C:\WINDOWS\system32\imwin.jpg

areski -  
 DeesseRhea -
Bonjour, au démarrage de mon système xp, un message s'affiche "impossible de trouver le fichier script "C:\WINDOWS\system32\imwin.jpg"". comment résoudre ce problème merci infiniment d'abord,ainsi lorsque j'appuie sur "ctrl+alt+supp" le meme message s'affiche. merci 1000 fois

1 réponse

  1.
    Xplode Messages postés 9212 Statut Contributeur sécurité 726
     
    Hello,

    -+-+-+-+-> USBFix <-+-+-+-+-

    Note : Ton PC est victime d'une infection par médias amovibles. Tu trouveras plus d'informations sur cette infection ici.

    [x] Télécharge USBfix ( d'El desaparecido et C_XX ) sur ton bureau.

    [x] Si ton anvirus affiche une alerte, ignore le et désactive le momentanément.

    [x] Branche tout tes médias amovibles à ton PC ( Clé USB, disque dur externe, carte SD etc.. ) sans les ouvrir.

    [x] Exécute USBfix sur ton bureau puis clique sur " Suppression ".

    [x] Patiente pendant le scan. Un rapport s'ouvrira, copie/colle son contenu dans ton prohain message.

    Notes : Le rapport est également sauvegardé à la racine du disque dur ( généralement C:\ )

    Un tutoriel en images est disponible ici.
    0
    1. areski
       
      ############################## | UsbFix 7.038 | [Deletion]

      User: SADZAK (Administrator) # PHONELINA [ ]
      Updated 14/01/2011 by El Desaparecido / C_XX
      Started at 16:17:51 | 30/01/2011
      Website: http://www.teamxscript.org
      Contact: eldesaparecido@teamxscript.org

      CPU: AMD Athlon(tm) XP 2600+
      Microsoft Windows XP Professional (5.1.2600 32-Bit) # Service Pack 3
      Internet Explorer 8.0.6001.18702

      Windows Firewall: Disabled /!\
      Antivirus: Panda Internet Security 2010 15.00.00 [Enabled | Updated]
      Firewall: Panda Personal Firewall 2010 15.00.00 [Enabled]
      RAM -> 767 Mb
      C:\ (%systemdrive%) -> Fixed drive # 39 Gb (29 Mb free - 75%) [] # NTFS
      D:\ -> Fixed drive # 73 Gb (54 Mb free - 74%) [SADZAK] # NTFS
      E:\ -> CD-ROM
      F:\ -> CD-ROM

      ################## | Files # Infected Folders |


      Deleted ! C:\Recycler\S-1-5-21-1659004503-2052111302-725345543-1003
      Deleted ! D:\Recycler\S-1-5-21-1659004503-2052111302-725345543-1003
      Deleted ! D:\Recycler\S-1-5-21-746137067-1284227242-725345543-1003

      ################## | Registry |

      Deleted ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drwtsn32.exe
      Deleted ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
      Deleted ! HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore|DisableSR
      Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|CTFMON

      ################## | Mountpoints2 |

      Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{6fac7986-2863-11e0-b78d-000ea642fa01}
      Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{73c50181-eb18-11df-b75c-000ea642fa01}
      Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{87e95f85-1a40-11e0-b779-000ea642fa01}
      Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{8eee8bd1-fc71-11df-b775-000ea642fa01}
      Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{d9c2989b-e283-11df-b758-000ea642fa01}

