Attaque Crypto Wall
melie13
Messages postés
13
Date d'inscription
Statut
Membre
Dernière intervention
-
Malekal_morte- Messages postés 180304 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention -
Malekal_morte- Messages postés 180304 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention -
Bonjour,
Mon ordinateur a été atteint par le virus hier. Je voudrais faire passer le rapport de scan de Malware mais je n'y arrive pas, je ne trouve pas ce fichier, l'onglet "Historique" ne permet pas d'accèder au rapport...quelqu'un peut-il m'aider ?
Par avance un grand merci,
Melie
Mon ordinateur a été atteint par le virus hier. Je voudrais faire passer le rapport de scan de Malware mais je n'y arrive pas, je ne trouve pas ce fichier, l'onglet "Historique" ne permet pas d'accèder au rapport...quelqu'un peut-il m'aider ?
Par avance un grand merci,
Melie
A voir également:
- Attaque Crypto Wall
- Attaque par dictionnaire - Guide
- Cyber attaque - Accueil - Piratage
- Boulanger attaque informatique - Accueil - Piratage
- Cyber attaque france - Accueil - Piratage
- Norton crypto - Guide
5 réponses
Salut,
Suis ce tutorial : https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Cela va générer deux rapports FRST.
Envoie comme expliqué, ces deux rapports sur le site http://pjjoint.malekal.com et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.
Suis ce tutorial : https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Cela va générer deux rapports FRST.
Envoie comme expliqué, ces deux rapports sur le site http://pjjoint.malekal.com et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.
Rien de malicieux à priori.
Désinstalle
LiveUpdate 3.2
Google Toolbar
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe
C:\Windows\Tasks\At10.job
C:\Windows\Tasks\At12.job
C:\Windows\Tasks\At14.job
C:\Windows\Tasks\At16.job
C:\Windows\Tasks\At18.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At20.job
C:\Windows\Tasks\At22.job
C:\Windows\Tasks\At24.job
C:\Windows\Tasks\At26.job
C:\Windows\Tasks\At28.job
C:\Windows\Tasks\At30.job
C:\Windows\Tasks\At32.job
C:\Windows\Tasks\At34.job
C:\Windows\Tasks\At36.job
C:\Windows\Tasks\At38.job
C:\Windows\Tasks\At4.job
C:\Windows\Tasks\At40.job
C:\Windows\Tasks\At42.job
C:\Windows\Tasks\At44.job
C:\Windows\Tasks\At46.job
C:\Windows\Tasks\At48.job
C:\Windows\Tasks\At50.job
C:\Windows\Tasks\At52.job
C:\Windows\Tasks\At54.job
C:\Windows\Tasks\At56.job
C:\Windows\Tasks\At58.job
C:\Windows\Tasks\At6.job
C:\Windows\Tasks\At60.job
C:\Windows\Tasks\At62.job
C:\Windows\Tasks\At64.job
C:\Windows\Tasks\At66.job
C:\Windows\Tasks\At68.job
C:\Windows\Tasks\At70.job
C:\Windows\Tasks\At72.job
C:\Windows\Tasks\At74.job
C:\Windows\Tasks\At76.job
C:\Windows\Tasks\At78.job
C:\Windows\Tasks\At8.job
C:\Windows\Tasks\At80.job
C:\Windows\Tasks\At82.job
C:\Windows\Tasks\At84.job
C:\Windows\Tasks\At86.job
C:\Windows\Tasks\At88.job
C:\Windows\Tasks\At90.job
C:\Windows\Tasks\At92.job
C:\Windows\Tasks\At94.job
C:\Windows\Tasks\At96.job
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
Désinstalle
LiveUpdate 3.2
Google Toolbar
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe
C:\Windows\Tasks\At10.job
C:\Windows\Tasks\At12.job
C:\Windows\Tasks\At14.job
C:\Windows\Tasks\At16.job
C:\Windows\Tasks\At18.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At20.job
C:\Windows\Tasks\At22.job
C:\Windows\Tasks\At24.job
