salut a tous revenu d'une promenade je cours allumé l'ordi il s'allume normalement mais j'ai un message au début : you are inftected by bot net the man who host and infected is 'je ne sais plus ' info qu'est ce qu'y m'est arrivé ?? comment faire pour y remédier Configuration: e8400 3.0 ghz o/c @ 3.13ghz +sapphir radeon hd 4850 simple slot 512mo+ 2 go ram ddr2 400+333mhz + carte mère socket 775 GA-945GCM-S2L + ALIM 450 w startech (no name :( le tout sur un boitier moyen tour .....(no name :(

bonjour linkgoron, je ne pense pas que ton probleme soit entierement resolu tant que archet9 ne l'a pas dit tu devrais posté le rapport combofix qui ce trouve sur ton disque C:\ComboFix.txt

salut oui le problème n'est pas encore résolu j'ai allumé le pc maintenant et le message est encore présent :( et je ne trouvé pas le fichier bloc notes sur c:/ je trouvé juste un combofix avec une icone du poste de travail lorsque je double clique sur lui c'est poste de travail

ah j'ai trouvé le fichier bloc note je l'ai trouvé sur mon profil mais il s'appelle combofix_627 je le poste ou pas ?

Folder C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ was created. Reconstruits les anciennes parties téléchargées... connexion en cours... Windows 6.1 v5.18b5 Time: Thu Jun 17 20:57:17.803 2010 (1276804637 sec) Url http://download.bleepingcomputer.com /sUBs/ComboFix.exe User : anonymous, password :xxx C0:connexion... C0:Checking connect, socket = 2644 C0:connexion OK. C0:envois GET... C0:HTTP/1.1 200 OK C0:Content-Type: application/octet-stream C0:Accept-Ranges: bytes C0:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C0:Content-Length: 3714018 C0:Date: Thu, 17 Jun 2010 19:57:24 GMT C0:Server: Apache C0: C0:Réception de données... time 1276804641 connexions optionnelles, connexion en cours... C1:connexion... time 1276804641 time 1276804641 Réception de données... Insert next chunk in list s9 Adding record to registry with ID 1, startPos 1928902, nextID -1 Updating record with num 0: set ID 0, startPos 0, nextID 1 C1:envois GET... C0:Réception de données... C1:attente de réponse... time 1276804643, speed 122101, downl 277371 Bytes C1:HTTP/1.1 206 Partial Content C1:Content-Type: application/octet-stream C1:Accept-Ranges: bytes C1:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C1:Content-Range: bytes 1928902-3714017/3714018 C1:Content-Length: 1785116 C1:Date: Thu, 17 Jun 2010 19:57:27 GMT C1:Server: Apache C1: C1:Réception de données... C2:connexion... Insert next chunk in list s9 Adding record to registry with ID 2, startPos 2832641, nextID -1 Updating record with num 1: set ID 1, startPos 1928902, nextID 2 C2:envois GET... time 1276804646, speed 84632, downl 398471 Bytes C2:HTTP/1.1 206 Partial Content C2:Content-Type: application/octet-stream C2:Accept-Ranges: bytes C2:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C2:Content-Range: bytes 2832641-3714017/3714018 C2:Content-Length: 881377 C2:Date: Thu, 17 Jun 2010 19:57:30 GMT C2:Server: Apache C2: C2:Réception de données... C3:connexion... Insert next chunk in list s9 Adding record to registry with ID 3, startPos 1157162, nextID 1 Updating record with num 0: set ID 0, startPos 0, nextID 3 C3:envois GET... time 1276804649, speed 58096, downl 554176 Bytes C3:HTTP/1.1 206 Partial Content C3:Content-Type: application/octet-stream C3:Accept-Ranges: bytes C3:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C3:Content-Range: bytes 1157162-1928902/3714018 C3:Content-Length: 771741 C3:Date: Thu, 17 Jun 2010 19:57:33 GMT C3:Server: Apache C3: C3:Réception de données... C4:connexion... C5:connexion... Insert next chunk in list s9 Adding record to registry with ID 4, startPos 3302237, nextID -1 Updating record with num 2: set ID 2, startPos 2832641, nextID 4 C4:envois GET... Insert next chunk in list s9 Adding record to registry with ID 5, startPos 2435815, nextID 2 Updating record with num 1: set ID 1, startPos 1928902, nextID 5 C5:envois GET... time 1276804651, speed 57351, downl 672617 Bytes C4:HTTP/1.1 206 Partial Content C4:Content-Type: application/octet-stream C4:Accept-Ranges: bytes C4:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C4:Content-Range: bytes 3302237-3714017/3714018 C4:Content-Length: 411781 C4:Date: Thu, 17 Jun 2010 19:57:36 GMT C4:Server: Apache C4: C4:Réception de données... C5:HTTP/1.1 206 Partial Content C5:Content-Type: application/octet-stream C5:Accept-Ranges: bytes C5:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C5:Content-Range: bytes 2435815-2832641/3714018 C5:Content-Length: 396827 C5:Date: Thu, 17 Jun 2010 19:57:36 GMT C5:Server: Apache C5: C5:Réception de données... C6:connexion... C7:connexion... Insert next chunk in list s9 Adding record to registry with ID 6, startPos 1572788, nextID 1 Updating record with num 3: set ID 3, startPos 1157162, nextID 6 C7:envois GET... Insert next chunk in list s9 Adding record to registry with ID 7, startPos 824714, nextID 3 Updating record with num 0: set ID 0, startPos 0, nextID 7 C6:envois GET... time 1276804654, speed 60772, downl 843787 Bytes C7:HTTP/1.1 206 Partial Content C7:Content-Type: application/octet-stream C7:Accept-Ranges: bytes C7:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C7:Content-Range: bytes 1572788-1928902/3714018 C7:Content-Length: 356115 C7:Date: Thu, 17 Jun 2010 19:57:39 GMT C7:Server: Apache C7: C7:Réception de données... C6:HTTP/1.1 206 Partial Content C6:Content-Type: application/octet-stream C6:Accept-Ranges: bytes C6:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C6:Content-Range: bytes 824714-1157162/3714018 C6:Content-Length: 332449 C6:Date: Thu, 17 Jun 2010 19:57:39 GMT C6:Server: Apache C6: C6:Réception de données... time 1276804656, speed 77066, downl 1030210 Bytes time 1276804659, speed 75205, downl 1197190 Bytes time 1276804661, speed 64867, downl 1332586 Bytes time 1276804664, speed 64964, downl 1497510 Bytes time 1276804667, speed 69114, downl 1656986 Bytes time 1276804669, speed 62429, downl 1793114 Bytes time 1276804672, speed 65486, downl 1970014 Bytes time 1276804674, speed 72961, downl 2140746 Bytes time 1276804677, speed 71729, downl 2297562 Bytes C6:conn. 6 dowload complete C6:Deconnexion. C6:Terminé. C6:next 3 C6:Reusing connection. C6:connexion... Insert next chunk in list s9 Adding record to registry with ID 8, startPos 3139605, nextID 4 Updating record with num 2: set ID 2, startPos 2832641, nextID 8 C6:envois GET... time 1276804680, speed 67725, downl 2458692 Bytes time 1276804682, speed 65316, downl 2604136 Bytes C6:HTTP/1.1 206 Partial Content C6:Content-Type: application/octet-stream C6:Accept-Ranges: bytes C6:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C6:Content-Range: bytes 3139605-3302237/3714018 C6:Content-Length: 162633 C6:Date: Thu, 17 Jun 2010 19:58:06 GMT C6:Server: Apache C6: C6:Réception de données... time 1276804685, speed 74144, downl 2803645 Bytes time 1276804687, speed 73405, downl 2949809 Bytes time 1276804690, speed 71342, downl 3138569 Bytes C3:conn. 3 dowload complete C3:Deconnexion. C3:Terminé. C3:next 7 C3:Reusing connection. C3:connexion... Insert next chunk in list s9 Adding record to registry with ID 9, startPos 2781474, nextID 2 Updating record with num 5: set ID 5, startPos 2435815, nextID 9 C3:envois GET... time 1276804692, speed 69168, downl 3279670 Bytes C6:conn. 6 dowload complete C6:Deconnexion. C6:Terminé. C6:next 4 C6:Reusing connection. C6:connexion... Insert next chunk in list s9 Adding record to registry with ID 10, startPos 3663359, nextID -1 Updating record with num 4: set ID 4, startPos 3302237, nextID 10 C6:envois GET... C3:HTTP/1.1 206 Partial Content C3:Content-Type: application/octet-stream C3:Accept-Ranges: bytes C3:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C3:Content-Range: bytes 2781474-2832641/3714018 C3:Content-Length: 51168 C3:Date: Thu, 17 Jun 2010 19:58:18 GMT C3:Server: Apache C3: C3:Réception de données... time 1276804695, speed 57401, downl 3407211 Bytes C1:conn. 1 dowload complete C1:Deconnexion. C1:Terminé. C1:next 5 C1:Reusing connection. C1:connexion... C6:HTTP/1.1 206 Partial Content C6:Content-Type: application/octet-stream C6:Accept-Ranges: bytes C6:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C6:Content-Range: bytes 3663359-3714017/3714018 C6:Content-Length: 50659 C6:Date: Thu, 17 Jun 2010 19:58:19 GMT C6:Server: Apache C6: C6:Réception de données... Insert next chunk in list s9 Adding record to registry with ID 11, startPos 3111589, nextID 8 Updating record with num 2: set ID 2, startPos 2832641, nextID 11 C1:envois GET... C1:HTTP/1.1 206 Partial Content C1:Content-Type: application/octet-stream C1:Accept-Ranges: bytes C1:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C1:Content-Range: bytes 3111589-3139605/3714018 C1:Content-Length: 28017 C1:Date: Thu, 17 Jun 2010 19:58:22 GMT C1:Server: Apache C1: C1:Réception de données... C1:conn. 1 dowload complete C1:Deconnexion. C1:Terminé. C1:next 6 C1:Reusing connection. C1:connexion... time 1276804697, speed 54182, downl 3564018 Bytes Insert next chunk in list s9 Adding record to registry with ID 12, startPos 3692187, nextID -1 Updating record with num 10: set ID 10, startPos 3663359, nextID 12 C1:envois GET... C7:conn. 7 dowload complete C7:Deconnexion. C7:Terminé. C7:next 1 C7:Reusing connection. C7:connexion... Insert next chunk in list s9 Adding record to registry with ID 13, startPos 2817090, nextID 2 Updating record with num 9: set ID 9, startPos 2781474, nextID 13 C7:envois GET... C2:conn. 2 dowload complete C2:Deconnexion. C2:Terminé. C2:next 1 C2:Reusing connection. C2:connexion... Add alternative connection (2) for connection 6 Adding record 14a to registry with ID 15, startPos 3670357, nextID 12 C2:envois GET... C5:conn. 5 dowload complete C5:Deconnexion. C5:Terminé. C5:next 3 C4:conn. 4 dowload complete C4:Deconnexion. C4:Terminé. C4:next 6 C4:Reusing connection. C4:connexion... C5:Reusing connection. C5:connexion... Apply alternative for connection 6 C2:Deconnexion. C2:Terminé. C2:connexion... C1:HTTP/1.1 206 Partial Content C1:Content-Type: application/octet-stream C1:Accept-Ranges: bytes C1:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C1:Content-Range: bytes 3692187-3714017/3714018 C1:Content-Length: 21831 C1:Date: Thu, 17 Jun 2010 19:58:24 GMT C1:Server: Apache C1: C1:Réception de données... Add alternative connection (4) for connection 3 Adding record 16a to registry with ID 17, startPos 2805896, nextID 13 C4:envois GET... Add alternative connection (5) for connection 7 Adding record 13a to registry with ID 18, startPos 2817090, nextID 2 C5:envois GET... Insert next chunk in list C2:Deconnexion. time 1276804701, speed 48070, downl 3653331 Bytes