Infecté par Win 32 : Trojan-gen{VB}
f2mn
Messages postés
17
Statut
Membre
-
f2mn Messages postés 17 Statut Membre -
f2mn Messages postés 17 Statut Membre -
SOS !!
Mon antivirus Avast! a détecté un troyen nommé win 32:Trojan-gen{VB} et l'a mis en quarantaine.
Je suis novice en informatique mais tente de faire quelque chose quand même (téléchargement de Spybot - Search & Destroy ; Ccleaner ; Ad-aware) mais sans résultat. A chaque mise sous tension, l'ordinateur s'allume seul et la date et l'heure sont toujours le 31/12/2000 23:00..... le troyen est toujours là !
Le troyen a infecté le fichier A0021328.exe sa localisation d'origine est: C:\System Volume Information\_restore{BCBB538F-4B22-4C6E-BAFD-9A806D251BB2}\RP206
Quelqu'un peut-il m'aider, SVP ?
Mon antivirus Avast! a détecté un troyen nommé win 32:Trojan-gen{VB} et l'a mis en quarantaine.
Je suis novice en informatique mais tente de faire quelque chose quand même (téléchargement de Spybot - Search & Destroy ; Ccleaner ; Ad-aware) mais sans résultat. A chaque mise sous tension, l'ordinateur s'allume seul et la date et l'heure sont toujours le 31/12/2000 23:00..... le troyen est toujours là !
Le troyen a infecté le fichier A0021328.exe sa localisation d'origine est: C:\System Volume Information\_restore{BCBB538F-4B22-4C6E-BAFD-9A806D251BB2}\RP206
Quelqu'un peut-il m'aider, SVP ?
A voir également:
- Infecté par Win 32 : Trojan-gen{VB}
- 32 bits - Guide
- Power iso 32 bit - Télécharger - Gravure
- Win rar - Télécharger - Compression & Décompression
- Télécharger windows 7 32 bits usb - Télécharger - Systèmes d'exploitation
- Clé de produit windows 7 professionnel 32 bits gratuit - Guide
18 réponses
télécharge et installe le logiciel HijackThis v1.99.1
http://pchelpbordeaux.free.fr/logiciels.html
poste son rapport
http://pchelpbordeaux.free.fr/logiciels.html
poste son rapport
Merci pour ta réponse. Voici le rapport:
Logfile of HijackThis v1.99.1
Scan saved at 23:18:28, on 31/12/2000
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Promotions\HPpromo.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org\program\soffice.exe
C:\Program Files\OpenOffice.org\program\OpenOfficeHookTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPpromo psc 1300 series] "C:\Program Files\Hewlett-Packard\Digital Imaging\Promotions\HPpromo.exe" /N "psc 1300 series" -r
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: OpenOffice.org 1.1.1.lnk = C:\Program Files\OpenOffice.org\program\quickstart.exe
O4 - Startup: Virgule OpenOffice.org.lnk = C:\Program Files\OpenOffice.org\program\OpenOfficeHookTray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: R54G Wireless Service - Unknown owner - C:\Program Files\Wireless 802.11g Monitor\WLService.exe
Logfile of HijackThis v1.99.1
Scan saved at 23:18:28, on 31/12/2000
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Promotions\HPpromo.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org\program\soffice.exe
C:\Program Files\OpenOffice.org\program\OpenOfficeHookTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPpromo psc 1300 series] "C:\Program Files\Hewlett-Packard\Digital Imaging\Promotions\HPpromo.exe" /N "psc 1300 series" -r
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: OpenOffice.org 1.1.1.lnk = C:\Program Files\OpenOffice.org\program\quickstart.exe
O4 - Startup: Virgule OpenOffice.org.lnk = C:\Program Files\OpenOffice.org\program\OpenOfficeHookTray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: R54G Wireless Service - Unknown owner - C:\Program Files\Wireless 802.11g Monitor\WLService.exe
télécharge GenProc de Jean-Chretien1 et Narco4 sur ton bureau
http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip
dézippe le dossier, double-clique sur GenProc.bat et poste le contenu du rapport qui s'ouvre
Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html
http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip
dézippe le dossier, double-clique sur GenProc.bat et poste le contenu du rapport qui s'ouvre
Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html
Voici le rapport:
Rem GenProc.bat 03/03/2007 - Narco4 & jean-chretien1
Rem Merci à S!RI pour la detéction des Rootkits!
@echo off
color 1f
if exist %SystemDrive%\GenProc.txt del %SystemDrive%\GenProc.txt
Rem *** Verifications ***
set CheminBatch=%cd%
if not exist "%CheminBatch%\Canned\Bagle_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FixWareOut_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\bfu_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\CCleaner_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\egdaccess_bfu_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Lop_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Navipromo_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Navipromo_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\SmitfraudFix_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\SmitfraudFix_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\SDfix_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\SDfix_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Vundo_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Vundo_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Winsoftware_bfu_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Winsoftware_bfu_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Toolbar_bfu_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Toolbar_bfu_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FixWebHancer_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FixWebHancer_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\RemGAIN_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\RemGAIN_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FxNdotN_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FxNdotN_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Look2me_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Look2me_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\rustock_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Purity_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Purity_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\MSNfix_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\MSNfix_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Arguments" goto ManqueFichiers
if not exist "%CheminBatch%\outil" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Flash_Disinfector_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Flash_Disinfector_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Haxfix_Dl.txt" goto ManqueFichiers
goto ManqueFichiers2
:ManqueFichiers
cls
echo.
echo.
echo.
echo.
echo Il manque un ou plusieurs fichiers
echo necessaires au fonctionnement du programme.
echo.
echo.
echo Veuillez :
echo.
echo.
echo 1 - Fermer cette fenetre
echo 2 - Supprimer la totalite du dossier GenProc ainsi que le fichier GenProc.zip
echo 3 - Suivre ces indications :
echo http://www.alt-shift-return.org/Info/GenProc-HowTo.html
echo.
echo.
echo.
echo.
