Sujet Précédent Sujet Suivant

Recherche NARDINO

Résolu/Fermé
TROUBLEFETE - 23 janv. 2008 à 15:37
 TROUBLEFETE - 23 mars 2008 à 14:08
Bonjour,

J'ai lu quelques une de tes interventions et il me semble que tu pourrais peut-être m'aider si tu es disponible.
Voilà, grossièrement le problème :
Je crois que je n'ai plus d'antivirus, j'avais Avast et j'ai fais un netoyage avec ccleaner. Depuis j'ai ce message lorsque j'essaye de le faire fonctionner :
C :\Program Files\kaspersky lab\Kaspersky Internet Security 7.0\avp.exe n'est pas une application Win32 valide.

J'ai donc supprimer Avast pour installer Kaspersky mais le résultat est le meme comme tu peux le constater.

J'ai fait une analyse en ligne avec secuser.com :
WORM SPYBOT.HW
WORM BAGLE.JT
WORM BAGLE.PG
WORM BAGLE.KO
Voilà les infections qu'il a ttrouvé principalement dans windows\system 32\Driver...

L'idée principale c'est de pouvoir réinstaller un antivirus efficace. Est-ce possible?
Que dois-je faire?
Merci :)

298 réponses

Précédent
Réponse 141 / 298
TROUBLEFETE
7 févr. 2008 à 13:48
C'est cool il ne s'est pas éteind... Impecable j'avais peur vu que nous avions changé le bios... Bref voilà le rapport Blacklight :


02/07/08 13:31:11 [Info]: BlackLight Engine 1.0.67 initialized
02/07/08 13:31:11 [Info]: OS: 5.1 build 2600 (Service Pack 2)
02/07/08 13:31:11 [Note]: 7019 4
02/07/08 13:31:11 [Note]: 7005 0
02/07/08 13:31:23 [Note]: 7006 0
02/07/08 13:31:23 [Note]: 7011 1308
02/07/08 13:31:32 [Note]: 7026 0
02/07/08 13:31:42 [Note]: 7026 0
02/07/08 13:31:42 [Note]: 7024 3
02/07/08 13:31:42 [Info]: Hidden process: C:\WINDOWS\system32\drivers\hldrrr.exe
02/07/08 13:31:42 [Note]: 7024 3
02/07/08 13:31:42 [Info]: Hidden process: C:\WINDOWS\system32\wintems.exe
02/07/08 13:31:52 [Note]: FSRAW library version 1.7.1024
02/07/08 13:32:02 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\flec006.exe
02/07/08 13:32:02 [Note]: 10002 2
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\.(keygen).McAfee
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\3D Flux Screen S
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\3D Swimming Peng
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ABF Audio Tags E
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ActiveLine 1.0 (
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\AddFlow ActiveX
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Adobe FrameMaker
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\adTempus 2.0.4.z
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Lemmy 4.5.zip
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Life2Go 1.0.1.zi
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\LinasFTP 0.43 be
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\LingoWare Italia
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\LingvoSoft Talki
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\MB Free Chakras
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Media Universe R
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Mega Millions Lo
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Mesmerized.zip
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\RProtect S7 1.0.
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Scheduling Agent
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Sci-Fi Voices -
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Scope2k4 0.6.1.1
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ScriptLogic Cloa
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SDR Audio Conver
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SecureWord 1.5 b
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SEVENPAR 1.06 Cr
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Sherlock Holmes
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SIDVault 2.0b.zi
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SigmaLookup 2.0.
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Silver Inventory
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ECOKENO 3.76 [Wi
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Empire of Magic
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Equations! 1.0.z
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Escape Velocity
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\EulerQuaternion
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\EventHorizon 1.1
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\EVH Flyer Creato
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ExcelliPrint IPD
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Eym Audio Waterm
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\F-18 Hornet 1.0.
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\F-Prot.Antivirus
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Contract Managem
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Contract J.A.C.K
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Contruction Mast
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Cool Rain 1.0.zi
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\CountDown 1.1.zi
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\CTI Data Connect
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Cutting 3 1.40b
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\CyberLink MagicS
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\CyberScrub KeyCh
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\CyD WEB Editor 4
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\DebitPro 1.2.zip
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Direct Mail Robo
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Directory Tree P
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\DiskState 3.50 K
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Advanced MP3 Sea
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Brushes Pack 1 -
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Easy Time Contro
02/07/08 13:32:03 [Note]: 10002 3
02/07/08 13:32:03 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Fantastic Flame
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Gizmo Script 2.0
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\K.R.A.C 1.3.zip
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\LBE Email Dedupl
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\NET TV 2.0.zip
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\PlutoPlot 1.00.z
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Quick Recovery f
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Symantec.Norton.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\VistaDB Suite 2.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Windows Security
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\PocketTV Classic
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Pong 0.9.0.zip
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Pop Zune Jukebox
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Power Edit 2.23
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\PowerKaraoke 1.2
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Print Censor Pro
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Process Explorer
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ProCetus Structu
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\QPlot 1.2.4276.z
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Quake III Arena
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Symantec.Norton.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Symantec.pcAnywh
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\TracerPlus Pro 2
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\TreeGUI 2.4.2.0.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\UHS (Universal H
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Unreal Tournamen
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Unreal Tournamen
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\urlcool 6.0.zip
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Valentina for Re
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\VB Decompiler 3.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\VCW VicMan's Pho
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Video DVD Duplic
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Vista Drives 1.0
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\GlobalWx Weather
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\GoVenture Lemona
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Guitar Chord Bus
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\HobRes32 2.0 bet
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\IceXX 2.0 (Seria
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ImageStore 1.0 S
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ImageVice 2.0.zi
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Install Unattend
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Invoice 101 - PC
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\JaMP Player 4.0.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\JVC Everio Utili
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Bubble Bobble Wo
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Bug Tracker 2.9.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ByteWedge 2.2 (b
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Cactus Spam Filt
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Camera Browser 0
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Castles n' Drago
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\CHTTPRequest 1.0
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Classic Cars - F
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\CloneDVD 2.9.1.2
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Collectorz Book
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\NI-Spektral Dela
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\NiftyNotes 1.0 (
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\NOD32.Anti-Virus
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Norton.Antivirus
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\NuTest 2.8.2.0.z
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Object Spy 1.0.z
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Patch.10.Per.Mca
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Paydoit 3.0.zip
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\PDB Converter Pr
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Pentango 1.2.zip
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Photo-Essence Ph
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\PlacesBar Constr
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Plopp 1.2.zip
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Volleyball Manag
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\VQme AntiSpam 4.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\VS.Php for Visua
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Wav File Info 1.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\WebPics 2.6.1.zi
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Win It 7.0G.zip
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Windflower Scree
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Windows Defrag M
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SJphone 1.60.289
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Smart-Notes 1.1.
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SMS Create Pro 5
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SMS Free Sender
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Soldier of Fortu
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SpeechTags 1.0.2
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Sqrl Ski 1.0.zip
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Sri Siksastaka 1
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\StarCraft Brood
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Start Menu Tuner
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Startup Master 1
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\StatisticS 4.0.z
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Super Internet T
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\SybaseRecovery 1
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:04 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\DKS Icon Manager
02/07/08 13:32:04 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Document Printer
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Dominions II The
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\DoubleKiller 1.6
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\DVDStripper 0.30
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\EarthQuakes Map
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Eastsea Outlook
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Easy Graphics Fi
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\EasyChat 1.0 [Ke
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Microsoft XML 2.
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\MP3 Audio Batch
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\MusiCat 1.02 bui
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\My Photo Slide S
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\MyFonts Windows
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\NetSend 1.00.zip
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Fast Job Applier
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\FastWin 1.zip
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\FLV Player and M
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\FolderShielder 1
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Free Self Esteem
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\FRSPCShutdown 1.
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\FTP Wizard 3.5.z
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\GetAnonymous 2.0
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\All-in-1 Persona
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\All-in-one-click
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\AllWebMenus Pro
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Apex Video Conve
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Aqua Snake 2.0.z
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\ArcSoft Media Ca
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Audio Maestro Ed
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\AVS DV to DVD 1.
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Bikers Log Gold
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\BMI Calculator 1
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Rabbit Punch 1.2
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Rebuilt.Kaspersk
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Red Eye Pilot Pl
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Registry Correct
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Registry Technic
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Remove Duplicate
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Karen's Director
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\KASPERSKY.antivi
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Kernel Novell NS
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Kform Project Ma
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Kill ActiveSync
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Killer3D 1.2.zip
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Konvertor_svg2xx
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Windows Vista Up
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Winfilter 3.1.zi
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\WinMail Decoder
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\WTSGateway 2.0 K
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\YASA DVD Ripper
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Info]: Hidden file: c:\Documents and Settings\Lorraine Martinez\Application Data\m\shared\Yo!Grep 1.4.0.8.
02/07/08 13:32:05 [Note]: 10002 3
02/07/08 13:32:05 [Note]: 10002 2
02/07/08 13:32:05 [Note]: 10002 2
02/07/08 13:33:57 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\empty.txt
02/07/08 13:33:57 [Note]: 10002 3
02/07/08 13:33:57 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\filters.xml
02/07/08 13:33:57 [Note]: 10002 3
02/07/08 13:33:57 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\news.png
02/07/08 13:33:57 [Note]: 10002 3
02/07/08 13:33:57 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\paint.png
02/07/08 13:33:57 [Note]: 10002 3
02/07/08 13:33:57 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Profiles\blank.txt
02/07/08 13:33:57 [Note]: 10002 3
02/07/08 13:33:57 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\sample1.jpg
02/07/08 13:33:57 [Note]: 10002 3
02/07/08 13:33:57 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\sample2.jpg
02/07/08 13:33:57 [Note]: 10002 3
02/07/08 13:33:57 [Note]: 10002 2
02/07/08 13:33:57 [Note]: 10002 2
02/07/08 13:38:49 [Note]: 10002 2
02/07/08 13:38:49 [Note]: 10002 2
02/07/08 13:39:09 [Info]: Hidden file: C:\WINDOWS\system32\wintems.exe
02/07/08 13:39:09 [Note]: 10002 2
02/07/08 13:39:24 [Info]: Hidden file: C:\WINDOWS\system32\drivers\hldrrr.exe
02/07/08 13:39:24 [Note]: 10002 2
02/07/08 13:39:24 [Info]: Hidden file: c:\WINDOWS\system32\drivers\srosa.sys
02/07/08 13:39:24 [Note]: 10002 2
02/07/08 13:40:46 [Note]: 2000 1012
02/07/08 13:43:35 [Note]: 7007 0
0
Réponse 142 / 298
nardino Messages postés 1633 Date d'inscription jeudi 20 mai 2004 Statut Membre Dernière intervention 6 mars 2010 119
7 févr. 2008 à 14:16
Bonjour.