C7:HTTP/1.1 206 Partial Content C7:Content-Type: application/octet-stream C7:Accept-Ranges: bytes C7:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT C7:Content-Range: bytes 2817090-2832641/3714018 C7:Content-Length: 15552 C7:Date: Thu, 17 Jun 2010 19:58:24 GMT C7:Server: Apache C7: C7:Réception de données... Apply alternative for connection 7 C5:Deconnexion. C5:Terminé. C1:conn. 1 dowload complete C1:Deconnexion. C1:Terminé. C1:This is the last chunk. C0:conn. 0 dowload complete C0:Deconnexion. C0:Terminé. C0:next 6 C0:Reusing connection. C0:connexion... C1:Reusing connection. C1:connexion... C2:Reusing connection. C2:connexion... C5:Reusing connection. C5:connexion... Apply alternative for connection 3 C4:Deconnexion. C4:Terminé. C7:conn. 7 dowload complete C7:Deconnexion. C7:Terminé. C7:next 2 Insert next chunk in list C0:Deconnexion. Insert next chunk in list C1:Deconnexion. Insert next chunk in list C2:Deconnexion. Insert next chunk in list C5:Deconnexion. C3:conn. 3 dowload complete C3:Deconnexion. C3:Terminé. C3:next 7 C6:conn. 6 dowload complete C6:Deconnexion. C6:Terminé. C6:next 1 Téléchargement terminé. 3714018 Bytes téléchargées Téléchargement terminé, tous les morceaux de fichier sont réunis en un seul... Assembling all downloaded portions into one file... Rename temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe to C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe is 824714 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe7 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe7 is 332448 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe7 Deleting record 7 from registry Updating record with ID 0, set nextID 3 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe3 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe3 is 415626 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe3 Deleting record 3 from registry Updating record with ID 0, set nextID 6 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe6 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe6 is 356114 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe6 Deleting record 6 from registry Updating record with ID 0, set nextID 1 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe1 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe1 is 506913 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe1 Deleting record 1 from registry Updating record with ID 0, set nextID 5 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe5 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe5 is 345659 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe5 Deleting record 5 from registry Updating record with ID 0, set nextID 9 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe9 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe9 is 24422 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe9 Deleting record 9 from registry Updating record with ID 0, set nextID 16 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe16 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe16 is 11194 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe16 Deleting record 16 from registry Updating record with ID 0, set nextID 13 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe13 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe13 is 15551 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe13 Deleting record 13 from registry Updating record with ID 0, set nextID 2 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe2 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe2 is 278948 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe2 Deleting record 2 from registry Updating record with ID 0, set nextID 11 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe11 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe11 is 28016 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe11 Deleting record 11 from registry Updating record with ID 0, set nextID 8 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe8 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe8 is 162632 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe8 Deleting record 8 from registry Updating record with ID 0, set nextID 4 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe4 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe4 is 361122 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe4 Deleting record 4 from registry Updating record with ID 0, set nextID 10 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe10 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe10 is 6998 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe10 Deleting record 10 from registry Updating record with ID 0, set nextID 14 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe14 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe14 is 21830 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe14 Deleting record 14 from registry Updating record with ID 0, set nextID 12 Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe12 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe. Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe12 is 21831 Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe12 Deleting record 12 from registry Updating record with ID 0, set nextID -1 Rebuilding file complete. time 1276804703 time 1276804703, speed 32447, downl 3714018 Bytes

