 12 Dancing Princesses (E).SAV
[02/06/2007 00:25|--a------|33554432] - G:\1123 - Le Code de la Route (F).nds
[16/07/2009 12:39|--a------|524288] - G:\1123 - Le Code de la Route (F).SAV
[19/12/2007 14:23|--a------|33554432] - G:\1853 - Bee Movie Le Jeu (F).nds
[29/06/2009 18:19|--a------|524288] - G:\1853 - Bee Movie Le Jeu (F).SAV
[07/02/2008 11:49|--a------|67108864] - G:\1996 - Mes Amis Disney (F).nds
[16/07/2009 12:31|--a------|524288] - G:\1996 - Mes Amis Disney (F).SAV
[25/12/1996 00:32|--a------|8388608] - G:\2096 - Dora the Explorer - Dora Saves the Mermaids (E).nds
[02/05/2008 13:17|--a------|8388608] - G:\2270 - 1 Contre 100 (F).nds
[08/07/2008 23:24|--a------|16777216] - G:\2441 - Koh-Lanta (F).nds
[10/07/2008 19:40|--a------|67108864] - G:\2464 - Intervilles (F).nds
[21/07/2008 21:00|--a------|33554432] - G:\2489 - Kung Fu Panda (F).nds
[07/07/2009 08:58|--a------|524288] - G:\2489 - Kung Fu Panda (F).SAV
[03/10/2008 11:47|--a------|16777216] - G:\2741 - Boule et Bill - Vive les Vacances (F).nds
[16/07/2009 12:44|--a------|524288] - G:\2741 - Boule et Bill - Vive les Vacances (F).SAV
[20/01/2009 20:28|--a------|33554432] - G:\3429 - Cookie Shop (E)(M2)(EXiMiUS).nds
[21/02/2009 00:27|--a------|28734] - G:\3429.jpg
[21/09/2008 13:27|--a------|524288] - G:\Asterix ALLEOLIMPIADI.SAV
[06/08/2008 17:46|--a------|16777216] - G:\Brain Training.nds
[04/07/2009 11:27|--a------|524288] - G:\Brain Training.SAV
[26/09/2007 13:56|--a------|33554432] - G:\FIFA_08.nds
[16/11/2008 20:29|--a------|524288] - G:\FIFA_08.SAV
[24/07/2008 00:26|--a------|33554432] - G:\Giulia Coach Di Benessere.nds
[29/06/2009 17:32|--a------|524288] - G:\Giulia Coach Di Benessere.SAV
[24/07/2008 02:28|--a------|33554432] - G:\Giulia Passione Baby Sitter.nds
[13/07/2009 21:21|--a------|524288] - G:\Giulia Passione Baby Sitter.SAV
[12/12/2007 14:27|--a------|134217728] - G:\I Simpson Il Videogioco.nds
[09/07/2009 22:47|--a------|524288] - G:\I Simpson Il Videogioco.SAV
[02/06/2007 13:55|--a------|8388608] - G:\Impossible Mission.nds
[28/06/2009 21:23|--a------|524288] - G:\Impossible Mission.SAV
[09/08/2007 21:03|--a------|16777216] - G:\La mia clinica veterinaria.nds
[15/11/2008 02:24|--a------|524288] - G:\La mia clinica veterinaria.SAV
[14/11/2007 15:39|--a------|33554432] - G:\Left or Right Ambidextrous.nds
[07/02/2008 16:07|--a------|33554432] - G:\Maths Training.nds
[26/07/2008 21:40|--a------|33554432] - G:\My Sims.nds
[28/06/2006 22:35|--a------|33554432] - G:\New Super Mario Brothers.nds
[16/07/2009 12:28|--a------|524288] - G:\New Super Mario Brothers.SAV
[26/07/2008 03:15|--a------|33554432] - G:\Pac'N Roll (E)(Trashman).nds
[16/07/2009 16:03|--a------|524288] - G:\Pac'N Roll (E)(Trashman).SAV
[26/07/2008 22:09|--a------|33554432] - G:\Puzzle League DS.nds
[07/10/2008 23:54|--a------|524288] - G:\Puzzle League DS.SAV
[17/09/2008 18:51|--a------|33554432] - G:\Ratatouille.nds
[29/06/2009 18:17|--a------|524288] - G:\Ratatouille.SAV
[01/06/2006 10:31|--a------|16777216] - G:\sm-bage.nds
[26/07/2008 19:46|--a------|8388608] - G:\Tennis Master.nds
[25/07/2008 22:51|--a------|16777216] - G:\Tetris DS.nds
[16/07/2009 12:41|--a------|524288] - G:\Tetris DS.SAV
[26/07/2008 22:59|--a------|33554432] - G:\WarioWare - Touched!.nds
[24/07/2008 06:42|--a------|16777216] - G:\Zoo tycoon 2.nds
[16/07/2009 15:25|--a------|524288] - G:\Zoo tycoon 2.SAV