C:\Windows\Tasks\At26.job
C:\Windows\Tasks\At28.job
C:\Windows\Tasks\At30.job
C:\Windows\Tasks\At32.job
C:\Windows\Tasks\At34.job
C:\Windows\Tasks\At36.job
C:\Windows\Tasks\At38.job
C:\Windows\Tasks\At4.job
C:\Windows\Tasks\At40.job
C:\Windows\Tasks\At42.job
C:\Windows\Tasks\At44.job
C:\Windows\Tasks\At46.job
C:\Windows\Tasks\At48.job
C:\Windows\Tasks\At50.job
C:\Windows\Tasks\At52.job
C:\Windows\Tasks\At54.job
C:\Windows\Tasks\At56.job
C:\Windows\Tasks\At58.job
C:\Windows\Tasks\At6.job
C:\Windows\Tasks\At60.job
C:\Windows\Tasks\At62.job
C:\Windows\Tasks\At64.job
C:\Windows\Tasks\At66.job
C:\Windows\Tasks\At68.job
C:\Windows\Tasks\At70.job
C:\Windows\Tasks\At72.job
C:\Windows\Tasks\At74.job
C:\Windows\Tasks\At76.job
C:\Windows\Tasks\At78.job
C:\Windows\Tasks\At8.job
C:\Windows\Tasks\At80.job
C:\Windows\Tasks\At82.job
C:\Windows\Tasks\At84.job
C:\Windows\Tasks\At86.job
C:\Windows\Tasks\At88.job
C:\Windows\Tasks\At90.job
C:\Windows\Tasks\At92.job
C:\Windows\Tasks\At94.job
C:\Windows\Tasks\At96.job
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
Voici le résultat:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-12-2014 01
Ran by JPD at 2014-12-22 21:07:38 Run:1
Running from C:\Documents and Settings\JPD\Bureau
Loaded Profile: JPD (Available profiles: JPD)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe
C:\Windows\Tasks\At10.job
C:\Windows\Tasks\At12.job
C:\Windows\Tasks\At14.job
C:\Windows\Tasks\At16.job
C:\Windows\Tasks\At18.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At20.job
C:\Windows\Tasks\At22.job
C:\Windows\Tasks\At24.job
C:\Windows\Tasks\At26.job
C:\Windows\Tasks\At28.job
C:\Windows\Tasks\At30.job
C:\Windows\Tasks\At32.job
C:\Windows\Tasks\At34.job
C:\Windows\Tasks\At36.job
C:\Windows\Tasks\At38.job
C:\Windows\Tasks\At4.job
C:\Windows\Tasks\At40.job
C:\Windows\Tasks\At42.job
C:\Windows\Tasks\At44.job
C:\Windows\Tasks\At46.job
C:\Windows\Tasks\At48.job
C:\Windows\Tasks\At50.job
C:\Windows\Tasks\At52.job
C:\Windows\Tasks\At54.job
C:\Windows\Tasks\At56.job
C:\Windows\Tasks\At58.job
C:\Windows\Tasks\At6.job
C:\Windows\Tasks\At60.job
C:\Windows\Tasks\At62.job
C:\Windows\Tasks\At64.job
C:\Windows\Tasks\At66.job
C:\Windows\Tasks\At68.job
C:\Windows\Tasks\At70.job
C:\Windows\Tasks\At72.job
C:\Windows\Tasks\At74.job
C:\Windows\Tasks\At76.job
C:\Windows\Tasks\At78.job
C:\Windows\Tasks\At8.job
C:\Windows\Tasks\At80.job
C:\Windows\Tasks\At82.job
C:\Windows\Tasks\At84.job
C:\Windows\Tasks\At86.job
C:\Windows\Tasks\At88.job
C:\Windows\Tasks\At90.job
C:\Windows\Tasks\At92.job
C:\Windows\Tasks\At94.job
C:\Windows\Tasks\At96.job
*****************
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe => Moved successfully.
C:\Windows\Tasks\At10.job => Moved successfully.
C:\Windows\Tasks\At12.job => Moved successfully.
C:\Windows\Tasks\At14.job => Moved successfully.
C:\Windows\Tasks\At16.job => Moved successfully.
C:\Windows\Tasks\At18.job => Moved successfully.
C:\Windows\Tasks\At2.job => Moved successfully.
C:\Windows\Tasks\At20.job => Moved successfully.
C:\Windows\Tasks\At22.job => Moved successfully.
C:\Windows\Tasks\At24.job => Moved successfully.
C:\Windows\Tasks\At26.job => Moved successfully.
C:\Windows\Tasks\At28.job => Moved successfully.
C:\Windows\Tasks\At30.job => Moved successfully.
C:\Windows\Tasks\At32.job => Moved successfully.
C:\Windows\Tasks\At34.job => Moved successfully.