telecharge ToolsCleaner, https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/ > http://pc-system.fr/ 1. Clique sur Recherche et laisse le scan agir ... 2. Clique sur Suppression pour finaliser. 3. Clique sur Quitter pour obtenir le rapport. 4. Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). puis ---> reTélécharge ComboFix.exe de sUBs sur ton Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe et refait la manip decrite par archet et enfin poste le rapport

tools cleaner [ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ] --> Recherche: C:\Program Files\ZHPDiag: trouvé ! C:\Program Files\trend micro\HijackThis.exe: trouvé ! C:\Program Files\trend micro\hijackthis.log: trouvé ! C:\Program Files\ZHPDiag\ZHPdiag.exe: trouvé ! C:\Program Files\ZHPDiag\mbr.exe: trouvé ! C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe: trouvé ! C:\Windows\mbr.exe: trouvé ! --------------------------------- --> Suppression: C:\Program Files\trend micro\HijackThis.exe: supprimé ! C:\Program Files\ZHPDiag\ZHPdiag.exe: supprimé ! C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe: ERREUR DE SUPPRESSION !! C:\Program Files\trend micro\hijackthis.log: supprimé ! C:\Program Files\ZHPDiag\mbr.exe: supprimé ! C:\Windows\mbr.exe: supprimé ! C:\Program Files\ZHPDiag: supprimé ! je vais refaire le scan de combofix

salut voici le rapport combofix http://www.cijoint.fr/cjlink.php?file=cj201006/cijm5nvRbY.txt

Bot net need aide merci :)

linkgoron -

salut a tous
revenu d'une promenade je cours allumé l'ordi
il s'allume normalement mais j'ai un message au début : you are inftected by bot net the man who host and infected is 'je ne sais plus ' info
qu'est ce qu'y m'est arrivé ?? comment faire pour y remédier

Afficher la suite

A voir également

Bot net need aide merci :)
Net framework 2.0 - Télécharger - Divers Utilitaires
Logo .net - Télécharger - Études & Formations
Zw-net - Télécharger - Mail
Avtube net - Télécharger - Téléchargement & Transfert
01.net téléchargement - Télécharger - Médias et Actualité

27 réponses

Résumé de la discussion

Un ordinateur affiche un message d'infection botnet et la discussion explore les causes possibles, les symptômes et les solutions pour diagnostiquer et remédier à une compromission sur un système Windows. Plusieurs réponses préconisent l'exécution d'outils spécialisés comme ZHPDiag pour générer un rapport détaillé, enregistrer le fichier et le partager afin d'obtenir une analyse et des recommandations ciblées. D'autres propositions visent à nettoyer le système avec ComboFix, ToolsCleaner et CCleaner, purger et réinitialiser la restauration système, puis créer un point de restauration pour sécuriser le système contre d'éventuelles récidives. Des éléments du sujet indiquent aussi des rapports techniques et des échanges sur des investigations réseau et des téléchargements lourds via IDM, apportant une dimension pratique à l'identification et à la remédiation.

Réponse 1 / 27
archet9
Télécharge ZHPDiag ( de? Nicolas coolman ).
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Double clique sur le fichier d'installation, puis installe le avec les? paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " )

Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Executer en tant qu'admin ( vista )

Clique sur la loupe? en haut à gauche, puis laisse l'outil scanner.

Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau.

Rend toi sur Cjoint :? http://www.cijoint.fr/

Clique sur "Parcourir " dans la partie " Joindre un fichier[...] "

Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau

Clique ensuite sur "Créer le lien cjoint " et copie/colle le dans ton prochain message

0

Réagir
Réponse 2 / 27
linkgoron Auteur
euh... non

0

Réagir
Réponse 3 / 27
archet9
T'as plusieurs pc en réseau ?

0

Réagir
Réponse 4 / 27
linkgoron Auteur
salut merci de votre aide j'ai tout fais
mais ce message est toujours présent
comment faire pour s'en débarrasser une fois pour toutes ?
merci de m'aider

0

Réagir
Vous n’avez pas trouvé la réponse que vous recherchez ?

La communauté CCM répond en moyenne en moins de 2h.