pause
exit
:ManqueFichiers2
if not exist "%CheminBatch%\GenProc.bat" (
cls
echo.
echo.
echo.
echo.
echo Attention, le dossier GenProc doit se trouver sur le bureau,
echo et les fichiers qu'il contient ne doivent pas se situer dans un sous-dossier :
echo Bureau\GenProc\GenProc.
echo.
echo Veuillez deplacer le dossier GenProc qui contient les fichiers
echo directement sur votre bureau.
echo.
echo Si un remplacement de dossier est propose, acceptez.
echo Le programme va ensuite fermer, reprenez la procedure a ce moment la
echo.
echo.
echo.
pause
exit
)
cls
echo.
echo.
echo.
echo.
echo Vous etes sur le point d'executer le fichier GenProc.bat
echo.
echo.
echo Il est important de ne le lancer qu'une seule fois
echo meme si le rapport s'ouvre tres rapidement
echo dans le cas contraire vous risqueriez de fausser les resultats
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo.
pause
Rem ***création de my document,copie de swreg.exe dans system32
if not exist %SystemRoot%\system32\swreg.exe copy "%CheminBatch%\outil\swreg.exe" %SystemRoot%\system32\swreg.exe >NUL
@chcp 1252>nul
cd %CheminBatch%
swreg query "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v "Personal" > "%CheminBatch%\path.txt"
findstr "Personal" path.txt > path2.txt
for /f "tokens=3 delims= " %%a in (path2.txt) do (set Documents=%%a)
if exist "%CheminBatch%\path?.txt" del "%CheminBatch%\path?.txt"
)
set Compte=%userprofile:~26%
set MSE=***** Copie ce qui suit dans un fichier texte et redémarre en mode sans échec comme indiqué ici https://docs.microsoft.com/en-us/?mfr=true (choisis ta session courante "%Compte%") *****
set ComptProc=1
if not exist %SystemRoot%\system32\swreg.exe copy "%CheminBatch%\outil\swreg.exe" %SystemRoot%\system32\swreg.exe >NUL
if exist "%CheminBatch%\outil\FixWareOutOK.txt" (
swreg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces" /s | find "85.255" 2>NUL
if errorlevel 1 del "%CheminBatch%\outil\FixWareOutOK.txt"
)
Rem *** Nombre de lancements de GenProc ***
cd "%CheminBatch%\outil"
for /f %%a in ('dir /b [*].txt') do (set nbre=%%a)
set nbre2=%nbre:~1,-5%
set /a nbre3=%nbre2%+1
if exist [*].txt del [*].txt
echo. > [%nbre3%].txt
Rem *** Argument.txt ***
echo.>> "%CheminBatch%\Arguments\Argument.txt"
echo # Détections %date% %time% - %cd% >> "%CheminBatch%\Arguments\Argument.txt"
echo.>> "%CheminBatch%\Arguments\Argument.txt"
cls
echo.
echo [ GenProc - Narco4 ~ jean-chretien1 ]
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo Veuillez patienter pendant que le programme teste diverses infections...
echo.
echo.
Rem *** Téléchargements ***
echo Rapport GenProc 0.55 [%nbre3%] effectué le %date% à %time% - SystemRoot = %SystemRoot%>> %SystemDrive%\GenProc.txt
echo.>> %SystemDrive%\GenProc.txt
if not exist "%CheminBatch%\outil\CCleanerOK.txt" (
cd "%PROGRAMFILES%\CCleaner" 2>NUL
if not errorlevel 1 ((
echo Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.
) >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
echo CCleanerOk >> "%CheminBatch%\outil\CCleanerOK.txt"
))
if exist "%CheminBatch%\outil\FixWareOutOK.txt" (
echo ## WareOut semble toujours présent, consultez le fichier journal ##>> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
)
:Telech
echo # Etape %ComptProc%/ Télécharge : >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
if not exist "%CheminBatch%\outil\CCleanerOK.txt" (
cd "%PROGRAMFILES%\CCleaner" 2>NUL
if errorlevel 1 (
type "%CheminBatch%\Canned\CCleaner_Dl.txt" >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
echo CCleanerOk >> "%CheminBatch%\outil\CCleanerOK.txt"
))
Rem *** Tests infections ***
:rustock_Test
set Comptrustock=0
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\pe386" >nul
swreg save "HKLM\System\CurrentControlSet\Services\pe386" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\pe386" >nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% pe386 present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\huy32" >nul
swreg save "HKLM\System\CurrentControlSet\Services\huy32" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\huy32">nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% huy32 present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\lzx32" >nul
swreg save "HKLM\System\CurrentControlSet\Services\lzx32" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\lzx32" >nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% lzx32 present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\msguard" >nul
swreg save "HKLM\System\CurrentControlSet\Services\msguard" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\msguard" >nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% msguard present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\xpdt" >nul
swreg save "HKLM\System\CurrentControlSet\Services\xpdt" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\xpdt">nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% xpdt present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
:Bagle_Test
set ComptBagle=0
if exist "%SystemRoot%\system32\wintems.exe" (
type "%CheminBatch%\Canned\Bagle_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Bagle:le %date% à %time% %SystemRoot%\system32\wintems.exe >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptBagle=%ComptBagle%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if exist "%SystemRoot%\system32\hldrrr.exe" (
type "%CheminBatch%\Canned\Bagle_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Bagle:le %date% à %time% %SystemRoot%\system32\hldrrr.exe >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptBagle=%ComptBagle%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
cd "%APPDATA%\hidires" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\Bagle_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Bagle:le %date% à %time% %APPDATA%\hidires >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptBagle=%ComptBagle%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
cd "%SystemRoot%\exefld" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\Bagle_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Bagle:le %date% à %time% %SystemRoot%\exefld >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptBagle=%ComptBagle%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
:WareOut_Test
set ComptWareOut=0
if exist "%CheminBatch%\outil\FixWareOutOK.txt" (
for /f "tokens=8 delims=\" %%a in ('reg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces"'
) do (
swreg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\%%a" /s | find "85.255" 2>NUL
if not errorlevel 1 (
echo WareOut:le %date% à %time% >> "%CheminBatch%\Arguments\Argument.txt"
echo [HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\%%a] >>"%CheminBatch%\Arguments\Argument.txt"
reg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\%%a" /s | find "85.255" >>"%CheminBatch%\Arguments\Argument.txt"
)
goto Haxfix_Test
))
swreg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces" /s | find /i "85.255" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\FixWareOut_Dl.txt" >> %SystemDrive%\GenProc.txt
echo WareOut:le %date% à %time% HKLM\....\85.255... >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptWareOut=%ComptWareOut%+1
echo WareOut >> "%CheminBatch%\outil\FixWareOutOK.txt"
goto Notepad
)
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\FixWareOut_Dl.txt" >> %SystemDrive%\GenProc.txt
echo WareOut:le %date% à %time% HKLM\....\ruins >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptWareOut=%ComptWareOut%+1
echo WareOut >> "%CheminBatch%\outil\FixWareOutOK.txt"
goto Notepad
)
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\FixWareOut_Dl.txt" >> %SystemDrive%\GenProc.txt
echo WareOut:le %date% à %time% HKLM\....\Urls >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptWareOut=%ComptWareOut%+1
echo WareOut >> "%CheminBatch%\outil\FixWareOutOK.txt"
goto Notepad
)
:Haxfix_Test
set ComptHaxfix=0
if exist "%CheminBatch%\outil\HaxfixOK.txt" goto lop_test
if exist "%SystemRoot%\System32\xptptt.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\xptptt.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\xptpmm.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\xptpmm.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\linksrvd.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\linksrvd.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\linksrv0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\linksrv0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\userinit.exe" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\userinit.exe >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\agpbrdg0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\agpbrdg0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\armdvc.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\armdvc.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\arprmdg0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\arprmdg0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\asusrx20.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\asusrx20.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avload32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avload32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpe32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpe32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpe64.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpe64.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpi32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpi32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpp32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpp32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpu32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpu32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpx32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpx32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\axdebugl?.???" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\axdebugl?.??? >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\axxt32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\axxt32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\bmtdhh.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\bmtdhh.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\bmtdhk.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\bmtdhk.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\bt848rom.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\bt848rom.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\cdscsix3.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\cdscsix3.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\cdscsix3r.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\cdscsix3r.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\cert32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\cert32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\cpudev.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\cpudev.