Infection Virus Bagle
Résolu/Fermé
artis31
Messages postés
42
Date d'inscription
vendredi 9 mai 2008
Statut
Membre
Dernière intervention
8 décembre 2012
-
26 nov. 2008 à 23:06
Utilisateur anonyme - 28 nov. 2008 à 20:53
Utilisateur anonyme - 28 nov. 2008 à 20:53
A voir également:
- Infection Virus Bagle
- Svchost.exe virus - Guide
- Lien virus à envoyer - Forum Virus
- Faux message virus iphone - Forum iPhone
- Vérificateur de lien virus - Guide
- Operagxsetup virus ✓ - Forum Virus
19 réponses
crapoulou
Messages postés
28158
Date d'inscription
mercredi 28 novembre 2007
Statut
Modérateur, Contributeur sécurité
Dernière intervention
16 avril 2024
7 990
26 nov. 2008 à 23:07
26 nov. 2008 à 23:07
Salut,
Télécharge FindyKill (Merci à Chiquitine29 !!)
= = = = >>> En cliquant ici <<< = = = =
Fais un clic droit sur le lien, Enregistrer la cible sous (Internet Explorer) ou Enregistrer la cible du lien sous (Firefox) …
Choisis d’enregistrer le fichier sur le bureau.
Double clique sur FindyKill.exe
Choisis l’option 1 (Recherche)
Un rapport va s’ouvrir, poste le dans ta prochaine réponse.
Note :
Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\FindyKill.txt)
Nettoyage :
--> Double clic sur le raccourci FindyKill sur ton bureau
--> Au menu principal, choisis l’option 2 (Suppression)
/!\ Il y aura deux redémarrages, laisse travailler l’outil jusqu’à l’apparition du message "nettoyage effectué" /!\
/!\ Ne te sert pas du pc durant la suppression, ton bureau ne sera pas accessible, c’est normal ! /!\</gras>
= = = = >>> Ensuite poste le rapport FindyKill.txt <<< = = = =
Notes :
* Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\ FindyKill.txt)
* Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide
Télécharge FindyKill (Merci à Chiquitine29 !!)
= = = = >>> En cliquant ici <<< = = = =
Fais un clic droit sur le lien, Enregistrer la cible sous (Internet Explorer) ou Enregistrer la cible du lien sous (Firefox) …
Choisis d’enregistrer le fichier sur le bureau.
Double clique sur FindyKill.exe
Choisis l’option 1 (Recherche)
Un rapport va s’ouvrir, poste le dans ta prochaine réponse.
Note :
Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\FindyKill.txt)
Nettoyage :
--> Double clic sur le raccourci FindyKill sur ton bureau
--> Au menu principal, choisis l’option 2 (Suppression)
/!\ Il y aura deux redémarrages, laisse travailler l’outil jusqu’à l’apparition du message "nettoyage effectué" /!\
/!\ Ne te sert pas du pc durant la suppression, ton bureau ne sera pas accessible, c’est normal ! /!\</gras>
= = = = >>> Ensuite poste le rapport FindyKill.txt <<< = = = =
Notes :
* Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\ FindyKill.txt)
* Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide
Utilisateur anonyme
28 nov. 2008 à 00:13
28 nov. 2008 à 00:13
Hi,
fait ceci avant.
-Télécharge et installe MalwareByte's Anti-Malware
Malwarebyte
- Mets le à jour
---
- Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
- Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
- clique sur Rechercher
- Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok
- Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.
- Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection
- Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.
Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok
fait ceci avant.
-Télécharge et installe MalwareByte's Anti-Malware
Malwarebyte
- Mets le à jour
---
- Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
- Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
- clique sur Rechercher
- Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok
- Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.
- Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection
- Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.
Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok
artis31
Messages postés
42
Date d'inscription
vendredi 9 mai 2008
Statut
Membre
Dernière intervention
8 décembre 2012
1
28 nov. 2008 à 06:56
28 nov. 2008 à 06:56
Cette nuit j'ai fait une analyse complète du système par Avast qui a trouvé pas mal de copies de Bagle dans le répertoire C:\system volume information et les a supprimées.
Après lecture de vos deux posts, je vais commencer par passer Malwarebyte puis faire la procédure décrite par gen-hackman :)
Je vous tiens au courant samedi.
Après lecture de vos deux posts, je vais commencer par passer Malwarebyte puis faire la procédure décrite par gen-hackman :)
Je vous tiens au courant samedi.
petpet
Messages postés
1179
Date d'inscription
mercredi 19 novembre 2008
Statut
Membre
Dernière intervention
17 juillet 2017
44
26 nov. 2008 à 23:07
26 nov. 2008 à 23:07
desinstale avast é réinstalle é arrete le avec scan
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
artis31
Messages postés
42
Date d'inscription
vendredi 9 mai 2008
Statut
Membre
Dernière intervention
8 décembre 2012
1
26 nov. 2008 à 23:31
26 nov. 2008 à 23:31
Merci pour votre aide !!!
Voici ci dessous le rapport de Findykill. A noter qu'il y a eu 2 rapports d'erreurs qui se sont affichés durant la désinfection : Deux fois il n'a pas pu supprimer des clés de registre dont l'accès à été refusé (mais je n'ai pas eu le temps de noter lesquelles...
------------------
----------------- FindyKill V4.705 ------------------
* User : Thierry - BUREAU
* executed from : C:\Program Files\FindyKill
* Update on 17/11/08 par Chiquitine29
* Start at 23:26:22 the 26/11/2008
* Windows XP - Internet Explorer 7.0.5730.13
((((((((((((((( *** deleting *** ))))))))))))))))))
--------------- [ Active Processes ] ----------------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\Program Files\NDAS\System\ndassvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
--------------- [ Infected files / folders ] ----------------
»»»» Supression files in C:
Deleted ! - C:\InfoSat.txt
»»»» Supression files in C:\WINDOWS
»»»» Supression files in C:\WINDOWS\Prefetch
Deleted ! - C:\WINDOWS\prefetch\103012078.EXE-372CE2B8.pf
Deleted ! - C:\WINDOWS\prefetch\103017125.EXE-003BB311.pf
Deleted ! - C:\WINDOWS\prefetch\103023968.EXE-084C3F34.pf
Deleted ! - C:\WINDOWS\prefetch\103033343.EXE-26DB1961.pf
Deleted ! - C:\WINDOWS\prefetch\103625.EXE-213AA4E5.pf
Deleted ! - C:\WINDOWS\prefetch\117580015.EXE-16517BE9.pf
Deleted ! - C:\WINDOWS\prefetch\117598671.EXE-168001A9.pf
Deleted ! - C:\WINDOWS\prefetch\117602125.EXE-29278C75.pf
Deleted ! - C:\WINDOWS\prefetch\117608015.EXE-05677A7A.pf
Deleted ! - C:\WINDOWS\prefetch\132147546.EXE-2DE88E3D.pf
Deleted ! - C:\WINDOWS\prefetch\132164453.EXE-038B7F49.pf
Deleted ! - C:\WINDOWS\prefetch\132176265.EXE-13CA31BD.pf
Deleted ! - C:\WINDOWS\prefetch\132183156.EXE-2D8242AF.pf
Deleted ! - C:\WINDOWS\prefetch\132194093.EXE-0B86EC14.pf
Deleted ! - C:\WINDOWS\prefetch\134484.EXE-07A437ED.pf
Deleted ! - C:\WINDOWS\prefetch\146772656.EXE-0E85B9AF.pf
Deleted ! - C:\WINDOWS\prefetch\146781437.EXE-0AD04C2D.pf
Deleted ! - C:\WINDOWS\prefetch\14711750.EXE-1BA9713E.pf
Deleted ! - C:\WINDOWS\prefetch\14911437.EXE-3B30AA60.pf
Deleted ! - C:\WINDOWS\prefetch\14916500.EXE-30BDBF05.pf
Deleted ! - C:\WINDOWS\prefetch\14920031.EXE-17E2B202.pf
Deleted ! - C:\WINDOWS\prefetch\151765.EXE-19013CFD.pf
Deleted ! - C:\WINDOWS\prefetch\161362671.EXE-1E65526C.pf
Deleted ! - C:\WINDOWS\prefetch\161364015.EXE-29421D03.pf
Deleted ! - C:\WINDOWS\prefetch\161411421.EXE-2643F578.pf
Deleted ! - C:\WINDOWS\prefetch\161420796.EXE-0EA93AE1.pf
Deleted ! - C:\WINDOWS\prefetch\161427312.EXE-36D13F2A.pf
Deleted ! - C:\WINDOWS\prefetch\161443906.EXE-376EBD6C.pf
Deleted ! - C:\WINDOWS\prefetch\176016828.EXE-004BFCF3.pf
Deleted ! - C:\WINDOWS\prefetch\176019093.EXE-386477EA.pf
Deleted ! - C:\WINDOWS\prefetch\176083390.EXE-3B2A71F8.pf
Deleted ! - C:\WINDOWS\prefetch\190660890.EXE-089A6704.pf
Deleted ! - C:\WINDOWS\prefetch\190662484.EXE-07F8D983.pf
Deleted ! - C:\WINDOWS\prefetch\190680171.EXE-0B0AAB35.pf
Deleted ! - C:\WINDOWS\prefetch\190685343.EXE-23F1B4AE.pf
Deleted ! - C:\WINDOWS\prefetch\190688750.EXE-2F271A21.pf
Deleted ! - C:\WINDOWS\prefetch\190705140.EXE-2F8353BB.pf
Deleted ! - C:\WINDOWS\prefetch\205247546.EXE-29D4975A.pf
Deleted ! - C:\WINDOWS\prefetch\205267703.EXE-2EF0243E.pf
Deleted ! - C:\WINDOWS\prefetch\205275812.EXE-06A50D5F.pf
Deleted ! - C:\WINDOWS\prefetch\29476671.EXE-040405EC.pf
Deleted ! - C:\WINDOWS\prefetch\29485296.EXE-37AD3600.pf
Deleted ! - C:\WINDOWS\prefetch\44056843.EXE-378A3003.pf
Deleted ! - C:\WINDOWS\prefetch\44068296.EXE-384A7E1E.pf
Deleted ! - C:\WINDOWS\prefetch\44082671.EXE-2C496906.pf
Deleted ! - C:\WINDOWS\prefetch\58716140.EXE-31CF8C0E.pf
Deleted ! - C:\WINDOWS\prefetch\58721703.EXE-277406E4.pf
Deleted ! - C:\WINDOWS\prefetch\58728500.EXE-2A81869A.pf
Deleted ! - C:\WINDOWS\prefetch\58744671.EXE-2EACEAAD.pf
Deleted ! - C:\WINDOWS\prefetch\73380531.EXE-3A8A5BF1.pf
Deleted ! - C:\WINDOWS\prefetch\73429156.EXE-0C927870.pf
Deleted ! - C:\WINDOWS\prefetch\73436296.EXE-151E9446.pf
Deleted ! - C:\WINDOWS\prefetch\73442562.EXE-3168960D.pf
Deleted ! - C:\WINDOWS\prefetch\73456546.EXE-12DBED35.pf
Deleted ! - C:\WINDOWS\prefetch\88091546.EXE-1BD66574.pf
Deleted ! - C:\WINDOWS\prefetch\88132343.EXE-394263D3.pf
Deleted ! - C:\WINDOWS\prefetch\88138156.EXE-063A647C.pf
Deleted ! - C:\WINDOWS\prefetch\88144859.EXE-0BADB997.pf
Deleted ! - C:\WINDOWS\prefetch\88159531.EXE-341394A5.pf
Deleted ! - C:\WINDOWS\prefetch\CRAC.EXE-307808B0.pf
Deleted ! - C:\WINDOWS\prefetch\FLEC006.EXE-0431C973.pf
Deleted ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
»»»» Supression files in C:\WINDOWS\system32
Deleted ! - C:\WINDOWS\system32\mdelk.exe
Deleted ! - C:\WINDOWS\system32\wintems.exe
Deleted ! - C:\WINDOWS\system32\ban_list.txt
»»»» Supression files in C:\WINDOWS\system32\drivers
Deleted ! - C:\WINDOWS\system32\drivers\srosa.sys
Deleted ! - C:\WINDOWS\system32\drivers\srosa2.sys
Deleted ! - C:\WINDOWS\system32\drivers\winfilse.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\107281.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\111250.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\119328.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\128796.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\132687.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\140140.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\141750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14720171.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14723890.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14751968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14763921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14814656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14824140.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14932734.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14983406.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\15008109.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\150562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\155234.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\155562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\157968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\160609.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\173875.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\177203.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\201765.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\206062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\210484.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\210609.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\223093.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\229062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\233468.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\247984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\248984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\260921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\262234.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\268609.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\279093.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\280359.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29442937.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29459750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29464656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29492968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29549828.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29555265.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29627218.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29637984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29684156.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29703812.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\299937.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\311406.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44142250.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44159375.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44165640.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44184859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44207906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44219890.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44271031.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44370062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44417359.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44447015.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58887000.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58911171.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58915328.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58937781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58949843.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58960984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59024750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59097890.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59110390.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59159046.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59192906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73636968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73651437.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73653562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73666750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73671656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73676578.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73709593.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73755859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73765000.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73800750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73819921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\76593.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\77187.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\79046.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\84859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\86453.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\88673015.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90195906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90522906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\92203.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\92234.exe