Posez votre question
Réponse 5 / 27
archet9
Pour desinstaller les outils utilisés

Telecharge ToolsCleaner2--> http://pc-system.fr/
-Une fois téléchargé, installe-le et lance-le
-Clique sur Recherche et laisse le scan se terminer
-Clique sur SUPPRESSION
-Clique sur Quitter pour que le rapport puisse se créer
-Poste moi le rapport se trouvant ici--> C:\TCleaner.txt

puis

---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html

* Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse(Sauvegarde la base de registre).
* Décoche la case plus vieux que 24 h

TRES IMPORTANT:

---> Il est nécessaire de désactiver,redémarrer puis réactiver la restauration système pour la purger :
XP:
http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924
VISTA:
https://www.commentcamarche.net/faq/13214-vista-desactiver-reactiver-la-restauration-systeme-de-vista

---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
https://www.vulgarisation-informatique.com/creer-point-restauration.php

---> Changes le statut de ce topic :
et mets le en "résolu"
https://www.commentcamarche.net/infos/25917-forum-ccm-mode-d-emploi-marquer-mon-sujet-comme-resolu/

0

Réagir
Réponse 6 / 27
linkgoron Auteur
bien :P

0

Réagir
Réponse 7 / 27
archet9
Comment se comporte le pc ?

0

Réagir
Réponse 8 / 27
linkgoron Auteur
voici le rapport
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4217

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

20/06/2010 15:30:54
mbam-log-2010-06-20 (15-30-54).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 126021
Temps écoulé: 6 minute(s), 5 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

0

Réagir
Réponse 9 / 27
linkgoron Auteur
ok je vais le faire demain ia a+

0

Réagir
Réponse 10 / 27
archet9
Merci sherred d'avoir pris la suite...j'étais au boulot !!!

linkgoron:

Fais un scan avec cet antispyware :
Malwarebytes + tutoriel

Tu l'installes; mets le a jour...(onglet mise a jour)
Click maintenant sur l'onglet recherche et coche la case :
"Executer un examen rapide".
Puis click sur "rechercher".
Laisses le scanner le pc...
A la fin du scan, clique sur Afficher les résultats
Si des elements on ete trouvés :
> click sur supprimer la selection.
si il t'es demandé de redemarrer > click sur "oui".
A la fin un rapport va s'ouvrir;
sauvegarde le de maniere a le retrouver en vue de le poster sur le forum.
Copies et colles le rapport stp.

a+

0

Réagir
1. sherred
  
  c'est des choses qui arrive ;) moi j'ai la chance de pouvoir continuer internet au boulot :o
  
  0
  
  Réagir
Réponse 11 / 27
sherred
ok on va attendre archet9

0

Réagir
Réponse 12 / 27
linkgoron Auteur
salut voici le rapport combofix http://www.cijoint.fr/cjlink.php?file=cj201006/cijm5nvRbY.txt

0

Réagir
Réponse 13 / 27
linkgoron Auteur
tools cleaner
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Program Files\ZHPDiag: trouvé !
C:\Program Files\trend micro\HijackThis.exe: trouvé !
C:\Program Files\trend micro\hijackthis.log: trouvé !
C:\Program Files\ZHPDiag\ZHPdiag.exe: trouvé !
C:\Program Files\ZHPDiag\mbr.exe: trouvé !
C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe: trouvé !
C:\Windows\mbr.exe: trouvé !

---------------------------------
--> Suppression:

C:\Program Files\trend micro\HijackThis.exe: supprimé !
C:\Program Files\ZHPDiag\ZHPdiag.exe: supprimé !
C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Program Files\trend micro\hijackthis.log: supprimé !
C:\Program Files\ZHPDiag\mbr.exe: supprimé !
C:\Windows\mbr.exe: supprimé !
C:\Program Files\ZHPDiag: supprimé !

je vais refaire le scan de combofix

0

Réagir
Réponse 14 / 27
sherred
telecharge ToolsCleaner, https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/

> http://pc-system.fr/
1. Clique sur Recherche et laisse le scan agir ...
2. Clique sur Suppression pour finaliser.
3. Clique sur Quitter pour obtenir le rapport.
4. Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

puis ---> reTélécharge ComboFix.exe de sUBs sur ton Bureau :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