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\CsdDriver.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\CsdDriver.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ddirectxt.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ddirectxt.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ddirectz.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ddirectz.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\debugg.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\debugg.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\directprt.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\directprt.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\directpt.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\directpt.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\directut.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\directut.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\docent0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\docent0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\docent2.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\docent2.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dvb03a.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dvb03a.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dvd4free.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dvd4free.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dxtpdh.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dxtpdh.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dxtpdx.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dxtpdx.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dxtpdx.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dxtpdx.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\eetvpn.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\eetvpn.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\eexvpn.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\eexvpn.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\emldvc.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\emldvc.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\emul37.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\emul37.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\emul65.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\emul65.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\emul65.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\emul65.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\epsn2sys.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\epsn2sys.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\epsonsys.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\epsonsys.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\extfpu.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\extfpu.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\extxerox.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\extxerox.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\fanxctrl.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\fanxctrl.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\flashdrvr.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\flashdrvr.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\fuxx32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\fuxx32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\gatexkey.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\gatexkey.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\gdiwxp.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\gdiwxp.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\gdwxp3.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\gdwxp3.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\hpprintdrv.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\hpprintdrv.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\hpprintx.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\hpprintx.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ideusr50.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ideusr50.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ies4dll.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ies4dll.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\iesdl4l.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\iesdl4l.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ipudpb2.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ipudpb2.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\k53lock.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\k53lock.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ke7dnl.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ke7dnl.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\kednld.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\kednld.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ksapgh.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ksapgh.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lanH32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lanH32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lanH64.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lanH64.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lanmui.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lanmui.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lannui.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lannui.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lgn1216a.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lgn1216a.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\logon032.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\logon032.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\logon16x.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\logon16x.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lsd_f3.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lsd_f3.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mcfCC4.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mcfCC4.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mcfdrv.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mcfdrv.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mcfG7A.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mcfG7A.dl >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mdfpro.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mdfpro.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\MemMan.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\MemMan.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mi5035a0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mi5035a0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mi5035a5.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mi5035a5.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mm77lgn.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mm77lgn.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmccrd.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmccrd.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmcdll.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmcdll.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx17g.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx17g.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx19g.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx19g.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx19g.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx19g.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx432.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx432.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx464.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx464.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx4xm.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx4xm.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx4xt.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx4xt.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmxeroxk.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmxeroxk.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmxF32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmxF32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmxF64.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmxF64.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\MSplg7.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
Rem GenProc.bat 03/03/2007 - Narco4 & jean-chretien1
Rem Merci à S!RI pour la detéction des Rootkits!
@echo off
color 1f
if exist %SystemDrive%\GenProc.txt del %SystemDrive%\GenProc.txt
Rem *** Verifications ***
set CheminBatch=%cd%
if not exist "%CheminBatch%\Canned\Bagle_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FixWareOut_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\bfu_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\CCleaner_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\egdaccess_bfu_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Lop_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Navipromo_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Navipromo_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\SmitfraudFix_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\SmitfraudFix_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\SDfix_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\SDfix_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Vundo_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Vundo_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Winsoftware_bfu_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Winsoftware_bfu_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Toolbar_bfu_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Toolbar_bfu_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FixWebHancer_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FixWebHancer_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\RemGAIN_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\RemGAIN_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FxNdotN_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\FxNdotN_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Look2me_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Look2me_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\rustock_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Purity_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Purity_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\MSNfix_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\MSNfix_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Arguments" goto ManqueFichiers
if not exist "%CheminBatch%\outil" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Flash_Disinfector_Dl.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Flash_Disinfector_Exec.txt" goto ManqueFichiers
if not exist "%CheminBatch%\Canned\Haxfix_Dl.txt" goto ManqueFichiers
goto ManqueFichiers2
:ManqueFichiers
cls
echo.
echo.
echo.
echo.
echo Il manque un ou plusieurs fichiers
echo necessaires au fonctionnement du programme.
echo.
echo.
echo Veuillez :
echo.
echo.
echo 1 - Fermer cette fenetre
echo 2 - Supprimer la totalite du dossier GenProc ainsi que le fichier GenProc.zip
echo 3 - Suivre ces indications :
echo http://www.alt-shift-return.org/Info/GenProc-HowTo.html
echo.
echo.
echo.
echo.
pause
exit
:ManqueFichiers2
if not exist "%CheminBatch%\GenProc.bat" (
cls
echo.
echo.
echo.
echo.
echo Attention, le dossier GenProc doit se trouver sur le bureau,
echo et les fichiers qu'il contient ne doivent pas se situer dans un sous-dossier :
echo Bureau\GenProc\GenProc.
echo.
echo Veuillez deplacer le dossier GenProc qui contient les fichiers
echo directement sur votre bureau.
echo.
echo Si un remplacement de dossier est propose, acceptez.
echo Le programme va ensuite fermer, reprenez la procedure a ce moment la
echo.
echo.
echo.
pause
exit
)
cls
echo.
echo.
echo.
echo.
echo Vous etes sur le point d'executer le fichier GenProc.bat
echo.
echo.
echo Il est important de ne le lancer qu'une seule fois
echo meme si le rapport s'ouvre tres rapidement
echo dans le cas contraire vous risqueriez de fausser les resultats
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo.
pause
Rem ***création de my document,copie de swreg.exe dans system32
if not exist %SystemRoot%\system32\swreg.exe copy "%CheminBatch%\outil\swreg.exe" %SystemRoot%\system32\swreg.exe >NUL
@chcp 1252>nul
cd %CheminBatch%
swreg query "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" /v "Personal" > "%CheminBatch%\path.txt"
findstr "Personal" path.txt > path2.txt
for /f "tokens=3 delims= " %%a in (path2.txt) do (set Documents=%%a)
if exist "%CheminBatch%\path?.txt" del "%CheminBatch%\path?.txt"
)
set Compte=%userprofile:~26%
set MSE=***** Copie ce qui suit dans un fichier texte et redémarre en mode sans échec comme indiqué ici https://docs.microsoft.com/en-us/?mfr=true (choisis ta session courante "%Compte%") *****
set ComptProc=1
if not exist %SystemRoot%\system32\swreg.exe copy "%CheminBatch%\outil\swreg.exe" %SystemRoot%\system32\swreg.exe >NUL
if exist "%CheminBatch%\outil\FixWareOutOK.txt" (
swreg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces" /s | find "85.255" 2>NUL
if errorlevel 1 del "%CheminBatch%\outil\FixWareOutOK.txt"
)
Rem *** Nombre de lancements de GenProc ***
cd "%CheminBatch%\outil"
for /f %%a in ('dir /b [*].txt') do (set nbre=%%a)
set nbre2=%nbre:~1,-5%
set /a nbre3=%nbre2%+1
if exist [*].txt del [*].txt
echo. > [%nbre3%].txt
Rem *** Argument.txt ***
echo.>> "%CheminBatch%\Arguments\Argument.txt"
echo # Détections %date% %time% - %cd% >> "%CheminBatch%\Arguments\Argument.txt"
echo.>> "%CheminBatch%\Arguments\Argument.txt"
cls
echo.
echo [ GenProc - Narco4 ~ jean-chretien1 ]
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo.
echo Veuillez patienter pendant que le programme teste diverses infections...
echo.
echo.
Rem *** Téléchargements ***
echo Rapport GenProc 0.55 [%nbre3%] effectué le %date% à %time% - SystemRoot = %SystemRoot%>> %SystemDrive%\GenProc.txt
echo.>> %SystemDrive%\GenProc.txt
if not exist "%CheminBatch%\outil\CCleanerOK.txt" (
cd "%PROGRAMFILES%\CCleaner" 2>NUL
if not errorlevel 1 ((
echo Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.