      ################## | Listing |

      [28/10/2010 - 10:40:40 | N | 0] C:\AUTOEXEC.BAT
      [28/10/2010 - 10:34:08 | N | 211] C:\boot.ini
      [30/08/2004 - 20:00:00 | N | 4952] C:\Bootfont.bin
      [29/01/2011 - 15:44:04 | D ] C:\Config.Msi
      [28/10/2010 - 10:40:40 | N | 0] C:\CONFIG.SYS
      [28/10/2010 - 10:46:01 | D ] C:\Documents and Settings
      [06/01/2011 - 12:12:32 | N | 281] C:\DV.txt
      [30/01/2011 - 16:09:58 | ASH | 804835328] C:\hiberfil.sys
      [27/01/2011 - 11:40:23 | N | 527] C:\hpfr3420.xml
      [27/01/2011 - 11:40:26 | N | 19166] C:\hpfr3425.log
      [28/10/2010 - 10:40:40 | N | 0] C:\IO.SYS
      [29/01/2011 - 16:35:28 | N | 2961] C:\mbam-log-2011-01-29 (15-42-06).txt
      [28/10/2010 - 10:40:40 | N | 0] C:\MSDOS.SYS
      [28/10/2010 - 10:58:11 | RHD ] C:\MSOCache
      [30/08/2004 - 20:00:00 | N | 47564] C:\NTDETECT.COM
      [28/10/2010 - 11:18:21 | N | 251600] C:\ntldr
      [30/01/2011 - 16:09:56 | ASH | 1207959552] C:\pagefile.sys
      [30/01/2011 - 16:17:57 | N | 13030] C:\PDOXUSRS.NET
      [29/01/2011 - 16:35:14 | D ] C:\Programmi
      [29/01/2011 - 16:35:57 | N | 3528] C:\protection-log-2011-01-29.txt
      [30/01/2011 - 16:21:45 | SHD ] C:\RECYCLER
      [29/01/2011 - 20:58:36 | SHD ] C:\System Volume Information
      [28/10/2010 - 13:00:40 | D ] C:\temp
      [30/01/2011 - 16:21:45 | D ] C:\UsbFix
      [30/01/2011 - 16:21:51 | A | 1329] C:\UsbFix.txt
      [29/01/2011 - 20:59:11 | D ] C:\WINDOWS
      [30/01/2011 - 16:11:38 | N | 142919] D:\20092-10-11.xlsx
      [29/01/2011 - 19:12:27 | N | 142622] D:\20092-10.xlsx
      [29/01/2011 - 21:50:34 | D ] D:\ARESKI
      [18/08/2009 - 11:01:15 | D ] D:\CAFEZEE
      [29/01/2011 - 20:18:09 | N | 18203] D:\COMPTABILITE.xlsx
      [03/01/2011 - 12:53:49 | D ] D:\DOCUMENTI
      [02/11/2010 - 20:27:05 | D ] D:\DRIVERS
      [28/01/2011 - 13:11:19 | N | 420] D:\Flussi2010.txt
      [20/04/2010 - 10:02:56 | N | 408] D:\hpothb07.dat
      [20/04/2010 - 10:02:56 | N | 763] D:\hpothb07.tif
      [26/05/2010 - 18:32:53 | D ] D:\IMMAGINI
      [23/01/2011 - 21:17:51 | N | 55544] D:\INVENTAIRE.xlsx
      [18/11/2009 - 18:45:06 | D ] D:\MONEY GRAM
      [26/11/2010 - 21:38:15 | D ] D:\MUSICA
      [16/05/2010 - 21:02:37 | N | 10936] D:\OFFERTA con LINEA.docx
      [27/01/2011 - 21:06:30 | N | 11155] D:\Postpay.xlsx
      [23/11/2010 - 11:44:59 | D ] D:\PREFERITI
      [29/01/2011 - 17:36:30 | D ] D:\PROGRAMS
      [30/01/2011 - 16:21:45 | SHD ] D:\RECYCLER
      [24/01/2011 - 20:28:26 | D ] D:\RELEGIONE
      [15/04/2010 - 11:38:17 | N | 14546] D:\ria.docx
      [28/10/2010 - 10:46:12 | SHD ] D:\System Volume Information
      [22/04/2010 - 10:40:56 | D ] D:\VIDEO
      [25/01/2011 - 16:57:25 | N | 12690] D:\VIOP.xlsx
      [25/01/2010 - 10:11:40 | D ] D:\VJVod_Cache
      [08/08/2010 - 18:55:49 | D ] D:\WESTERN UNION
      [22/08/2010 - 15:27:30 | | 165] D:\~$20092-10.xlsx
      [17/09/2010 - 10:17:26 | | 165] D:\~$INVENTAIRE.xlsx

      ################## | Vaccin |

      C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
      D:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

      ################## | Upload |

      Please send the file: C:\UsbFix_Upload_Me_PHONELINA.zip
      http://www.teamxscript.org/Upload.php
      Thank you for your contribution.

      ################## | E.O.F |
      0
    2. DeesseRhea
       
      Bonsoir. J'ai le même problème sur mon pc. Je copie colle le résultat du scan.
      Merci de votre aide !