Il faut absolument que tu puisses appliquer la manip avec bfu en mode sans échec.
Tout ce que nous faisons en mode normal n'est pas suffisant.
Essaie donc de tapoter sur F8 ou F5 au tout début du démarrage pour choisir de démarrer en mode sans échec.
Et applique ceci:

1-Télécharge BFU (Brut Force Uninstall de Merijn)
http://www.merijn.org/files/bfu.zip

2-Création du dossier bfu
Tu crées un dossier bfu , par exemple C:\bfu, donc à la racine du système.
Tu y décompresses bfu.zip et tu obtiens un fichier bfu.exe que tu renommes abcd.com

3- Création du script
Fais un copier/coller des lignes ci-dessous (en italique) dans le Blocnote.
Note: Dans le Bloc-notes, vérifie dans le menu Format que l'option "Retour automatique à la ligne" n'est pas cochée.
Enregistre le fichier dans le dossier C:\bfu sous le nom de bagle.bfu
Pour cela, choisir "Tous les fichiers" dans la liste déroulante de "Type" lors du "Enregistrer sous..".
Si l'extension est bagle.bfu.txt, renommes-le fichier en bagle.bfu

OptionUnloadShell

Processkill \wintems.exe|1
Processkill \hldrrr.exe|1
Processkill \flec006.exe|1

FileDelete C:\WINDOWS\system32\wintems.exe
FileDelete C:\WINDOWS\system32\drivers\hldrrr.exe
FileDelete C:\Muestras\FLEC006.EXE
FileDelete C:\Documents and Settings\Lorraine Martinez\Application Data\m\flec006.exe
FileDelete C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS

FolderDelete C:\Documents and Settings\Lorraine Martinez\Application Data\m
FolderDelete C:\WINDOWS\system32\drivers\down

ServiceDelete srosa
ServiceDelete hldrrr

RegDeleteKey HKCU\Software\FirstRRRun
RegDeleteKey HKCU\SOFTWARE\DateTime4

RegDelValue HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|hldrrr
RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|hldrrr


SystemEmptyTempFolder
SystemEmptyRecycleBin


4- Exéxcution du script
Ouvre le dossier bfu et clique sur abcd.com
Quand tu cliques sur l'icône "dossier" à droite de la barre, "Script to execute", sélectionne bagle.bfu
Coche la case devant "Show log after script ends"
Tu valides et ensuite tu cliques sur "Execute".
Attend l'apparition de Complete script execution et clique sur OK.
Clique sur Exit pour fermer le programme.