) >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
echo CCleanerOk >> "%CheminBatch%\outil\CCleanerOK.txt"
))
if exist "%CheminBatch%\outil\FixWareOutOK.txt" (
echo ## WareOut semble toujours présent, consultez le fichier journal ##>> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
)
:Telech
echo # Etape %ComptProc%/ Télécharge : >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
if not exist "%CheminBatch%\outil\CCleanerOK.txt" (
cd "%PROGRAMFILES%\CCleaner" 2>NUL
if errorlevel 1 (
type "%CheminBatch%\Canned\CCleaner_Dl.txt" >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
echo CCleanerOk >> "%CheminBatch%\outil\CCleanerOK.txt"
))
Rem *** Tests infections ***
:rustock_Test
set Comptrustock=0
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\pe386" >nul
swreg save "HKLM\System\CurrentControlSet\Services\pe386" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\pe386" >nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% pe386 present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\huy32" >nul
swreg save "HKLM\System\CurrentControlSet\Services\huy32" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\huy32">nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% huy32 present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\lzx32" >nul
swreg save "HKLM\System\CurrentControlSet\Services\lzx32" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\lzx32" >nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% lzx32 present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\msguard" >nul
swreg save "HKLM\System\CurrentControlSet\Services\msguard" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\msguard" >nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% msguard present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
swreg add "HKLM\System\CurrentControlSet\Services\xpdt" >nul
swreg save "HKLM\System\CurrentControlSet\Services\xpdt" "%CheminBatch%\outil\tmp.hiv" >nul
swreg delete "HKLM\System\CurrentControlSet\Services\xpdt">nul
if NOT EXIST "%CheminBatch%\outil\tmp.hiv" (
type "%CheminBatch%\Canned\rustock_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Rustok: le %date% à %time% xpdt present! >> "%CheminBatch%\Arguments\Argument.txt"
set /a Comptrustock=%Comptrustock%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if EXIST "%CheminBatch%\outil\tmp.hiv" del "%CheminBatch%\outil\tmp.hiv"
:Bagle_Test
set ComptBagle=0
if exist "%SystemRoot%\system32\wintems.exe" (
type "%CheminBatch%\Canned\Bagle_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Bagle:le %date% à %time% %SystemRoot%\system32\wintems.exe >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptBagle=%ComptBagle%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
if exist "%SystemRoot%\system32\hldrrr.exe" (
type "%CheminBatch%\Canned\Bagle_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Bagle:le %date% à %time% %SystemRoot%\system32\hldrrr.exe >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptBagle=%ComptBagle%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
cd "%APPDATA%\hidires" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\Bagle_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Bagle:le %date% à %time% %APPDATA%\hidires >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptBagle=%ComptBagle%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
cd "%SystemRoot%\exefld" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\Bagle_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Bagle:le %date% à %time% %SystemRoot%\exefld >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptBagle=%ComptBagle%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto Notepad
)
:WareOut_Test
set ComptWareOut=0
if exist "%CheminBatch%\outil\FixWareOutOK.txt" (
for /f "tokens=8 delims=\" %%a in ('reg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces"'
) do (
swreg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\%%a" /s | find "85.255" 2>NUL
if not errorlevel 1 (
echo WareOut:le %date% à %time% >> "%CheminBatch%\Arguments\Argument.txt"
echo [HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\%%a] >>"%CheminBatch%\Arguments\Argument.txt"
reg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\%%a" /s | find "85.255" >>"%CheminBatch%\Arguments\Argument.txt"
)
goto Haxfix_Test
))
swreg query "HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces" /s | find /i "85.255" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\FixWareOut_Dl.txt" >> %SystemDrive%\GenProc.txt
echo WareOut:le %date% à %time% HKLM\....\85.255... >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptWareOut=%ComptWareOut%+1
echo WareOut >> "%CheminBatch%\outil\FixWareOutOK.txt"
goto Notepad
)
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\FixWareOut_Dl.txt" >> %SystemDrive%\GenProc.txt
echo WareOut:le %date% à %time% HKLM\....\ruins >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptWareOut=%ComptWareOut%+1
echo WareOut >> "%CheminBatch%\outil\FixWareOutOK.txt"
goto Notepad
)
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls" 2>NUL
if not errorlevel 1 (
type "%CheminBatch%\Canned\FixWareOut_Dl.txt" >> %SystemDrive%\GenProc.txt
echo WareOut:le %date% à %time% HKLM\....\Urls >> "%CheminBatch%\Arguments\Argument.txt"
set /a ComptWareOut=%ComptWareOut%+1
echo WareOut >> "%CheminBatch%\outil\FixWareOutOK.txt"
goto Notepad
)
:Haxfix_Test
set ComptHaxfix=0
if exist "%CheminBatch%\outil\HaxfixOK.txt" goto lop_test
if exist "%SystemRoot%\System32\xptptt.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\xptptt.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\xptpmm.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\xptpmm.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\linksrvd.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\linksrvd.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\linksrv0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\linksrv0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\userinit.exe" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\userinit.exe >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\agpbrdg0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\agpbrdg0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\armdvc.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\armdvc.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\arprmdg0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\arprmdg0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\asusrx20.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\asusrx20.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avload32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avload32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpe32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpe32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpe64.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpe64.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpi32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpi32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpp32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpp32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpu32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpu32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\avpx32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\avpx32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\axdebugl?.???" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\axdebugl?.??? >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\axxt32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\axxt32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\bmtdhh.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\bmtdhh.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\bmtdhk.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\bmtdhk.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\bt848rom.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\bt848rom.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\cdscsix3.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\cdscsix3.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\cdscsix3r.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\cdscsix3r.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\cert32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\cert32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\cpudev.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\cpudev.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\CsdDriver.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\CsdDriver.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ddirectxt.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ddirectxt.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ddirectz.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ddirectz.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\debugg.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\debugg.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\directprt.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\directprt.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\directpt.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\directpt.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\directut.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\directut.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\docent0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\docent0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\docent2.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\docent2.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dvb03a.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dvb03a.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dvd4free.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dvd4free.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dxtpdh.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dxtpdh.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dxtpdx.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dxtpdx.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\dxtpdx.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\dxtpdx.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\eetvpn.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\eetvpn.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\eexvpn.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\eexvpn.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\emldvc.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\emldvc.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\emul37.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\emul37.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\emul65.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\emul65.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\emul65.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\emul65.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\epsn2sys.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\epsn2sys.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\epsonsys.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\epsonsys.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\extfpu.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\extfpu.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\extxerox.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\extxerox.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\fanxctrl.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\fanxctrl.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\flashdrvr.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\flashdrvr.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\fuxx32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\fuxx32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\gatexkey.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\gatexkey.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\gdiwxp.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\gdiwxp.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\gdwxp3.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\gdwxp3.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\hpprintdrv.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\hpprintdrv.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\hpprintx.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\hpprintx.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ideusr50.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ideusr50.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ies4dll.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ies4dll.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\iesdl4l.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\iesdl4l.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ipudpb2.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ipudpb2.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\k53lock.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\k53lock.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ke7dnl.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ke7dnl.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\kednld.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\kednld.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\ksapgh.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\ksapgh.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lanH32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lanH32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lanH64.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lanH64.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lanmui.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lanmui.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lannui.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lannui.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lgn1216a.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lgn1216a.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\logon032.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\logon032.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\logon16x.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\logon16x.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\lsd_f3.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\lsd_f3.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mcfCC4.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mcfCC4.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mcfdrv.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mcfdrv.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mcfG7A.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mcfG7A.dl >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mdfpro.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mdfpro.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\MemMan.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\MemMan.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mi5035a0.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mi5035a0.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mi5035a5.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mi5035a5.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mm77lgn.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mm77lgn.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmccrd.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmccrd.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmcdll.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmcdll.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx17g.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx17g.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx19g.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx19g.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx19g.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx19g.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx432.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx432.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx464.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx464.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx4xm.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx4xm.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmx4xt.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmx4xt.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmxeroxk.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmxeroxk.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmxF32.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmxF32.dll >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\mmxF64.sys" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
echo Haxdoor:le %date% à %time% %SystemRoot%\System32\mmxF64.sys >> "%CheminBatch%\Arguments\Argument.txt"
echo Haxfix >> "%CheminBatch%\outil\HaxfixOK.txt"
set /a ComptHaxfix=%ComptHaxfix%+1
echo. >> %SystemDrive%\GenProc.txt
echo. >> %SystemDrive%\GenProc.txt
goto lop_Test
)
if exist "%SystemRoot%\System32\MSplg7.dll" (
type "%CheminBatch%\Canned\Haxfix_Dl.txt" >> %SystemDrive%\GenProc.txt
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
laisse tomber GenProc tant pis
fais ceci
1/télécharge et installe le logiciel HijackThis v1.99.1
http://pchelpbordeaux.free.fr/logiciels.html
poste son rapport
2/télécharge AVG Antispyware
https://www.avg.com/en-ww/free-antivirus-download
mode d'utilisation :
Lance AVG Anti-Spyware, mets le à jour,
Clique sur le bouton « Analyse » onglet « paramètres »
Puis « Comment réagir », clique sur Actions recommandées. Sélectionne Quarantaine.