      ############################## | UsbFix 7.041 | [Suppression]

      Utilisateur: Administrateur (Administrateur) # ARTEMIS-427CA82 [ ]
      Mis à jour le 24/02/2011 par TeamXscript
      Lancé à 21:52:54 | 13/03/2011
      Site Web: http://www.teamxscript.org
      Un fichier non reconnu ? : http://www.teamxscript.org/Upload.php
      Contact: TeamXscript.ElDesaparecido@gmail.com

      CPU: Intel(R) Celeron(R) M CPU 410 @ 1.46GHz
      Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 2
      Internet Explorer 8.0.6001.18702

      Antivirus: ESET Smart Security 3.0 3.0 [Enabled | Updated]
      Firewall: ESET Personal firewall 3.0.621.0 [Enabled]
      RAM -> 446 Mo
      C:\ (%systemdrive%) -> Disque fixe # 56 Go (3 Go libre(s) - 6%) [] # NTFS
      D:\ -> CD-ROM

      ################## | Éléments infectieux |


      Non supprimé ! D:\Autorun.inf
      Supprimé! C:\Recycler\S-1-5-21-1123561945-1364589140-725345543-500
      Non supprimé ! D:\autorun.exe

      ################## | Registre |

      Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drwtsn32.exe
      Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
      Supprimé! HKLM\software\microsoft\windows nt\currentversion\winlogon|Taskman
      Supprimé! HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore|DisableSR
      Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run|Policies
      Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|CTFMON
      Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|HKCU

      ################## | Mountpoints2 |

      Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{65cc1bb0-6229-11de-8411-4d6564696130}
      Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{9f5cccc6-606d-11dd-81aa-0016e360af45}