C:\Windows\Tasks\At36.job => Moved successfully.
C:\Windows\Tasks\At38.job => Moved successfully.
C:\Windows\Tasks\At4.job => Moved successfully.
C:\Windows\Tasks\At40.job => Moved successfully.
C:\Windows\Tasks\At42.job => Moved successfully.
C:\Windows\Tasks\At44.job => Moved successfully.
C:\Windows\Tasks\At46.job => Moved successfully.
C:\Windows\Tasks\At48.job => Moved successfully.
C:\Windows\Tasks\At50.job => Moved successfully.
C:\Windows\Tasks\At52.job => Moved successfully.
C:\Windows\Tasks\At54.job => Moved successfully.
C:\Windows\Tasks\At56.job => Moved successfully.
C:\Windows\Tasks\At58.job => Moved successfully.
C:\Windows\Tasks\At6.job => Moved successfully.
C:\Windows\Tasks\At60.job => Moved successfully.
C:\Windows\Tasks\At62.job => Moved successfully.
C:\Windows\Tasks\At64.job => Moved successfully.
C:\Windows\Tasks\At66.job => Moved successfully.
C:\Windows\Tasks\At68.job => Moved successfully.
C:\Windows\Tasks\At70.job => Moved successfully.
C:\Windows\Tasks\At72.job => Moved successfully.
C:\Windows\Tasks\At74.job => Moved successfully.
C:\Windows\Tasks\At76.job => Moved successfully.
C:\Windows\Tasks\At78.job => Moved successfully.
C:\Windows\Tasks\At8.job => Moved successfully.
C:\Windows\Tasks\At80.job => Moved successfully.
C:\Windows\Tasks\At82.job => Moved successfully.
C:\Windows\Tasks\At84.job => Moved successfully.
C:\Windows\Tasks\At86.job => Moved successfully.
C:\Windows\Tasks\At88.job => Moved successfully.
C:\Windows\Tasks\At90.job => Moved successfully.
C:\Windows\Tasks\At92.job => Moved successfully.
C:\Windows\Tasks\At94.job => Moved successfully.
C:\Windows\Tasks\At96.job => Moved successfully.
==== End of Fixlog 21:07:41 ====
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-12-2014 01
Ran by JPD at 2014-12-22 21:07:38 Run:1
Running from C:\Documents and Settings\JPD\Bureau
Loaded Profile: JPD (Available profiles: JPD)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe
C:\Windows\Tasks\At10.job
C:\Windows\Tasks\At12.job
C:\Windows\Tasks\At14.job
C:\Windows\Tasks\At16.job
C:\Windows\Tasks\At18.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At20.job
C:\Windows\Tasks\At22.job
C:\Windows\Tasks\At24.job
C:\Windows\Tasks\At26.job
C:\Windows\Tasks\At28.job
C:\Windows\Tasks\At30.job
C:\Windows\Tasks\At32.job
C:\Windows\Tasks\At34.job
C:\Windows\Tasks\At36.job
C:\Windows\Tasks\At38.job
C:\Windows\Tasks\At4.job
C:\Windows\Tasks\At40.job
C:\Windows\Tasks\At42.job
C:\Windows\Tasks\At44.job
C:\Windows\Tasks\At46.job
C:\Windows\Tasks\At48.job
C:\Windows\Tasks\At50.job
C:\Windows\Tasks\At52.job
C:\Windows\Tasks\At54.job
C:\Windows\Tasks\At56.job
C:\Windows\Tasks\At58.job
C:\Windows\Tasks\At6.job
C:\Windows\Tasks\At60.job
C:\Windows\Tasks\At62.job
C:\Windows\Tasks\At64.job
C:\Windows\Tasks\At66.job
C:\Windows\Tasks\At68.job
C:\Windows\Tasks\At70.job
C:\Windows\Tasks\At72.job
C:\Windows\Tasks\At74.job
C:\Windows\Tasks\At76.job
C:\Windows\Tasks\At78.job
C:\Windows\Tasks\At8.job
C:\Windows\Tasks\At80.job
C:\Windows\Tasks\At82.job
C:\Windows\Tasks\At84.job
C:\Windows\Tasks\At86.job
C:\Windows\Tasks\At88.job
C:\Windows\Tasks\At90.job
C:\Windows\Tasks\At92.job
C:\Windows\Tasks\At94.job
C:\Windows\Tasks\At96.job
*****************
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe => Moved successfully.