Retour à l'onglet Analyse.
Clique sur Analyse complète du système.
A la fin du scan, choisis " Appliquer toutes les actions "
Clique sur "Enregistrer le rapport". Le fichier texte se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.
3/ Télécharge : - CCleaner
https://www.pcastuces.com/logitheque/ccleaner.htm
("Download Latest Version", sur la droite).
Ce logiciel va permettre de supprimer tous les fichiers temporaires. Avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires". Ensuite, Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.
4/ lance ccleaner , nettoyeur, et supprime tout ce qu'il trouve
5/ lance avg antispyware et supprime tout ce qu'il trouve et poste son rapport
fais ceci
1/télécharge et installe le logiciel HijackThis v1.99.1
http://pchelpbordeaux.free.fr/logiciels.html
poste son rapport
2/télécharge AVG Antispyware
https://www.avg.com/en-ww/free-antivirus-download
mode d'utilisation :
Lance AVG Anti-Spyware, mets le à jour,
Clique sur le bouton « Analyse » onglet « paramètres »
Puis « Comment réagir », clique sur Actions recommandées. Sélectionne Quarantaine.
Retour à l'onglet Analyse.
Clique sur Analyse complète du système.
A la fin du scan, choisis " Appliquer toutes les actions "
Clique sur "Enregistrer le rapport". Le fichier texte se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.
3/ Télécharge : - CCleaner
https://www.pcastuces.com/logitheque/ccleaner.htm
("Download Latest Version", sur la droite).
Ce logiciel va permettre de supprimer tous les fichiers temporaires. Avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires". Ensuite, Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.
4/ lance ccleaner , nettoyeur, et supprime tout ce qu'il trouve
5/ lance avg antispyware et supprime tout ce qu'il trouve et poste son rapport
je suis désolé. j'arrive tout de même à dézipper mais pas à obtenir GenProc.txt
1/Rapport Hijackthis
Logfile of HijackThis v1.99.1
Scan saved at 21:16:31, on 28/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Promotions\HPpromo.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org\program\OpenOfficeHookTray.exe
C:\Program Files\OpenOffice.org\program\soffice.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPpromo psc 1300 series] "C:\Program Files\Hewlett-Packard\Digital Imaging\Promotions\HPpromo.exe" /N "psc 1300 series" -r
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: OpenOffice.org 1.1.1.lnk = C:\Program Files\OpenOffice.org\program\quickstart.exe
O4 - Startup: Virgule OpenOffice.org.lnk = C:\Program Files\OpenOffice.org\program\OpenOfficeHookTray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: R54G Wireless Service - Unknown owner - C:\Program Files\Wireless 802.11g Monitor\WLService.exe
1/Rapport Hijackthis
Logfile of HijackThis v1.99.1
Scan saved at 21:16:31, on 28/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Wireless 802.11g Monitor\WLService.exe
C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Promotions\HPpromo.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org\program\OpenOfficeHookTray.exe
C:\Program Files\OpenOffice.org\program\soffice.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPpromo psc 1300 series] "C:\Program Files\Hewlett-Packard\Digital Imaging\Promotions\HPpromo.exe" /N "psc 1300 series" -r
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: OpenOffice.org 1.1.1.lnk = C:\Program Files\OpenOffice.org\program\quickstart.exe
O4 - Startup: Virgule OpenOffice.org.lnk = C:\Program Files\OpenOffice.org\program\OpenOfficeHookTray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u1-windows-i586-jc.cab
O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: R54G Wireless Service - Unknown owner - C:\Program Files\Wireless 802.11g Monitor\WLService.exe
Est ce le bon rapport ?
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 22:21:15 28/06/2007
+ Résultat de l'analyse:
:mozilla.12:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.11:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 22:21:15 28/06/2007
+ Résultat de l'analyse:
:mozilla.12:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
:mozilla.11:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt -> TrackingCookie.Statcounter : Nettoyé.
C:\Documents and Settings\Propriétaire\Cookies\propriétaire@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
Fin du rapport
2ème rapport AVG, après avoir installé CCLEANER et lancer à nouveau AVG Antispyware.
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 23:56:39 28/06/2007
+ Résultat de l'analyse:
Rien à signaler.
Fin du rapport
Excuse-moi pour la durée interminable : l'ordinateur rame de + en +. Merci encore. Bonsoir
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 23:56:39 28/06/2007
+ Résultat de l'analyse:
Rien à signaler.