Deleted ! - "C:\WINDOWS\system32\drivers\downld"
»»»» Supression files in C:\Documents and Settings\Thierry\Application Data
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\flec006.exe"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\list.oct"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\data.oct"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\srvlist.oct"
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\12Ghosts SaveLayout 9.27.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\4Diskclean_Lite_3.12.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\A1 DVD Ripper Standard 1.1.18.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\ACE 1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Activation.BitDefender.Professionnel.Plus.v10.+.Serial.&.Super.News.2007).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Active_DHTML_Drop_Down_JavaScript_Menu_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Active_Timer_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Adobe SVG Viewer 3.03.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AJ_Screensaver_Maker_Standard_2.02_[KeyGen].zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\All_My_Fonts_Professional_2.0.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AlphaEdit+ 2.0.3 build 251.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Androsa FileProtector 1.4.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AntiSmoke_1.3.0.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AudioMulch_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Automatic_Video_Slicer_2.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AVS_Capture_Wizard_1.5.1.64_(Key).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Babel_Fish_Direct_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Badminton 1.00.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BatchImageEdit 1.0.8.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Bible Decoder 2.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BiScope 1.1.2.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Bitdefender.Linux.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BitIdentify_Pro_For_All_Web_Browsers_2.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Biz5Utils 2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BPT-Pro2_2.2_(Patch).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\C1_Network_Monitor_1.0.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CalendarGem_1.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Catalogic 2.0 Build 302.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CDTree_Standard_3.1.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Changer XP 1.04.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\ChemPoint Professional 6.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CipherBox_0.1.25.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Citation_8.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Classic Menu for PowerPoint 2007 3.5.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Clicktionary_English-Vietnamese_3.2.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Colin_McRae_Rally_04_patch_1.01.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CubeForum_2.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Desktop_Dolphins_3D_Screen_Saver_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\DownUtube_2.0_Beta_3_R4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\DVD_to_VCD_AVI_DivX_Converter_3.2_build_069.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\e-PDF_To_Text_Converter_2.1_(Crack).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\eBoard 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Ebstra-fbm_FBM.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Euroword_1.1_With_Crack.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Fast Dial 1.63.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FastScan 1.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FileFone 0.9p Beta.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Firefly_1.02.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FlatNotes_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FlexiMovie_Composer_1.0_(Key).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Fluid_Clock_ScreenSaver_2.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Framy_Baseball_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\fvpat_Webdev_Server_0.1.6.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Gold_Calculator_Gold_Edition_3.21_[With_Crack].zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Hearts for Palm OS 1.13.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Helzberg_Diamonds_Snow_Globe_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Hyper File Searcher 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\IcePattern_for_After_Effects_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\IconIt_1.1.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\iPod_Video_Converter_5.0.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\KeepV Flash Converter 2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Kernel Novell 4.03.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Lanap_BotDetect_ASP.NET_CAPTCHA_2.0.6.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Live Search Mini 1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\LLLS_English-Danish_4.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\LuxRiot_DVR_1.2.22_Cracked.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Magic Editor 3.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Mess Box AR 4.0.0.26.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Mister_Atomic_Cookie_Chips_Muffin_Mix_3.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Moyea YouTube to Apple TV Converter 1.5.1.42.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\My_Desk_Lock_1.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\NewMove 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Nod32.‚~ý‘î'Š¯Y‚®".2.51.30.‡û?‚®"„÷ð‘-Α𜆬?†©O†.ù„÷?‚?æŠÎ¦†<†©%Šœ?‡%^.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\OakDoc PS to IMAGE Converter 1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Okoker ISO Maker 6.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PDF2Text_1.10.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PDF_Compress_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Personal_Reminder_2.0.32.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PhotoImpression 6.0.9.51.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Picture Resizer 3.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PocketLearn_Viewer_for_Pocket_PC_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Post 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Proctor 1.0.1.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Quick_&_Confidential_2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Radmin_Communication_Server_3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\RemodelCost Estimator for Excel 6.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Screen Shot Deluxe 6.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Scriptures 2.3.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Securase 3.0 Build 1208.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Shred_XP_2.01.01_Build_150_Serial.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\SID Video Cutter & Splitter 1.7.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Simnor Alarm Clock 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Sleep_Timer_Pro_4.8.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Sogol_1.3_(Crack).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Sort Text Lists Alphabetically Software 7.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Springboard Password Keeper 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\SuperPro Software 5.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\SurfText 1.0 [Crack].zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Symantec.Ghost.Solution.Suite.v1.0.Keygen.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Tab_Effect_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\TextQuotes_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Tim's Webcam Viewer 2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Titan_Quest_demo.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Translator_Internet_GOLD_2.00_KeyGen.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Troy_Conversion_2.06_(With_Crack).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Uncle_Tom's_Cabin_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\USBAUTORUN_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\V2_CMS_-_Content_Management_System_1.01.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\VectorDraw Standard 5.0.1.1036.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Video_Capturix_2006_6.06_build_820.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Video_Vegas_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Virtual_Drive_Creator_2.1.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Vroom_Vroom_!!!_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\vSync for Outlook 1.10.0329.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Warcraft_III_-_Sparklepunch_map.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WinOnTop_2.0.01.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WinZip_Self-Extractor_3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Witch's Hideaway Screensaver 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WMP Shuffle 1.98.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WStart_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\X-Copy_Media_Center_3.0.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Xirtam_1.10.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Yahoo! Mail Notifier 1.0.0.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\YouTube Video 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Zephyrus 1.0.zip
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\shared"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m"
»»»» Supression files in C:\DOCUME~1\Thierry\LOCALS~1\Temp
»»»» Supression files in C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[4].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[5].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_1[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_3[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\mxd[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\b64_1[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\b64_1[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\mxd[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[4].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\mxd[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\mxd[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\SJP67AOW\b64[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[4].jpg
--------------- [ Registry / Infected keys ] ----------------
Deleted ! - HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_USERS\S-1-5-21-789336058-1482476501-725345543-1003\Software\Local AppWizard-Generated Applications\MsnMsgr
Deleted ! - HKEY_USERS\S-1-5-21-789336058-1482476501-725345543-1003\Software\Local AppWizard-Generated Applications\winfilse
--------------- [ States / Restarting of services ] ----------------
+- Safe boot mode restored !
+- Services : [ Auto=2 / Request=3 / Disable=4 ]
Ndisuio - Type of startup = 3
EapHost - Type of startup = 2
Ip6Fw - Type of startup = 2
SharedAccess - Type of startup = 2
wuauserv - Type of startup = 2
wscsvc - Type of startup = 2
--------------- [ Cleaning removable drives ] ----------------
+- Informations :
C: - Lecteur fixe
D: - Lecteur fixe
E: - Lecteur fixe
L: - Lecteur r‚seau ou … distance
Z: - Lecteur r‚seau ou … distance
+- deleting files :
--------------- [ Registry / Mountpoint2 ] ----------------
-> Not found !
--------------- [ Searching Cracks / Keygen ] ----------------
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\ASTALAVISTA.BOX.SK.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\CD Cover Central.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\cRaCkZ uNLiMiTeD.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\GameCopyWorld.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Hacking
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\http--fosi.ussr.to-.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Kassarfiles Crackz.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Le TopFrancophone Des Meilleurs Site Warez - - - - - - - - - - - - - - - - - - - - - - - - - -.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\MegaGames - The Hardcore Gaming Experience.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Russian Password Crackers.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\wtcracks #.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\Chenel Communications - Forum Technique - Nouvelles Technologies.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\Forum - lotfinet.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\Forum d'entraide et de discussions Voir le Forum - D‚butants.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\H@cktv.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\LE FORUM DES RECHERCHES MEDIAGUARD DEBUTANT.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\phills-sat-files.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\PROGRAMZ.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Hacking\Crypto-Gram Newsletter.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Hacking\NEWORDER.url
---------------- ! End of report ! ------------------
Voici ci dessous le rapport de Findykill. A noter qu'il y a eu 2 rapports d'erreurs qui se sont affichés durant la désinfection : Deux fois il n'a pas pu supprimer des clés de registre dont l'accès à été refusé (mais je n'ai pas eu le temps de noter lesquelles...
