Cryptowall inactif ? Résolu

Question

Bonjour, 

J'ai été infectée par cryptowall. J'ai téléchargé et 
 lancé malwarebytes. A priori le virus a été supprimé. Comment puis-je en être sûre ?



Configuration: Windows 7 / Mozilla 11.0

Malekal_morte- · Answer

Salut,

Suis le tutoriel FRST.
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :

 FRST.txt
 Shortcut.txt
 Additionnal.txt

Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à  ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

Mariavirus · Answer

J'ai installé FRST, voici les 3 fichiers :
http://pjjoint.malekal.com/files.php?id=20160113_l6f9n8k12t13
http://pjjoint.malekal.com/files.php?id=20160113_x6q6x5h14p5
http://pjjoint.malekal.com/files.php?id=FRST_20160113_l12u15i14j6x6

Malekal_morte- · Answer

Voici la correction à  effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit : 


 2016-01-12 21:39 - 2016-01-12 21:39 - 0068264 _____ () C:\Users\maria\AppData\Roaming\51732 
 2016-01-12 21:42 - 2016-01-12 21:42 - 0047864 _____ () C:\Users\maria\AppData\Roaming\Microsoft\HELP_YOUR_FILES.PNG 
 2016-01-12 22:43 - 2016-01-12 22:43 - 01576008 _____ C:\Users\maria\8eplluf6x.stp4h 
 2016-01-12 22:43 - 2016-01-12 22:43 - 01573560 _____ C:\Users\maria\3u5mx20m.8xpa 
 2016-01-12 22:43 - 2016-01-12 22:43 - 01492500 _____ C:\Users\maria\y6xol.h67q 
 2016-01-12 22:29 - 2016-01-12 22:29 - 07026576 _____ C:\Users\maria\Downloadsjomfbz6.8x 
 2016-01-12 22:29 - 2016-01-12 22:29 - 06770172 _____ C:\Users\maria\Downloads
xs6ut76di.03ov 
 2016-01-12 22:29 - 2016-01-12 22:29 - 06092472 _____ C:\Users\maria\Downloads\7voq9.u1g 
 2016-01-12 22:29 - 2016-01-12 22:29 - 05931032 _____ C:\Users\maria\Downloads\91ap2n.3y 
 2016-01-12 22:29 - 2016-01-12 22:29 - 05526932 _____ C:\Users\maria\Downloads\7c15rw.6c9k 
 2016-01-12 22:29 - 2016-01-12 22:29 - 05468628 _____ C:\Users\maria\Downloads\5638ni7v65.a8 
 2016-01-12 22:29 - 2016-01-12 22:29 - 05298660 _____ C:\Users\maria\Downloads\4f217z.c6wb 
 2016-01-12 22:29 - 2016-01-12 22:29 - 05230896 _____ C:\Users\maria\Downloads\b8fb793.z7p 
 2016-01-12 22:29 - 2016-01-12 22:29 - 04916672 _____ C:\Users\maria\Downloads\ptynro1j.aozv3 
 2016-01-12 22:29 - 2016-01-12 22:29 - 04746416 _____ C:\Users\maria\Downloads\9s00e5e9wg.yfw5f 
 2016-01-12 22:29 - 2016-01-12 22:29 - 04428556 _____ C:\Users\maria\Downloads\xwmsyfa8.58xd5 
 2016-01-12 22:29 - 2016-01-12 22:29 - 04428556 _____ C:\Users\maria\Downloads\51avkod9q.zk7 
 2016-01-12 22:29 - 2016-01-12 22:29 - 04415036 _____ C:\Users\maria\Downloads\bx2eggz.d0 
 2016-01-12 22:29 - 2016-01-12 22:29 - 04411612 _____ C:\Users\maria\Downloads\88ba8.j0j 
 2016-01-12 22:29 - 2016-01-12 22:29 - 04411612 _____ C:\Users\maria\Downloads\32kchr.9wp 
 2016-01-12 22:29 - 2016-01-12 22:29 - 04411596 _____ C:\Users\maria\Downloads\22b0y7pfb9.h2dg7 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03953240 _____ C:\Users\maria\Downloads
edo04elp.k6 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03934472 _____ C:\Users\maria\Downloads\5gdyqdxww.63qqu 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03800312 _____ C:\Users\maria\Downloads\ea78rq0m0s.izse8 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03727160 _____ C:\Users\maria\Downloads\iyq6313l2h.q88v5 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03693608 _____ C:\Users\maria\Downloads\uvtpy87o03.3m 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03685736 _____ C:\Users\maria\Downloads\0s1ifz4dw.0tdqt 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03582500 _____ C:\Users\maria\Downloads\x57d06.98sg0 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03565812 _____ C:\Users\maria\Downloads\9yjtf.2p 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03485508 _____ C:\Users\maria\Downloads\ys742td0.zzw5 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03485508 _____ C:\Users\maria\Downloads\p5w42l5925.0m9c 