C:\Windows\Tasks\At10.job => Moved successfully.
C:\Windows\Tasks\At12.job => Moved successfully.
C:\Windows\Tasks\At14.job => Moved successfully.
C:\Windows\Tasks\At16.job => Moved successfully.
C:\Windows\Tasks\At18.job => Moved successfully.
C:\Windows\Tasks\At2.job => Moved successfully.
C:\Windows\Tasks\At20.job => Moved successfully.
C:\Windows\Tasks\At22.job => Moved successfully.
C:\Windows\Tasks\At24.job => Moved successfully.
C:\Windows\Tasks\At26.job => Moved successfully.
C:\Windows\Tasks\At28.job => Moved successfully.
C:\Windows\Tasks\At30.job => Moved successfully.
C:\Windows\Tasks\At32.job => Moved successfully.
C:\Windows\Tasks\At34.job => Moved successfully.
C:\Windows\Tasks\At36.job => Moved successfully.
C:\Windows\Tasks\At38.job => Moved successfully.
C:\Windows\Tasks\At4.job => Moved successfully.
C:\Windows\Tasks\At40.job => Moved successfully.
C:\Windows\Tasks\At42.job => Moved successfully.
C:\Windows\Tasks\At44.job => Moved successfully.
C:\Windows\Tasks\At46.job => Moved successfully.
C:\Windows\Tasks\At48.job => Moved successfully.
C:\Windows\Tasks\At50.job => Moved successfully.
C:\Windows\Tasks\At52.job => Moved successfully.
C:\Windows\Tasks\At54.job => Moved successfully.
C:\Windows\Tasks\At56.job => Moved successfully.
C:\Windows\Tasks\At58.job => Moved successfully.
C:\Windows\Tasks\At6.job => Moved successfully.
C:\Windows\Tasks\At60.job => Moved successfully.
C:\Windows\Tasks\At62.job => Moved successfully.
C:\Windows\Tasks\At64.job => Moved successfully.
C:\Windows\Tasks\At66.job => Moved successfully.
C:\Windows\Tasks\At68.job => Moved successfully.
C:\Windows\Tasks\At70.job => Moved successfully.
C:\Windows\Tasks\At72.job => Moved successfully.
C:\Windows\Tasks\At74.job => Moved successfully.
C:\Windows\Tasks\At76.job => Moved successfully.
C:\Windows\Tasks\At78.job => Moved successfully.
C:\Windows\Tasks\At8.job => Moved successfully.
C:\Windows\Tasks\At80.job => Moved successfully.
C:\Windows\Tasks\At82.job => Moved successfully.
C:\Windows\Tasks\At84.job => Moved successfully.
C:\Windows\Tasks\At86.job => Moved successfully.
C:\Windows\Tasks\At88.job => Moved successfully.
C:\Windows\Tasks\At90.job => Moved successfully.
C:\Windows\Tasks\At92.job => Moved successfully.
C:\Windows\Tasks\At94.job => Moved successfully.
C:\Windows\Tasks\At96.job => Moved successfully.
==== End of Fixlog 21:07:41 ====
Voici le résultat:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-12-2014 01
Ran by JPD at 2014-12-22 21:07:38 Run:1
Running from C:\Documents and Settings\JPD\Bureau
Loaded Profile: JPD (Available profiles: JPD)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe
C:\Windows\Tasks\At10.job
C:\Windows\Tasks\At12.job
C:\Windows\Tasks\At14.job
C:\Windows\Tasks\At16.job
C:\Windows\Tasks\At18.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At20.job
C:\Windows\Tasks\At22.job
C:\Windows\Tasks\At24.job
C:\Windows\Tasks\At26.job
C:\Windows\Tasks\At28.job
C:\Windows\Tasks\At30.job
C:\Windows\Tasks\At32.job
C:\Windows\Tasks\At34.job
C:\Windows\Tasks\At36.job
C:\Windows\Tasks\At38.job
C:\Windows\Tasks\At4.job
C:\Windows\Tasks\At40.job
C:\Windows\Tasks\At42.job
C:\Windows\Tasks\At44.job
C:\Windows\Tasks\At46.job
C:\Windows\Tasks\At48.job
C:\Windows\Tasks\At50.job
C:\Windows\Tasks\At52.job
C:\Windows\Tasks\At54.job
C:\Windows\Tasks\At56.job
C:\Windows\Tasks\At58.job
C:\Windows\Tasks\At6.job
C:\Windows\Tasks\At60.job
C:\Windows\Tasks\At62.job
C:\Windows\Tasks\At64.job
C:\Windows\Tasks\At66.job
C:\Windows\Tasks\At68.job
C:\Windows\Tasks\At70.job
C:\Windows\Tasks\At72.job
C:\Windows\Tasks\At74.job
C:\Windows\Tasks\At76.job
C:\Windows\Tasks\At78.job
C:\Windows\Tasks\At8.job
C:\Windows\Tasks\At80.job
C:\Windows\Tasks\At82.job
C:\Windows\Tasks\At84.job
C:\Windows\Tasks\At86.job
C:\Windows\Tasks\At88.job
C:\Windows\Tasks\At90.job
C:\Windows\Tasks\At92.job
C:\Windows\Tasks\At94.job
C:\Windows\Tasks\At96.job
*****************
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe => Moved successfully.
C:\Windows\Tasks\At10.job => Moved successfully.
C:\Windows\Tasks\At12.job => Moved successfully.
C:\Windows\Tasks\At14.job => Moved successfully.
C:\Windows\Tasks\At16.job => Moved successfully.
C:\Windows\Tasks\At18.job => Moved successfully.
C:\Windows\Tasks\At2.job => Moved successfully.
C:\Windows\Tasks\At20.job => Moved successfully.
C:\Windows\Tasks\At22.job => Moved successfully.
C:\Windows\Tasks\At24.job => Moved successfully.
C:\Windows\Tasks\At26.job => Moved successfully.
C:\Windows\Tasks\At28.job => Moved successfully.
C:\Windows\Tasks\At30.job => Moved successfully.
C:\Windows\Tasks\At32.job => Moved successfully.
C:\Windows\Tasks\At34.job => Moved successfully.
C:\Windows\Tasks\At36.job => Moved successfully.
C:\Windows\Tasks\At38.job => Moved successfully.
C:\Windows\Tasks\At4.job => Moved successfully.
C:\Windows\Tasks\At40.job => Moved successfully.
C:\Windows\Tasks\At42.job => Moved successfully.
C:\Windows\Tasks\At44.job => Moved successfully.
C:\Windows\Tasks\At46.job => Moved successfully.
C:\Windows\Tasks\At48.job => Moved successfully.
C:\Windows\Tasks\At50.job => Moved successfully.
C:\Windows\Tasks\At52.job => Moved successfully.
C:\Windows\Tasks\At54.job => Moved successfully.
C:\Windows\Tasks\At56.job => Moved successfully.
C:\Windows\Tasks\At58.job => Moved successfully.
C:\Windows\Tasks\At6.job => Moved successfully.
C:\Windows\Tasks\At60.job => Moved successfully.
C:\Windows\Tasks\At62.job => Moved successfully.
C:\Windows\Tasks\At64.job => Moved successfully.
C:\Windows\Tasks\At66.job => Moved successfully.
C:\Windows\Tasks\At68.job => Moved successfully.
C:\Windows\Tasks\At70.job => Moved successfully.
C:\Windows\Tasks\At72.job => Moved successfully.
C:\Windows\Tasks\At74.job => Moved successfully.
C:\Windows\Tasks\At76.job => Moved successfully.
C:\Windows\Tasks\At78.job => Moved successfully.
C:\Windows\Tasks\At8.job => Moved successfully.
C:\Windows\Tasks\At80.job => Moved successfully.
C:\Windows\Tasks\At82.job => Moved successfully.
C:\Windows\Tasks\At84.job => Moved successfully.
C:\Windows\Tasks\At86.job => Moved successfully.
C:\Windows\Tasks\At88.job => Moved successfully.
C:\Windows\Tasks\At90.job => Moved successfully.
C:\Windows\Tasks\At92.job => Moved successfully.
C:\Windows\Tasks\At94.job => Moved successfully.
C:\Windows\Tasks\At96.job => Moved successfully.