------------------
----------------- FindyKill V4.705 ------------------
* User : Thierry - BUREAU
* executed from : C:\Program Files\FindyKill
* Update on 17/11/08 par Chiquitine29
* Start at 23:26:22 the 26/11/2008
* Windows XP - Internet Explorer 7.0.5730.13
((((((((((((((( *** deleting *** ))))))))))))))))))
--------------- [ Active Processes ] ----------------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\Program Files\NDAS\System\ndassvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
--------------- [ Infected files / folders ] ----------------
»»»» Supression files in C:
Deleted ! - C:\InfoSat.txt
»»»» Supression files in C:\WINDOWS
»»»» Supression files in C:\WINDOWS\Prefetch
Deleted ! - C:\WINDOWS\prefetch\103012078.EXE-372CE2B8.pf
Deleted ! - C:\WINDOWS\prefetch\103017125.EXE-003BB311.pf
Deleted ! - C:\WINDOWS\prefetch\103023968.EXE-084C3F34.pf
Deleted ! - C:\WINDOWS\prefetch\103033343.EXE-26DB1961.pf
Deleted ! - C:\WINDOWS\prefetch\103625.EXE-213AA4E5.pf
Deleted ! - C:\WINDOWS\prefetch\117580015.EXE-16517BE9.pf
Deleted ! - C:\WINDOWS\prefetch\117598671.EXE-168001A9.pf
Deleted ! - C:\WINDOWS\prefetch\117602125.EXE-29278C75.pf
Deleted ! - C:\WINDOWS\prefetch\117608015.EXE-05677A7A.pf
Deleted ! - C:\WINDOWS\prefetch\132147546.EXE-2DE88E3D.pf
Deleted ! - C:\WINDOWS\prefetch\132164453.EXE-038B7F49.pf
Deleted ! - C:\WINDOWS\prefetch\132176265.EXE-13CA31BD.pf
Deleted ! - C:\WINDOWS\prefetch\132183156.EXE-2D8242AF.pf
Deleted ! - C:\WINDOWS\prefetch\132194093.EXE-0B86EC14.pf
Deleted ! - C:\WINDOWS\prefetch\134484.EXE-07A437ED.pf
Deleted ! - C:\WINDOWS\prefetch\146772656.EXE-0E85B9AF.pf
Deleted ! - C:\WINDOWS\prefetch\146781437.EXE-0AD04C2D.pf
Deleted ! - C:\WINDOWS\prefetch\14711750.EXE-1BA9713E.pf
Deleted ! - C:\WINDOWS\prefetch\14911437.EXE-3B30AA60.pf
Deleted ! - C:\WINDOWS\prefetch\14916500.EXE-30BDBF05.pf
Deleted ! - C:\WINDOWS\prefetch\14920031.EXE-17E2B202.pf
Deleted ! - C:\WINDOWS\prefetch\151765.EXE-19013CFD.pf
Deleted ! - C:\WINDOWS\prefetch\161362671.EXE-1E65526C.pf
Deleted ! - C:\WINDOWS\prefetch\161364015.EXE-29421D03.pf
Deleted ! - C:\WINDOWS\prefetch\161411421.EXE-2643F578.pf
Deleted ! - C:\WINDOWS\prefetch\161420796.EXE-0EA93AE1.pf
Deleted ! - C:\WINDOWS\prefetch\161427312.EXE-36D13F2A.pf
Deleted ! - C:\WINDOWS\prefetch\161443906.EXE-376EBD6C.pf
Deleted ! - C:\WINDOWS\prefetch\176016828.EXE-004BFCF3.pf
Deleted ! - C:\WINDOWS\prefetch\176019093.EXE-386477EA.pf
Deleted ! - C:\WINDOWS\prefetch\176083390.EXE-3B2A71F8.pf
Deleted ! - C:\WINDOWS\prefetch\190660890.EXE-089A6704.pf
Deleted ! - C:\WINDOWS\prefetch\190662484.EXE-07F8D983.pf
Deleted ! - C:\WINDOWS\prefetch\190680171.EXE-0B0AAB35.pf
Deleted ! - C:\WINDOWS\prefetch\190685343.EXE-23F1B4AE.pf
Deleted ! - C:\WINDOWS\prefetch\190688750.EXE-2F271A21.pf
Deleted ! - C:\WINDOWS\prefetch\190705140.EXE-2F8353BB.pf
Deleted ! - C:\WINDOWS\prefetch\205247546.EXE-29D4975A.pf
Deleted ! - C:\WINDOWS\prefetch\205267703.EXE-2EF0243E.pf
Deleted ! - C:\WINDOWS\prefetch\205275812.EXE-06A50D5F.pf
Deleted ! - C:\WINDOWS\prefetch\29476671.EXE-040405EC.pf
Deleted ! - C:\WINDOWS\prefetch\29485296.EXE-37AD3600.pf
Deleted ! - C:\WINDOWS\prefetch\44056843.EXE-378A3003.pf
Deleted ! - C:\WINDOWS\prefetch\44068296.EXE-384A7E1E.pf
Deleted ! - C:\WINDOWS\prefetch\44082671.EXE-2C496906.pf
Deleted ! - C:\WINDOWS\prefetch\58716140.EXE-31CF8C0E.pf
Deleted ! - C:\WINDOWS\prefetch\58721703.EXE-277406E4.pf
Deleted ! - C:\WINDOWS\prefetch\58728500.EXE-2A81869A.pf
Deleted ! - C:\WINDOWS\prefetch\58744671.EXE-2EACEAAD.pf
Deleted ! - C:\WINDOWS\prefetch\73380531.EXE-3A8A5BF1.pf
Deleted ! - C:\WINDOWS\prefetch\73429156.EXE-0C927870.pf
Deleted ! - C:\WINDOWS\prefetch\73436296.EXE-151E9446.pf
Deleted ! - C:\WINDOWS\prefetch\73442562.EXE-3168960D.pf
Deleted ! - C:\WINDOWS\prefetch\73456546.EXE-12DBED35.pf
Deleted ! - C:\WINDOWS\prefetch\88091546.EXE-1BD66574.pf
Deleted ! - C:\WINDOWS\prefetch\88132343.EXE-394263D3.pf
Deleted ! - C:\WINDOWS\prefetch\88138156.EXE-063A647C.pf
Deleted ! - C:\WINDOWS\prefetch\88144859.EXE-0BADB997.pf
Deleted ! - C:\WINDOWS\prefetch\88159531.EXE-341394A5.pf
Deleted ! - C:\WINDOWS\prefetch\CRAC.EXE-307808B0.pf
Deleted ! - C:\WINDOWS\prefetch\FLEC006.EXE-0431C973.pf
Deleted ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
»»»» Supression files in C:\WINDOWS\system32
Deleted ! - C:\WINDOWS\system32\mdelk.exe
Deleted ! - C:\WINDOWS\system32\wintems.exe
Deleted ! - C:\WINDOWS\system32\ban_list.txt
»»»» Supression files in C:\WINDOWS\system32\drivers
Deleted ! - C:\WINDOWS\system32\drivers\srosa.sys
Deleted ! - C:\WINDOWS\system32\drivers\srosa2.sys
Deleted ! - C:\WINDOWS\system32\drivers\winfilse.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\107281.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\111250.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\119328.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\128796.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\132687.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\140140.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\141750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14720171.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14723890.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14751968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14763921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14814656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14824140.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14932734.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14983406.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\15008109.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\150562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\155234.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\155562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\157968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\160609.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\173875.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\177203.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\201765.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\206062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\210484.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\210609.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\223093.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\229062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\233468.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\247984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\248984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\260921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\262234.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\268609.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\279093.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\280359.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29442937.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29459750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29464656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29492968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29549828.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29555265.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29627218.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29637984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29684156.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29703812.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\299937.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\311406.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44142250.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44159375.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44165640.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44184859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44207906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44219890.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44271031.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44370062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44417359.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44447015.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58887000.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58911171.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58915328.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58937781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58949843.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58960984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59024750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59097890.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59110390.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59159046.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59192906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73636968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73651437.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73653562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73666750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73671656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73676578.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73709593.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73755859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73765000.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73800750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73819921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\76593.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\77187.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\79046.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\84859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\86453.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\88673015.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90195906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90522906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\92203.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\92234.exe
Deleted ! - "C:\WINDOWS\system32\drivers\downld"
»»»» Supression files in C:\Documents and Settings\Thierry\Application Data
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\flec006.exe"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\list.oct"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\data.oct"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\srvlist.oct"
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\12Ghosts SaveLayout 9.27.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\4Diskclean_Lite_3.12.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\A1 DVD Ripper Standard 1.1.18.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\ACE 1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Activation.BitDefender.Professionnel.Plus.v10.+.Serial.&.Super.News.2007).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Active_DHTML_Drop_Down_JavaScript_Menu_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Active_Timer_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Adobe SVG Viewer 3.03.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AJ_Screensaver_Maker_Standard_2.02_[KeyGen].zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\All_My_Fonts_Professional_2.0.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AlphaEdit+ 2.0.3 build 251.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Androsa FileProtector 1.4.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AntiSmoke_1.3.0.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AudioMulch_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Automatic_Video_Slicer_2.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AVS_Capture_Wizard_1.5.1.64_(Key).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Babel_Fish_Direct_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Badminton 1.00.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BatchImageEdit 1.0.8.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Bible Decoder 2.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BiScope 1.1.2.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Bitdefender.Linux.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BitIdentify_Pro_For_All_Web_Browsers_2.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Biz5Utils 2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BPT-Pro2_2.2_(Patch).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\C1_Network_Monitor_1.0.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CalendarGem_1.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Catalogic 2.0 Build 302.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CDTree_Standard_3.1.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Changer XP 1.04.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\ChemPoint Professional 6.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CipherBox_0.1.25.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Citation_8.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Classic Menu for PowerPoint 2007 3.5.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Clicktionary_English-Vietnamese_3.2.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Colin_McRae_Rally_04_patch_1.01.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CubeForum_2.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Desktop_Dolphins_3D_Screen_Saver_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\DownUtube_2.0_Beta_3_R4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\DVD_to_VCD_AVI_DivX_Converter_3.2_build_069.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\e-PDF_To_Text_Converter_2.1_(Crack).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\eBoard 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Ebstra-fbm_FBM.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Euroword_1.1_With_Crack.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Fast Dial 1.63.