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03484660 _____ C:\Users\maria\Downloads\0o2bzcfkb.w4 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03422996 _____ C:\Users\maria\Downloads\jt7bqt.50rn 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03385860 _____ C:\Users\maria\Downloads\g8d0r7.0gx 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03385860 _____ C:\Users\maria\Downloads\dx5oox3.r4 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03385860 _____ C:\Users\maria\Downloads\72b3k8f.a60y6 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03371636 _____ C:\Users\maria\Downloads\ma6gc.x57eq 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03366820 _____ C:\Users\maria\Downloads	ajr0fw.s4p34 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03366820 _____ C:\Users\maria\Downloads\j3jtjnco.xv2 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03366820 _____ C:\Users\maria\Downloads\5h1rfhlnjm.d9ye 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03298212 _____ C:\Users\maria\Downloads\hzdru2n9.3qn4 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03296196 _____ C:\Users\maria\Downloads\0x6ojzf6.g6b 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03240596 _____ C:\Users\maria\Downloads\5nh3uy.e31 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03117664 _____ C:\Users\maria\Downloads\f6z3766s4.8dcpw 
 2016-01-12 22:29 - 2016-01-12 22:29 - 03029968 _____ C:\Users\maria\Downloads\71pxf.3u2 
 2016-01-12 22:29 - 2016-01-12 22:29 - 02982256 _____ C:\Users\maria\Downloads\93fifa.5j 
 2016-01-12 22:29 - 2016-01-12 22:29 - 02864464 _____ C:\Users\maria\Downloads\wahcd1yx7s.p3 
 2016-01-12 22:29 - 2016-01-12 22:29 - 02753840 _____ C:\Users\maria\Downloads\gdp2b3v.quiw5 
 2016-01-12 22:29 - 2016-01-12 22:29 - 02667968 _____ C:\Users\maria\Downloads\eb1yv.twf6 
 2016-01-12 22:29 - 2016-01-12 22:29 - 01777464 _____ C:\Users\maria\Downloads\0gh4cglp6.9qrad 
 2016-01-12 22:29 - 2016-01-12 22:29 - 01776872 _____ C:\Users\maria\Downloads\bp76lu.o5 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00912720 _____ C:\Users\maria\Downloads\db58e.7cdi 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00461196 _____ C:\Users\maria\Downloads\u0nu9.0i 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00461180 _____ C:\Users\maria\Downloads\2tt357zjm.3b 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00432876 _____ C:\Users\maria\Downloads\5cskjxpqd.6mbld 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00337452 _____ C:\Users\maria\Downloads\fj75x.d0h6 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00312860 _____ C:\Users\maria\Downloads\400pz78.8sb 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00247180 _____ C:\Users\maria\Downloads\g6qmp6oy2d.3s2fa 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00233228 _____ C:\Users\maria\Downloads\ewt6i2m0r.r52 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00136412 _____ C:\Users\maria\Downloads\sdlo5.x5 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00136412 _____ C:\Users\maria\Downloads\gzixwz6xh.iiw5 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00136412 _____ C:\Users\maria\Downloads\554oe.xl184 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00061084 _____ C:\Users\maria\Downloads\w8m5hj1.6l9 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00060588 _____ C:\Users\maria\Downloads\m0k3g05p8.w0r 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00058988 _____ C:\Users\maria\Downloads\wx6f23.ys69e 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00058972 _____ C:\Users\maria\Downloads\d7oty72.tc8 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00058620 _____ C:\Users\maria\Downloads\u07v2lqj6.x2zsz 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00052204 _____ C:\Users\maria\Downloads\yn0yxdt.ai92 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00032076 _____ C:\Users\maria\7b3777r81.2sq 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00022460 _____ C:\Users\maria\Downloads\6kabdwmpb.0pk 