Fin du rapport
Excuse-moi pour la durée interminable : l'ordinateur rame de + en +. Merci encore. Bonsoir
Télécharge Blacklight (le 1er de la page)
https://europe.f-secure.com/exclude/blacklight/index.shtml
Enregistre le sur ton Bureau.
Double-clique fsbl.exe
Clique sur "I ACCEPT" .
clique Scan puis Next
Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport,
sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).
poste ce rapport dans ta prochaine réponse.
NE PAS choisir l'option "Rename" de suite car des fichiers légitimes peuvent être présents, tel wbemtest.exe
https://europe.f-secure.com/exclude/blacklight/index.shtml
Enregistre le sur ton Bureau.
Double-clique fsbl.exe
Clique sur "I ACCEPT" .
clique Scan puis Next
Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport,
sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).
poste ce rapport dans ta prochaine réponse.
NE PAS choisir l'option "Rename" de suite car des fichiers légitimes peuvent être présents, tel wbemtest.exe
Bonjour et merci de bien vouloir continuer à m'aider.
Aucun fichier n'a été détecté par le scan.
06/29/07 17:33:44 [Info]: BlackLight Engine 1.0.64 initialized
06/29/07 17:33:44 [Info]: OS: 5.1 build 2600 (Service Pack 2)
06/29/07 17:33:45 [Note]: 7019 4
06/29/07 17:33:45 [Note]: 7005 0
06/29/07 17:33:49 [Note]: 7006 0
06/29/07 17:33:49 [Note]: 7011 1720
06/29/07 17:33:49 [Note]: 7026 0
06/29/07 17:33:49 [Note]: 7026 0
06/29/07 17:33:57 [Note]: FSRAW library version 1.7.1022
06/29/07 17:39:38 [Note]: 2000 1012
06/29/07 17:41:10 [Note]: 7007 0
Aucun fichier n'a été détecté par le scan.
06/29/07 17:33:44 [Info]: BlackLight Engine 1.0.64 initialized
06/29/07 17:33:44 [Info]: OS: 5.1 build 2600 (Service Pack 2)
06/29/07 17:33:45 [Note]: 7019 4
06/29/07 17:33:45 [Note]: 7005 0
06/29/07 17:33:49 [Note]: 7006 0
06/29/07 17:33:49 [Note]: 7011 1720
06/29/07 17:33:49 [Note]: 7026 0
06/29/07 17:33:49 [Note]: 7026 0
06/29/07 17:33:57 [Note]: FSRAW library version 1.7.1022
06/29/07 17:39:38 [Note]: 2000 1012
06/29/07 17:41:10 [Note]: 7007 0
désactive ton antivirus le temps du scan et fais un scan en ligne ici
http://pandasoftware.fr
poste le rapport obtenu et réactive ton antivirus
http://pandasoftware.fr
poste le rapport obtenu et réactive ton antivirus
j'ai d'abord le rapport pour les disques locaux
Incident Statut Analyse
Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Toplist No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.toplist.cz/]
Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.weborama.fr/]
Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Propriétaire\Cookies\propriétaire@xiti[1].txt
Outil indésirable:Application/KillApp.B No Désinfecté C:\hp\bin\KillIt.exe
Outil indésirable:Application/KillApp.A No Désinfecté C:\hp\bin\Terminator.exe
J'arrête pas de batailler pour retrouver poste de travail
Incident Statut Analyse
Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Toplist No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.toplist.cz/]
Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.weborama.fr/]
Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Propriétaire\Cookies\propriétaire@xiti[1].txt
Outil indésirable:Application/KillApp.B No Désinfecté C:\hp\bin\KillIt.exe
Outil indésirable:Application/KillApp.A No Désinfecté C:\hp\bin\Terminator.exe
J'arrête pas de batailler pour retrouver poste de travail
Rapport "Poste de travail" de Panda :
Incident Statut Analyse
Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Toplist No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.toplist.cz/]
Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.weborama.fr/]
Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Propriétaire\Cookies\propriétaire@xiti[1].txt
Outil indésirable:Application/KillApp.B No Désinfecté C:\hp\bin\KillIt.exe
Outil indésirable:Application/KillApp.A No Désinfecté C:\hp\bin\Terminator.exe
Incident Statut Analyse
Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Toplist No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.toplist.cz/]
Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\ydk8ul6f.default\cookies.txt[.weborama.fr/]
Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Propriétaire\Cookies\propriétaire@xiti[1].txt
Outil indésirable:Application/KillApp.B No Désinfecté C:\hp\bin\KillIt.exe
Outil indésirable:Application/KillApp.A No Désinfecté C:\hp\bin\Terminator.exe
j'ai défragmenté le disque C et D
Voici les rapports :
Volume HP_PAVILION (C:)
Taille du volume = 107 Go
Taille de cluster = 4 Ko
Espace utilisé = 10,74 Go
Espace libre = 95,93 Go
Pourcentage d'espace libre = 89 %
Fragmentation du volume
Fragmentation totale = 0 %
Fragmentation de fichiers = 0 %
Fragmentation de l'espace libre = 0 %
Fragmentation de fichiers
Total de fichiers = 64 449
Taille moyenne de fichier = 211 Ko
Total de fichiers fragmentés = 0
Total de fragments en trop = 0
Nombre moyen de fragments par fichier = 1,00
Fragmentation du fichier paginé
Taille du fichier paginé = 384 Mo
Total de fragments = 1
Fragmentation de dossier
Total de dossiers = 4 045
Dossiers fragmentés = 1
Fragments de dossiers en trop = 0
Fragmentation de la table de fichiers principale (MFT)
Taille totale de la MFT = 101 Mo
Nombre d'enregistrements dans la MFT = 68 636
Pourcentage d'utilisation de la MFT = 66 %
Total de fragments dans la MFT = 3
--------------------------------------------------------------------------------
Fragments Taille du fichierFichiers qui ne peuvent pas être défragmentés
Aucun
Rapport disque D :
Volume HP_RECOVERY (D:)
Taille du volume = 5,10 Go
Taille de cluster = 4 Ko
Espace utilisé = 4,20 Go
Espace libre = 918 Mo
Pourcentage d'espace libre = 17 %
Fragmentation du volume
Fragmentation totale = 0 %
Fragmentation de fichiers = 0 %
Fragmentation de l'espace libre = 0 %
Fragmentation de fichiers
Total de fichiers = 9 260
Taille moyenne de fichier = 474 Ko
Total de fichiers fragmentés = 0
Total de fragments en trop = 0
Nombre moyen de fragments par fichier = 1,00
Fragmentation du fichier paginé
Taille du fichier paginé = 0 octets
Total de fragments = 0
Fragmentation de dossier
Total de dossiers = 191
Dossiers fragmentés = 12
Fragments de dossiers en trop = 74
--------------------------------------------------------------------------------
Fragments Taille du fichierFichiers qui ne peuvent pas être défragmentés
Aucun
Voici les rapports :
Volume HP_PAVILION (C:)
Taille du volume = 107 Go
Taille de cluster = 4 Ko
Espace utilisé = 10,74 Go
Espace libre = 95,93 Go
Pourcentage d'espace libre = 89 %
Fragmentation du volume
Fragmentation totale = 0 %
Fragmentation de fichiers = 0 %
Fragmentation de l'espace libre = 0 %
Fragmentation de fichiers
Total de fichiers = 64 449
Taille moyenne de fichier = 211 Ko
Total de fichiers fragmentés = 0
Total de fragments en trop = 0
Nombre moyen de fragments par fichier = 1,00
Fragmentation du fichier paginé
Taille du fichier paginé = 384 Mo
Total de fragments = 1
Fragmentation de dossier
Total de dossiers = 4 045
Dossiers fragmentés = 1
Fragments de dossiers en trop = 0
Fragmentation de la table de fichiers principale (MFT)
Taille totale de la MFT = 101 Mo
Nombre d'enregistrements dans la MFT = 68 636
Pourcentage d'utilisation de la MFT = 66 %
Total de fragments dans la MFT = 3
--------------------------------------------------------------------------------
Fragments Taille du fichierFichiers qui ne peuvent pas être défragmentés
Aucun
Rapport disque D :
Volume HP_RECOVERY (D:)
Taille du volume = 5,10 Go
Taille de cluster = 4 Ko
Espace utilisé = 4,20 Go
Espace libre = 918 Mo
Pourcentage d'espace libre = 17 %
Fragmentation du volume
Fragmentation totale = 0 %
Fragmentation de fichiers = 0 %
Fragmentation de l'espace libre = 0 %
Fragmentation de fichiers
Total de fichiers = 9 260
Taille moyenne de fichier = 474 Ko
Total de fichiers fragmentés = 0
Total de fragments en trop = 0
Nombre moyen de fragments par fichier = 1,00
Fragmentation du fichier paginé
Taille du fichier paginé = 0 octets
Total de fragments = 0
Fragmentation de dossier
Total de dossiers = 191
Dossiers fragmentés = 12
Fragments de dossiers en trop = 74
--------------------------------------------------------------------------------
Fragments Taille du fichierFichiers qui ne peuvent pas être défragmentés
Aucun
ce sont des cookies donc sans danger ccleaner te les nettoiera sans problème
quand à ceux ci
Outil indésirable:Application/KillApp.B No Désinfecté C:\hp\bin\KillIt.exe
Outil indésirable:Application/KillApp.A No Désinfecté C:\hp\bin\Terminator.exe
ils font partie de HP
rien d'infectieux sur ce PC
installe ce logiciel très utile et scanne ton PC avec une fois par semaine au moins...
AVG Antispyware
https://www.avg.com/en-ww/free-antivirus-download
mode d'utilisation :
Lance AVG Anti-Spyware, mets le à jour,
Clique sur le bouton « Analyse »
Puis « Comment réagir », clique sur Actions recommandées. Sélectionne Quarantaine.
Retour à l'onglet Analyse.
Clique sur Analyse complète du système.
A la fin du scan, choisis " Appliquer toutes les actions "
Clique sur "Enregistrer le rapport". Le fichier texte se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.
tu peux le coupler avec celui-ci
spybot search and destroy
https://www.safer-networking.org/?page=download
défragmente régulièrement
pense à bien te protéger, j'ai découvert ce lien qui est plutôt pas mal à ce sujet
https://forum.pcastuces.com/default.asp
la sécurité c'est très important mais ne remplace pas l'internaute, un surf prudent en évitant le crack, les sites "chauds", permet déjà d'éviter bien des soucis, le P2P lui aussi est source d'infections...
et bon surf
quand à ceux ci
Outil indésirable:Application/KillApp.B No Désinfecté C:\hp\bin\KillIt.exe
Outil indésirable:Application/KillApp.A No Désinfecté C:\hp\bin\Terminator.exe
ils font partie de HP
rien d'infectieux sur ce PC
installe ce logiciel très utile et scanne ton PC avec une fois par semaine au moins...
AVG Antispyware
https://www.avg.com/en-ww/free-antivirus-download
mode d'utilisation :
Lance AVG Anti-Spyware, mets le à jour,
Clique sur le bouton « Analyse »
Puis « Comment réagir », clique sur Actions recommandées. Sélectionne Quarantaine.
Retour à l'onglet Analyse.
Clique sur Analyse complète du système.
A la fin du scan, choisis " Appliquer toutes les actions "
Clique sur "Enregistrer le rapport". Le fichier texte se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.
tu peux le coupler avec celui-ci
spybot search and destroy
https://www.safer-networking.org/?page=download
défragmente régulièrement
pense à bien te protéger, j'ai découvert ce lien qui est plutôt pas mal à ce sujet
https://forum.pcastuces.com/default.asp
la sécurité c'est très important mais ne remplace pas l'internaute, un surf prudent en évitant le crack, les sites "chauds", permet déjà d'éviter bien des soucis, le P2P lui aussi est source d'infections...
et bon surf