

guronsanmax
Membres-
Compteur de contenus
11 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par guronsanmax
-
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
J'ai fait ce qu'il fallait pour cocher et décocher mais je n'ai pas réussi à lancer les fichiers. Windows m'affiche que le module a été trouvé mais que le point d'entrée du dllRegisterServer(?) n'a pas été trouvé. Il me demande de vérifier que le fichier OCX ou DLL est valide Je note aussi que dès que je décoche "Masquer les fichiers protégés du système d exploitation", le PC reconnait l'ordre mais 2 secondes après, il se recoche. Est-ce dû au virus? -
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
et voici le info de RSIT Logfile of random's system information tool 1.06 (written by random/random) Run by joonwoo at 2010-01-02 10:37:12 Microsoft® Windows Vista™ Home Basic Service Pack 1 System drive C: has 27 GB (37%) free of 71 GB Total RAM: 1976 MB (53% free) HijackThis download failed ======Scheduled tasks folder====== C:\Windows\tasks\Google Software Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-538249790-3922086190-4064552936-1003Core.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-538249790-3922086190-4064552936-1003UA.job C:\Windows\tasks\McDefragTask.job C:\Windows\tasks\McQcTask.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}] McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\mskapbho.dll [2009-10-02 246800] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}] scriptproxy - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll [2009-11-04 62784] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-18 764912] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}] McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184] "mcagent_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2009-10-29 1218008] "BkupTray"=C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [2008-04-06 34040] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-07-17 150040] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-07-17 170520] "Persistence"=C:\Windows\system32\igfxpers.exe [2008-07-17 145944] "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-21 6144000] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-02-22 1037608] "LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2008-07-25 875016] "ePower_DMC"=C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [2008-08-01 405504] "eRecoveryService"= [] "Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe /startup [] "ProductReg"=C:\Program Files\Acer\WR_PopUp\ProductReg.exe [2008-09-23 6144] "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888] "TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-05-10 198160] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792] "ORAHSSSessionManager"=C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe [2008-06-10 107248] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-11-12 141600] "ctfmon.exe"=C:\Windows\system32\ctfmon.exe [2006-11-02 8704] "Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-12-30 1389904] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "*WerKernelReporting"=C:\Windows\SYSTEM32\WerFault.exe [2008-01-21 217088] "Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-12-30 429392] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "VeohPlugin"=C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-12-30 68856] "Google Update"=C:\Users\joonwoo\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-22 133104] "EPSON Stylus DX7400 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE [2007-04-12 182272] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2008-07-11 208896] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "EnableLUA"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe"="C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe:*:enabled:CSS" "C:\Windows\system32\quickset.exe"="C:\Windows\system32\quickset.exe:*:Enabled:UPnP Firewall" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "C:\Windows\system32\quickset.exe"="C:\Windows\system32\quickset.exe:*:Enabled:UPnP Firewall" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a1951d17-d67b-11dd-8c02-001d72dd6cff}] shell\AutoRun\command - G:\LaunchU3.exe -a ======List of files/folders created in the last 1 months====== 2010-01-02 10:37:13 ----D---- C:\Program Files\trend micro 2010-01-02 10:37:12 ----D---- C:\rsit 2010-01-01 19:03:32 ----D---- C:\Program Files\Enigma Software Group 2010-01-01 18:56:46 ----D---- C:\VundoFix Backups 2010-01-01 18:56:46 ----A---- C:\VundoFix.txt 2010-01-01 14:36:36 ----HD---- C:\Windows\PIF 2009-12-31 17:57:28 ----D---- C:\Users\joonwoo\AppData\Roaming\Malwarebytes 2009-12-31 17:57:17 ----D---- C:\ProgramData\Malwarebytes 2009-12-31 17:57:16 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2009-12-31 13:10:59 ----A---- C:\Windows\system32\DA-Tvol.exe 2009-12-31 11:53:36 ----A---- C:\TDSSKiller.2.1.1_31.12.2009_11.53.36_log.txt 2009-12-31 11:39:50 ----A---- C:\TDSSKiller.2.1.1_31.12.2009_11.39.50_log.txt 2009-12-31 11:37:08 ----A---- C:\TDSSKiller.2.1.1_31.12.2009_11.37.08_log.txt 2009-12-31 11:37:05 ----D---- C:\tdsskiller 2009-12-31 06:43:47 ----D---- C:\Program Files\TrendMicro 2009-12-30 17:29:39 ----N---- C:\Windows\system32\MpSigStub.exe 2009-12-30 11:07:42 ----D---- C:\Program Files\SiteAdvisor 2009-12-28 18:57:25 ----A---- C:\Windows\system32\msvcrt2.dll 2009-12-28 18:57:25 ----A---- C:\Windows\system32\87da34.exe 2009-12-28 08:07:15 ----D---- C:\Windows\Minidump 2009-12-28 08:06:54 ----A---- C:\Windows\ntbtlog.txt 2009-12-28 07:46:20 ----RSH---- C:\Windows\system32\quickset.exe 2009-12-28 07:45:15 ----RSHD---- C:\RECYCLER 2009-12-28 07:44:41 ----SHD---- C:\Users\joonwoo\AppData\Roaming\SystemProc 2009-12-28 07:34:11 ----A---- C:\Windows\system32\MPFServiceFailureCount.txt 2009-12-28 02:02:39 ----A---- C:\Windows\system32\GEARAspi.dll 2009-12-28 02:00:24 ----D---- C:\Program Files\iPod 2009-12-28 02:00:18 ----D---- C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD} 2009-12-28 02:00:17 ----D---- C:\Program Files\iTunes 2009-12-28 01:55:40 ----D---- C:\Program Files\QuickTime 2009-12-25 21:31:41 ----A---- C:\Windows\WorldBuilder.INI 2009-12-24 00:00:08 ----D---- C:\Users\joonwoo\AppData\Roaming\uTorrent 2009-12-13 15:53:17 ----A---- C:\Windows\system32\CmdLineExt.dll 2009-12-08 21:16:51 ----A---- C:\Windows\system32\winhttp.dll 2009-12-08 21:16:33 ----A---- C:\Windows\system32\mshtml.dll 2009-12-08 21:16:32 ----A---- C:\Windows\system32\occache.dll 2009-12-08 21:16:31 ----A---- C:\Windows\system32\wininet.dll 2009-12-08 21:16:30 ----A---- C:\Windows\system32\urlmon.dll 2009-12-08 21:16:29 ----A---- C:\Windows\system32\ieframe.dll 2009-12-08 21:16:26 ----A---- C:\Windows\system32\ieapfltr.dll 2009-12-08 21:16:25 ----A---- C:\Windows\system32\iertutil.dll 2009-12-08 21:16:24 ----A---- C:\Windows\system32\iedkcs32.dll 2009-12-08 21:16:23 ----A---- C:\Windows\system32\msfeeds.dll 2009-12-08 21:16:22 ----A---- C:\Windows\system32\ieaksie.dll 2009-12-08 21:16:21 ----A---- C:\Windows\system32\ieUnatt.exe 2009-12-08 21:16:20 ----A---- C:\Windows\system32\mstime.dll 2009-12-08 21:16:20 ----A---- C:\Windows\system32\ieencode.dll 2009-12-08 21:16:19 ----A---- C:\Windows\system32\jsproxy.dll 2009-12-08 21:15:44 ----A---- C:\Windows\system32\httpapi.dll 2009-12-08 21:15:42 ----A---- C:\Windows\system32\nshhttp.dll 2009-12-08 21:14:35 ----A---- C:\Windows\system32\rastls.dll 2009-12-08 21:14:35 ----A---- C:\Windows\system32\raschap.dll ======List of files/folders modified in the last 1 months====== 2010-01-02 10:37:14 ----D---- C:\Windows\Prefetch 2010-01-02 10:37:14 ----AD---- C:\Windows\Temp 2010-01-02 10:37:13 ----RD---- C:\Program Files 2010-01-02 09:26:22 ----D---- C:\Windows\Tasks 2010-01-02 09:24:19 ----D---- C:\Windows 2010-01-01 22:40:35 ----D---- C:\Windows\system32\drivers 2010-01-01 22:38:08 ----SHD---- C:\Windows\Installer 2010-01-01 19:03:51 ----D---- C:\Windows\system32\Tasks 2010-01-01 19:03:45 ----D---- C:\Windows\System32 2010-01-01 16:26:48 ----D---- C:\Program Files\Mozilla Firefox 2010-01-01 14:44:17 ----SHD---- C:\System Volume Information 2009-12-31 18:44:32 ----D---- C:\Program Files\McAfee 2009-12-31 18:42:07 ----D---- C:\ProgramData\Partner 2009-12-31 17:57:17 ----HD---- C:\ProgramData 2009-12-31 17:47:37 ----D---- C:\Windows\SoftwareDistribution 2009-12-31 15:55:04 ----D---- C:\ProgramData\McAfee 2009-12-31 12:12:47 ----D---- C:\Windows\inf 