et refait la manip decrite par archet
et enfin poste le rapport

0

Réagir
Réponse 15 / 27
linkgoron Auteur
Folder C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ was created.
Reconstruits les anciennes parties téléchargées...
connexion en cours...
Windows 6.1
v5.18b5 Time: Thu Jun 17 20:57:17.803 2010 (1276804637 sec)
Url http://download.bleepingcomputer.com /sUBs/ComboFix.exe
User : anonymous, password :xxx
C0:connexion...
C0:Checking connect, socket = 2644
C0:connexion OK.
C0:envois GET...
C0:HTTP/1.1 200 OK
C0:Content-Type: application/octet-stream
C0:Accept-Ranges: bytes
C0:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C0:Content-Length: 3714018
C0:Date: Thu, 17 Jun 2010 19:57:24 GMT
C0:Server: Apache
C0:
C0:Réception de données...
time 1276804641
connexions optionnelles, connexion en cours...
C1:connexion...
time 1276804641
time 1276804641
Réception de données...
Insert next chunk in list
s9
Adding record to registry with ID 1, startPos 1928902, nextID -1
Updating record with num 0: set ID 0, startPos 0, nextID 1
C1:envois GET...
C0:Réception de données...
C1:attente de réponse...
time 1276804643, speed 122101, downl 277371 Bytes
C1:HTTP/1.1 206 Partial Content
C1:Content-Type: application/octet-stream
C1:Accept-Ranges: bytes
C1:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C1:Content-Range: bytes 1928902-3714017/3714018
C1:Content-Length: 1785116
C1:Date: Thu, 17 Jun 2010 19:57:27 GMT
C1:Server: Apache
C1:
C1:Réception de données...
C2:connexion...
Insert next chunk in list
s9
Adding record to registry with ID 2, startPos 2832641, nextID -1
Updating record with num 1: set ID 1, startPos 1928902, nextID 2
C2:envois GET...
time 1276804646, speed 84632, downl 398471 Bytes
C2:HTTP/1.1 206 Partial Content
C2:Content-Type: application/octet-stream
C2:Accept-Ranges: bytes
C2:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C2:Content-Range: bytes 2832641-3714017/3714018
C2:Content-Length: 881377
C2:Date: Thu, 17 Jun 2010 19:57:30 GMT
C2:Server: Apache
C2:
C2:Réception de données...
C3:connexion...
Insert next chunk in list
s9
Adding record to registry with ID 3, startPos 1157162, nextID 1
Updating record with num 0: set ID 0, startPos 0, nextID 3
C3:envois GET...
time 1276804649, speed 58096, downl 554176 Bytes
C3:HTTP/1.1 206 Partial Content
C3:Content-Type: application/octet-stream
C3:Accept-Ranges: bytes
C3:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C3:Content-Range: bytes 1157162-1928902/3714018
C3:Content-Length: 771741
C3:Date: Thu, 17 Jun 2010 19:57:33 GMT
C3:Server: Apache
C3:
C3:Réception de données...
C4:connexion...
C5:connexion...
Insert next chunk in list
s9
Adding record to registry with ID 4, startPos 3302237, nextID -1
Updating record with num 2: set ID 2, startPos 2832641, nextID 4
C4:envois GET...
Insert next chunk in list
s9
Adding record to registry with ID 5, startPos 2435815, nextID 2
Updating record with num 1: set ID 1, startPos 1928902, nextID 5
C5:envois GET...
time 1276804651, speed 57351, downl 672617 Bytes
C4:HTTP/1.1 206 Partial Content
C4:Content-Type: application/octet-stream
C4:Accept-Ranges: bytes
C4:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C4:Content-Range: bytes 3302237-3714017/3714018
C4:Content-Length: 411781
C4:Date: Thu, 17 Jun 2010 19:57:36 GMT
C4:Server: Apache
C4:
C4:Réception de données...
C5:HTTP/1.1 206 Partial Content
C5:Content-Type: application/octet-stream
C5:Accept-Ranges: bytes
C5:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C5:Content-Range: bytes 2435815-2832641/3714018
C5:Content-Length: 396827
C5:Date: Thu, 17 Jun 2010 19:57:36 GMT
C5:Server: Apache
C5:
C5:Réception de données...
C6:connexion...
C7:connexion...
Insert next chunk in list
s9
Adding record to registry with ID 6, startPos 1572788, nextID 1
Updating record with num 3: set ID 3, startPos 1157162, nextID 6
C7:envois GET...
Insert next chunk in list
s9
Adding record to registry with ID 7, startPos 824714, nextID 3
Updating record with num 0: set ID 0, startPos 0, nextID 7
C6:envois GET...
time 1276804654, speed 60772, downl 843787 Bytes
C7:HTTP/1.1 206 Partial Content
C7:Content-Type: application/octet-stream
C7:Accept-Ranges: bytes
C7:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C7:Content-Range: bytes 1572788-1928902/3714018
C7:Content-Length: 356115
C7:Date: Thu, 17 Jun 2010 19:57:39 GMT
C7:Server: Apache
C7:
C7:Réception de données...
C6:HTTP/1.1 206 Partial Content
C6:Content-Type: application/octet-stream
C6:Accept-Ranges: bytes
C6:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C6:Content-Range: bytes 824714-1157162/3714018
C6:Content-Length: 332449
C6:Date: Thu, 17 Jun 2010 19:57:39 GMT
C6:Server: Apache
C6:
C6:Réception de données...
time 1276804656, speed 77066, downl 1030210 Bytes
time 1276804659, speed 75205, downl 1197190 Bytes
time 1276804661, speed 64867, downl 1332586 Bytes
time 1276804664, speed 64964, downl 1497510 Bytes
time 1276804667, speed 69114, downl 1656986 Bytes
time 1276804669, speed 62429, downl 1793114 Bytes
time 1276804672, speed 65486, downl 1970014 Bytes
time 1276804674, speed 72961, downl 2140746 Bytes
time 1276804677, speed 71729, downl 2297562 Bytes
C6:conn. 6 dowload complete
C6:Deconnexion.
C6:Terminé.
C6:next 3
C6:Reusing connection.
C6:connexion...
Insert next chunk in list
s9
Adding record to registry with ID 8, startPos 3139605, nextID 4