==== End of Fixlog 21:07:41 ====
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-12-2014 01
Ran by JPD at 2014-12-22 21:07:38 Run:1
Running from C:\Documents and Settings\JPD\Bureau
Loaded Profile: JPD (Available profiles: JPD)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe
C:\Windows\Tasks\At10.job
C:\Windows\Tasks\At12.job
C:\Windows\Tasks\At14.job
C:\Windows\Tasks\At16.job
C:\Windows\Tasks\At18.job
C:\Windows\Tasks\At2.job
C:\Windows\Tasks\At20.job
C:\Windows\Tasks\At22.job
C:\Windows\Tasks\At24.job
C:\Windows\Tasks\At26.job
C:\Windows\Tasks\At28.job
C:\Windows\Tasks\At30.job
C:\Windows\Tasks\At32.job
C:\Windows\Tasks\At34.job
C:\Windows\Tasks\At36.job
C:\Windows\Tasks\At38.job
C:\Windows\Tasks\At4.job
C:\Windows\Tasks\At40.job
C:\Windows\Tasks\At42.job
C:\Windows\Tasks\At44.job
C:\Windows\Tasks\At46.job
C:\Windows\Tasks\At48.job
C:\Windows\Tasks\At50.job
C:\Windows\Tasks\At52.job
C:\Windows\Tasks\At54.job
C:\Windows\Tasks\At56.job
C:\Windows\Tasks\At58.job
C:\Windows\Tasks\At6.job
C:\Windows\Tasks\At60.job
C:\Windows\Tasks\At62.job
C:\Windows\Tasks\At64.job
C:\Windows\Tasks\At66.job
C:\Windows\Tasks\At68.job
C:\Windows\Tasks\At70.job
C:\Windows\Tasks\At72.job
C:\Windows\Tasks\At74.job
C:\Windows\Tasks\At76.job
C:\Windows\Tasks\At78.job
C:\Windows\Tasks\At8.job
C:\Windows\Tasks\At80.job
C:\Windows\Tasks\At82.job
C:\Windows\Tasks\At84.job
C:\Windows\Tasks\At86.job
C:\Windows\Tasks\At88.job
C:\Windows\Tasks\At90.job
C:\Windows\Tasks\At92.job
C:\Windows\Tasks\At94.job
C:\Windows\Tasks\At96.job
*****************
C:\Documents and Settings\BIT DEFENDER 2013\autorun.exe => Moved successfully.
C:\Windows\Tasks\At10.job => Moved successfully.
C:\Windows\Tasks\At12.job => Moved successfully.
C:\Windows\Tasks\At14.job => Moved successfully.
C:\Windows\Tasks\At16.job => Moved successfully.
C:\Windows\Tasks\At18.job => Moved successfully.
C:\Windows\Tasks\At2.job => Moved successfully.
C:\Windows\Tasks\At20.job => Moved successfully.
C:\Windows\Tasks\At22.job => Moved successfully.
C:\Windows\Tasks\At24.job => Moved successfully.
C:\Windows\Tasks\At26.job => Moved successfully.
C:\Windows\Tasks\At28.job => Moved successfully.
C:\Windows\Tasks\At30.job => Moved successfully.
C:\Windows\Tasks\At32.job => Moved successfully.
C:\Windows\Tasks\At34.job => Moved successfully.
C:\Windows\Tasks\At36.job => Moved successfully.
C:\Windows\Tasks\At38.job => Moved successfully.
C:\Windows\Tasks\At4.job => Moved successfully.
C:\Windows\Tasks\At40.job => Moved successfully.
C:\Windows\Tasks\At42.job => Moved successfully.
C:\Windows\Tasks\At44.job => Moved successfully.
C:\Windows\Tasks\At46.job => Moved successfully.
C:\Windows\Tasks\At48.job => Moved successfully.
C:\Windows\Tasks\At50.job => Moved successfully.
C:\Windows\Tasks\At52.job => Moved successfully.
C:\Windows\Tasks\At54.job => Moved successfully.
C:\Windows\Tasks\At56.job => Moved successfully.
C:\Windows\Tasks\At58.job => Moved successfully.
C:\Windows\Tasks\At6.job => Moved successfully.
C:\Windows\Tasks\At60.job => Moved successfully.
C:\Windows\Tasks\At62.job => Moved successfully.
C:\Windows\Tasks\At64.job => Moved successfully.
C:\Windows\Tasks\At66.job => Moved successfully.
C:\Windows\Tasks\At68.job => Moved successfully.
C:\Windows\Tasks\At70.job => Moved successfully.
C:\Windows\Tasks\At72.job => Moved successfully.
C:\Windows\Tasks\At74.job => Moved successfully.
C:\Windows\Tasks\At76.job => Moved successfully.
C:\Windows\Tasks\At78.job => Moved successfully.
C:\Windows\Tasks\At8.job => Moved successfully.
C:\Windows\Tasks\At80.job => Moved successfully.