2009-12-31 12:12:47 ----A---- C:\Windows\system32\PerfStringBackup.INI 2009-12-31 12:06:37 ----D---- C:\Windows\system32\catroot 2009-12-31 06:05:10 ----D---- C:\Windows\winsxs 2009-12-31 04:25:49 ----D---- C:\Windows\system32\catroot2 2009-12-30 10:09:30 ----D---- C:\Windows\system32\LogFiles 2009-12-28 08:15:54 ----D---- C:\Program Files\Google 2009-12-28 08:13:47 ----D---- C:\ProgramData\Google 2009-12-28 08:12:14 ----D---- C:\Program Files\Graboid 2009-12-28 02:22:16 ----D---- C:\Users\joonwoo\AppData\Roaming\Apple Computer 2009-12-28 02:02:38 ----DC---- C:\Windows\system32\DRVSTORE 2009-12-28 02:00:22 ----D---- C:\Program Files\Common Files\Apple 2009-12-27 06:14:01 ----HD---- C:\Program Files\InstallShield Installation Information 2009-12-25 21:51:50 ----D---- C:\Program Files\Electronic Arts 2009-12-13 19:21:31 ----D---- C:\Games 2009-12-13 16:24:17 ----D---- C:\Windows\rescache 2009-12-09 03:26:29 ----D---- C:\Program Files\Internet Explorer 2009-12-09 03:26:27 ----D---- C:\Windows\system32\de-DE 2009-12-09 03:26:26 ----D---- C:\Program Files\Windows Mail 2009-12-09 03:08:41 ----D---- C:\ProgramData\Microsoft Help ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2009-11-04 214664] R1 MPFP;MPFP; C:\Windows\System32\Drivers\Mpfp.sys [2009-07-16 130424] R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-03-21 15392] R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2008-01-21 95744] R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672] R2 regi;regi; C:\Windows\system32\drivers\regi.sys [2007-04-17 11032] R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-29 8192] R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-08-15 921600] R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-03-28 210432] R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208] R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-03 21264] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600] R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-22 985600] R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-22 207360] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-07-11 2381312] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-21 2143136] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys [2008-06-30 112128] R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2009-11-04 79816] R3 mfebopk;McAfee Inc. mfebopk; C:\Windows\system32\drivers\mfebopk.sys [2009-11-04 35272] R3 mfesmfk;McAfee Inc. mfesmfk; C:\Windows\system32\drivers\mfesmfk.sys [2009-11-04 40552] R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-01-31 14848] R3 O2MDRDR;O2MDRDR; C:\Windows\system32\DRIVERS\o2media.sys [2008-04-15 51160] R3 O2SDRDR;O2SDRDR; C:\Windows\system32\DRIVERS\o2sd.sys [2008-04-08 43736] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-02-22 198064] R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-22 659968] R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264] S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632] S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704] S3 mferkdk;McAfee Inc. mferkdk; C:\Windows\system32\drivers\mferkdk.sys [2009-11-04 34248] S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192] S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888] S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016] S3 NSCIRDA;NSC Infrared Device Driver; C:\Windows\system32\DRIVERS\nscirda.sys [2008-01-21 30720] S3 PCAMp50;PCAMp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCAMp50.sys [2006-11-28 28224] S3 PCASp50;PCASp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp50.sys [2006-11-28 27072] S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576] S3 TpChoice;Touch Pad Detection Filter driver; C:\Windows\system32\DRIVERS\TpChoice.sys [2007-12-26 17968] S3 usbscan;USB-Scannertreiber; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328] S3 usbvideo;USB-Videogerät (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016] S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328] S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656] S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712] R2 BcmSqlStartupSvc;SQL Server-Startdienst für Business Contact Manager; C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-16 