Updating record with num 2: set ID 2, startPos 2832641, nextID 8
C6:envois GET...
time 1276804680, speed 67725, downl 2458692 Bytes
time 1276804682, speed 65316, downl 2604136 Bytes
C6:HTTP/1.1 206 Partial Content
C6:Content-Type: application/octet-stream
C6:Accept-Ranges: bytes
C6:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C6:Content-Range: bytes 3139605-3302237/3714018
C6:Content-Length: 162633
C6:Date: Thu, 17 Jun 2010 19:58:06 GMT
C6:Server: Apache
C6:
C6:Réception de données...
time 1276804685, speed 74144, downl 2803645 Bytes
time 1276804687, speed 73405, downl 2949809 Bytes
time 1276804690, speed 71342, downl 3138569 Bytes
C3:conn. 3 dowload complete
C3:Deconnexion.
C3:Terminé.
C3:next 7
C3:Reusing connection.
C3:connexion...
Insert next chunk in list
s9
Adding record to registry with ID 9, startPos 2781474, nextID 2
Updating record with num 5: set ID 5, startPos 2435815, nextID 9
C3:envois GET...
time 1276804692, speed 69168, downl 3279670 Bytes
C6:conn. 6 dowload complete
C6:Deconnexion.
C6:Terminé.
C6:next 4
C6:Reusing connection.
C6:connexion...
Insert next chunk in list
s9
Adding record to registry with ID 10, startPos 3663359, nextID -1
Updating record with num 4: set ID 4, startPos 3302237, nextID 10
C6:envois GET...
C3:HTTP/1.1 206 Partial Content
C3:Content-Type: application/octet-stream
C3:Accept-Ranges: bytes
C3:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C3:Content-Range: bytes 2781474-2832641/3714018
C3:Content-Length: 51168
C3:Date: Thu, 17 Jun 2010 19:58:18 GMT
C3:Server: Apache
C3:
C3:Réception de données...
time 1276804695, speed 57401, downl 3407211 Bytes
C1:conn. 1 dowload complete
C1:Deconnexion.
C1:Terminé.
C1:next 5
C1:Reusing connection.
C1:connexion...
C6:HTTP/1.1 206 Partial Content
C6:Content-Type: application/octet-stream
C6:Accept-Ranges: bytes
C6:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C6:Content-Range: bytes 3663359-3714017/3714018
C6:Content-Length: 50659
C6:Date: Thu, 17 Jun 2010 19:58:19 GMT
C6:Server: Apache
C6:
C6:Réception de données...
Insert next chunk in list
s9
Adding record to registry with ID 11, startPos 3111589, nextID 8
Updating record with num 2: set ID 2, startPos 2832641, nextID 11
C1:envois GET...
C1:HTTP/1.1 206 Partial Content
C1:Content-Type: application/octet-stream
C1:Accept-Ranges: bytes
C1:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C1:Content-Range: bytes 3111589-3139605/3714018
C1:Content-Length: 28017
C1:Date: Thu, 17 Jun 2010 19:58:22 GMT
C1:Server: Apache
C1:
C1:Réception de données...
C1:conn. 1 dowload complete
C1:Deconnexion.
C1:Terminé.
C1:next 6
C1:Reusing connection.
C1:connexion...
time 1276804697, speed 54182, downl 3564018 Bytes
Insert next chunk in list
s9
Adding record to registry with ID 12, startPos 3692187, nextID -1
Updating record with num 10: set ID 10, startPos 3663359, nextID 12
C1:envois GET...
C7:conn. 7 dowload complete
C7:Deconnexion.
C7:Terminé.
C7:next 1
C7:Reusing connection.
C7:connexion...
Insert next chunk in list
s9
Adding record to registry with ID 13, startPos 2817090, nextID 2
Updating record with num 9: set ID 9, startPos 2781474, nextID 13
C7:envois GET...
C2:conn. 2 dowload complete
C2:Deconnexion.
C2:Terminé.
C2:next 1
C2:Reusing connection.
C2:connexion...
Add alternative connection (2) for connection 6
Adding record 14a to registry with ID 15, startPos 3670357, nextID 12
C2:envois GET...
C5:conn. 5 dowload complete
C5:Deconnexion.
C5:Terminé.
C5:next 3
C4:conn. 4 dowload complete
C4:Deconnexion.
C4:Terminé.
C4:next 6
C4:Reusing connection.
C4:connexion...
C5:Reusing connection.
C5:connexion...
Apply alternative for connection 6
C2:Deconnexion.
C2:Terminé.
C2:connexion...
C1:HTTP/1.1 206 Partial Content
C1:Content-Type: application/octet-stream
C1:Accept-Ranges: bytes
C1:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C1:Content-Range: bytes 3692187-3714017/3714018
C1:Content-Length: 21831
C1:Date: Thu, 17 Jun 2010 19:58:24 GMT
C1:Server: Apache
C1:
C1:Réception de données...
Add alternative connection (4) for connection 3
Adding record 16a to registry with ID 17, startPos 2805896, nextID 13
C4:envois GET...
Add alternative connection (5) for connection 7
Adding record 13a to registry with ID 18, startPos 2817090, nextID 2
C5:envois GET...
Insert next chunk in list
C2:Deconnexion.
time 1276804701, speed 48070, downl 3653331 Bytes
C7:HTTP/1.1 206 Partial Content
C7:Content-Type: application/octet-stream
C7:Accept-Ranges: bytes
C7:Last-Modified: Thu, 17 Jun 2010 18:20:36 GMT
C7:Content-Range: bytes 2817090-2832641/3714018
C7:Content-Length: 15552
C7:Date: Thu, 17 Jun 2010 19:58:24 GMT
C7:Server: Apache
C7:
C7:Réception de données...
Apply alternative for connection 7
C5:Deconnexion.
C5:Terminé.
C1:conn. 1 dowload complete
C1:Deconnexion.
C1:Terminé.
C1:This is the last chunk.
C0:conn. 0 dowload complete
C0:Deconnexion.
C0:Terminé.
C0:next 6
C0:Reusing connection.
C0:connexion...
C1:Reusing connection.
C1:connexion...
C2:Reusing connection.
C2:connexion...
C5:Reusing connection.
C5:connexion...
Apply alternative for connection 3
C4:Deconnexion.
C4:Terminé.
C7:conn. 7 dowload complete
C7:Deconnexion.
C7:Terminé.
C7:next 2
Insert next chunk in list
C0:Deconnexion.
Insert next chunk in list
C1:Deconnexion.
Insert next chunk in list
C2:Deconnexion.
Insert next chunk in list
C5:Deconnexion.
C3:conn. 3 dowload complete
C3:Deconnexion.
C3:Terminé.