 2016-01-12 22:29 - 2016-01-12 22:29 - 00001052 _____ C:\Users\maria\Downloads\vx6z5e.v79 
 2016-01-12 22:28 - 2016-01-12 22:29 - 03352180 _____ C:\Users\maria\Downloads\h00o473lt.kw7c 
 2016-01-12 22:28 - 2016-01-12 22:28 - 12247016 _____ C:\Users\maria\Downloads\ugpt2f8.e2 
 2016-01-12 22:28 - 2016-01-12 22:28 - 12247016 _____ C:\Users\maria\Downloads\qqmbdetf9v.f4 
 2016-01-12 22:28 - 2016-01-12 22:28 - 12247000 _____ C:\Users\maria\Downloads\6pf4sm.4oxs0 
 2016-01-12 22:28 - 2016-01-12 22:28 - 10495068 _____ C:\Users\maria\Downloads\oy086x.d0qod 
 2016-01-12 22:28 - 2016-01-12 22:28 - 07692708 _____ C:\Users\maria\Downloads\5cjrvb.igpb6 
 2016-01-12 22:28 - 2016-01-12 22:28 - 07337456 _____ C:\Users\maria\Downloads\ixt81wah.eh3h 
 2016-01-12 22:28 - 2016-01-12 22:28 - 07337456 _____ C:\Users\maria\Downloads\52vqcoi.s9l 
 2016-01-12 22:28 - 2016-01-12 22:28 - 07337440 _____ C:\Users\maria\Downloads\uds34hsc50.m2fvw 
 2016-01-12 22:28 - 2016-01-12 22:28 - 07307184 _____ C:\Users\maria\Downloads\h77n966236.60x5 
 2016-01-12 22:28 - 2016-01-12 22:28 - 05613156 _____ C:\Users\maria\Downloads\jd6y88w.gxl9i 
 2016-01-12 22:28 - 2016-01-12 22:28 - 05359524 _____ C:\Users\maria\Downloads\80hik64z.62yuy 
 2016-01-12 22:28 - 2016-01-12 22:28 - 05051632 _____ C:\Users\maria\Downloads\xnusd6vh.ln8a 
 2016-01-12 22:28 - 2016-01-12 22:28 - 04610348 _____ C:\Users\maria\Downloads\21s4aa8tv.8e54m 
 2016-01-12 22:28 - 2016-01-12 22:28 - 04602684 _____ C:\Users\maria\Downloads\hb4d77.65 
 2016-01-12 22:28 - 2016-01-12 22:28 - 04307372 _____ C:\Users\maria\Downloads\sysk2wvlxv.dc419 
 2016-01-12 22:28 - 2016-01-12 22:28 - 04296364 _____ C:\Users\maria\Downloads\v9qouonp.6n 
 2016-01-12 22:28 - 2016-01-12 22:28 - 04213036 _____ C:\Users\maria\Downloads\150rteap8.4s0 
 2016-01-12 22:28 - 2016-01-12 22:28 - 04030248 _____ C:\Users\maria\Downloads\0c769z9y.p3y8 
 2016-01-12 22:28 - 2016-01-12 22:28 - 04006664 _____ C:\Users\maria\Downloads\knk734.5a41 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03989992 _____ C:\Users\maria\Downloads\i8s90ffw.u0x4d 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03835912 _____ C:\Users\maria\Downloads\s50m3x4.68o0p 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03834056 _____ C:\Users\maria\Downloads\9pod7x49.wiem0 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03812072 _____ C:\Users\maria\Downloads\dw593s0.wfo2x 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03712856 _____ C:\Users\maria\Downloads\pcc85iz2q.0kmh 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03601300 _____ C:\Users\maria\Downloads\79y5ost8.x8 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03597524 _____ C:\Users\maria\Downloads\bc6wa0li.q7 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03438676 _____ C:\Users\maria\Downloads\56iwjr1.2h0t 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03398340 _____ C:\Users\maria\Downloads\k0h2ua39.911 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03345124 _____ C:\Users\maria\Downloads\y00fs.2n 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03331412 _____ C:\Users\maria\Downloads\4ti3bdatif.0t4 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03315828 _____ C:\Users\maria\Downloads\8m8qi.ix0fz 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03284036 _____ C:\Users\maria\Downloads\ab1ca.59v6o 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03198868 _____ C:\Users\maria\Downloads\oo0u6.7pj 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03107680 _____ C:\Users\maria\Downloads\dahzf3br.kv6sn 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03105120 _____ C:\Users\maria\Downloads\ebj90.t92j 
 2016-01-12 22:28 - 2016-01-12 22:28 - 03051504 _____ C:\Users\maria\Downloads\9b2j89.5cm 