5-Redémarrage

Refais un scan Elibagla et poste le rapport.
@+

0
Réponse 143 / 298
TROUBLEFETE
7 févr. 2008 à 15:52
pour entrer en mode sans echec, il me faut en premier lieu, passer la barriere :
........ Detecting floppy drive A Media
Insert System Disk and press enter.

En effet, je clic sur F1 pour accéder au choix du système d'exploitation puis ensuite sur F8 pour accéder au Bios service.
Je vais sur démarrage sans echec, j'envoie.
Ensuite ça défile rapidement, puis comme il ne redémarre pas tout seul, j'arrive à cette barrière citée précédemment.
Du coup je suis obligée de l'éteindre manuellement et d'attendre environ 1/2 heure pour le rallumer.
Dis moi que tu as la solution à cette erreur stp ;)
0
Réponse 144 / 298
nardino Messages postés 1633 Date d'inscription jeudi 20 mai 2004 Statut Membre Dernière intervention 6 mars 2010 119
7 févr. 2008 à 16:24
Bonjour.

Essayons autre chose.
Tu redémarre sur le cd de Ubuntu live.
Dans l'arborescence de C, tu recherches et tu supprimes les fichiers suivants:

C:\WINDOWS\system32\wintems.exe
C:\WINDOWS\system32\drivers\hldrrr.exe
C:\Documents and Settings\Lorraine Martinez\Application Data\m
C:\WINDOWS\system32\drivers\srosa.sys

Tu redémarres sur XP et tu refais un scan Elibalgla.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 145 / 298
TROUBLEFETE
7 févr. 2008 à 17:56
Voilà le rapport Elibagla, tout semble s'être bien passé.


Wed Feb 06 22:11:46 2008
EliBagle v10.91 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.
C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle
C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle (rootkit) Acceso Denegado.
C:\WINDOWS\SYSTEM32\DRIVERS\HLDRRR.EXE --> Bagle.dldr Acceso Denegado.
Por favor, envienos una muestra del fichero
C:\Muestras\FLEC006.EXE.Muestra EliBagle v10.91
a "virus@satinfo.es". Gracias.
C:\DOCUMENTS AND SETTINGS\LORRAINE MARTINEZ\APPLICATION DATA\M\FLEC006.EXE --> Bagle Acceso Denegado.
C:\DOCUMENTS AND SETTINGS\LORRAINE MARTINEZ\APPLICATION DATA\M\LIST.OCT --> Eliminado Bagle

Wed Feb 06 22:11:49 2008
EliBagle v10.91 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\
C:\Program Files\SuperCopier2\SUPERCOPIER2.EXE --> Eliminado Bagle.dldr

Wed Feb 06 22:53:19 2008
EliBagle v10.91 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.
C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle
C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle (rootkit) Acceso Denegado.
C:\WINDOWS\SYSTEM32\DRIVERS\HLDRRR.EXE --> Bagle.dldr Acceso Denegado.
Por favor, envienos una muestra del fichero
C:\Muestras\FLEC006.EXE.Muestra EliBagle v10.91
a "virus@satinfo.es". Gracias.
C:\DOCUMENTS AND SETTINGS\LORRAINE MARTINEZ\APPLICATION DATA\M\FLEC006.EXE --> Bagle Acceso Denegado.
C:\DOCUMENTS AND SETTINGS\LORRAINE MARTINEZ\APPLICATION DATA\M\LIST.OCT --> Eliminado Bagle

Wed Feb 06 22:53:23 2008
EliBagle v10.91 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\
C:\Program Files\SuperCopier2\SUPERCOPIER2.EXE --> Eliminado Bagle.dldr

Nº Total de Directorios: 5728
Nº Total de Ficheros: 70017
Nº de Ficheros Analizados: 12831
Nº de Ficheros Infectados: 3
Nº de Ficheros Limpiados: 1

Thu Feb 07 17:45:05 2008
EliBagle v10.91 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle
C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle (rootkit) Acceso Denegado.
C:\WINDOWS\SYSTEM32\DRIVERS\HLDRRR.EXE --> Bagle.dldr Acceso Denegado.
Restaurada Clave: "SafeBoot\Minimal y Network"