C3:next 7
C6:conn. 6 dowload complete
C6:Deconnexion.
C6:Terminé.
C6:next 1
Téléchargement terminé. 3714018 Bytes téléchargées
Téléchargement terminé, tous les morceaux de fichier sont réunis en un seul...
Assembling all downloaded portions into one file...
Rename temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe to C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe is 824714
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe7 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe7 is 332448
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe7
Deleting record 7 from registry
Updating record with ID 0, set nextID 3
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe3 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe3 is 415626
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe3
Deleting record 3 from registry
Updating record with ID 0, set nextID 6
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe6 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe6 is 356114
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe6
Deleting record 6 from registry
Updating record with ID 0, set nextID 1
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe1 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe1 is 506913
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe1
Deleting record 1 from registry
Updating record with ID 0, set nextID 5
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe5 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe5 is 345659
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe5
Deleting record 5 from registry
Updating record with ID 0, set nextID 9
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe9 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe9 is 24422
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe9
Deleting record 9 from registry
Updating record with ID 0, set nextID 16
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe16 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe16 is 11194
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe16
Deleting record 16 from registry
Updating record with ID 0, set nextID 13
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe13 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe13 is 15551
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe13
Deleting record 13 from registry
Updating record with ID 0, set nextID 2
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe2 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe2 is 278948
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe2
Deleting record 2 from registry
Updating record with ID 0, set nextID 11
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe11 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe11 is 28016
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe11
Deleting record 11 from registry
Updating record with ID 0, set nextID 8
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe8 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe8 is 162632
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe8
Deleting record 8 from registry
Updating record with ID 0, set nextID 4
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe4 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe4 is 361122
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe4
Deleting record 4 from registry
Updating record with ID 0, set nextID 10
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe10 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe10 is 6998
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe10
Deleting record 10 from registry
Updating record with ID 0, set nextID 14
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe14 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe14 is 21830
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe14
Deleting record 14 from registry
Updating record with ID 0, set nextID 12
Adding file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe12 to file C:\Users\Soap\Documents\Downloads\Programs\ComboFix.exe.
Size of C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe12 is 21831
Deleting temp file C:\Users\Soap\AppData\Roaming\IDM\DwnlData\Soap\ComboFix_627\ComboFix.exe12
Deleting record 12 from registry
Updating record with ID 0, set nextID -1
Rebuilding file complete.
time 1276804703
time 1276804703, speed 32447, downl 3714018 Bytes

0

Réagir
Réponse 16 / 27
linkgoron Auteur
ah j'ai trouvé le fichier bloc note je l'ai trouvé sur mon profil
mais il s'appelle combofix_627
je le poste ou pas ?

0

Réagir
1. sherred
  
  curieux poste le pour voir
  
  0
  
  Réagir
Réponse 17 / 27
linkgoron Auteur
je vais résayer

0

Réagir
Réponse 18 / 27
sherred
et rsit fonctionne pas ?

0

Réagir
Réponse 19 / 27
linkgoron Auteur
salut oui le problème n'est pas encore résolu j'ai allumé le pc maintenant et le message est encore présent :( et je ne trouvé pas le fichier bloc notes sur c:/
je trouvé juste un combofix avec une icone du poste de travail lorsque je double clique sur lui c'est poste de travail

0

Réagir
Réponse 20 / 27
sherred
bonjour linkgoron, je ne pense pas que ton probleme soit entierement resolu
tant que archet9 ne l'a pas dit
tu devrais posté le rapport combofix
qui ce trouve sur ton disque C:\ComboFix.txt

0

Réagir
- 1
- 2
Suivant

Bot net need aide merci :)

27 réponses

Discussions similaires

Newsletters