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FastScan 1.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FileFone 0.9p Beta.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Firefly_1.02.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FlatNotes_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FlexiMovie_Composer_1.0_(Key).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Fluid_Clock_ScreenSaver_2.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Framy_Baseball_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\fvpat_Webdev_Server_0.1.6.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Gold_Calculator_Gold_Edition_3.21_[With_Crack].zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Hearts for Palm OS 1.13.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Helzberg_Diamonds_Snow_Globe_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Hyper File Searcher 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\IcePattern_for_After_Effects_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\IconIt_1.1.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\iPod_Video_Converter_5.0.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\KeepV Flash Converter 2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Kernel Novell 4.03.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Lanap_BotDetect_ASP.NET_CAPTCHA_2.0.6.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Live Search Mini 1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\LLLS_English-Danish_4.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\LuxRiot_DVR_1.2.22_Cracked.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Magic Editor 3.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Mess Box AR 4.0.0.26.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Mister_Atomic_Cookie_Chips_Muffin_Mix_3.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Moyea YouTube to Apple TV Converter 1.5.1.42.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\My_Desk_Lock_1.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\NewMove 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Nod32.‚~ý‘î'Š¯Y‚®".2.51.30.‡û?‚®"„÷ð‘-Α𜆬?†©O†.ù„÷?‚?æŠÎ¦†<†©%Šœ?‡%^.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\OakDoc PS to IMAGE Converter 1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Okoker ISO Maker 6.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PDF2Text_1.10.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PDF_Compress_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Personal_Reminder_2.0.32.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PhotoImpression 6.0.9.51.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Picture Resizer 3.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PocketLearn_Viewer_for_Pocket_PC_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Post 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Proctor 1.0.1.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Quick_&_Confidential_2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Radmin_Communication_Server_3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\RemodelCost Estimator for Excel 6.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Screen Shot Deluxe 6.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Scriptures 2.3.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Securase 3.0 Build 1208.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Shred_XP_2.01.01_Build_150_Serial.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\SID Video Cutter & Splitter 1.7.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Simnor Alarm Clock 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Sleep_Timer_Pro_4.8.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Sogol_1.3_(Crack).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Sort Text Lists Alphabetically Software 7.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Springboard Password Keeper 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\SuperPro Software 5.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\SurfText 1.0 [Crack].zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Symantec.Ghost.Solution.Suite.v1.0.Keygen.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Tab_Effect_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\TextQuotes_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Tim's Webcam Viewer 2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Titan_Quest_demo.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Translator_Internet_GOLD_2.00_KeyGen.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Troy_Conversion_2.06_(With_Crack).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Uncle_Tom's_Cabin_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\USBAUTORUN_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\V2_CMS_-_Content_Management_System_1.01.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\VectorDraw Standard 5.0.1.1036.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Video_Capturix_2006_6.06_build_820.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Video_Vegas_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Virtual_Drive_Creator_2.1.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Vroom_Vroom_!!!_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\vSync for Outlook 1.10.0329.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Warcraft_III_-_Sparklepunch_map.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WinOnTop_2.0.01.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WinZip_Self-Extractor_3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Witch's Hideaway Screensaver 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WMP Shuffle 1.98.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WStart_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\X-Copy_Media_Center_3.0.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Xirtam_1.10.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Yahoo! Mail Notifier 1.0.0.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\YouTube Video 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Zephyrus 1.0.zip
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\shared"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m"
»»»» Supression files in C:\DOCUME~1\Thierry\LOCALS~1\Temp
»»»» Supression files in C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[4].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[5].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_1[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_3[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\mxd[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\b64_1[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\b64_1[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\mxd[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[4].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\mxd[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\mxd[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\SJP67AOW\b64[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[4].jpg
--------------- [ Registry / Infected keys ] ----------------
Deleted ! - HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_USERS\S-1-5-21-789336058-1482476501-725345543-1003\Software\Local AppWizard-Generated Applications\MsnMsgr
Deleted ! - HKEY_USERS\S-1-5-21-789336058-1482476501-725345543-1003\Software\Local AppWizard-Generated Applications\winfilse
--------------- [ States / Restarting of services ] ----------------
+- Safe boot mode restored !
+- Services : [ Auto=2 / Request=3 / Disable=4 ]
Ndisuio - Type of startup = 3
EapHost - Type of startup = 2
Ip6Fw - Type of startup = 2
SharedAccess - Type of startup = 2
wuauserv - Type of startup = 2
wscsvc - Type of startup = 2
--------------- [ Cleaning removable drives ] ----------------
+- Informations :
C: - Lecteur fixe
D: - Lecteur fixe
E: - Lecteur fixe
L: - Lecteur r‚seau ou … distance
Z: - Lecteur r‚seau ou … distance
+- deleting files :
--------------- [ Registry / Mountpoint2 ] ----------------
-> Not found !
--------------- [ Searching Cracks / Keygen ] ----------------
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\ASTALAVISTA.BOX.SK.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\CD Cover Central.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\cRaCkZ uNLiMiTeD.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\GameCopyWorld.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Hacking
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\http--fosi.ussr.to-.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Kassarfiles Crackz.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Le TopFrancophone Des Meilleurs Site Warez - - - - - - - - - - - - - - - - - - - - - - - - - -.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\MegaGames - The Hardcore Gaming Experience.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Russian Password Crackers.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\wtcracks #.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\Chenel Communications - Forum Technique - Nouvelles Technologies.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\Forum - lotfinet.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\Forum d'entraide et de discussions Voir le Forum - D‚butants.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\H@cktv.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\LE FORUM DES RECHERCHES MEDIAGUARD DEBUTANT.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\phills-sat-files.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Csat\PROGRAMZ.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Hacking\Crypto-Gram Newsletter.url
C:\Documents and Settings\Thierry\Favoris\Download sharewares\Crack\Hacking\NEWORDER.url
---------------- ! End of report ! ------------------
Utilisateur anonyme
27 nov. 2008 à 02:43
27 nov. 2008 à 02:43
salut tu devrais carrement les balancer sur google tes sites....pfffffffffffffffff!!!!!!!!!!!!!!!!!!!
artis31
Messages postés
42
Date d'inscription
vendredi 9 mai 2008
Statut
Membre
Dernière intervention
8 décembre 2012
1
27 nov. 2008 à 08:15
27 nov. 2008 à 08:15
Bonjour gen-hackman,
J'ai simplement copie collé le rapport demandé sans vraiment le lire. Je n'avais aucunement l'intention de citer des urls de ce type dont la plupart ne doivent plus être actives vu que ça fait des années que je ne les ai pas utilisées.
Malheureusement je ne peux pas éditer le message ci-dessus.
J'ai simplement copie collé le rapport demandé sans vraiment le lire. Je n'avais aucunement l'intention de citer des urls de ce type dont la plupart ne doivent plus être actives vu que ça fait des années que je ne les ai pas utilisées.
Malheureusement je ne peux pas éditer le message ci-dessus.
Utilisateur anonyme
27 nov. 2008 à 08:16
27 nov. 2008 à 08:16
Hi,
pour avancer fait ceci maintenant:
télécharge hijackthis
-> enregistre la cible sous .... "le bureau"
-> Fais un double-clic sur "HJTInstall.exe" afin de lancer l'installation
-> Clique sur Install ensuite sur "I Accept"
-> Clique sur" Do a scan system and save log file"
-> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse
->Tuto hijackthis(Merci à Balltrap34)
pour avancer fait ceci maintenant:
télécharge hijackthis
-> enregistre la cible sous .... "le bureau"
-> Fais un double-clic sur "HJTInstall.exe" afin de lancer l'installation
-> Clique sur Install ensuite sur "I Accept"
-> Clique sur" Do a scan system and save log file"
-> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse
->Tuto hijackthis(Merci à Balltrap34)
artis31
Messages postés
42
Date d'inscription
vendredi 9 mai 2008
Statut
Membre
Dernière intervention
8 décembre 2012
1
27 nov. 2008 à 22:33
27 nov. 2008 à 22:33
Merci DrHouse1998,
Voici le rapport hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:34:38, on 27/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\Program Files\NDAS\System\ndassvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real player\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: ColorVisionStartup.lnk = C:\Program Files\ColorVision\Utility\ColorVisionStartup.exe
O4 - Global Startup: NDAS Device Management.lnk = C:\Program Files\NDAS\System\ndasmgmt.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O23 - Service: Autodata Limited License Service - Unknown owner - C:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
O23 - Service: NDAS Service (ndassvc) - XIMETA, Inc. - C:\Program Files\NDAS\System\ndassvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
Voici le rapport hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:34:38, on 27/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\Program Files\NDAS\System\ndassvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real player\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: ColorVisionStartup.lnk = C:\Program Files\ColorVision\Utility\ColorVisionStartup.exe
O4 - Global Startup: NDAS Device Management.lnk = C:\Program Files\NDAS\System\ndasmgmt.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O23 - Service: Autodata Limited License Service - Unknown owner - C:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
O23 - Service: NDAS Service (ndassvc) - XIMETA, Inc. - C:\Program Files\NDAS\System\ndassvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
Utilisateur anonyme
27 nov. 2008 à 23:22
27 nov. 2008 à 23:22
question pour suivre .....as tu toujours les problemes du depart ?
artis31
Messages postés
42
Date d'inscription
vendredi 9 mai 2008
Statut
Membre
Dernière intervention
8 décembre 2012
1
27 nov. 2008 à 23:58
27 nov. 2008 à 23:58
Bonsoir,
J'ai relancé l'ordinateur, réinstallé un antivirus (Avast le temps de trouver son futur remplaçant, à priori Antivir) et tout semble fonctionner sans problèmes. Ccleaner refonctionne aussi.
Merci à tous pour votre aide !!!!!!!!!!!!!!!
J'ai relancé l'ordinateur, réinstallé un antivirus (Avast le temps de trouver son futur remplaçant, à priori Antivir) et tout semble fonctionner sans problèmes. Ccleaner refonctionne aussi.