30312] R2 Bonjour Service;Bonjour-Dienst; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888] R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384] R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-03-21 24576] R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2008-06-20 65536] R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2008-01-21 21504] R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2009-12-08 93320] R2 mcmscsvc;McAfee Services; C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe [2009-10-29 865832] R2 McNASvc;McAfee Network Agent; c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe [2009-07-07 2482848] R2 McProxy;McAfee Proxy Service; c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe [2009-07-08 359952] R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2009-11-04 144704] R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2007-12-06 110592] R2 MpfService;McAfee Personal Firewall Service; C:\Program Files\McAfee\MPF\MPFSrv.exe [2009-10-27 895696] R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\McAfee\MSK\MskSrver.exe [2009-10-02 26640] R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-06 50424] R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-04 131072] R2 o2flash;O2Micro Flash Memory Card Service; C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe [2007-02-13 65536] R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632] R2 SQLBrowser;SQL Server-Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-24 239968] R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904] R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-29 386560] R3 iPod Service;iPod-Dienst; C:\Program Files\iPod\bin\iPodService.exe [2009-11-12 545568] R3 McSysmon;McAfee SystemGuards; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [2009-11-04 606736] S2 gupdate1c9fe5d6e10acd0;Google Update Service (gupdate1c9fe5d6e10acd0); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-06 133104] S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-06 190448] S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2009-10-28 365072] S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2009-05-27 29262680] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S4 MSSQLServerADHelper;Hilfsdienst von SQL Server für Active Directory; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-24 45408] -----------------EOF----------------- -
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
voici ce que donne system look SystemLook v1.0 by jpshortstuff (29.08.09) Log created at 10:34 on 02/01/2010 by joonwoo (Administrator - Elevation successful) ========== reg ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\disableconfig] (Unable to open key - key not found) ========== regfind ========== -=End Of File=- -
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
Je lance les procédures tout de suite. Pour ce qui est de l'écran noir, c'est que toute les icones du bureau ont disparu mais les fenêtres apparaissent quand je les ouvre avec les gestionnaire des tâches, je peux même me connecter sur l'internet. -
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
C'est ce qui vient de sortir, mais mbam n'a pas réussi à supprimer le malware. L'écran reste toujours noir, rkill ne répond toujours pas Malwarebytes' Anti-Malware 1.43 Datenbank Version: 3462 Windows 6.0.6001 Service Pack 1 Internet Explorer 7.0.6001.18000 01.01.2010 22:34:57 mbam-log-2010-01-01 (22-34-53).txt Scan-Methode: Vollständiger Scan (C:\|D:\|) Durchsuchte Objekte: 255090 Laufzeit: 2 hour(s), 2 minute(s), 14 second(s) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 1 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\disableconfig (Windows.Tool.Disabled) -> No action taken. Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) -
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
merci, je remet ceci tout de suite. Et pour le reformatage, c'est une option? -
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