 2016-01-12 22:28 - 2016-01-12 22:28 - 02922016 _____ C:\Users\maria\Downloads\423qs79.mm2e 
 2016-01-12 22:28 - 2016-01-12 22:28 - 02797136 _____ C:\Users\maria\Downloads\0ghu5vwq.5n 
 2016-01-12 22:28 - 2016-01-12 22:28 - 02542956 _____ C:\Users\maria\Downloads\fktsi6z.2tnm 
 2016-01-12 22:28 - 2016-01-12 22:28 - 02086632 _____ C:\Users\maria\Downloads\fy1nnf0.8au 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00805088 _____ C:\Users\maria\Downloads\otd2zkzqyx.9z91 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00719792 _____ C:\Users\maria\Downloads\vnaqe0u.obsd4 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00338428 _____ C:\Users\maria\Downloads\v301b5pt3b.nj2b2 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00338428 _____ C:\Users\maria\Downloads\sznbe8qer.r9 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00338428 _____ C:\Users\maria\Downloads\ald9vcpqlx.uao4 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00338428 _____ C:\Users\maria\Downloads\1q1ge2.9s 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00338412 _____ C:\Users\maria\Downloadsxytb747.6a 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00336012 _____ C:\Users\maria\Downloads\36y0nmc.x2yn 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00206268 _____ C:\Users\maria\Downloads\2u2x97.7n 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00206252 _____ C:\Users\maria\Downloads\qftqes1m.6g 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00200892 _____ C:\Users\maria\Downloads\7994p7ok0h.6j9i 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00185948 _____ C:\Users\maria\Downloads\31eyjbd.a4 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00135372 _____ C:\Users\maria\Downloads\uw24wfivqe.16ngl 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00132028 _____ C:\Users\maria\Downloads\948mzh.9u8 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00130252 _____ C:\Users\maria\Downloads\6ucxe.zf6y 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00114908 _____ C:\Users\maria\Downloads\fef25g.9g 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00107612 _____ C:\Users\maria\Downloads\cwbmqfu9.k9x5a 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00107388 _____ C:\Users\maria\Downloads\jfcq3ty.62dy 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00107388 _____ C:\Users\maria\Downloads\eav4xj4rl.9qpb9 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00074476 _____ C:\Users\maria\Downloads\get3l.zlr9 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00045836 _____ C:\Users\maria\Downloads\p8qech.a9 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00045836 _____ C:\Users\maria\Downloads\gq6nx.2fv 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00045836 _____ C:\Users\maria\Downloads\80s7n41q.26f3 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00027452 _____ C:\Users\maria\Downloads\2eg1t6w2.2h2 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00015164 _____ C:\Users\maria\Downloads
x7hbn.p0i 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00011132 _____ C:\Users\maria\Downloads\1pkb4gk.9z 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00011036 _____ C:\Users\maria\Downloads\f73f5d73.9vhf 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00010204 _____ C:\Users\maria\Documents42cd.n2hlm 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00006956 _____ C:\Users\maria\Downloads\0w33yya3w.dv427 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00003292 _____ C:\Users\maria\Downloads\jt8u3.mj7 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00003212 _____ C:\Users\maria\Downloads\j41f90ejp5.9jj 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00002444 _____ C:\Users\maria\Downloads\u6w5h.3kq08 
 2016-01-12 22:28 - 2016-01-12 22:28 - 00000508 _____ C:\Users\maria\Documents\i5zxtjq.yd9sc 