Merci à tous pour votre aide !!!!!!!!!!!!!!!
Utilisateur anonyme
28 nov. 2008 à 00:11
28 nov. 2008 à 00:11
bien nettoyons dans ce cas :
1)Telecharge :
-------------
https://www.clubic.com/telecharger-fiche262022-purera.html
coche tout a droite , et "clean"
ensuite :
-----------
http://www.commentcamarche.net/telecharger/cleanafterme 34056612 avis opinions.php3
meme chose tu coches tout et "clean selected items"
source = Gen-Hackman..........et puis a faire aussi :
2)
---> Télécharge ToolsCleaner2 sur ton Bureau.
* Double-clique sur ToolsCleaner2.exe pour le lancer.
* Clique sur Recherche et laisse le scan agir.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options Facultatives.
* Clique sur Quitter pour obtenir le rapport.
* Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
3/
---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
* Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse(Sauvegarde la base de registre).
4/
---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme
---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
https://www.vulgarisation-informatique.com/creer-point-restauration.php
stp poste tous les rapports delivrés....merci.....
si tu as deja Ccleaner ne tiens pas compte du N°3.....mais fais ce qu il est demande avec
(desole le canned est pour tout le monde....lol)
Attention : ne pas toucher au PC pendant qu'il travaille !
B-Nettoyage et Défragmentation de tes Disques
*Nettoyage :
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Général"
Cliques sur le bouton "nettoyage de disque", OK
tu le fais pour chacun de tes disques
*Vérifications des erreurs :
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Outil"
"Vérifier maintenant", une boîte s'ouvre, cocher les cases :
-réparer automatiquement les erreurs...
-rechercher et tenter une récupération...
--->Démarrer, ok
Note : s'il te dis de redémarrer ton Pc pour le faire , tu redémarres et tu laisses faire, cela prend un peu de temps c'est normal
tu le fais pour chacun de tes disques
ensuite toujours dans le même onglet tu choisis :
*Défragmentation :
"défragmenter maintenant", OK
une boîte s'ouvre, tu sélectionnes le disque à défragmenter, et tu cliques sur "analyser", puis après l'analyse, "défragmenter" . OK
tu le fais pour chacun de tes disques
Note : si tu as un utilitaire pour défragmenter , utilises le à la place ...
pour ce faire je te conseille ceci :
https://www.clubic.com/telecharger-fiche44314-defraggler.html
C-Crées un point de restauration de ton PC :
Aller dans le Menu Démarrer puis dans Programmes,
- Ensuite dans Accessoires et enfin dans Outils système,
- Choisir "Restauration du système",
- Sélectionner "Créer un point de restauration",
- Cliquer sur "Suivant",
- Entrer un nom pour le point de restauration (ce nom doit être assez évocateur), exemple :
<< Point restauration sain >> .
--> Cliquer sur "Créer" et le point de restauration se créé automatiquement.
> Peux-tu vérifier ta console JAVA ici ? : https://www.java.com/fr/download/uninstalltool.jsp et installer la nouvelle version si besoin est (dans ce cas désinstalle avant l'ancienne version).
Pour info. ou en cas de problème : http://assiste.com.free.fr/p/abc/c/anti_java.html
> Mets à jour Acrobat si ce n'est pas le cas (désinstalle avant la version antérieure) : https://get2.adobe.com/reader/otherversions/
> Télécharge et installe Update Checker : https://filehippo.com/windows/tuning-utilities/
- Lance le programme. Une page web de ce type va s'ouvrir.
- Fais les mises à jour de tous les logiciels proposés pour Update. Je ne te conseille pas de faire celles pour les versions béta (elles peuvent être instables).
- Fais un copier/coller de la liste de éléments "Updates". Puis poste la sur le forum.
- Une fois les mises à jour effectuées, relance ton PC.
Tuto si problèmes : https://www.commentcamarche.net/list 9908 update checker vos logiciels sont ils a jour
> Télécharge et installe Easy Cleaner : https://www.01net.com/telecharger/windows/Utilitaire/registre/fiches/8351.html
(lien miroir : https://www.clubic.com/telecharger-fiche11170-easycleaner.html )
- Lance le programme puis clique sur <Registre> puis sur <Trouver>.
- A la fin du scan clique sur <Supprime tout> puis confirme par <Oui> puis quitte le programme.
Si besoin tuto ici : https://www.pcparadise.fr
et http://www.6ma.fr/tuto/easycleaner-nettoyer-windows-des-elements-obsoletes/
> Tu peux aussi vider ta corbeille......quoi que Ccleaner le fasse tout seul.......
> Si nous avons utilisé MalwaresByte's Anti-Malware : vide sa quarantaine.
- Lance le programme puis clique sur <Quarantaine>.
- Sélectionne tous les éléments puis clique sur <supprime>.
- Quitte la programme.
> Idem pour ton antivirus : vide sa quarantaine si ce n'est pas déjà fait...
> Désactive et réactive la restauration de système, pour cela : suis les instructions de ce lien :
liens XP:
http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20020830101856924
liens Vista :
http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/4f60eedf1156c8068525695b005ca288/c066b2e9a50cc948802572870032b170?OpenDocument
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Quelques conseils et recommandations pour l'avenir :
> Passe un coup d'AGV et/ou de MalwareByte's Anti-Malware et de Ccleaner de temps en temps (1 fois par semaine à 1 fois par mois, suivant l'utilisation que tu fais de ton PC. Tu peux aussi décocher la casse dans l’onglet "Options" puis clique sur "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures").
- Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser.
- Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être à l'aise))
> Pour bien protéger ton PC :
[1 seul Antivirus] + [1 seul Pare feu (/!\ les routeurs et box en possèdent un)] + [Quelques Antispywares] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows)] + [Utilisation du PC en mode Invité (= limité). Lors d'une infection en mode administrateur le PC est beaucoup plus vulnérable. Voir ICI]
PS : En fait la meilleure des protections c'est toi même : ce que tu fais avec ton PC : où tu surfes, télécharges...ect....
Les virus utilisent les failles de ton PC pour infecter un système. Info : http://assiste.com.free.fr/p/abc/a/zombies_et_botnets.html
> Quelques liens utiles :
- https://www.commentcamarche.net/list 2432 securite proteger un ordinateur contre les malwares d internet
- https://sebsauvage.net/safehex.html
- https://www.zebulon.fr/telechargements/securite/protection-donnees-personnelles/spywareblaster.html (= petit logiciel qui bloque l'installation d'activ-X nuisibles au PC. Fonctionne en arrière plan)
et au final dernier petite chose :
http://www.commentcamarche.net/faq/sujet 11365 mettre son poste en probleme resolu
Voila,
Bonne lecture....
source : DllD..............;-)
Gen-hackman.......................
1)Telecharge :
-------------
https://www.clubic.com/telecharger-fiche262022-purera.html
coche tout a droite , et "clean"
ensuite :
-----------
http://www.commentcamarche.net/telecharger/cleanafterme 34056612 avis opinions.php3
meme chose tu coches tout et "clean selected items"
source = Gen-Hackman..........et puis a faire aussi :
2)
---> Télécharge ToolsCleaner2 sur ton Bureau.
* Double-clique sur ToolsCleaner2.exe pour le lancer.
* Clique sur Recherche et laisse le scan agir.
* Clique sur Suppression pour finaliser.
* Tu peux, si tu le souhaites, te servir des Options Facultatives.
* Clique sur Quitter pour obtenir le rapport.
* Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
3/
---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
* Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse(Sauvegarde la base de registre).
4/
---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme
---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
https://www.vulgarisation-informatique.com/creer-point-restauration.php
stp poste tous les rapports delivrés....merci.....
si tu as deja Ccleaner ne tiens pas compte du N°3.....mais fais ce qu il est demande avec
(desole le canned est pour tout le monde....lol)
Attention : ne pas toucher au PC pendant qu'il travaille !
B-Nettoyage et Défragmentation de tes Disques
*Nettoyage :
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Général"
Cliques sur le bouton "nettoyage de disque", OK
tu le fais pour chacun de tes disques
*Vérifications des erreurs :
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Outil"
"Vérifier maintenant", une boîte s'ouvre, cocher les cases :
-réparer automatiquement les erreurs...
-rechercher et tenter une récupération...
--->Démarrer, ok
Note : s'il te dis de redémarrer ton Pc pour le faire , tu redémarres et tu laisses faire, cela prend un peu de temps c'est normal
tu le fais pour chacun de tes disques
ensuite toujours dans le même onglet tu choisis :
*Défragmentation :
"défragmenter maintenant", OK
une boîte s'ouvre, tu sélectionnes le disque à défragmenter, et tu cliques sur "analyser", puis après l'analyse, "défragmenter" . OK
tu le fais pour chacun de tes disques
Note : si tu as un utilitaire pour défragmenter , utilises le à la place ...
pour ce faire je te conseille ceci :
https://www.clubic.com/telecharger-fiche44314-defraggler.html
C-Crées un point de restauration de ton PC :
Aller dans le Menu Démarrer puis dans Programmes,
- Ensuite dans Accessoires et enfin dans Outils système,
- Choisir "Restauration du système",
- Sélectionner "Créer un point de restauration",
- Cliquer sur "Suivant",
- Entrer un nom pour le point de restauration (ce nom doit être assez évocateur), exemple :
<< Point restauration sain >> .
--> Cliquer sur "Créer" et le point de restauration se créé automatiquement.
> Peux-tu vérifier ta console JAVA ici ? : https://www.java.com/fr/download/uninstalltool.jsp et installer la nouvelle version si besoin est (dans ce cas désinstalle avant l'ancienne version).
Pour info. ou en cas de problème : http://assiste.com.free.fr/p/abc/c/anti_java.html
> Mets à jour Acrobat si ce n'est pas le cas (désinstalle avant la version antérieure) : https://get2.adobe.com/reader/otherversions/
> Télécharge et installe Update Checker : https://filehippo.com/windows/tuning-utilities/
- Lance le programme. Une page web de ce type va s'ouvrir.
- Fais les mises à jour de tous les logiciels proposés pour Update. Je ne te conseille pas de faire celles pour les versions béta (elles peuvent être instables).
- Fais un copier/coller de la liste de éléments "Updates". Puis poste la sur le forum.
- Une fois les mises à jour effectuées, relance ton PC.