C:\Windows\Tasks\At82.job => Moved successfully.
C:\Windows\Tasks\At84.job => Moved successfully.
C:\Windows\Tasks\At86.job => Moved successfully.
C:\Windows\Tasks\At88.job => Moved successfully.
C:\Windows\Tasks\At90.job => Moved successfully.
C:\Windows\Tasks\At92.job => Moved successfully.
C:\Windows\Tasks\At94.job => Moved successfully.
C:\Windows\Tasks\At96.job => Moved successfully.
==== End of Fixlog 21:07:41 ====
tu peux supprimer tous les fichiers DECRYPT.
change tous tes mots de passe WEB (facebook, mail etc).
Tu peux tenter de récupérer les fichiers avec les versions précédentes, mais ça ne devrait pas fonctionner, voir : https://forum.malekal.com/viewtopic.php?t=46739&start=
~~
Cette infection va par des emails malicieux et des web exploit.
Un exploit sur site WEB permet l'infection de ton ordinateur de manière automatiquement à la visite d'un site WEB qui a été hacké, il tire partie du fait que tu as des logiciels (Java, Adobe Reader etc) qui sont pas à jour et possèdent des vulnérabilités qui permettent l'execution de code (malicieux dans notre cas) à ton insu.
Le fait de ne pas avoir des logiciels à jour et qui ont potentiellement des vulnérabilités permettent donc d'infecter ton système.
Exemple avec : Exploit Java
Il faut donc impérativement maintenir tes logiciels à jour afin de ne pas voir ces portes d'entrée sur ton système.
Tant que ces logiciels ne seront pas à jour, ton PC est vulnérable et les infections peuvent s'installer facilement.
IMPORTANT : mettre à jour tes programmes notamment Java/Adobe Reader et Flash :
/faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
https://forum.malekal.com/viewtopic.php?t=15960&start=
Désactive Java de tes navigateurs WEB : https://www.commentcamarche.net/faq/35621-desactiver-java-sur-ses-navigateurs-web
~~
Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html
change tous tes mots de passe WEB (facebook, mail etc).
Tu peux tenter de récupérer les fichiers avec les versions précédentes, mais ça ne devrait pas fonctionner, voir : https://forum.malekal.com/viewtopic.php?t=46739&start=
~~
Cette infection va par des emails malicieux et des web exploit.
Un exploit sur site WEB permet l'infection de ton ordinateur de manière automatiquement à la visite d'un site WEB qui a été hacké, il tire partie du fait que tu as des logiciels (Java, Adobe Reader etc) qui sont pas à jour et possèdent des vulnérabilités qui permettent l'execution de code (malicieux dans notre cas) à ton insu.
Le fait de ne pas avoir des logiciels à jour et qui ont potentiellement des vulnérabilités permettent donc d'infecter ton système.
Exemple avec : Exploit Java
Il faut donc impérativement maintenir tes logiciels à jour afin de ne pas voir ces portes d'entrée sur ton système.
Tant que ces logiciels ne seront pas à jour, ton PC est vulnérable et les infections peuvent s'installer facilement.
IMPORTANT : mettre à jour tes programmes notamment Java/Adobe Reader et Flash :
/faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
https://forum.malekal.com/viewtopic.php?t=15960&start=
Désactive Java de tes navigateurs WEB : https://www.commentcamarche.net/faq/35621-desactiver-java-sur-ses-navigateurs-web
~~
Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
On peut les supprimer avec FRST, si tu veux :
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
2014-12-22 11:43 - 2014-10-07 19:07 - 00000000 ___HD () C:\9a01173
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.URL
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.URL
2014-12-22 11:35 - 2014-12-22 11:35 - 00008700 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:35 - 2014-12-22 11:35 - 00008700 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:35 - 2014-12-22 11:35 - 00004636 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:35 - 2014-12-22 11:35 - 00004636 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:35 - 2014-12-22 11:35 - 00000278 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:35 - 2014-12-22 11:35 - 00000278 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
2014-12-22 11:43 - 2014-10-07 19:07 - 00000000 ___HD () C:\9a01173
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.URL
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.URL
2014-12-22 11:35 - 2014-12-22 11:35 - 00008700 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:35 - 2014-12-22 11:35 - 00008700 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:35 - 2014-12-22 11:35 - 00004636 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:35 - 2014-12-22 11:35 - 00004636 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:35 - 2014-12-22 11:35 - 00000278 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:35 - 2014-12-22 11:35 - 00000278 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-12-2014 01
Ran by JPD at 2014-12-23 20:40:07 Run:2
Running from C:\Documents and Settings\JPD\Bureau
Loaded Profile: JPD (Available profiles: JPD)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
2014-12-22 11:43 - 2014-10-07 19:07 - 00000000 ___HD () C:\9a01173
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.URL
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.URL
2014-12-22 11:35 - 2014-12-22 11:35 - 00008700 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:35 - 2014-12-22 11:35 - 00008700 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:35 - 2014-12-22 11:35 - 00004636 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:35 - 2014-12-22 11:35 - 00004636 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:35 - 2014-12-22 11:35 - 00000278 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:35 - 2014-12-22 11:35 - 00000278 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL
*****************
C:\9a01173 => Moved successfully.