Thu Feb 07 17:45:08 2008
EliBagle v10.91 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\
C:\Program Files\SuperCopier2\SUPERCOPIER2.EXE --> Eliminado Bagle.dldr
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP260\A0037551.SYS --> Eliminado Bagle (rootkit)
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP260\A0037552.EXE --> Eliminado Bagle
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP260\A0037553.EXE --> Eliminado Bagle
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP260\A0037569.SYS --> Eliminado Bagle (rootkit)
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP260\A0037580.EXE --> Eliminado Bagle.dldr
C:\WINDOWS\system32\drivers\down\89921.EXE --> Eliminado Bagle

Nº Total de Directorios: 5731
Nº Total de Ficheros: 65962
Nº de Ficheros Analizados: 12843
Nº de Ficheros Infectados: 8
Nº de Ficheros Limpiados: 7
0
Réponse 146 / 298
nardino Messages postés 1633 Date d'inscription jeudi 20 mai 2004 Statut Membre Dernière intervention 6 mars 2010 119
7 févr. 2008 à 18:07
Bonjour.

Si tu n'as pas fait ce que je t'ai proposé en dernier ou bien relancé Blacklight et supprimer tout ce qu'il a trouvé , on ne s'en sortira pas.
Donc si Blacklight n'est pas opérant, tu redémarres sous Ubuntu et tu supprimes les fichiers cités plus haut.
Pour Blacklight, une fois le scan de départ terminé, tu cliques sur Next et Step 2 cleaninig et tu suis .
Tu redémarres ton pc tu postes le rapport Blacklight.
0
Réponse 147 / 298
TROUBLEFETE
7 févr. 2008 à 18:15
Bien sûre que j'ai fait ce que tu me dis sur ton post 143!! jai ouvert sous Ubuntu je suis allée chercher les dossiers indiqués que j'ai mis à la corbeille et j'ai fait Elibagla..
Les résultats ne sont pas satisfaisant?
Est-ce que j'envoie black light car je n'ai pas fait correctement semble t-il , je n'ai pas fais cleaning?
0
Réponse 148 / 298
nardino Messages postés 1633 Date d'inscription jeudi 20 mai 2004 Statut Membre Dernière intervention 6 mars 2010 119
7 févr. 2008 à 18:27
Re,
Of course tu fais Blackilght entièrement.
Et tu postes le rapport.
0
Réponse 149 / 298
TROUBLEFETE
7 févr. 2008 à 19:33
ok, j'ai fais le scan puis next. En gras est indiqué Step 2 clean mais rien ne se passe.
Voici ce qu'il y a d'écrit dans la colonne de gauche Item name :
hldrrr.exe
blank.txt
empty.tst
filters.xml
news.png
paint.png
sample1.jpg
sample2.jpg
srose.sys

Tous ont inscrit en face "None" sous la colone "Action"
Comment faire pour activer le Cleaning?
Il y a la case "Rename" qui est en gras donc active et la case" None" (en bas du tableau) qui est en gris (non active).
0
Réponse 150 / 298
TROUBLEFETE
7 févr. 2008 à 19:50
autre chose, quand je double clic sur mes item name, le hldrrr.exe est dans C:\WINDOWS\system32\drivers\
Bref son icône est un écusson avec 2épée qui se croisent.
Tu crois que je dois le supprimer?
Les autres ressembles à des icone d'exe genre un crectangle blanc encadré de bleu.
Voilà j'ai pensé que ça pouvait être important? ;)
0
Réponse 151 / 298
nardino Messages postés 1633 Date d'inscription jeudi 20 mai 2004 Statut Membre Dernière intervention 6 mars 2010 119
7 févr. 2008 à 20:09
Bonsoir.
Il faut supprimer tout cela.
Tu cliques sur rename et tu finis avec Blacklight.
Envoies le rapport.
0
Réponse 152 / 298
TROUBLEFETE
7 févr. 2008 à 20:20
voilà le rapport :