Tuto si problèmes : https://www.commentcamarche.net/list 9908 update checker vos logiciels sont ils a jour
> Télécharge et installe Easy Cleaner : https://www.01net.com/telecharger/windows/Utilitaire/registre/fiches/8351.html
(lien miroir : https://www.clubic.com/telecharger-fiche11170-easycleaner.html )
- Lance le programme puis clique sur <Registre> puis sur <Trouver>.
- A la fin du scan clique sur <Supprime tout> puis confirme par <Oui> puis quitte le programme.
Si besoin tuto ici : https://www.pcparadise.fr
et http://www.6ma.fr/tuto/easycleaner-nettoyer-windows-des-elements-obsoletes/
> Tu peux aussi vider ta corbeille......quoi que Ccleaner le fasse tout seul.......
> Si nous avons utilisé MalwaresByte's Anti-Malware : vide sa quarantaine.
- Lance le programme puis clique sur <Quarantaine>.
- Sélectionne tous les éléments puis clique sur <supprime>.
- Quitte la programme.
> Idem pour ton antivirus : vide sa quarantaine si ce n'est pas déjà fait...
> Désactive et réactive la restauration de système, pour cela : suis les instructions de ce lien :
liens XP:
http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20020830101856924
liens Vista :
http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/4f60eedf1156c8068525695b005ca288/c066b2e9a50cc948802572870032b170?OpenDocument
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Quelques conseils et recommandations pour l'avenir :
> Passe un coup d'AGV et/ou de MalwareByte's Anti-Malware et de Ccleaner de temps en temps (1 fois par semaine à 1 fois par mois, suivant l'utilisation que tu fais de ton PC. Tu peux aussi décocher la casse dans l’onglet "Options" puis clique sur "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures").
- Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser.
- Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être à l'aise))
> Pour bien protéger ton PC :
[1 seul Antivirus] + [1 seul Pare feu (/!\ les routeurs et box en possèdent un)] + [Quelques Antispywares] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows)] + [Utilisation du PC en mode Invité (= limité). Lors d'une infection en mode administrateur le PC est beaucoup plus vulnérable. Voir ICI]
PS : En fait la meilleure des protections c'est toi même : ce que tu fais avec ton PC : où tu surfes, télécharges...ect....
Les virus utilisent les failles de ton PC pour infecter un système. Info : http://assiste.com.free.fr/p/abc/a/zombies_et_botnets.html
> Quelques liens utiles :
- https://www.commentcamarche.net/list 2432 securite proteger un ordinateur contre les malwares d internet
- https://sebsauvage.net/safehex.html
- https://www.zebulon.fr/telechargements/securite/protection-donnees-personnelles/spywareblaster.html (= petit logiciel qui bloque l'installation d'activ-X nuisibles au PC. Fonctionne en arrière plan)
et au final dernier petite chose :
http://www.commentcamarche.net/faq/sujet 11365 mettre son poste en probleme resolu
Voila,
Bonne lecture....
source : DllD..............;-)
Gen-hackman.......................
Utilisateur anonyme
28 nov. 2008 à 07:00
28 nov. 2008 à 07:00
ok artis31....merci DrHouse encore une fois present pour rattrapper mes oublis.....merci
artis31
Messages postés
42
Date d'inscription
vendredi 9 mai 2008
Statut
Membre
Dernière intervention
8 décembre 2012
1
28 nov. 2008 à 19:13
28 nov. 2008 à 19:13
Bonsoir,
Encore une fois merci pour votre aide :o)
Alors en vrac les rapports :
-----------------------------------------------------------------
Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1430
Windows 5.1.2600 Service Pack 3
28/11/2008 17:46:41
mbam-log-2008-11-28 (17-46-41).txt
Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 188329
Temps écoulé: 1 hour(s), 16 minute(s), 17 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
C:\WINDOWS\system32\drivers\downld (Trojan.Agent) -> Quarantined and deleted successfully.
-----------------------------------------------------------
PURERA :
-----------------------------------------------------------
PureRa v1.1 from RaProducts
Log created at 17:51 on 28/11/2008
===================================
C:\Documents and Settings\All Users\Application Data\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Ma musique\Desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Ma musique\Échantillons de musique\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Mes images\Desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Mes images\Échantillons d'images\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Mes images\Échantillons d'images\Thumbs.db << Deleted.
C:\Documents and Settings\All Users\Documents\Mes vidéos\Desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Outils système\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Application Data\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Historique\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\SJP67AOW\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Accessoires\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Démarrage\desktop.ini << Deleted.
C:\Documents and Settings\Default User\SendTo\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Historique\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\DRATF3IN\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\M2DVGXFK\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\WZN2VRBH\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\Z0N4KA7Z\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\CS8XSQIS\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\H9VKL1W9\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\I7TF429Y\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\V8UPTXPK\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\0D2RCPU3\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GHQZKLIZ\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GPAFOLMN\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WDQR01QF\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Historique\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\ER9VW3D9\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\G34DPLNV\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\M4PYFLZU\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OW4VRXTD\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Application Data\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt00.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt01.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt02.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt03.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt04.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt05.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt06.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt07.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt08.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt09.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt10.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt11.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt12.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt13.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt14.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt15.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt16.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt17.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt18.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt19.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\Office\Récent\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Contacts\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Favoris\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\IconCache.db << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\C0K6G6O3\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\K99OSSCK\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\QDNWPJ0X\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\T6IWSC1H\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Messenger\thierryez@hotmail.com\Sharing Folders\maryem_merlin@msn.com\Thumbs.db << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Windows Live Contacts\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Historique\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\38P23786\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\6CM9EKFO\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\BSBUFCU6\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\GL0IK2G4\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\Accessoires\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\Démarrage\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Recent\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\SendTo\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Voisinage réseau\Media (E) sur Bureau (Bureau)\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Voisinage réseau\Pasboot (D) sur Bureau (Bureau)\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Voisinage réseau\SharedDocs sur Bureau (Bureau)\Desktop.ini << Deleted.
C:\Mes Sites Web\Photos Laurent\www.darkrunes.com\Photos\Photos Anniv Lolo\Thumbs.db << Deleted.
C:\Program Files\Microsoft Office\OFFICE11\1036\DataServices\DESKTOP.INI << Deleted.
C:\RECYCLER\S-1-5-21-789336058-1482476501-725345543-1003\desktop.ini << Deleted.
C:\WINDOWS\desktop.ini << Deleted.
C:\WINDOWS\Downloaded Program Files\desktop.ini << Deleted.
C:\WINDOWS\Fonts\desktop.ini << Deleted.
C:\WINDOWS\Offline Web Pages\desktop.ini << Deleted.
C:\WINDOWS\system32\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Application Data\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SJP67AOW\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Démarrage\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\SendTo\desktop.ini << Deleted.
C:\WINDOWS\Tasks\desktop.ini << Unable to Delete.
===================================
-EOF-
-------------------------------------------------------------------
ToolsCleaner :
[ Rapport ToolsCleaner version 2.2.6 (par A.Rothstein & dj QUIOU) ]
-->- Recherche:
C:\FindyKill.txt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Thierry\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Thierry\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\FindyKill: trouvé !
C:\Program Files\FindyKill: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Thierry\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Thierry\Bureau\HJTInstall.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\FindyKill.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\FindyKill: supprimé !
C:\Program Files\FindyKill: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
------------------------------------------------------------------------------
Liste des updates :
12 Updates Detected
Icon
Ad-Aware 2008 7.1.0.11
Installed Version: 6.2.0.238
22.70MB Download Now!
Icon
CCleaner 2.14.750
Installed Version: 2.13.0.720
2.84MB Download Now!
Icon
CuteFTP 8.3.2 Pro
Installed Version: 6.0.0.4
8.55MB Download Now!
Icon
DAEMON Tools Lite 4.30.1
Installed Version: 4.3.0.0
4.52MB Download Now!
Icon
dBpowerAMP Music Converter 12.4
Installed Version: 4.2.1.0
4.03MB Download Now!
Icon
DivX Play 6.8.5.11
Installed Version: 6.7.0.21
19.76MB Download Now!
Icon
Flash Player 10.0.12.36 (IE)
Installed Version: 9.0.115.0
1.80MB Download Now!
Icon
QuickTime Player 7.55.90.70
Installed Version: 7.4.5.67
26.02MB Download Now!
Icon
VLC Media Player 0.9.6
Installed Version: 0.8.5.0
13.94MB Download Now!
Icon
Windows Live Messenger 8.5.1302
Installed Version: 4.7.0.3001
2.29MB Download Now!
Icon
Windows Media Player 11
Installed Version: 9.0.0.4503
24.56MB Download Now!
Icon
WinRAR 3.80
Installed Version: 3.51.0.0
1.18MB Download Now!
-------------------------------------------------------
Concernant ToolsCleaner, j'ai eu un doute... les seuls trucs qu'il a effacé sont HiJackThis et Findykill :o/
CCleaner : Ok
CleanAfterMe : Ok
Tout le reste effectué : Ok
Encore merci ^_^
Encore une fois merci pour votre aide :o)
Alors en vrac les rapports :
-----------------------------------------------------------------
Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1430
Windows 5.1.2600 Service Pack 3
28/11/2008 17:46:41
mbam-log-2008-11-28 (17-46-41).txt
Type de recherche: Examen complet (C:\|D:\|E:\|)
Eléments examinés: 188329
Temps écoulé: 1 hour(s), 16 minute(s), 17 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
C:\WINDOWS\system32\drivers\downld (Trojan.Agent) -> Quarantined and deleted successfully.
-----------------------------------------------------------
PURERA :
-----------------------------------------------------------
PureRa v1.1 from RaProducts
Log created at 17:51 on 28/11/2008
===================================
C:\Documents and Settings\All Users\Application Data\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Ma musique\Desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Ma musique\Échantillons de musique\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Mes images\Desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Mes images\Échantillons d'images\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Documents\Mes images\Échantillons d'images\Thumbs.db << Deleted.
C:\Documents and Settings\All Users\Documents\Mes vidéos\Desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Communications\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires\Outils système\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux\desktop.ini << Deleted.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Application Data\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Historique\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\SJP67AOW\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Accessoires\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini << Deleted.
C:\Documents and Settings\Default User\Menu Démarrer\Programmes\Démarrage\desktop.ini << Deleted.
C:\Documents and Settings\Default User\SendTo\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Historique\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\DRATF3IN\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\M2DVGXFK\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\WZN2VRBH\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\Z0N4KA7Z\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\CS8XSQIS\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\H9VKL1W9\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\I7TF429Y\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\V8UPTXPK\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\0D2RCPU3\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GHQZKLIZ\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GPAFOLMN\desktop.ini << Deleted.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WDQR01QF\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Historique\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\ER9VW3D9\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\G34DPLNV\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\M4PYFLZU\desktop.ini << Deleted.