C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.HTML => Moved successfully.
"C:\Documents and Settings\DECRYPT_INSTRUCTION.HTML" => File/Directory not found.
"C:\DECRYPT_INSTRUCTION.HTML" => File/Directory not found.
C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.TXT => Moved successfully.
"C:\Documents and Settings\DECRYPT_INSTRUCTION.TXT" => File/Directory not found.
"C:\DECRYPT_INSTRUCTION.TXT" => File/Directory not found.
C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.URL => Moved successfully.
"C:\Documents and Settings\DECRYPT_INSTRUCTION.URL" => File/Directory not found.
"C:\DECRYPT_INSTRUCTION.URL" => File/Directory not found.
C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL => Moved successfully.
==== End of Fixlog 20:40:09 ====
Ran by JPD at 2014-12-23 20:40:07 Run:2
Running from C:\Documents and Settings\JPD\Bureau
Loaded Profile: JPD (Available profiles: JPD)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
2014-12-22 11:43 - 2014-10-07 19:07 - 00000000 ___HD () C:\9a01173
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00008700 _____ () C:\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00004636 _____ () C:\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.URL
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\Documents and Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:43 - 2014-12-22 11:43 - 00000278 _____ () C:\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00008700 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00004636 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.URL
2014-12-22 11:41 - 2014-12-22 11:41 - 00000278 _____ () C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.URL
2014-12-22 11:35 - 2014-12-22 11:35 - 00008700 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:35 - 2014-12-22 11:35 - 00008700 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML
2014-12-22 11:35 - 2014-12-22 11:35 - 00004636 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:35 - 2014-12-22 11:35 - 00004636 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT
2014-12-22 11:35 - 2014-12-22 11:35 - 00000278 _____ () C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.URL
2014-12-22 11:35 - 2014-12-22 11:35 - 00000278 _____ () C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL
*****************
C:\9a01173 => Moved successfully.
C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.HTML => Moved successfully.
"C:\Documents and Settings\DECRYPT_INSTRUCTION.HTML" => File/Directory not found.
"C:\DECRYPT_INSTRUCTION.HTML" => File/Directory not found.
C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.TXT => Moved successfully.
"C:\Documents and Settings\DECRYPT_INSTRUCTION.TXT" => File/Directory not found.
"C:\DECRYPT_INSTRUCTION.TXT" => File/Directory not found.
C:\Documents and Settings\NetworkService\DECRYPT_INSTRUCTION.URL => Moved successfully.
"C:\Documents and Settings\DECRYPT_INSTRUCTION.URL" => File/Directory not found.
"C:\DECRYPT_INSTRUCTION.URL" => File/Directory not found.
C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\LocalService\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\LocalService\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\LocalService\Application Data\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\JPD\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.HTML => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.TXT => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\DECRYPT_INSTRUCTION.URL => Moved successfully.
C:\Documents and Settings\JPD\Local Settings\Application Data\DECRYPT_INSTRUCTION.URL => Moved successfully.
==== End of Fixlog 20:40:09 ====
Et merci bcp pour la réponse rapide...mais je ne trouve pas le lien de téléchargement de Frst, les différents liens ne m'envoie pas vers un téléchargement...je suis fort démunie...
64 bits : https://telecharger.malekal.com/download/frst-64-bits/
Voici les " liens:
- https://pjjoint.malekal.com/files.php?id=FRST_20141222_l7i6c8d5q9
- https://pjjoint.malekal.com/files.php?id=20141222_t12k14j7w7c8
- https://pjjoint.malekal.com/files.php?id=20141222_o117h8m6p14