J'ai réussi à faire tourner le mbam hier mais rkill ne répond pas. Tout ceci commence à me casser les pieds, est-ce qu'un reformatage effacerait le virus sur le PC? Par rapport aux solutions proposés: j'ai windows Vista et les symptomes ne correspondent pas. voici le rapport mbam (désolé c'est en allemand, j'ai mal choisi à l'installation) Malwarebytes' Anti-Malware 1.43 Datenbank Version: 3462 Windows 6.0.6001 Service Pack 1 Internet Explorer 7.0.6001.18000 01.01.2010 14:18:37 mbam-log-2010-01-01 (14-18-34).txt Scan-Methode: Vollständiger Scan (C:\|D:\|) Durchsuchte Objekte: 254484 Laufzeit: 1 hour(s), 59 minute(s), 9 second(s) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 14 Infizierte Registrierungswerte: 6 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 2 Infizierte Dateien: 13 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_CURRENT_USER\SOFTWARE\LEO0WTUNO7 (Trojan.FakeAlert) -> No action taken. HKEY_CLASSES_ROOT\kt_bho.KettleBho (Trojan.BHO) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\FlySky (Malware.Trace) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\OOO (Malware.Trace) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ctfmon.exe (Security.Hijack) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\OOO (Rogue.LivePlayer) -> No action taken. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ICF (Rootkit.Agent) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\AppDataLow\HavingFunOnline (Adware.BHO.FL) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\J8RPLTROBQ (Trojan.FakeAlert) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e990625e-bed0-be99-9279-c5d413cce15e} (Adware.BHO) -> No action taken. HKEY_CLASSES_ROOT\CLSID\{e990625e-bed0-be99-9279-c5d413cce15e} (Adware.BHO) -> No action taken. Infizierte Registrierungswerte: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rthdbpl (Trojan.Agent) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\winid (Malware.Trace) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\microsoft driver setup (Worm.Palevo) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\disableconfig (Windows.Tool.Disabled) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\j8rpltrobq (Trojan.FakeAlert) -> No action taken. Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: C:\Users\joonwoo\AppData\Local\Temp\E_4 (Worm.AutoRun) -> No action taken. C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811 (Trojan.Agent) -> No action taken. Infizierte Dateien: C:\Users\joonwoo\AppData\Local\Temp\Setup.tmp (Adware.Agent) -> No action taken. C:\Users\joonwoo\AppData\Local\Temp\tonhhib8.exe (Trojan.Downloader) -> No action taken. C:\Windows\System32\parc4f.dll (Trojan.Agent) -> No action taken. C:\Users\joonwoo\AppData\Local\Temp\E_4\krnln.fne (Worm.AutoRun) -> No action taken. C:\Users\joonwoo\AppData\Local\Temp\E_4\krnln.fnr (Worm.AutoRun) -> No action taken. C:\Users\joonwoo\AppData\Local\Temp\E_4\shell.fne (Worm.AutoRun) -> No action taken. C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\Desktop.ini (Trojan.Agent) -> No action taken. C:\Windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job (Trojan.Downloader) -> No action taken. C:\Windows\System32\icf.exe.exe (Worm.Zhelatin) -> No action taken. C:\Windows\System32\net.net (Trojan.Agent) -> No action taken. C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> No action taken. C:\Users\joonwoo\AppData\Local\Temp\dfgdgdfgrgdgfdrdfs.tmp (Trojan.Downloader) -> No action taken. C:\Windows\System32\-0Az8t_Xlx.dll (Adware.BHO) -> No action taken. Au fait, bonne année!!! -
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
voici le résultat Running from: C:\Users\joonwoo\Desktop\Win32kDiag.exe Log file at : C:\Users\joonwoo\Desktop\Win32kDiag.txt WARNING: Could not get backup privileges! Searching 'C:\Windows'... Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl [1] 2009-12-31 12:08:07 64 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl () Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl [1] 2009-12-31 12:07:57 64 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl () Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl [1] 2009-12-31 12:07:57 64 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl () Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl [1] 2009-12-31 12:07:57 64 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl () Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl [1] 2009-12-31 12:09:18 0 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl () Finished! je voulais également vous remercier de toute votre aide en cette fin d'année. -