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OW4VRXTD\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Application Data\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt00.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt01.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt02.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt03.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt04.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt05.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt06.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt07.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt08.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt09.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt10.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt11.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt12.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt13.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt14.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt15.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt16.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt17.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt18.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\MSN Messenger\1928367825\sqmnoopt19.sqm << Deleted.
C:\Documents and Settings\Thierry\Application Data\Microsoft\Office\Récent\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Contacts\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Favoris\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\IconCache.db << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\C0K6G6O3\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\K99OSSCK\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\QDNWPJ0X\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Feeds Cache\T6IWSC1H\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Messenger\thierryez@hotmail.com\Sharing Folders\maryem_merlin@msn.com\Thumbs.db << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Application Data\Microsoft\Windows Live Contacts\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Historique\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\38P23786\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\6CM9EKFO\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\BSBUFCU6\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\GL0IK2G4\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\Accessoires\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\Démarrage\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Recent\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\SendTo\desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Voisinage réseau\Media (E) sur Bureau (Bureau)\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Voisinage réseau\Pasboot (D) sur Bureau (Bureau)\Desktop.ini << Deleted.
C:\Documents and Settings\Thierry\Voisinage réseau\SharedDocs sur Bureau (Bureau)\Desktop.ini << Deleted.
C:\Mes Sites Web\Photos Laurent\www.darkrunes.com\Photos\Photos Anniv Lolo\Thumbs.db << Deleted.
C:\Program Files\Microsoft Office\OFFICE11\1036\DataServices\DESKTOP.INI << Deleted.
C:\RECYCLER\S-1-5-21-789336058-1482476501-725345543-1003\desktop.ini << Deleted.
C:\WINDOWS\desktop.ini << Deleted.
C:\WINDOWS\Downloaded Program Files\desktop.ini << Deleted.
C:\WINDOWS\Fonts\desktop.ini << Deleted.
C:\WINDOWS\Offline Web Pages\desktop.ini << Deleted.
C:\WINDOWS\system32\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Application Data\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SJP67AOW\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Démarrage\desktop.ini << Deleted.
C:\WINDOWS\system32\config\systemprofile\SendTo\desktop.ini << Deleted.
C:\WINDOWS\Tasks\desktop.ini << Unable to Delete.
===================================
-EOF-
-------------------------------------------------------------------
ToolsCleaner :
[ Rapport ToolsCleaner version 2.2.6 (par A.Rothstein & dj QUIOU) ]
-->- Recherche:
C:\FindyKill.txt: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Thierry\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Thierry\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\FindyKill: trouvé !
C:\Program Files\FindyKill: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Thierry\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Thierry\Bureau\HJTInstall.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\FindyKill.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\Thierry\Menu Démarrer\Programmes\FindyKill: supprimé !
C:\Program Files\FindyKill: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
------------------------------------------------------------------------------
Liste des updates :
12 Updates Detected
Icon
Ad-Aware 2008 7.1.0.11
Installed Version: 6.2.0.238
22.70MB Download Now!
Icon
CCleaner 2.14.750
Installed Version: 2.13.0.720
2.84MB Download Now!
Icon
CuteFTP 8.3.2 Pro
Installed Version: 6.0.0.4
8.55MB Download Now!
Icon
DAEMON Tools Lite 4.30.1
Installed Version: 4.3.0.0
4.52MB Download Now!
Icon
dBpowerAMP Music Converter 12.4
Installed Version: 4.2.1.0
4.03MB Download Now!
Icon
DivX Play 6.8.5.11
Installed Version: 6.7.0.21
19.76MB Download Now!
Icon
Flash Player 10.0.12.36 (IE)
Installed Version: 9.0.115.0
1.80MB Download Now!
Icon
QuickTime Player 7.55.90.70
Installed Version: 7.4.5.67
26.02MB Download Now!
Icon
VLC Media Player 0.9.6
Installed Version: 0.8.5.0
13.94MB Download Now!
Icon
Windows Live Messenger 8.5.1302
Installed Version: 4.7.0.3001
2.29MB Download Now!
Icon
Windows Media Player 11
Installed Version: 9.0.0.4503
24.56MB Download Now!
Icon
WinRAR 3.80
Installed Version: 3.51.0.0
1.18MB Download Now!
-------------------------------------------------------
Concernant ToolsCleaner, j'ai eu un doute... les seuls trucs qu'il a effacé sont HiJackThis et Findykill :o/
CCleaner : Ok
CleanAfterMe : Ok
Tout le reste effectué : Ok
Encore merci ^_^
Utilisateur anonyme
28 nov. 2008 à 20:53
28 nov. 2008 à 20:53
logique c est un nettoyeur pour retirer les outils une fois la desinfection finie
tu n as plus qu a le supprimer (toolscleaner)
tu n as plus qu a le supprimer (toolscleaner)
27 nov. 2008 à 00:39
27 nov. 2008 à 00:41
----------------- FindyKill V4.705 ------------------
* User : Thierry - BUREAU
* executed from : C:\Program Files\FindyKill
* Update on 17/11/08 par Chiquitine29
* Start at 23:26:22 the 26/11/2008
* Windows XP - Internet Explorer 7.0.5730.13
((((((((((((((( *** deleting *** ))))))))))))))))))
--------------- [ Active Processes ] ----------------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\Program Files\NDAS\System\ndassvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
--------------- [ Infected files / folders ] ----------------
»»»» Supression files in C:
Deleted ! - C:\InfoSat.txt
»»»» Supression files in C:\WINDOWS
»»»» Supression files in C:\WINDOWS\Prefetch
Deleted ! - C:\WINDOWS\prefetch\103012078.EXE-372CE2B8.pf
Deleted ! - C:\WINDOWS\prefetch\103017125.EXE-003BB311.pf
Deleted ! - C:\WINDOWS\prefetch\103023968.EXE-084C3F34.pf
Deleted ! - C:\WINDOWS\prefetch\103033343.EXE-26DB1961.pf
Deleted ! - C:\WINDOWS\prefetch\103625.EXE-213AA4E5.pf
Deleted ! - C:\WINDOWS\prefetch\117580015.EXE-16517BE9.pf
Deleted ! - C:\WINDOWS\prefetch\117598671.EXE-168001A9.pf
Deleted ! - C:\WINDOWS\prefetch\117602125.EXE-29278C75.pf
Deleted ! - C:\WINDOWS\prefetch\117608015.EXE-05677A7A.pf
Deleted ! - C:\WINDOWS\prefetch\132147546.EXE-2DE88E3D.pf
Deleted ! - C:\WINDOWS\prefetch\132164453.EXE-038B7F49.pf
Deleted ! - C:\WINDOWS\prefetch\132176265.EXE-13CA31BD.pf
Deleted ! - C:\WINDOWS\prefetch\132183156.EXE-2D8242AF.pf
Deleted ! - C:\WINDOWS\prefetch\132194093.EXE-0B86EC14.pf
Deleted ! - C:\WINDOWS\prefetch\134484.EXE-07A437ED.pf
Deleted ! - C:\WINDOWS\prefetch\146772656.EXE-0E85B9AF.pf
Deleted ! - C:\WINDOWS\prefetch\146781437.EXE-0AD04C2D.pf
Deleted ! - C:\WINDOWS\prefetch\14711750.EXE-1BA9713E.pf
Deleted ! - C:\WINDOWS\prefetch\14911437.EXE-3B30AA60.pf
Deleted ! - C:\WINDOWS\prefetch\14916500.EXE-30BDBF05.pf
Deleted ! - C:\WINDOWS\prefetch\14920031.EXE-17E2B202.pf
Deleted ! - C:\WINDOWS\prefetch\151765.EXE-19013CFD.pf
Deleted ! - C:\WINDOWS\prefetch\161362671.EXE-1E65526C.pf
Deleted ! - C:\WINDOWS\prefetch\161364015.EXE-29421D03.pf
Deleted ! - C:\WINDOWS\prefetch\161411421.EXE-2643F578.pf
Deleted ! - C:\WINDOWS\prefetch\161420796.EXE-0EA93AE1.pf
Deleted ! - C:\WINDOWS\prefetch\161427312.EXE-36D13F2A.pf
Deleted ! - C:\WINDOWS\prefetch\161443906.EXE-376EBD6C.pf
Deleted ! - C:\WINDOWS\prefetch\176016828.EXE-004BFCF3.pf
Deleted ! - C:\WINDOWS\prefetch\176019093.EXE-386477EA.pf
Deleted ! - C:\WINDOWS\prefetch\176083390.EXE-3B2A71F8.pf
Deleted ! - C:\WINDOWS\prefetch\190660890.EXE-089A6704.pf
Deleted ! - C:\WINDOWS\prefetch\190662484.EXE-07F8D983.pf
Deleted ! - C:\WINDOWS\prefetch\190680171.EXE-0B0AAB35.pf
Deleted ! - C:\WINDOWS\prefetch\190685343.EXE-23F1B4AE.pf
Deleted ! - C:\WINDOWS\prefetch\190688750.EXE-2F271A21.pf
Deleted ! - C:\WINDOWS\prefetch\190705140.EXE-2F8353BB.pf
Deleted ! - C:\WINDOWS\prefetch\205247546.EXE-29D4975A.pf
Deleted ! - C:\WINDOWS\prefetch\205267703.EXE-2EF0243E.pf
Deleted ! - C:\WINDOWS\prefetch\205275812.EXE-06A50D5F.pf
Deleted ! - C:\WINDOWS\prefetch\29476671.EXE-040405EC.pf
Deleted ! - C:\WINDOWS\prefetch\29485296.EXE-37AD3600.pf
Deleted ! - C:\WINDOWS\prefetch\44056843.EXE-378A3003.pf
Deleted ! - C:\WINDOWS\prefetch\44068296.EXE-384A7E1E.pf
Deleted ! - C:\WINDOWS\prefetch\44082671.EXE-2C496906.pf
Deleted ! - C:\WINDOWS\prefetch\58716140.EXE-31CF8C0E.pf
Deleted ! - C:\WINDOWS\prefetch\58721703.EXE-277406E4.pf
Deleted ! - C:\WINDOWS\prefetch\58728500.EXE-2A81869A.pf
Deleted ! - C:\WINDOWS\prefetch\58744671.EXE-2EACEAAD.pf
Deleted ! - C:\WINDOWS\prefetch\73380531.EXE-3A8A5BF1.pf
Deleted ! - C:\WINDOWS\prefetch\73429156.EXE-0C927870.pf
Deleted ! - C:\WINDOWS\prefetch\73436296.EXE-151E9446.pf
Deleted ! - C:\WINDOWS\prefetch\73442562.EXE-3168960D.pf
Deleted ! - C:\WINDOWS\prefetch\73456546.EXE-12DBED35.pf
Deleted ! - C:\WINDOWS\prefetch\88091546.EXE-1BD66574.pf
Deleted ! - C:\WINDOWS\prefetch\88132343.EXE-394263D3.pf
Deleted ! - C:\WINDOWS\prefetch\88138156.EXE-063A647C.pf
Deleted ! - C:\WINDOWS\prefetch\88144859.EXE-0BADB997.pf
Deleted ! - C:\WINDOWS\prefetch\88159531.EXE-341394A5.pf
Deleted ! - C:\WINDOWS\prefetch\CRAC.EXE-307808B0.pf
Deleted ! - C:\WINDOWS\prefetch\FLEC006.EXE-0431C973.pf
Deleted ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
27 nov. 2008 à 00:43
Deleted ! - C:\WINDOWS\system32\mdelk.exe
Deleted ! - C:\WINDOWS\system32\wintems.exe
Deleted ! - C:\WINDOWS\system32\ban_list.txt
»»»» Supression files in C:\WINDOWS\system32\drivers
Deleted ! - C:\WINDOWS\system32\drivers\srosa.sys
Deleted ! - C:\WINDOWS\system32\drivers\srosa2.sys
Deleted ! - C:\WINDOWS\system32\drivers\winfilse.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\107281.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\111250.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\119328.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\128796.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\132687.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\140140.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\141750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14720171.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14723890.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14751968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14763921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14814656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14824140.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14932734.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\14983406.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\15008109.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\150562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\155234.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\155562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\157968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\160609.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\173875.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\177203.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\201765.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\206062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\210484.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\210609.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\223093.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\229062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\233468.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\247984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\248984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\260921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\262234.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\268609.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\279093.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\280359.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29442937.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29459750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29464656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29492968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29549828.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29555265.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29627218.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29637984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29684156.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\29703812.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\299937.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\311406.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44142250.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44159375.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44165640.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44184859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44207906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44219890.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44271031.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44370062.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44417359.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\44447015.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58887000.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58911171.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58915328.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58937781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58949843.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\58960984.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59024750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59097890.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59110390.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59159046.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\59192906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73636968.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73651437.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73653562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73666750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73671656.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73676578.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73709593.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73755859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73765000.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73800750.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\73819921.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\76593.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\77187.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\79046.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\84859.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\86453.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\88673015.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90195906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90522906.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90562.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\90781.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\92203.exe