If your computer has actually been hacked, removing the hidden items might not be sufficient. Even after a careful clean up the hacker might still be able to access your computer after it has been compromised once. The removed malware may have changed the system in a way that is impossible to detect or restore. An added or changed user right is a typical example of such changes. Formatting all hard disks and re-installing the computer is the only foolproof way to eliminate this risk.
02/07/08 18:55:47 [Info]: BlackLight Engine 1.0.67 initialized
02/07/08 18:55:47 [Info]: OS: 5.1 build 2600 (Service Pack 2)
02/07/08 18:55:47 [Note]: 7019 4
02/07/08 18:55:47 [Note]: 7005 0
02/07/08 18:55:53 [Note]: 7006 0
02/07/08 18:55:53 [Note]: 7011 1292
02/07/08 18:55:58 [Note]: 7026 0
02/07/08 18:56:03 [Note]: 7026 0
02/07/08 18:56:03 [Note]: 7024 3
02/07/08 18:56:03 [Info]: Hidden process: C:\WINDOWS\system32\drivers\hldrrr.exe
02/07/08 18:56:11 [Note]: FSRAW library version 1.7.1024
02/07/08 18:58:06 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\empty.txt
02/07/08 18:58:06 [Note]: 10002 3
02/07/08 18:58:06 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\filters.xml
02/07/08 18:58:06 [Note]: 10002 3
02/07/08 18:58:06 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\news.png
02/07/08 18:58:06 [Note]: 10002 3
02/07/08 18:58:06 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\paint.png
02/07/08 18:58:06 [Note]: 10002 3
02/07/08 18:58:06 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Profiles\blank.txt
02/07/08 18:58:06 [Note]: 10002 3
02/07/08 18:58:06 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\sample1.jpg
02/07/08 18:58:06 [Note]: 10002 3
02/07/08 18:58:06 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\sample2.jpg
02/07/08 18:58:06 [Note]: 10002 3
02/07/08 18:58:06 [Note]: 10002 2
02/07/08 18:58:06 [Note]: 10002 2
02/07/08 19:02:49 [Note]: 10002 2
02/07/08 19:02:49 [Note]: 10002 2
02/07/08 19:03:24 [Info]: Hidden file: C:\WINDOWS\system32\drivers\hldrrr.exe
02/07/08 19:03:24 [Note]: 10002 2
02/07/08 19:03:24 [Info]: Hidden file: c:\WINDOWS\system32\drivers\srosa.sys
02/07/08 19:03:24 [Note]: 10002 2
02/07/08 19:04:45 [Note]: 2000 1012
02/07/08 20:17:20 [Note]: 7007 0
0
Réponse 153 / 298
nardino Messages postés 1633 Date d'inscription jeudi 20 mai 2004 Statut Membre Dernière intervention 6 mars 2010 119
7 févr. 2008 à 20:31
Re,

Supprime ce rapport, relances Blacklight et rename les fichiers trouvés puis poste ce dernier rapport.
0
Réponse 154 / 298
TROUBLEFETE
7 févr. 2008 à 21:47
Je commence à être inquiète, je n'arrive pas à le réallumer et ni F2 ni F8 bios setup bios service ne fonctionne!!
0
Réponse 155 / 298
nardino Messages postés 1633 Date d'inscription jeudi 20 mai 2004 Statut Membre Dernière intervention 6 mars 2010 119
7 févr. 2008 à 22:10
Bonsoir,
Tu vas rééditer le boot.ini avec Ubuntu comme la dernière fois

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /NOEXECUTE=OPTIN /FASTDETECT

Pour le numéro de partition essaie déjà avec 1 et si cela ne fonctionne pas mets 2
0
Réponse 156 / 298
Utilisateur anonyme
7 févr. 2008 à 22:21
Attention, ne pas mettre à la ligne "/NOEXECUTE=OPTIN /FASTDETECT", c'est sur la ligne précédente qu'il faut mettre, avec un espace.
0
Réponse 157 / 298
TROUBLEFETE
7 févr. 2008 à 22:31
Nardino... J'attends ton accord
Merci pour ton info shadow ainsi que pour ta compréhension :)
0
Réponse 158 / 298
nardino Messages postés 1633 Date d'inscription jeudi 20 mai 2004 Statut Membre Dernière intervention 6 mars 2010 119
7 févr. 2008 à 22:59
Bonsoir,
Exact pas de retour à la ligne.
0
Réponse 159 / 298
TROUBLEFETE
7 févr. 2008 à 23:07
bon là il a redémarré normalement. J'ai éffeectué un blacklight du coup. Il faut que je rename les fichiers?
Je t'envoie le rapport dés que j'ai ta réponse
0
Réponse 160 / 298
afideg Messages postés 10517 Date d'inscription lundi 10 octobre 2005 Statut Contributeur sécurité Dernière intervention 12 avril 2022 602
7 févr. 2008 à 23:14
relances Blacklight et rename les fichiers trouvés puis poste ce dernier rapport
0

Discussions similaires

recherche à partir de la barre d'adresse
Sylviane -
Lulin -

11 réponses
comment trouver une personne sur facebook
samir8013 -
iceman94260 -

3 réponses
la barre d'adresse google chrome
zakariah -
chuck norris -

21 réponses
Fenêtre de recherche google, le texte saute
gquenot -
pol1 -

7 réponses