[28/06/2009 13:42|--a------|4194304] - G:\_DS_MENU.SYS
[07/07/2009 11:47|--a------|524288] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).SAV
[28/06/2009 15:48|--a------|524288] - G:\0225 - Battles of Prince of Persia (E) (M6).SAV
[11/07/2009 09:28|--a------|524288] - G:\0236 Ford Racing 3 (EU)(M5).SAV
[28/06/2009 16:05|--a------|524288] - G:\2464 - Intervilles (F).SAV
[15/07/2009 10:12|--a------|524288] - G:\My Sims.SAV
[28/06/2009 16:47|--a------|524288] - G:\Left or Right Ambidextrous.SAV
[05/07/2009 11:47|--a------|524288] - G:\2270 - 1 Contre 100 (F).SAV
[01/07/2009 11:26|--a------|524288] - G:\2441 - Koh-Lanta (F).SAV
[01/07/2009 08:41|--a------|524288] - G:\WarioWare - Touched!.SAV
[14/07/2009 10:01|--a------|524288] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).SAV
[20/05/2009 17:34|--a------|134217728] - G:\[www.pokebase.net]PokemonPlatine.nds
[16/07/2009 21:46|--a------|524288] - G:\[www.pokebase.net]PokemonPlatine.SAV
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# E:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# G:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
################## | Etat / Services / Informations |
# Mode sans echec : OK
# Affichage des fichiers cachés : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | PEH ... |
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.006 ! |
</spoiler> -
ya un blem je ne peux poster le rapport .... ata je reesaye:
<spoiler>
############################## | FindyKill V6.006 |
# User : Pierre (Administrateurs) # UNICORNI-107DA1
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 23:24:50 | 16/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | (!) Outdated ]
# C:\ # Disque fixe local # 105,1 Go (58,33 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local # 43,95 Go (43,88 Go free) # NTFS
# F:\ # Disque CD-ROM
# G:\ # Disque amovible # 1,89 Go (287,91 Mo free) # FAT
############################## | Processus actifs |
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\windows\System32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\Program Files\WakeMeUp\WMUSvc.exe
C:\windows\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\windows\system32\wscntfy.exe
################## | Fichiers # Dossiers infectieux |
Supprimé ! C:\windows\system32\autorun.inf
################## | C:\Documents and Settings\Pierre\Temporary Internet Files |
################## | All Drives ... |
Supprimé ! E:\Recycled\ctfmon.exe
Supprimé ! E:\autorun.inf
Supprimé ! G:\Recycled\ctfmon.exe
Supprimé ! G:\autorun.inf
################## | Autres ... |
################## | Registre # Clés Run infectieuses |
Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\ControlSet003\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKUS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\E\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[16/07/2009 23:47|--a------|2667] - C:\FindyKill.txt
[10/06/2009 02:02|-rahs----|0] - C:\IO.SYS
[10/06/2009 02:02|-rahs----|0] - C:\MSDOS.SYS
[03/08/2004 22:38|-rahs----|47564] - C:\NTDETECT.COM
[13/06/2009 13:29|-rahs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[21/06/2009 08:17|--a------|48] - C:\plug_in.ini
[16/07/2009 23:13|--a------|4431] - C:\rapport.txt
[24/04/2008 11:07|--a------|1410048] - G:\_DS_MENU.DAT
[18/07/2007 09:41|--a------|497728] - G:\_DS_MSHL.NDS
