A voir également:
- Comment Faire Pour Arreter Que L'Ordi Rame ?
- Ordi qui rame - Guide
- Comment reinitialiser un ordi - Guide
- Comment nettoyer un mac qui rame - Guide
- Comment retourner ecran ordi - Guide
- Ordi scrabble - Télécharger - Jeux vidéo
34 réponses
Hello,
Afin de faire un diagnostic:
- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.
- Double-clique sur RSIT.exe afin de lancer le programme.
- Clique sur Continue à l'écran Disclaimer.
-Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches) dans deux messages différents.
Afin de faire un diagnostic:
- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.
- Double-clique sur RSIT.exe afin de lancer le programme.
- Clique sur Continue à l'écran Disclaimer.
-Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches) dans deux messages différents.
pour defrag ta deffagler qui est pas mal leger et puissant https://www.ccleaner.com/defraggler
Si son pc rame au démarrage, défragmenter ne changera pas grand chose, je lui ai donné des instructions, s'il ne souhaite pas les suivre, tant pis.
Qu'il se débrouille avec ça.
Bye.
Qu'il se débrouille avec ça.
Bye.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
oui très bien pour dé-fragmenter...
Ensuite Clleaner et anti-mal-ware, tout deus gratuit sur https://www.01net.com/telecharger/
Ensuite Clleaner et anti-mal-ware, tout deus gratuit sur https://www.01net.com/telecharger/
Sinon un très bon logiciel c'est Tuneup !!! il m'a bien rendu service
https://www.01net.com/telecharger/windows/Utilitaire/optimiseurs_et_tests/fiches/26913.html
https://www.01net.com/telecharger/windows/Utilitaire/optimiseurs_et_tests/fiches/26913.html
Logfile of random's system information tool 1.06 (written by random/random)
Run by Romey at 2009-10-07 13:56:47
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 16 GB (21%) free of 80 GB
Total RAM: 447 MB (7% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:57:39, on 07/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\windows\system32\cmd.exe
c:\windows\system32\ping.exe
C:\Documents and Settings\Romey.PC-SSIYANKAI\Bureau\RSIT.exe
C:\Program Files\trend micro\Romey.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://badoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {346de098-61f9-4b42-89da-6dfba7091bb6} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {346de098-61f9-4b42-89da-6dfba7091bb6} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\IMBooster.exe /warmup
O4 - HKLM\..\Run: [Iminent.Notifier] C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
O4 - HKLM\..\Run: [svchost64.exe] c:\windows\system32\svchost64.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKCU\..\Run: [amva] C:\WINDOWS\system32\amvo.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: McAfee Security Scan.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
Run by Romey at 2009-10-07 13:56:47
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 16 GB (21%) free of 80 GB
Total RAM: 447 MB (7% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:57:39, on 07/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\windows\system32\cmd.exe
c:\windows\system32\ping.exe
C:\Documents and Settings\Romey.PC-SSIYANKAI\Bureau\RSIT.exe
C:\Program Files\trend micro\Romey.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://badoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {346de098-61f9-4b42-89da-6dfba7091bb6} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {346de098-61f9-4b42-89da-6dfba7091bb6} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\IMBooster.exe /warmup
O4 - HKLM\..\Run: [Iminent.Notifier] C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe
O4 - HKLM\..\Run: [svchost64.exe] c:\windows\system32\svchost64.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKCU\..\Run: [amva] C:\WINDOWS\system32\amvo.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: McAfee Security Scan.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
Hell RoMey974,
Tu m'étonnes que ton PC rame: Tu es gavé d'infections.
La plupart sont des infections dites "USB" qui transitent d'un PC à l'autre par Support USB (Clé, disque dur externe, MP3...), bref ce que tu branches généralement comme périphérique "F:\ , G:\ et H:\".
Rassemble tous tes supports USB et fais ce qui suit:
*Télécharge et installe UsbFix de C_XX & Chiquitine29.
*Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectés sans les ouvrir.
*Double clique sur le raccourci UsbFix présent sur ton bureau.
*Choisi l'option 1 ( Recherche )
*Laisse travailler l'outil.
*Ensuite poste le rapport UsbFix.txt qui apparaîtra dans ton prochain message.
Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
Tu m'étonnes que ton PC rame: Tu es gavé d'infections.
La plupart sont des infections dites "USB" qui transitent d'un PC à l'autre par Support USB (Clé, disque dur externe, MP3...), bref ce que tu branches généralement comme périphérique "F:\ , G:\ et H:\".
Rassemble tous tes supports USB et fais ce qui suit:
*Télécharge et installe UsbFix de C_XX & Chiquitine29.
*Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectés sans les ouvrir.
*Double clique sur le raccourci UsbFix présent sur ton bureau.
*Choisi l'option 1 ( Recherche )
*Laisse travailler l'outil.
*Ensuite poste le rapport UsbFix.txt qui apparaîtra dans ton prochain message.
Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
############################## | UsbFix V6.039 |
User : Romey (Administrateurs) # PC-SSIYANKAI
Update on 08/10/2009 by Chiquitine29, C_XX & Chimay8
Start at: 18:08:39 | 09/10/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Intel(R) Pentium(R) 4 CPU 3.00GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 6.0.2900.5512
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1351 [VPS 091008-0] 4.8.1351 [ Enabled | Updated ]
A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 78,13 Go (16,82 Go free) # NTFS
D:\ -> Disque fixe local
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 3,81 Go (831,54 Mo free) [ROMEY] # FAT32
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
c:\windows\system32\ping.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | Fichiers # Dossiers infectieux |
C:\WINDOWS\admintxt.txt
C:\WINDOWS\system32\svchost64.exe
################## | Registre # Clés Run infectieuses |
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "FrameWorkService"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "svchost64.exe"
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "amva"
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "FrameWorkService"
[HKU\S-1-5-21-861567501-813497703-725345543-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "amva"
[HKU\S-1-5-21-861567501-813497703-725345543-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "FrameWorkService"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"
################## | Registre # Mountpoints2 |
HKCU\..\..\Explorer\MountPoints2\{12f6553a-bde2-11dd-b0f5-00138f26818f}
Shell\AutoRun\command =F:\0w.com
Shell\explore\Command =F:\0w.com
Shell\open\Command =F:\0w.com
HKCU\..\..\Explorer\MountPoints2\{14002703-8bcd-11dd-8a4f-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{17506f49-9157-11dd-8a59-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{253811df-4e95-11de-bb5e-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{30c0b350-22f5-11dd-8997-00138f26818f}
Shell\Auto\command =F:\Start.exe
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe
HKCU\..\..\Explorer\MountPoints2\{3357d3e9-4f7d-11de-bb65-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{35fdc139-d9ad-11dd-b13e-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{37dad583-972a-11dc-882c-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{3a86813c-469c-11dd-89f9-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{4793ca9e-d916-11db-8606-00138f26818f}
Shell\AutoRun\command =H:\d6fagcs8.cmd
Shell\explore\Command =H:\d6fagcs8.cmd
Shell\open\Command =H:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{52d54f4b-f9de-11dd-89dc-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{546402f1-9aa7-11de-abdb-00138f26818f}
Shell\AutoRun\command =F:\LOGONUI.EXE
HKCU\..\..\Explorer\MountPoints2\{5be7583c-8d1e-11dd-8a53-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{5d152dec-1097-11de-bad1-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{7d446dd5-da2f-11dd-b141-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{7f240f80-7033-11de-8c13-00138f26818f}
Shell\AutoRun\command =F:\0w.com
Shell\explore\Command =F:\0w.com
Shell\open\Command =F:\0w.com
HKCU\..\..\Explorer\MountPoints2\{7f61e04f-50f0-11de-bb68-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{7f61e050-50f0-11de-bb68-00138f26818f}
Shell\AutoRun\command =H:\d6fagcs8.cmd
Shell\explore\Command =H:\d6fagcs8.cmd
Shell\open\Command =H:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{836e5f73-c5a7-11dc-88a0-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{a484f9b4-d023-11dd-b124-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{b2de486e-cf16-11dd-b120-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{be27ed54-2e66-11dd-89ae-00138f26818f}
Shell\AutoRun\command =F:\SETUP.EXE -0
Shell\Explore\Command =F:\SETUP.EXE -E
Shell\Open\Command =F:\SETUP.EXE -O
HKCU\..\..\Explorer\MountPoints2\{c2101021-48cc-11dd-8a01-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{c3f5cb68-1d07-11dd-8987-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{c42182df-073c-11de-89ff-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{c616b952-78b6-11dc-87da-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{c7fe4eff-dca4-11dd-b147-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{ccd05b85-9ceb-11dd-8a73-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{e8d6dca8-ad9b-11de-ac14-00138f26818f}
Shell\Auto\command =F:\launcher.exe
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL launcher.exe
HKCU\..\..\Explorer\MountPoints2\{f0d87865-905b-11dd-8a58-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{fe270b82-cea6-11dd-b11f-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{fe270b83-cea6-11dd-b11f-00138f26818f}
Shell\AutoRun\command =H:\d6fagcs8.cmd
Shell\explore\Command =H:\d6fagcs8.cmd
Shell\open\Command =H:\d6fagcs8.cmd
################## | ! Fin du rapport # UsbFix V6.039 ! |
User : Romey (Administrateurs) # PC-SSIYANKAI
Update on 08/10/2009 by Chiquitine29, C_XX & Chimay8
Start at: 18:08:39 | 09/10/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Intel(R) Pentium(R) 4 CPU 3.00GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 6.0.2900.5512
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1351 [VPS 091008-0] 4.8.1351 [ Enabled | Updated ]
A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 78,13 Go (16,82 Go free) # NTFS