Deleted ! - C:\WINDOWS\system32\drivers\downld\92234.exe
Deleted ! - "C:\WINDOWS\system32\drivers\downld"
»»»» Supression files in C:\Documents and Settings\Thierry\Application Data
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\flec006.exe"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\list.oct"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\data.oct"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\srvlist.oct"
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\12Ghosts SaveLayout 9.27.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\4Diskclean_Lite_3.12.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\A1 DVD Ripper Standard 1.1.18.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\ACE 1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Activation.BitDefender.Professionnel.Plus.v10.+.Serial.&.Super.News.2007).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Active_DHTML_Drop_Down_JavaScript_Menu_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Active_Timer_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Adobe SVG Viewer 3.03.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AJ_Screensaver_Maker_Standard_2.02_[KeyGen].zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\All_My_Fonts_Professional_2.0.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AlphaEdit+ 2.0.3 build 251.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Androsa FileProtector 1.4.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AntiSmoke_1.3.0.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AudioMulch_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Automatic_Video_Slicer_2.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\AVS_Capture_Wizard_1.5.1.64_(Key).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Babel_Fish_Direct_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Badminton 1.00.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BatchImageEdit 1.0.8.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Bible Decoder 2.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BiScope 1.1.2.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Bitdefender.Linux.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BitIdentify_Pro_For_All_Web_Browsers_2.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Biz5Utils 2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\BPT-Pro2_2.2_(Patch).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\C1_Network_Monitor_1.0.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CalendarGem_1.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Catalogic 2.0 Build 302.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CDTree_Standard_3.1.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Changer XP 1.04.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\ChemPoint Professional 6.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CipherBox_0.1.25.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Citation_8.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Classic Menu for PowerPoint 2007 3.5.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Clicktionary_English-Vietnamese_3.2.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Colin_McRae_Rally_04_patch_1.01.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\CubeForum_2.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Desktop_Dolphins_3D_Screen_Saver_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\DownUtube_2.0_Beta_3_R4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\DVD_to_VCD_AVI_DivX_Converter_3.2_build_069.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\e-PDF_To_Text_Converter_2.1_(Crack).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\eBoard 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Ebstra-fbm_FBM.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Euroword_1.1_With_Crack.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Fast Dial 1.63.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FastScan 1.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FileFone 0.9p Beta.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Firefly_1.02.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FlatNotes_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\FlexiMovie_Composer_1.0_(Key).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Fluid_Clock_ScreenSaver_2.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Framy_Baseball_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\fvpat_Webdev_Server_0.1.6.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Gold_Calculator_Gold_Edition_3.21_[With_Crack].zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Hearts for Palm OS 1.13.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Helzberg_Diamonds_Snow_Globe_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Hyper File Searcher 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\IcePattern_for_After_Effects_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\IconIt_1.1.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\iPod_Video_Converter_5.0.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\KeepV Flash Converter 2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Kernel Novell 4.03.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Lanap_BotDetect_ASP.NET_CAPTCHA_2.0.6.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Live Search Mini 1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\LLLS_English-Danish_4.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\LuxRiot_DVR_1.2.22_Cracked.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Magic Editor 3.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Mess Box AR 4.0.0.26.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Mister_Atomic_Cookie_Chips_Muffin_Mix_3.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Moyea YouTube to Apple TV Converter 1.5.1.42.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\My_Desk_Lock_1.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\NewMove 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Nod32.‚~ý‘î'Š¯Y‚®".2.51.30.‡û?‚®"„÷ð‘-Α𜆬?†©O†.ù„÷?‚?æŠÎ¦†<†©%Šœ?‡%^.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\OakDoc PS to IMAGE Converter 1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Okoker ISO Maker 6.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PDF2Text_1.10.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PDF_Compress_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Personal_Reminder_2.0.32.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PhotoImpression 6.0.9.51.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Picture Resizer 3.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\PocketLearn_Viewer_for_Pocket_PC_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Post 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Proctor 1.0.1.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Quick_&_Confidential_2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Radmin_Communication_Server_3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\RemodelCost Estimator for Excel 6.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Screen Shot Deluxe 6.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Scriptures 2.3.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Securase 3.0 Build 1208.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Shred_XP_2.01.01_Build_150_Serial.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\SID Video Cutter & Splitter 1.7.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Simnor Alarm Clock 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Sleep_Timer_Pro_4.8.2.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Sogol_1.3_(Crack).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Sort Text Lists Alphabetically Software 7.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Springboard Password Keeper 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\SuperPro Software 5.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\SurfText 1.0 [Crack].zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Symantec.Ghost.Solution.Suite.v1.0.Keygen.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Tab_Effect_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\TextQuotes_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Tim's Webcam Viewer 2.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Titan_Quest_demo.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Translator_Internet_GOLD_2.00_KeyGen.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Troy_Conversion_2.06_(With_Crack).zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Uncle_Tom's_Cabin_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\USBAUTORUN_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\V2_CMS_-_Content_Management_System_1.01.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\VectorDraw Standard 5.0.1.1036.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Video_Capturix_2006_6.06_build_820.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Video_Vegas_1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Virtual_Drive_Creator_2.1.4.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Vroom_Vroom_!!!_1.1.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\vSync for Outlook 1.10.0329.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Warcraft_III_-_Sparklepunch_map.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WinOnTop_2.0.01.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WinZip_Self-Extractor_3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Witch's Hideaway Screensaver 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WMP Shuffle 1.98.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\WStart_1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\X-Copy_Media_Center_3.0.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Xirtam_1.10.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Yahoo! Mail Notifier 1.0.0.3.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\YouTube Video 1.0.zip
Deleted ! - C:\Documents and Settings\Thierry\Application Data\m\shared\Zephyrus 1.0.zip
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m\shared"
Deleted ! - "C:\Documents and Settings\Thierry\Application Data\m"
27 nov. 2008 à 00:45
»»»» Supression files in C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[4].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\0W2GSSAT\b64_3[5].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CC89L3QH\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_1[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_2[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\b64_3[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\CVWB4T34\mxd[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\b64_1[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\b64_1[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\EFLTSKL4\mxd[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\b64_3[4].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\mxd[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\PRXCG8O5\mxd[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\SJP67AOW\b64[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[1].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[2].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[3].jpg
Deleted ! - C:\Documents and Settings\Thierry\Local Settings\Temporary Internet Files\Content.IE5\ZIKMDL2C\b64_1[4].jpg
--------------- [ Registry / Infected keys ] ----------------
Deleted ! - HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_USERS\S-1-5-21-789336058-1482476501-725345543-1003\Software\Local AppWizard-Generated Applications\MsnMsgr
Deleted ! - HKEY_USERS\S-1-5-21-789336058-1482476501-725345543-1003\Software\Local AppWizard-Generated Applications\winfilse
--------------- [ States / Restarting of services ] ----------------
+- Safe boot mode restored !
+- Services : [ Auto=2 / Request=3 / Disable=4 ]
Ndisuio - Type of startup = 3
EapHost - Type of startup = 2
Ip6Fw - Type of startup = 2
SharedAccess - Type of startup = 2
wuauserv - Type of startup = 2
wscsvc - Type of startup = 2
--------------- [ Cleaning removable drives ] ----------------
+- Informations :
C: - Lecteur fixe
D: - Lecteur fixe
E: - Lecteur fixe
L: - Lecteur r‚seau ou … distance
Z: - Lecteur r‚seau ou … distance
+- deleting files :
--------------- [ Registry / Mountpoint2 ] ----------------
-> Not found !
27 nov. 2008 à 00:47
[Liens favoris internet]
---------------- ! End of report ! ------------------
Il semblerait que ce soit cette partie du rapport qui provoque une modération automatique... c'était quelques liens vers des sites de cracks.