[30/09/2005 00:16|--a------|67108864] - G:\0113 - Ultimate Spider-Man (U).nds
[09/07/2009 15:30|--a------|524288] - G:\0113 - Ultimate Spider-Man (U).SAV
[02/10/2005 18:48|--a------|33554432] - G:\0119 Pokemon Dash (EU)(M5).nds
[07/07/2009 21:22|--a------|524288] - G:\0119 Pokemon Dash (EU)(M5).SAV
[15/10/2005 15:30|--a------|16777216] - G:\0133 Madagascar (EU).nds
[08/07/2009 07:58|--a------|524288] - G:\0133 Madagascar (EU).SAV
[26/10/2005 12:29|--a------|16777216] - G:\0145 Spider-Man 2 (EU).nds
[09/07/2009 15:14|--a------|524288] - G:\0145 Spider-Man 2 (EU).SAV
[18/11/2005 18:58|--a------|33554432] - G:\0181 Shrek - Super Slam (EU)(M6).nds
[04/07/2009 21:15|--a------|524288] - G:\0181 Shrek - Super Slam (EU)(M6).SAV
[19/11/2005 11:59|--a------|67108864] - G:\0185 Sonic Rush (EU)(M6).nds
[09/07/2009 22:43|--a------|524288] - G:\0185 Sonic Rush (EU)(M6).SAV
[24/11/2005 20:03|--a------|33554432] - G:\0201 - Mario Kart DS (E).nds
[13/07/2009 19:47|--a------|524288] - G:\0201 - Mario Kart DS (E).SAV
[25/12/1996 00:32|--a------|33554432] - G:\0225 - Battles of Prince of Persia (E) (M6).nds
[16/12/2005 12:16|--a------|8388608] - G:\0236 Ford Racing 3 (EU)(M5).nds
[25/12/1996 02:32|--a------|67108864] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).nds
[14/07/2009 08:18|--a------|524288] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).SAV
[05/02/2006 23:48|--a------|67108864] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).nds
[24/02/2006 19:02|--a------|33554432] - G:\0336 FIFA Street 2 (EU)(M3).nds
[08/07/2009 09:11|--a------|524288] - G:\0336 FIFA Street 2 (EU)(M3).SAV
[30/03/2006 16:58|--a------|67108864] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).nds
[28/09/2006 10:04|--a------|16777216] - G:\0580 - 42 Classici Senza Tempo - EURO.nds
[08/07/2009 09:23|--a------|524288] - G:\0580 - 42 Classici Senza Tempo - EURO.SAV
[29/09/2006 11:58|--a------|8388608] - G:\0581 - Nemurenai Yoru to Puzzle no Hi ni wa (J)(WRG).nds
[07/10/2006 19:05|--a------|16777216] - G:\0593 - Kawaii Koinu DS (J)(WRG).nds
[28/06/2009 16:12|--a------|524288] - G:\0593 - Kawaii Koinu DS (J)(WRG).SAV
[26/10/2006 10:57|--a------|16777216] - G:\0631 - Soduko Gridmaster (E)(Supremacy).nds
[08/07/2009 09:22|--a------|524288] - G:\0631 - Soduko Gridmaster (E)(Supremacy).SAV
[17/03/2007 09:38|--a------|16777216] - G:\0917 - Flipper Critters (E).nds
[30/06/2009 19:34|--a------|524288] - G:\0917 - Flipper Critters (E).SAV
[07/05/2007 18:56|--a------|8388608] - G:\1054 - Barbie in the 12 Dancing Princesses (E).nds
[17/11/2008 22:34|--a------|524288] - G:\1054 - Barbie in the 12 Dancing Princesses (E).SAV
[02/06/2007 00:25|--a------|33554432] - G:\1123 - Le Code de la Route (F).nds
[16/07/2009 12:39|--a------|524288] - G:\1123 - Le Code de la Route (F).SAV
[19/12/2007 14:23|--a------|33554432] - G:\1853 - Bee Movie Le Jeu (F).nds
[29/06/2009 18:19|--a------|524288] - G:\1853 - Bee Movie Le Jeu (F).SAV
[07/02/2008 11:49|--a------|67108864] - G:\1996 - Mes Amis Disney (F).nds
[16/07/2009 12:31|--a------|524288] - G:\1996 - Mes Amis Disney (F).SAV
[25/12/1996 00:32|--a------|8388608] - G:\2096 - Dora the Explorer - Dora Saves the Mermaids (E).nds
[02/05/2008 13:17|--a------|8388608] - G:\2270 - 1 Contre 100 (F).nds
[08/07/2008 23:24|--a------|16777216] - G:\2441 - Koh-Lanta (F).nds
[10/07/2008 19:40|--a------|67108864] - G:\2464 - Intervilles (F).nds