 2016-01-12 22:23 - 2016-01-12 22:23 - 29423676 _____ C:\Users\maria\Documents\jevji31f.3m1 
 2016-01-12 22:23 - 2016-01-12 22:23 - 09076048 _____ C:\Users\maria\Documents\j6f7epsx.v6 
 2016-01-12 22:23 - 2016-01-12 22:23 - 02549116 _____ C:\Users\maria\Documents\hsa08.7cpm7 
 2016-01-12 22:23 - 2016-01-12 22:23 - 01152388 _____ C:\Users\maria\Documents\col1zo.q0pz8 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00506060 _____ C:\Users\maria\Documents\39rj32782e.6e 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00504732 _____ C:\Users\maria\Documents\9jrm7n.3ath 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00489836 _____ C:\Users\maria\Documents\hg3gmp.0hdxy 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00487788 _____ C:\Users\maria\Documents\5003p1v30z.22 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00487788 _____ C:\Users\maria\Documents\4p917na2.5g0h9 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00404828 _____ C:\Users\maria\Documents\auwou8.a68 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00384364 _____ C:\Users\maria\Documents\21c02f8.34ng 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00356204 _____ C:\Users\maria\Documents\iuff8v2e.2osf 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00350076 _____ C:\Users\maria\Documents\vpakqolak4.77l 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00349532 _____ C:\Users\maria\Documents\0hlu60t38.t7 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00278924 _____ C:\Users\maria\Documents\a03y8x.l8d 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00219996 _____ C:\Users\maria\Documents\y8crbs89rn.0jfc 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00212332 _____ C:\Users\maria\Documents\02eahpygy.t3719 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00197820 _____ C:\Users\maria\Documents\jjcg9uor.w3e 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00197660 _____ C:\Users\maria\Documents\525j303.18s 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00188764 _____ C:\Users\maria\Documents\k7ugckfayv.41 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00169404 _____ C:\Users\maria\Documents\j674a.48uq 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00167468 _____ C:\Users\maria\Documents\dmf9npbb.5dj8 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00163532 _____ C:\Users\maria\Documents\5ikrnjw37q.r6 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00150876 _____ C:\Users\maria\Documents\9fz5mb4gb.i50l0 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00124076 _____ C:\Users\maria\Documents\ylbc88ph6e.w8 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00122716 _____ C:\Users\maria\Documents\87wg6.8oy 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00107100 _____ C:\Users\maria\Documents\jg8dm1vi.kj94 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00102748 _____ C:\Users\maria\Documents\jp3duyif.c1x8a 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00100284 _____ C:\Users\maria\Documents\g2c84.qs3 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00090460 _____ C:\Users\maria\Documents\8468nibqd2.70 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00089116 _____ C:\Users\maria\Documentsuy2a.iqm97 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00077660 _____ C:\Users\maria\Documents\iufuo0x85c.37irr 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00071676 _____ C:\Users\maria\Documents\ye7bl4q1v7.6m0m1 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00052588 _____ C:\Users\maria\Documents