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
je signale que j'ai oublié de désactiver les smileys, il y a une ligne où un (10) est remplacé par un smiley -
virus inconnu
guronsanmax a répondu à un(e) sujet de guronsanmax dans Analyses et éradication malwares
Voici le résultat de tdsskiller mais impossible de télécharger rkill et mbam, il m'affiche Not Found comme d'habitude avec ce virus dès que je me dirige vers un site de sécurité informatique. 11:53:36:557 4288 TDSSKiller 2.1.1 Dec 20 2009 02:40:02 11:53:36:557 4288 ================================================================================ 11:53:36:557 4288 SystemInfo: 11:53:36:557 4288 OS Version: 6.0.6001 ServicePack: 1.0 11:53:36:557 4288 Product type: Workstation 11:53:36:557 4288 ComputerName: JOONWOO-PC 11:53:36:559 4288 UserName: joonwoo 11:53:36:559 4288 Windows directory: C:\Windows 11:53:36:559 4288 Processor architecture: Intel x86 11:53:36:559 4288 Number of processors: 2 11:53:36:559 4288 Page size: 0x1000 11:53:36:689 4288 Boot type: Normal boot 11:53:36:689 4288 ================================================================================ 11:53:36:700 4288 ForceUnloadDriver: NtUnloadDriver error 2 11:53:36:702 4288 ForceUnloadDriver: NtUnloadDriver error 2 11:53:36:703 4288 ForceUnloadDriver: NtUnloadDriver error 2 11:53:36:705 4288 MyNtCreateFileW: NtCreateFile(\??\C:\Windows\system32\Drivers\KLMD.sys) returned status 0 11:53:36:769 4288 main: Driver KLMD successfully dropped 11:53:36:992 4288 main: Driver KLMD successfully loaded 11:53:36:992 4288 Scanning Registry ... 11:53:37:016 4288 ScanServices: Searching service UACd.sys 11:53:37:016 4288 ScanServices: Open/Create key error 2 11:53:37:019 4288 ScanServices: Searching service TDSSserv.sys 11:53:37:019 4288 ScanServices: Open/Create key error 2 11:53:37:019 4288 ScanServices: Searching service gaopdxserv.sys 11:53:37:019 4288 ScanServices: Open/Create key error 2 11:53:37:019 4288 ScanServices: Searching service gxvxcserv.sys 11:53:37:019 4288 ScanServices: Open/Create key error 2 11:53:37:020 4288 ScanServices: Searching service MSIVXserv.sys 11:53:37:020 4288 ScanServices: Open/Create key error 2 11:53:37:114 4288 UnhookRegistry: Kernel module file name: C:\Windows\system32\ntkrnlpa.exe, base addr: 81E44000 11:53:37:309 4288 UnhookRegistry: Kernel local addr: 1B60000 11:53:37:349 4288 UnhookRegistry: KeServiceDescriptorTable addr: 1C97B00 11:53:38:348 4288 UnhookRegistry: KiServiceTable addr: 1C188E0 11:53:38:380 4288 UnhookRegistry: NtEnumerateKey service number (local): 85 11:53:38:380 4288 UnhookRegistry: NtEnumerateKey local addr: 1D67BAC 11:53:38:424 4288 KLMD_OpenDevice: Trying to open KLMD device 11:53:38:424 4288 KLMD_GetSystemRoutineAddressA: Trying to get system routine address ZwEnumerateKey 11:53:38:424 4288 KLMD_GetSystemRoutineAddressW: Trying to get system routine address ZwEnumerateKey 11:53:38:424 4288 KLMD_ReadMem: Trying to ReadMemory 0x81E99AAD[0x4] 11:53:38:424 4288 UnhookRegistry: NtEnumerateKey service number (kernel): 85 11:53:38:424 4288 KLMD_ReadMem: Trying to ReadMemory 0x81EFCAF4[0x4] 11:53:38:424 4288 UnhookRegistry: NtEnumerateKey real addr: 8204BBAC 11:53:38:424 4288 UnhookRegistry: NtEnumerateKey calc addr: 8204BBAC 11:53:38:425 4288 UnhookRegistry: No SDT hooks found on NtEnumerateKey 11:53:38:425 4288 KLMD_ReadMem: Trying to ReadMemory 0x8204BBAC[0xA] 11:53:38:425 4288 UnhookRegistry: No splicing found on NtEnumerateKey 11:53:38:449 4288 Scanning Kernel memory ... 