      ################## | Listing |

      [27/01/2008 - 19:30:52 | N | 0] C:\AUTOEXEC.BAT
      [28/07/2008 - 16:12:01 | N | 212] C:\boot.ini
      [28/08/2001 - 12:00:00 | N | 4952] C:\Bootfont.bin
      [27/01/2008 - 19:30:52 | N | 0] C:\CONFIG.SYS
      [27/07/2008 - 20:09:07 | D ] C:\Display and SMBus.temp
      [27/01/2008 - 19:35:14 | D ] C:\Documents and Settings
      [22/09/2009 - 21:36:14 | D ] C:\Downloads
      [27/01/2008 - 19:30:52 | N | 0] C:\IO.SYS
      [12/03/2011 - 11:41:18 | D ] C:\Menara
      [27/01/2008 - 19:30:52 | N | 0] C:\MSDOS.SYS
      [27/01/2008 - 20:06:59 | RHD ] C:\MSOCache
      [03/08/2004 - 22:38:34 | N | 47564] C:\NTDETECT.COM
      [03/08/2004 - 22:59:44 | N | 251712] C:\ntldr
      [13/03/2011 - 21:33:53 | ASH | 704643072] C:\pagefile.sys
      [27/07/2008 - 19:53:37 | D ] C:\pnp
      [13/03/2011 - 10:44:02 | D ] C:\Program Files
      [13/03/2011 - 21:57:05 | SHD ] C:\RECYCLER
      [27/01/2008 - 19:47:40 | N | 268] C:\sqmdata00.sqm
      [27/07/2008 - 19:29:52 | N | 268] C:\sqmdata01.sqm
      [27/07/2008 - 19:55:06 | N | 268] C:\sqmdata02.sqm
      [27/07/2008 - 20:10:35 | N | 268] C:\sqmdata03.sqm
      [27/07/2008 - 20:16:56 | N | 268] C:\sqmdata04.sqm
      [27/07/2008 - 21:30:07 | N | 268] C:\sqmdata05.sqm
      [27/07/2008 - 21:41:56 | N | 268] C:\sqmdata06.sqm
      [28/07/2008 - 16:09:28 | N | 268] C:\sqmdata07.sqm
      [28/07/2008 - 16:15:05 | N | 268] C:\sqmdata08.sqm
      [28/07/2008 - 17:44:35 | N | 268] C:\sqmdata09.sqm
      [11/09/2008 - 20:48:40 | N | 268] C:\sqmdata10.sqm
      [11/11/2008 - 20:14:35 | N | 232] C:\sqmdata11.sqm
      [09/01/2009 - 23:44:29 | N | 268] C:\sqmdata12.sqm
      [09/03/2009 - 18:55:14 | N | 232] C:\sqmdata13.sqm
      [09/03/2009 - 18:55:30 | N | 232] C:\sqmdata14.sqm
      [07/05/2009 - 22:19:26 | N | 232] C:\sqmdata15.sqm
      [07/05/2009 - 23:45:59 | N | 268] C:\sqmdata16.sqm
      [03/07/2009 - 21:20:51 | N | 232] C:\sqmdata17.sqm
      [03/07/2009 - 21:22:52 | N | 232] C:\sqmdata18.sqm
      [18/07/2009 - 09:20:02 | N | 292] C:\sqmdata19.sqm
      [27/01/2008 - 19:47:40 | N | 244] C:\sqmnoopt00.sqm
      [27/07/2008 - 19:29:52 | N | 244] C:\sqmnoopt01.sqm
      [27/07/2008 - 19:55:06 | N | 244] C:\sqmnoopt02.sqm
      [27/07/2008 - 20:10:35 | N | 244] C:\sqmnoopt03.sqm
      [27/07/2008 - 20:16:56 | N | 244] C:\sqmnoopt04.sqm
      [27/07/2008 - 21:30:07 | N | 244] C:\sqmnoopt05.sqm
      [27/07/2008 - 21:41:56 | N | 244] C:\sqmnoopt06.sqm
      [28/07/2008 - 16:09:28 | N | 244] C:\sqmnoopt07.sqm
      [28/07/2008 - 16:15:05 | N | 244] C:\sqmnoopt08.sqm
      [28/07/2008 - 17:44:35 | N | 244] C:\sqmnoopt09.sqm
      [11/09/2008 - 20:48:40 | N | 244] C:\sqmnoopt10.sqm
      [11/11/2008 - 20:14:35 | N | 244] C:\sqmnoopt11.sqm
      [09/01/2009 - 23:44:29 | N | 244] C:\sqmnoopt12.sqm
      [09/03/2009 - 18:55:13 | N | 244] C:\sqmnoopt13.sqm
      [09/03/2009 - 18:55:30 | N | 244] C:\sqmnoopt14.sqm
      [07/05/2009 - 22:19:26 | N | 244] C:\sqmnoopt15.sqm
      [07/05/2009 - 23:45:59 | N | 244] C:\sqmnoopt16.sqm
      [03/07/2009 - 21:20:50 | N | 244] C:\sqmnoopt17.sqm
      [03/07/2009 - 21:22:52 | N | 244] C:\sqmnoopt18.sqm
      [18/07/2009 - 09:20:02 | N | 244] C:\sqmnoopt19.sqm
      [27/01/2008 - 19:35:06 | SHD ] C:\System Volume Information
      [04/08/2010 - 18:52:06 | D ] C:\temp
      [27/07/2008 - 20:08:51 | D ] C:\TouchPad.temp
      [13/03/2011 - 21:57:05 | D ] C:\UsbFix
      [13/03/2011 - 21:57:11 | A | 1154] C:\UsbFix.txt
      [13/03/2011 - 10:44:13 | D ] C:\WINDOWS
      [10/05/2004 - 18:27:40 | RD ] D:\L1
      [01/12/2003 - 11:46:12 | R | 386] D:\SETUP.ISS
      [05/09/2001 - 05:03:14 | R | 168448] D:\Setup.exe
      [25/09/2002 - 17:19:04 | R | 5280] D:\adinst16.dll
      [30/01/2003 - 08:46:44 | R | 28672] D:\adinst32.dll
      [09/07/2003 - 15:08:06 | R | 312] D:\adiras.ini
      [23/01/2001 - 10:50:30 | R | 1078] D:\adiusb.ico
      [18/05/2004 - 08:43:57 | RD ] D:\autorun
      [07/05/2004 - 10:44:10 | R | 167936] D:\autorun.exe
      [11/04/2001 - 17:09:42 | R | 1078] D:\autorun.ico
      [18/05/2004 - 08:59:38 | R | 62] D:\autorun.inf
      [17/05/2004 - 13:34:48 | R | 1211724] D:\data1.cab
      [17/05/2004 - 13:34:56 | R | 40414] D:\data1.hdr
      [17/05/2004 - 13:34:56 | R | 3597734] D:\data2.cab
      [17/05/2004 - 14:19:12 | R | 1112] D:\dslgui.ini
      [07/02/2003 - 09:08:36 | R | 3161] D:\f@st_800.inf
      [03/03/2003 - 16:10:28 | R | 7558] D:\fast.bmp
      [25/07/2002 - 20:07:36 | R | 346602] D:\ikernel.ex_
      [17/05/2004 - 13:34:56 | R | 555] D:\layout.bin
      [10/05/2004 - 18:27:41 | RD ] D:\linux
      [10/05/2004 - 18:27:42 | RD ] D:\manual
      [13/05/2004 - 08:57:56 | RD ] D:\movies
      [18/05/2004 - 08:46:30 | R | 11817] D:\setup.ini
      [17/05/2004 - 13:34:36 | R | 181135] D:\setup.inx
      [24/02/2003 - 17:00:00 | R | 9326] D:\soporte.txt
      [24/02/2003 - 17:00:40 | R | 14107] D:\support.txt
      [05/03/2004 - 18:32:18 | R | 380] D:\vB.2.x

      ################## | Vaccin |

      C:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)

      ################## | E.O.F |
      0