[21/07/2008 21:00|--a------|33554432] - G:\2489 - Kung Fu Panda (F).nds
[07/07/2009 08:58|--a------|524288] - G:\2489 - Kung Fu Panda (F).SAV
[03/10/2008 11:47|--a------|16777216] - G:\2741 - Boule et Bill - Vive les Vacances (F).nds
[16/07/2009 12:44|--a------|524288] - G:\2741 - Boule et Bill - Vive les Vacances (F).SAV
[20/01/2009 20:28|--a------|33554432] - G:\3429 - Cookie Shop (E)(M2)(EXiMiUS).nds
[21/02/2009 00:27|--a------|28734] - G:\3429.jpg
[21/09/2008 13:27|--a------|524288] - G:\Asterix ALLEOLIMPIADI.SAV
[06/08/2008 17:46|--a------|16777216] - G:\Brain Training.nds
[04/07/2009 11:27|--a------|524288] - G:\Brain Training.SAV
[26/09/2007 13:56|--a------|33554432] - G:\FIFA_08.nds
[16/11/2008 20:29|--a------|524288] - G:\FIFA_08.SAV
[24/07/2008 00:26|--a------|33554432] - G:\Giulia Coach Di Benessere.nds
[29/06/2009 17:32|--a------|524288] - G:\Giulia Coach Di Benessere.SAV
[24/07/2008 02:28|--a------|33554432] - G:\Giulia Passione Baby Sitter.nds
[13/07/2009 21:21|--a------|524288] - G:\Giulia Passione Baby Sitter.SAV
[12/12/2007 14:27|--a------|134217728] - G:\I Simpson Il Videogioco.nds
[09/07/2009 22:47|--a------|524288] - G:\I Simpson Il Videogioco.SAV
[02/06/2007 13:55|--a------|8388608] - G:\Impossible Mission.nds
[28/06/2009 21:23|--a------|524288] - G:\Impossible Mission.SAV
[09/08/2007 21:03|--a------|16777216] - G:\La mia clinica veterinaria.nds
[15/11/2008 02:24|--a------|524288] - G:\La mia clinica veterinaria.SAV
[14/11/2007 15:39|--a------|33554432] - G:\Left or Right Ambidextrous.nds
[07/02/2008 16:07|--a------|33554432] - G:\Maths Training.nds
[26/07/2008 21:40|--a------|33554432] - G:\My Sims.nds
[28/06/2006 22:35|--a------|33554432] - G:\New Super Mario Brothers.nds
[16/07/2009 12:28|--a------|524288] - G:\New Super Mario Brothers.SAV
[26/07/2008 03:15|--a------|33554432] - G:\Pac'N Roll (E)(Trashman).nds
[16/07/2009 16:03|--a------|524288] - G:\Pac'N Roll (E)(Trashman).SAV
[26/07/2008 22:09|--a------|33554432] - G:\Puzzle League DS.nds
[07/10/2008 23:54|--a------|524288] - G:\Puzzle League DS.SAV
[17/09/2008 18:51|--a------|33554432] - G:\Ratatouille.nds
[29/06/2009 18:17|--a------|524288] - G:\Ratatouille.SAV
[01/06/2006 10:31|--a------|16777216] - G:\sm-bage.nds
[26/07/2008 19:46|--a------|8388608] - G:\Tennis Master.nds
[25/07/2008 22:51|--a------|16777216] - G:\Tetris DS.nds
[16/07/2009 12:41|--a------|524288] - G:\Tetris DS.SAV
[26/07/2008 22:59|--a------|33554432] - G:\WarioWare - Touched!.nds
[24/07/2008 06:42|--a------|16777216] - G:\Zoo tycoon 2.nds
[16/07/2009 15:25|--a------|524288] - G:\Zoo tycoon 2.SAV
[28/06/2009 13:42|--a------|4194304] - G:\_DS_MENU.SYS
[07/07/2009 11:47|--a------|524288] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).SAV
[28/06/2009 15:48|--a------|524288] - G:\0225 - Battles of Prince of Persia (E) (M6).SAV
[11/07/2009 09:28|--a------|524288] - G:\0236 Ford Racing 3 (EU)(M5).SAV
[28/06/2009 16:05|--a------|524288] - G:\2464 - Intervilles (F).SAV
[15/07/2009 10:12|--a------|524288] - G:\My Sims.SAV
[28/06/2009 16:47|--a------|524288] - G:\Left or Right Ambidextrous.SAV
[05/07/2009 11:47|--a------|524288] - G:\2270 - 1 Contre 100 (F).SAV
[01/07/2009 11:26|--a------|524288] - G:\2441 - Koh-Lanta (F).SAV
[01/07/2009 08:41|--a------|524288] - G:\WarioWare - Touched!.SAV
[14/07/2009 10:01|--a------|524288] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).SAV