11:53:38:454 4288 KLMD_OpenDevice: Trying to open KLMD device 11:53:38:454 4288 KLMD_GetSystemObjectAddressByNameA: Trying to get system object address by name \Driver\Disk 11:53:38:454 4288 KLMD_GetSystemObjectAddressByNameW: Trying to get system object address by name \Driver\Disk 11:53:38:454 4288 DetectCureTDL3: \Driver\Disk PDRIVER_OBJECT: 84D47F38 11:53:38:454 4288 DetectCureTDL3: KLMD_GetDeviceObjectList returned 1 DevObjects 11:53:38:455 4288 DetectCureTDL3: 0 Curr stack PDEVICE_OBJECT: 84D47380 11:53:38:455 4288 KLMD_GetLowerDeviceObject: Trying to get lower device object for 84D47380 11:53:38:455 4288 DetectCureTDL3: 0 Curr stack PDEVICE_OBJECT: 84B808E0 11:53:38:455 4288 KLMD_GetLowerDeviceObject: Trying to get lower device object for 84B808E0 11:53:38:455 4288 KLMD_ReadMem: Trying to ReadMemory 0x84B808E0[0x38] 11:53:38:455 4288 DetectCureTDL3: DRIVER_OBJECT addr: 84BA7B08 11:53:38:455 4288 KLMD_ReadMem: Trying to ReadMemory 0x84BA7B08[0xA8] 11:53:38:455 4288 KLMD_ReadMem: Trying to ReadMemory 0x84BA7D48[0x208] 11:53:38:455 4288 DetectCureTDL3: DRIVER_OBJECT name: \Driver\atapi, Driver Name: atapi 11:53:38:455 4288 DetectCureTDL3: IrpHandler (0) addr: 807E20FC 11:53:38:455 4288 DetectCureTDL3: IrpHandler (1) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (2) addr: 807E20FC 11:53:38:456 4288 DetectCureTDL3: IrpHandler (3) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (4) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (5) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (6) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (7) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler ( addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (9) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (10) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (11) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (12) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (13) addr: 81E69FE3 11:53:38:456 4288 DetectCureTDL3: IrpHandler (14) addr: 807D09D6 11:53:38:457 4288 DetectCureTDL3: IrpHandler (15) addr: 807D09A8 11:53:38:457 4288 DetectCureTDL3: IrpHandler (16) addr: 81E69FE3 11:53:38:457 4288 DetectCureTDL3: IrpHandler (17) addr: 81E69FE3 11:53:38:457 4288 DetectCureTDL3: IrpHandler (18) addr: 81E69FE3 11:53:38:457 4288 DetectCureTDL3: IrpHandler (19) addr: 81E69FE3 11:53:38:457 4288 DetectCureTDL3: IrpHandler (20) addr: 81E69FE3 11:53:38:457 4288 DetectCureTDL3: IrpHandler (21) addr: 81E69FE3 11:53:38:457 4288 DetectCureTDL3: IrpHandler (22) addr: 807D0A04 11:53:38:457 4288 DetectCureTDL3: IrpHandler (23) addr: 807DDB70 11:53:38:457 4288 DetectCureTDL3: IrpHandler (24) addr: 81E69FE3 11:53:38:457 4288 DetectCureTDL3: IrpHandler (25) addr: 81E69FE3 11:53:38:457 4288 DetectCureTDL3: IrpHandler (26) addr: 81E69FE3 11:53:38:457 4288 KLMD_ReadMem: Trying to ReadMemory 0x0[0x400] 11:53:38:457 4288 KLMD_ReadMem: DeviceIoControl error 1 11:53:38:457 4288 TDL3_StartIoHookDetect: Unable to get StartIo handler code 11:53:38:458 4288 TDL3_FileDetect: Processing driver: atapi 11:53:38:458 4288 TDL3_FileDetect: Similar paths for origin and cured (C:\Windows\system32\drivers\atapi.tsk)! Generate new path 11:53:38:458 4288 TDL3_FileDetect: Parameters: C:\Windows\system32\drivers\atapi.tsk, C:\Windows\system32\Drivers\atapi.ts0, SYSTEM\CurrentControlSet\Services\atapi, system32\Drivers\atapi.ts0 11:53:38:458 4288 TDL3_FileDetect: Processing driver file: C:\Windows\system32\drivers\atapi.tsk 11:53:38:458 4288 KLMD_CreateFileW: Trying to open file C:\Windows\system32\drivers\atapi.tsk 11:53:38:510 4288 Completed Results: 11:53:38:510 4288 Infected objects in memory: 0 11:53:38:511 4288 Cured objects in memory: 0 11:53:38:512 4288 Infected objects on disk: 0 11:53:38:532 4288 Objects on disk cured on reboot: 0 11:53:38:532 4288 Objects on disk deleted on reboot: 0 11:53:38:533 4288 Registry nodes deleted on reboot: 0 11:53:38:533 4288 -
Bonjour tout le monde. Je vous écris un petit message pour vous demander de l'aide. J'ai 3 gros problèmes: 1- Windows Explorer est down, j'ai un écran noir, la plupart des programmes ne réagissent pas. 2- Tous les sites et logiciels antivirus, etc, même les recherches google ou bing sont bloqués. Le site pour faire le test Hijackthis même est bloqué, me compliquant la tâche encore plus. 3- J'ai pensé que c'était un virus Conficker B ou C (grâce à des tests visuels) mais les désinfectants Symantech contre Conficker me disent après le scan que mon PC n'a pas de virus Conficker. J'ai réussi à débloquer Windows Defender qui a détecté des virus et les a viré mais après redémarrage, les problèmes persistent. j'ai cherché dans toutes les alertes de virus si mes symptomes correspondaient à un autre virus connu mais non. Donc s'il vous plaît pouvez-vous m'aider?