excuse moi je m'etais trompee mais j'ai vu mon erreur
tu sais je suis retraitee et pas futee !!!!
j'ai telechage roquekiller et voici le rapport
RogueKiller V8.5.4 [Mar 18 2013] par Tigzy
mail : tigzyRK<at>gmail<dot>com
Remontees :
https://www.luanagames.com/index.fr.html
Site Web :
https://www.luanagames.com/index.fr.html
Blog : http://tigzyrk.blogspot.com/
Systeme d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage : Mode normal
Utilisateur : joja [Droits d'admin]
Mode : Recherche -- Date : 01/04/2013 13:56:16
| ARK || FAK || MBR |
¤¤¤ Processus malicieux : 0 ¤¤¤
¤¤¤ Entrees de registre : 17 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : 77Zip973867.exe ("C:\Users\joja\AppData\Local\Temp\77Zip973867.exe" /XML="C:\Users\joja\AppData\Local\Temp\3B6A.tmp" /ROS /STP=0:2) [7] -> TROUVÉ
[RUN][SUSP PATH] HKUS\S-1-5-21-2492780246-1432677283-2788113197-1000[...]\Run : 77Zip973867.exe ("C:\Users\joja\AppData\Local\Temp\77Zip973867.exe" /XML="C:\Users\joja\AppData\Local\Temp\3B6A.tmp" /ROS /STP=0:2) [7] -> TROUVÉ
[TASK][ROGUE ST] 0 : c:\program files (x86)\internet explorer\iexplore.exe -> TROUVÉ
[TASK][ROGUE ST] 4601 : wscript.exe C:\Users\joja\AppData\Local\Temp\launchie.vbs //B -> TROUVÉ
[TASK][SUSP PATH] Test TimeTrigger : C:\Users\joja\AppData\Local\Temp\Runner.exe C:\Users\joja\AppData\Local\Temp\DNS.exe [x] -> TROUVÉ
[DNS] HKLM\[...]\ControlSet001\Services\Tcpip\Interfaces\{0F40DCB9-0F42-498C-BD03-AFBC793BFF3D} : NameServer (62.251.229.241 62.251.231.241) -> TROUVÉ
[DNS] HKLM\[...]\ControlSet001\Services\Tcpip\Interfaces\{39044C13-7552-42AF-B173-60109270EA78} : NameServer (212.217.0.1 212.217.0.12) -> TROUVÉ
[DNS] HKLM\[...]\ControlSet001\Services\Tcpip\Interfaces\{958998DC-99E4-4889-8433-770F771A5534} : NameServer (212.217.0.1 212.217.0.12) -> TROUVÉ
[DNS] HKLM\[...]\ControlSet001\Services\Tcpip\Interfaces\{B1FBD032-CA69-4EE7-9A31-B61135881C2A} : NameServer (62.251.229.241 62.251.231.241) -> TROUVÉ
[DNS] HKLM\[...]\ControlSet002\Services\Tcpip\Interfaces\{0F40DCB9-0F42-498C-BD03-AFBC793BFF3D} : NameServer (62.251.229.241 62.251.231.241) -> TROUVÉ
[DNS] HKLM\[...]\ControlSet002\Services\Tcpip\Interfaces\{39044C13-7552-42AF-B173-60109270EA78} : NameServer (212.217.0.1 212.217.0.12) -> TROUVÉ
[DNS] HKLM\[...]\ControlSet002\Services\Tcpip\Interfaces\{958998DC-99E4-4889-8433-770F771A5534} : NameServer (212.217.0.1 212.217.0.12) -> TROUVÉ
[DNS] HKLM\[...]\ControlSet002\Services\Tcpip\Interfaces\{B1FBD032-CA69-4EE7-9A31-B61135881C2A} : NameServer (62.251.229.241 62.251.231.241) -> TROUVÉ
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> TROUVÉ
[HJ] HKLM\[...]\Wow6432Node\System : ConsentPromptBehaviorAdmin (0) -> TROUVÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ
¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤
¤¤¤ Driver : [NON CHARGE] ¤¤¤
¤¤¤ Fichier HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts
¤¤¤ MBR Verif: ¤¤¤
+++++ PhysicalDrive0: Hitachi HTS543225L9A300 SATA Disk Device +++++
--- User ---
[MBR] c4e2695325b27c3c1a7bc6d0af4121a3
[BSP] ba7218981e13a587b0937e6cd93cfb0a : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 2048 | Size: 14997 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 30715904 | Size: 119240 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 274920345 | Size: 104234 Mo
User = LL1 ... OK!
User = LL2 ... OK!
+++++ PhysicalDrive1: SAMSUNG HD642JJ USB Device +++++
--- User ---
[MBR] 7d9507e402e2179768562cfd34993997
[BSP] 6403b66cdd08f2ec27fb67f1ea2ddfa4 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 610477 Mo
User = LL1 ... OK!
Error reading LL2 MBR!
Termine : << RKreport[1]_S_01042013_135616.txt >>
RKreport[1]_S_01042013_135616.txt