[20/05/2009 17:34|--a------|134217728] - G:\[www.pokebase.net]PokemonPlatine.nds
[16/07/2009 21:46|--a------|524288] - G:\[www.pokebase.net]PokemonPlatine.SAV
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# E:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# G:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
################## | Etat / Services / Informations |
# Mode sans echec : OK
# Affichage des fichiers cachés : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | PEH ... |
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.006 ! |
</spoiler> -
############################## | FindyKill V6.006 |
# User : Pierre (Administrateurs) # UNICORNI-107DA1
# Update on 14/07/09 by Chiquitine29 & C_XX
# Start at: 23:24:50 | 16/07/2009
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | (!) Outdated ]
# C:\ # Disque fixe local # 105,1 Go (58,33 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque fixe local # 43,95 Go (43,88 Go free) # NTFS
# F:\ # Disque CD-ROM
# G:\ # Disque amovible # 1,89 Go (287,91 Mo free) # FAT
############################## | Processus actifs |
C:\windows\System32\smss.exe
C:\windows\system32\csrss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\windows\system32\svchost.exe
C:\windows\Explorer.EXE
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\windows\System32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\Program Files\WakeMeUp\WMUSvc.exe
C:\windows\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\windows\system32\wscntfy.exe
################## | Fichiers # Dossiers infectieux |
Supprimé ! C:\windows\system32\autorun.inf
################## | C:\Documents and Settings\Pierre\Temporary Internet Files |
################## | All Drives ... |
Supprimé ! E:\Recycled\ctfmon.exe
Supprimé ! E:\autorun.inf
Supprimé ! G:\Recycled\ctfmon.exe
Supprimé ! G:\autorun.inf
################## | Autres ... |
################## | Registre # Clés Run infectieuses |
Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\ControlSet003\Services\FileZilla Server
Supprimé ! HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_FILEZILLA_SERVER
Supprimé ! HKUS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run "reader_s"
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\E\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[16/07/2009 23:47|--a------|2667] - C:\FindyKill.txt
[10/06/2009 02:02|-rahs----|0] - C:\IO.SYS
[10/06/2009 02:02|-rahs----|0] - C:\MSDOS.SYS
[03/08/2004 22:38|-rahs----|47564] - C:\NTDETECT.COM
[13/06/2009 13:29|-rahs----|252240] - C:\ntldr
[?|?|?] - C:\pagefile.sys
[21/06/2009 08:17|--a------|48] - C:\plug_in.ini
[16/07/2009 23:13|--a------|4431] - C:\rapport.txt
[24/04/2008 11:07|--a------|1410048] - G:\_DS_MENU.DAT
[18/07/2007 09:41|--a------|497728] - G:\_DS_MSHL.NDS
[30/09/2005 00:16|--a------|67108864] - G:\0113 - Ultimate Spider-Man (U).nds
[09/07/2009 15:30|--a------|524288] - G:\0113 - Ultimate Spider-Man (U).SAV
[02/10/2005 18:48|--a------|33554432] - G:\0119 Pokemon Dash (EU)(M5).nds
[07/07/2009 21:22|--a------|524288] - G:\0119 Pokemon Dash (EU)(M5).SAV
[15/10/2005 15:30|--a------|16777216] - G:\0133 Madagascar (EU).nds
[08/07/2009 07:58|--a------|524288] - G:\0133 Madagascar (EU).SAV
[26/10/2005 12:29|--a------|16777216] - G:\0145 Spider-Man 2 (EU).nds
[09/07/2009 15:14|--a------|524288] - G:\0145 Spider-Man 2 (EU).SAV
[18/11/2005 18:58|--a------|33554432] - G:\0181 Shrek - Super Slam (EU)(M6).nds
[04/07/2009 21:15|--a------|524288] - G:\0181 Shrek - Super Slam (EU)(M6).SAV
[19/11/2005 11:59|--a------|67108864] - G:\0185 Sonic Rush (EU)(M6).nds
[09/07/2009 22:43|--a------|524288] - G:\0185 Sonic Rush (EU)(M6).SAV
[24/11/2005 20:03|--a------|33554432] - G:\0201 - Mario Kart DS (E).nds
[13/07/2009 19:47|--a------|524288] - G:\0201 - Mario Kart DS (E).SAV
[25/12/1996 00:32|--a------|33554432] - G:\0225 - Battles of Prince of Persia (E) (M6).nds
[16/12/2005 12:16|--a------|8388608] - G:\0236 Ford Racing 3 (EU)(M5).nds
[25/12/1996 02:32|--a------|67108864] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).nds
[14/07/2009 08:18|--a------|524288] - G:\0297 Mario & Luigi - Partners in Time (EU)(M5).SAV
[05/02/2006 23:48|--a------|67108864] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).nds
[24/02/2006 19:02|--a------|33554432] - G:\0336 FIFA Street 2 (EU)(M3).nds
[08/07/2009 09:11|--a------|524288] - G:\0336 FIFA Street 2 (EU)(M3).SAV
[30/03/2006 16:58|--a------|67108864] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).nds
[28/09/2006 10:04|--a------|16777216] - G:\0580 - 42 Classici Senza Tempo - EURO.nds
[08/07/2009 09:23|--a------|524288] - G:\0580 - 42 Classici Senza Tempo - EURO.SAV
[29/09/2006 11:58|--a------|8388608] - G:\0581 - Nemurenai Yoru to Puzzle no Hi ni wa (J)(WRG).nds
[07/10/2006 19:05|--a------|16777216] - G:\0593 - Kawaii Koinu DS (J)(WRG).nds
[28/06/2009 16:12|--a------|524288] - G:\0593 - Kawaii Koinu DS (J)(WRG).SAV
[26/10/2006 10:57|--a------|16777216] - G:\0631 - Soduko Gridmaster (E)(Supremacy).nds
[08/07/2009 09:22|--a------|524288] - G:\0631 - Soduko Gridmaster (E)(Supremacy).SAV
[17/03/2007 09:38|--a------|16777216] - G:\0917 - Flipper Critters (E).nds
[30/06/2009 19:34|--a------|524288] - G:\0917 - Flipper Critters (E).SAV
[07/05/2007 18:56|--a------|8388608] - G:\1054 - Barbie in the 12 Dancing Princesses (E).nds
[17/11/2008 22:34|--a------|524288] - G:\1054 - Barbie in the 12 Dancing Princesses (E).SAV
[02/06/2007 00:25|--a------|33554432] - G:\1123 - Le Code de la Route (F).nds
[16/07/2009 12:39|--a------|524288] - G:\1123 - Le Code de la Route (F).SAV
[19/12/2007 14:23|--a------|33554432] - G:\1853 - Bee Movie Le Jeu (F).nds
[29/06/2009 18:19|--a------|524288] - G:\1853 - Bee Movie Le Jeu (F).SAV
[07/02/2008 11:49|--a------|67108864] - G:\1996 - Mes Amis Disney (F).nds
[16/07/2009 12:31|--a------|524288] - G:\1996 - Mes Amis Disney (F).SAV
[25/12/1996 00:32|--a------|8388608] - G:\2096 - Dora the Explorer - Dora Saves the Mermaids (E).nds
[02/05/2008 13:17|--a------|8388608] - G:\2270 - 1 Contre 100 (F).nds
[08/07/2008 23:24|--a------|16777216] - G:\2441 - Koh-Lanta (F).nds
[10/07/2008 19:40|--a------|67108864] - G:\2464 - Intervilles (F).nds
[21/07/2008 21:00|--a------|33554432] - G:\2489 - Kung Fu Panda (F).nds
[07/07/2009 08:58|--a------|524288] - G:\2489 - Kung Fu Panda (F).SAV
[03/10/2008 11:47|--a------|16777216] - G:\2741 - Boule et Bill - Vive les Vacances (F).nds
[16/07/2009 12:44|--a------|524288] - G:\2741 - Boule et Bill - Vive les Vacances (F).SAV
[20/01/2009 20:28|--a------|33554432] - G:\3429 - Cookie Shop (E)(M2)(EXiMiUS).nds
[21/02/2009 00:27|--a------|28734] - G:\3429.jpg
[21/09/2008 13:27|--a------|524288] - G:\Asterix ALLEOLIMPIADI.SAV
[06/08/2008 17:46|--a------|16777216] - G:\Brain Training.nds
[04/07/2009 11:27|--a------|524288] - G:\Brain Training.SAV
[26/09/2007 13:56|--a------|33554432] - G:\FIFA_08.nds
[16/11/2008 20:29|--a------|524288] - G:\FIFA_08.SAV
[24/07/2008 00:26|--a------|33554432] - G:\Giulia Coach Di Benessere.nds
[29/06/2009 17:32|--a------|524288] - G:\Giulia Coach Di Benessere.SAV
[24/07/2008 02:28|--a------|33554432] - G:\Giulia Passione Baby Sitter.nds
[13/07/2009 21:21|--a------|524288] - G:\Giulia Passione Baby Sitter.SAV
[12/12/2007 14:27|--a------|134217728] - G:\I Simpson Il Videogioco.nds
[09/07/2009 22:47|--a------|524288] - G:\I Simpson Il Videogioco.SAV
[02/06/2007 13:55|--a------|8388608] - G:\Impossible Mission.nds
[28/06/2009 21:23|--a------|524288] - G:\Impossible Mission.SAV
[09/08/2007 21:03|--a------|16777216] - G:\La mia clinica veterinaria.nds
[15/11/2008 02:24|--a------|524288] - G:\La mia clinica veterinaria.SAV
[14/11/2007 15:39|--a------|33554432] - G:\Left or Right Ambidextrous.nds
[07/02/2008 16:07|--a------|33554432] - G:\Maths Training.nds
[26/07/2008 21:40|--a------|33554432] - G:\My Sims.nds
[28/06/2006 22:35|--a------|33554432] - G:\New Super Mario Brothers.nds
[16/07/2009 12:28|--a------|524288] - G:\New Super Mario Brothers.SAV
[26/07/2008 03:15|--a------|33554432] - G:\Pac'N Roll (E)(Trashman).nds
[16/07/2009 16:03|--a------|524288] - G:\Pac'N Roll (E)(Trashman).SAV
[26/07/2008 22:09|--a------|33554432] - G:\Puzzle League DS.nds
[07/10/2008 23:54|--a------|524288] - G:\Puzzle League DS.SAV
[17/09/2008 18:51|--a------|33554432] - G:\Ratatouille.nds
[29/06/2009 18:17|--a------|524288] - G:\Ratatouille.SAV
[01/06/2006 10:31|--a------|16777216] - G:\sm-bage.nds
[26/07/2008 19:46|--a------|8388608] - G:\Tennis Master.nds
[25/07/2008 22:51|--a------|16777216] - G:\Tetris DS.nds
[16/07/2009 12:41|--a------|524288] - G:\Tetris DS.SAV
[26/07/2008 22:59|--a------|33554432] - G:\WarioWare - Touched!.nds
[24/07/2008 06:42|--a------|16777216] - G:\Zoo tycoon 2.nds
[16/07/2009 15:25|--a------|524288] - G:\Zoo tycoon 2.SAV
[28/06/2009 13:42|--a------|4194304] - G:\_DS_MENU.SYS
[07/07/2009 11:47|--a------|524288] - G:\0390 Ice Age 2 - The Meltdown (EU)(M6).SAV
[28/06/2009 15:48|--a------|524288] - G:\0225 - Battles of Prince of Persia (E) (M6).SAV
[11/07/2009 09:28|--a------|524288] - G:\0236 Ford Racing 3 (EU)(M5).SAV
[28/06/2009 16:05|--a------|524288] - G:\2464 - Intervilles (F).SAV
[15/07/2009 10:12|--a------|524288] - G:\My Sims.SAV
[28/06/2009 16:47|--a------|524288] - G:\Left or Right Ambidextrous.SAV
[05/07/2009 11:47|--a------|524288] - G:\2270 - 1 Contre 100 (F).SAV
[01/07/2009 11:26|--a------|524288] - G:\2441 - Koh-Lanta (F).SAV
[01/07/2009 08:41|--a------|524288] - G:\WarioWare - Touched!.SAV
[14/07/2009 10:01|--a------|524288] - G:\0304 Dragon Ball Z - Supersonic Warriors 2 (EU)(M5).SAV
[20/05/2009 17:34|--a------|134217728] - G:\[www.pokebase.net]PokemonPlatine.nds
[16/07/2009 21:46|--a------|524288] - G:\[www.pokebase.net]PokemonPlatine.SAV
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# E:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
# G:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.
################## | Etat / Services / Informations |
# Mode sans echec : OK
# Affichage des fichiers cachés : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | PEH ... |
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # FindyKill V6.006 ! |
- 1
- 2