u3rh.ms23t 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00043900 _____ C:\Users\maria\Documents\eq924d.orv9 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00039804 _____ C:\Users\maria\Documents\fqd4rfx4.sgx7 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00038796 _____ C:\Users\maria\Documents\mz911x.40 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00037724 _____ C:\Users\maria\Documents\ko0tq64zb.75sbt 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00033692 _____ C:\Users\maria\Documents\3cjr25n.60tw 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00032108 _____ C:\Users\maria\Documents\u9k6244.jgsp2 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00031100 _____ C:\Users\maria\Documents\pg3zyl.g38w 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00027516 _____ C:\Users\maria\Documents\cn8qh7w7b9.mmb4a 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00027004 _____ C:\Users\maria\Documents\axlw2epikw.hyn8 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00013228 _____ C:\Users\maria\Documents\xw3gm.h0p8 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00013004 _____ C:\Users\maria\Documents\j51yi8g.57p 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00010236 _____ C:\Users\maria\Documents\p6x61sn.kre0h 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00010236 _____ C:\Users\maria\Documents\2oibzpz5c.27m1u 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00010220 _____ C:\Users\maria\Documents\839ek5.t5 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00010172 _____ C:\Users\maria\Documents
v8nn1el7b.o5 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00009868 _____ C:\Users\maria\Documents\d8zvc.94m2m 
 2016-01-12 22:23 - 2016-01-12 22:23 - 00008188 _____ C:\Users\maria\Documents\errq1.3qrqe 
 2016-01-12 22:22 - 2016-01-12 22:23 - 388818336 _____ C:\Users\maria\Documents\d9rv8yh.8f2y 
 2016-01-12 22:22 - 2016-01-12 22:22 - 00010172 _____ C:\Users\maria\Documents\9l8vv4xiq.9x 
 2016-01-12 22:21 - 2016-01-12 22:22 - 443747972 _____ C:\Users\maria\Desktop\cv6ba.ttc0y 
 2016-01-12 22:03 - 2016-01-12 22:03 - 00241372 _____ C:\Users\maria\Desktop\sdme3vou.15h 
 2016-01-12 22:03 - 2016-01-12 22:03 - 00152492 _____ C:\Users\maria\Desktop\ew3v29az.37j 
 2016-01-12 22:03 - 2016-01-12 22:03 - 00125212 _____ C:\Users\maria\Desktop\g1n01cz937.c10g3 
 2016-01-12 21:50 - 2016-01-12 21:50 - 10495084 _____ C:\Users\maria\Desktop
hdffm1.7t 
 2016-01-12 21:48 - 2016-01-12 21:48 - 01343924 _____ C:\Users\maria\Desktop\c0cblf61ye.22vw 
 2016-01-12 21:39 - 2016-01-12 21:39 - 00068264 _____ C:\Users\maria\AppData\Roaming\51732 
 2016-01-12 21:38 - 2016-01-13 01:39 - 00000000 ____D C:\Users\maria\AppData\Roaming\c12af9435 
 2016-01-12 22:23 - 2014-03-13 21:09 - 00000000 ____D C:\Users\maria\Documents\PC Speed Maximizer  
 2016-01-12 21:40 - 2015-01-06 15:17 - 00000000 __HDC C:\ProgramData\{E3FFAE76-76EB-4F71-94F4-44C13786E4FE} 
 2016-01-12 21:40 - 2014-06-06 14:45 - 00000000 __HDC C:\ProgramData\{0306375A-75F3-45CA-9DE7-0E7427CCD9D1} 
 2016-01-12 21:40 - 2013-05-03 14:59 - 00000000 __HDC C:\ProgramData\{7AE769A4-8067-4E64-AB5B-93DBD16F13A5} 
 2016-01-12 21:40 - 2010-05-06 16:25 - 00000000 __HDC C:\ProgramData\{6F64497B-6549-4D0D-BD03-D772876B75EB} 
 2016-01-12 21:40 - 2010-01-21 15:18 - 00000000 ___HD C:\ProgramData\{B33CBE2B-A739-401D-A5E0-041195C4A17B}  
 2016-01-12 21:40 - 2010-01-21 15:16 - 00000000 __HDC C:\ProgramData\{359AE307-0D79-46EA-ACE4-956DEF3104FB} 
 2016-01-12 21:39 - 2014-01-01 19:00 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 
 2016-01-12 21:39 - 2013-04-25 17:14 - 00000000 ____D C:\ProgramData\1A36A 


Une fois, le texte collé dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Corriger / Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message. 

Redémarre l'ordinateur

Malekal_morte- · Answer

ok sinon là ce qu'on a supprimé ça semble être des restes.
Cryptowall ne semblait plus actif.

Tu as été infecté par un Ransomware chiffreurs de fichiers.

Ces derniers vont essentiellement par des pièces jointes malicieux dans des emails ou des Exploits WEB.

Il n'y a pas vraiment de solution pour récupérer les documents.

Cryptowall inactif ?

4 réponses

Fin de Fixlog 14:04:13

Discussions similaires

Newsletters