D:\ -> Disque fixe local
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 3,81 Go (831,54 Mo free) [ROMEY] # FAT32
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
c:\windows\system32\ping.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | Fichiers # Dossiers infectieux |
C:\WINDOWS\admintxt.txt
C:\WINDOWS\system32\svchost64.exe
################## | Registre # Clés Run infectieuses |
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "FrameWorkService"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "svchost64.exe"
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "amva"
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "FrameWorkService"
[HKU\S-1-5-21-861567501-813497703-725345543-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "amva"
[HKU\S-1-5-21-861567501-813497703-725345543-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "FrameWorkService"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"
################## | Registre # Mountpoints2 |
HKCU\..\..\Explorer\MountPoints2\{12f6553a-bde2-11dd-b0f5-00138f26818f}
Shell\AutoRun\command =F:\0w.com
Shell\explore\Command =F:\0w.com
Shell\open\Command =F:\0w.com
HKCU\..\..\Explorer\MountPoints2\{14002703-8bcd-11dd-8a4f-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{17506f49-9157-11dd-8a59-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{253811df-4e95-11de-bb5e-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{30c0b350-22f5-11dd-8997-00138f26818f}
Shell\Auto\command =F:\Start.exe
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe
HKCU\..\..\Explorer\MountPoints2\{3357d3e9-4f7d-11de-bb65-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{35fdc139-d9ad-11dd-b13e-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{37dad583-972a-11dc-882c-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{3a86813c-469c-11dd-89f9-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{4793ca9e-d916-11db-8606-00138f26818f}
Shell\AutoRun\command =H:\d6fagcs8.cmd
Shell\explore\Command =H:\d6fagcs8.cmd
Shell\open\Command =H:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{52d54f4b-f9de-11dd-89dc-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{546402f1-9aa7-11de-abdb-00138f26818f}
Shell\AutoRun\command =F:\LOGONUI.EXE
HKCU\..\..\Explorer\MountPoints2\{5be7583c-8d1e-11dd-8a53-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{5d152dec-1097-11de-bad1-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{7d446dd5-da2f-11dd-b141-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{7f240f80-7033-11de-8c13-00138f26818f}
Shell\AutoRun\command =F:\0w.com
Shell\explore\Command =F:\0w.com
Shell\open\Command =F:\0w.com
HKCU\..\..\Explorer\MountPoints2\{7f61e04f-50f0-11de-bb68-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{7f61e050-50f0-11de-bb68-00138f26818f}
Shell\AutoRun\command =H:\d6fagcs8.cmd
Shell\explore\Command =H:\d6fagcs8.cmd
Shell\open\Command =H:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{836e5f73-c5a7-11dc-88a0-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{a484f9b4-d023-11dd-b124-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{b2de486e-cf16-11dd-b120-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{be27ed54-2e66-11dd-89ae-00138f26818f}
Shell\AutoRun\command =F:\SETUP.EXE -0
Shell\Explore\Command =F:\SETUP.EXE -E
Shell\Open\Command =F:\SETUP.EXE -O
HKCU\..\..\Explorer\MountPoints2\{c2101021-48cc-11dd-8a01-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{c3f5cb68-1d07-11dd-8987-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{c42182df-073c-11de-89ff-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{c616b952-78b6-11dc-87da-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{c7fe4eff-dca4-11dd-b147-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{ccd05b85-9ceb-11dd-8a73-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{e8d6dca8-ad9b-11de-ac14-00138f26818f}
Shell\Auto\command =F:\launcher.exe
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL launcher.exe
HKCU\..\..\Explorer\MountPoints2\{f0d87865-905b-11dd-8a58-00138f26818f}
Shell\AutoRun\command =F:\d6fagcs8.cmd
Shell\explore\Command =F:\d6fagcs8.cmd
Shell\open\Command =F:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{fe270b82-cea6-11dd-b11f-00138f26818f}
Shell\AutoRun\command =G:\d6fagcs8.cmd
Shell\explore\Command =G:\d6fagcs8.cmd
Shell\open\Command =G:\d6fagcs8.cmd
HKCU\..\..\Explorer\MountPoints2\{fe270b83-cea6-11dd-b11f-00138f26818f}
Shell\AutoRun\command =H:\d6fagcs8.cmd
Shell\explore\Command =H:\d6fagcs8.cmd
Shell\open\Command =H:\d6fagcs8.cmd
################## | ! Fin du rapport # UsbFix V6.039 ! |
Oki:
Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectés sans les ouvrir
* Double clique sur le raccourci UsbFix présent sur ton bureau.
* choisi l'option 2 ( Suppression )
* Ton bureau disparaîtra et le pc redémarrera .
* Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.
* Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau dans ton prochain message .
* Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectés sans les ouvrir
* Double clique sur le raccourci UsbFix présent sur ton bureau.
* choisi l'option 2 ( Suppression )
* Ton bureau disparaîtra et le pc redémarrera .
* Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.
* Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau dans ton prochain message .
* Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )