Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

virus downloader!!!!!! raaaaaaaa

jerau24

Par jerau24
dans Analyses et éradication malwares

 Partager

Messages recommandés

regis56 Godlike Member

regis56

Posté(e)
Posté(e)

Bonjour jerau24 !

 

Bon bah va y avoir du boulots :P !

 

Voici ce que tu vas devoir faire STP

 

-Télécharger et installer EasyCleaner de Toni Helenius (Programme faisant partie de la catégorie des nettoyeurs)

http://personal.inet.fi/business/toniarts/ecleane.htm

 

Au vu de la longueur de la procédure, je te conseille de l'imprimer, ou d'en sélectionner toutes les lignes et de copier cette sélection dans un fichier texte sur ton PC.

Il faut exécuter toutes les étapes, dans l'ordre exact indiqué ci-dessous.

Si un élément te paraît obscur, demande des explications avant de commencer la désinfection.

 

Note: Ces manips doivent être effectuées en ayant ouvert une session avec les droits "Administrateur" et en ayant désactivé les protections résidentes si il y en a ! (ex:Spybot S&D, Ad-Watch, Microsoft AntiSpyware )

 

-Redémarrer en mode sans échec :

(En mode sans échec : seul les processus systèmes sont lancés il est donc plus facile de supprimer ce qui est infecté.)

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé,

Il y a un écran noir qui apparaît rapidement, appuyer sur la touche [F8] ou [F5] jusqu’à l'affichage du menu des options avancées de Windows. Sélectionner "Mode sans échec"et appuyer sur [Entrée].

NB:Si problème aller voir ici: http://service1.symantec.com/SUPPORT/INTER...020325143456924

 

-Vérifier d'avoir accès à tous les fichiers :

 

Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :

Activer l'option : Afficher les fichiers et dossiers cachés

Désactiver l'option : Masquer les extensions des fichiers dont le type est connu

Désactiver l'option : Masquer les fichiers protégés du système d'exploitation

Puis cliquer sur "Appliquer à tous les dossiers"

 

Maintenant il va falloir désenregistrer une DLL

Démarrer, Exécuter, et taper (ou copier/coller): regsvr32 /u C:\WINDOWS\system32\mfi2192b.dll

et valider par Ok

 

Maintenant on va supprimer manuellement les fichiers infectieux !

 

Avant de supprimer quelque chose toujours noter la date et l'heure de création et communiquer les informations lors de la prochaine réponse.

 

Clique sur démarrer/executer/

Copie/colle

Rentre le chemin indiqué en rouge C:\WINDOWS\Ym91ZHk\

Le dossier va s'ouvrir

Supprime le fichier indiqué en gras:

sA6YtJ4.vbs(clique droit /supprimer)

 

 

Répète l'opération pour ceux là

C:\WINDOWS\system32\

tsuninst.exe

system32\i

mfi2192b.dll

 

C:\WINDOWS\

keyboard1.dat

 

C:\

deskbar.exe

dfndrff_11.exe

dfndrff_11a.exe

kybrdff_11a.exe

 

C:\Program Files\Fichiers communs\

{94999CD7-0707-1036-0927-051109200021}

 

C:\Documents and Settings\gege\Local Settings\Temporary Internet Files\

Ssk.log

 

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\8F6PER6V\

deskbar[1].exe

 

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CV2F2XIF\

dfndrff_11[1].exe

 

Vider la poubelle !

 

-Exécuter EasyCleaner (Utiliser le raccourci sur le bureau):

(Utilitaire qui va supprimer les dossiers temporaires/inutiles et nettoyer la base de registre)

Utiliser les fonctions "Inutiles" et "Registre" seulement. Ne pas toucher à la fonction "doublons".

*Remarque:

-Dans "Inutiles", coche les cases suivantes=>"Normal Types" - "Temp Directories" - "Temp Internet Files" -

"Browser Cookies" puis clique sur "Find".

Lorsque le scan est terminé,clique sur "Delete all".

 

 

Relancer Ewido

  • Clique sur le bouton Scanner (de la barre d'outils) et ensuite clique sur Complete System Scan. Le scan prendra un certain temps, donc sois patient.
     
  • Ewido affichera une liste des fichiers détectés, sur la gauche. En fin de scan, l'outil appliquera les "Actions" à appliquer automatiquement. Clique sur le bouton Apply all actions. Ewido affichera "All actions have been applied" du côté droit.
     
  • Clique sur "Save Report", puis "Save Report As". Ceci génère un rapport en fichier texte. Assure-toi de le sauvegarder dans un endroit sûr (sur ton Bureau, par exemple).

-Redémarrer en mode normal :

 

-Poster une réponse dans le même sujet

(Cliquer sur répondre entre "flash" et "nouveau " tout en bas de page!)

-Mettre un nouveau rapport HijackThis

-Poster le rapport Ewido

-Indiquer si le Pc présente encore des dysfonctionnements

 

Après avoir posté ta réponse :

 

Peux-tu faire s'il te plait un scan en ligne?=>

-Faire un scan en ligne ici et coller le rapport.

Panda si tu n'y arrives pas : tutorial

 

A plus et bon courage ! :P

jerau24 Member

jerau24

Posté(e)
  • Auteur
Posté(e)

bonsoir régis,

 

 

voici mon rapport hijackthis:

 

 

 

Logfile of HijackThis v1.99.1

Scan saved at 21:11:23, on 24/08/2006

Platform: Windows XP (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Sygate\SPF\smc.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\ewido anti-spyware 4.0\guard.exe

C:\Program Files\Norton AntiVirus\navapsvc.exe

C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE

C:\Program Files\Norton AntiVirus\SAVScan.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe

C:\Program Files\ewido anti-spyware 4.0\ewido.exe

C:\Program Files\Olitec\USB ADSL\CnxDslTb.exe

C:\Program Files\QuickTime\qttask.exe

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CV2F2XIF\dfndrff_11[1].exe

C:\WINDOWS\System32\ctfmon.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\eMule\emule.exe

C:\Program Files\GetRight\getright.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN

C:\WINDOWS\System32\wuauclt.exe

C:\Program Files\Windows NT\Accessoires\wordpad.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\WINDOWS\System32\svchost.exe

C:\Documents and Settings\gege\Mes documents\logiciel\scanner.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.lavasoftusa.com/purchase

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: DeskbarBHO - {A8B28872-3324-4CD2-8AA3-7D555C872D96} - C:\Program Files\Deskbar\deskbar.dll

O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: DeskbarBHO - {A8B28872-3324-4CD2-8AA3-7D555C872D96} - C:\Program Files\Deskbar\deskbar.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE

O4 - HKLM\..\Run: [wrmdrv] rundll32.exe C:\WINDOWS\System32\wrmdrv.dll,start

O4 - HKLM\..\Run: [mfi2192b] RUNDLL32.EXE w0178f30.dll,n 003219280000000a0178f30

O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer

O4 - HKLM\..\Run: [smcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui

O4 - HKLM\..\Run: [sSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe

O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized

O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\Olitec\USB ADSL\CnxDslTb.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [defender] C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\CV2F2XIF\dfndrff_11[1].exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\emule.exe -AutoStart

O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe

O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe

O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm

O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1155914063920

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id=2&version=

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{9306453D-05C0-4090-8AA1-6AD413D23168}: NameServer = 213.36.80.1 213.36.80.1

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

O23 - Service: windows config service (config) - Unknown owner - C:\WINDOWS\config.exe (file missing)

O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe

O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe

O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE

O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe

O23 - Service: svahost - Unknown owner - C:\WINDOWS\svahost.exe (file missing)

O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

 

 

 

et le rapport ewido que j'ai un peu raccourci aprés ce n'est que des cookies:

 

 

ewido anti-spyware - Scan Report

---------------------------------------------------------

 

+ Created at: 21:03:42 24/08/2006

 

+ Scan result:

 

 

 

C:\RECYCLER\NPROTECT\00472779.EXE -> Downloader.Adload.es : Cleaned with backup (quarantined).

C:\RECYCLER\NPROTECT\00472778.EXE -> Downloader.Adload.eu : Cleaned with backup (quarantined).

:mozilla.100:C:\RECYCLER\NPROTECT\00473332.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.102:C:\RECYCLER\NPROTECT\00473333.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.102:C:\RECYCLER\NPROTECT\00473334.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.103:C:\RECYCLER\NPROTECT\00473335.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.103:C:\RECYCLER\NPROTECT\00473336.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.104:C:\RECYCLER\NPROTECT\00473339.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.104:C:\RECYCLER\NPROTECT\00473340.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.104:C:\RECYCLER\NPROTECT\00473341.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.104:C:\RECYCLER\NPROTECT\00473342.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.104:C:\RECYCLER\NPROTECT\00473344.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.104:C:\RECYCLER\NPROTECT\00473345.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.106:C:\RECYCLER\NPROTECT\00473348.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.108:C:\RECYCLER\NPROTECT\00473350.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.109:C:\RECYCLER\NPROTECT\00473351.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471646.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471647.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471651.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471662.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471664.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471665.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471666.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471667.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471668.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471669.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471670.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471672.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471673.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471685.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471688.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471690.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471691.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471692.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471694.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471695.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471701.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471703.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471705.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471706.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471715.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471716.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471717.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471720.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471727.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471729.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471732.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471733.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471734.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471736.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471737.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471738.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471739.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471740.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471741.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471742.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471743.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471744.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471748.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471762.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471763.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471765.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471766.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471767.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.10:C:\RECYCLER\NPROTECT\00471769.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.110:C:\RECYCLER\NPROTECT\00473353.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.115:C:\RECYCLER\NPROTECT\00473354.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.116:C:\RECYCLER\NPROTECT\00473355.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.118:C:\RECYCLER\NPROTECT\00473356.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.119:C:\RECYCLER\NPROTECT\00473357.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471646.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471647.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471648.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471651.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471662.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471664.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471665.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471666.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471667.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471668.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471669.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471670.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471672.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471673.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471685.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471688.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471690.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471691.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471692.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471694.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471695.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471696.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471701.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471703.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471705.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471706.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471715.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471716.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471717.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471720.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471726.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471727.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471729.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471730.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471732.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471733.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471734.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471736.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471737.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471738.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471739.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471740.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471741.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471743.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471744.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471750.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471762.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471763.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471765.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.11:C:\RECYCLER\NPROTECT\00471767.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.120:C:\RECYCLER\NPROTECT\00473358.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.124:C:\RECYCLER\NPROTECT\00473360.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.125:C:\RECYCLER\NPROTECT\00473361.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.125:C:\RECYCLER\NPROTECT\00473363.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.128:C:\RECYCLER\NPROTECT\00473364.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.128:C:\RECYCLER\NPROTECT\00473365.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.128:C:\RECYCLER\NPROTECT\00473366.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.129:C:\RECYCLER\NPROTECT\00473390.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.129:C:\RECYCLER\NPROTECT\00473392.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471696.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471708.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471725.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471727.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471728.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471729.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471730.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471732.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471733.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471734.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471736.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471737.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471738.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471739.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471740.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471741.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471742.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471743.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471744.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471749.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471750.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471762.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471763.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.12:C:\RECYCLER\NPROTECT\00471765.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.130:C:\RECYCLER\NPROTECT\00473367.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.130:C:\RECYCLER\NPROTECT\00473380.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.130:C:\RECYCLER\NPROTECT\00473382.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.130:C:\RECYCLER\NPROTECT\00473384.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.130:C:\RECYCLER\NPROTECT\00473387.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.130:C:\RECYCLER\NPROTECT\00473388.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.130:C:\RECYCLER\NPROTECT\00473389.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.131:C:\RECYCLER\NPROTECT\00473373.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.131:C:\RECYCLER\NPROTECT\00473374.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.131:C:\RECYCLER\NPROTECT\00473377.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.131:C:\RECYCLER\NPROTECT\00473379.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.135:C:\RECYCLER\NPROTECT\00473395.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.135:C:\RECYCLER\NPROTECT\00473396.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.135:C:\RECYCLER\NPROTECT\00473397.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.135:C:\RECYCLER\NPROTECT\00473398.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.136:C:\RECYCLER\NPROTECT\00473399.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.139:C:\RECYCLER\NPROTECT\00473400.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.139:C:\RECYCLER\NPROTECT\00473401.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.139:C:\RECYCLER\NPROTECT\00473402.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.13:C:\RECYCLER\NPROTECT\00471648.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.13:C:\RECYCLER\NPROTECT\00471675.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.13:C:\RECYCLER\NPROTECT\00471677.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.13:C:\RECYCLER\NPROTECT\00471708.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.13:C:\RECYCLER\NPROTECT\00471709.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.13:C:\RECYCLER\NPROTECT\00471730.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.13:C:\RECYCLER\NPROTECT\00471767.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.140:C:\RECYCLER\NPROTECT\00473403.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.140:C:\RECYCLER\NPROTECT\00473404.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.140:C:\RECYCLER\NPROTECT\00473407.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.144:C:\RECYCLER\NPROTECT\00473408.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.144:C:\RECYCLER\NPROTECT\00473409.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.144:C:\RECYCLER\NPROTECT\00473410.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.144:C:\RECYCLER\NPROTECT\00473411.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.144:C:\RECYCLER\NPROTECT\00473412.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.144:C:\RECYCLER\NPROTECT\00473413.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.144:C:\RECYCLER\NPROTECT\00473414.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.144:C:\RECYCLER\NPROTECT\00473415.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.145:C:\RECYCLER\NPROTECT\00473416.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.145:C:\RECYCLER\NPROTECT\00473417.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.145:C:\RECYCLER\NPROTECT\00473418.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.145:C:\RECYCLER\NPROTECT\00473419.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.146:C:\RECYCLER\NPROTECT\00473420.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.147:C:\RECYCLER\NPROTECT\00473421.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.147:C:\RECYCLER\NPROTECT\00473422.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.147:C:\RECYCLER\NPROTECT\00473423.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.148:C:\RECYCLER\NPROTECT\00473428.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.149:C:\RECYCLER\NPROTECT\00473439.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.149:C:\RECYCLER\NPROTECT\00473440.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471653.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471675.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471677.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471697.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471698.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471699.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471700.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471709.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471710.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471711.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471713.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471745.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471746.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471747.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471751.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.14:C:\RECYCLER\NPROTECT\00471754.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.150:C:\RECYCLER\NPROTECT\00473441.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.150:C:\RECYCLER\NPROTECT\00473444.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.153:C:\RECYCLER\NPROTECT\00473447.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.154:C:\RECYCLER\NPROTECT\00473448.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.158:C:\RECYCLER\NPROTECT\00473449.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.158:C:\RECYCLER\NPROTECT\00473450.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.158:C:\RECYCLER\NPROTECT\00473452.MOZ -> TrackingCookie.2o7 : Cleaned.

:mozilla.158:C:\RECYCLER\NPR

 

 

 

j'ai toujours les 2messages d'erreur au démarage de windows des que j'arrive sur mon bureau,

 

merci d'avance,

regis56 Godlike Member

regis56

Posté(e)
Posté(e)

Bonsoir jerau24 !

 

Bon on va s'occuper d'eux maintenant ! :P

 

Ce qui est etonnant c'est qu'ils sont pas détecté par les scans

 

Utiliser la fonction rechercher via "démarrer/rechercher/des fichiers ou des dossiers"(si problème voir ici http://www.hiboox.com/image.php?img=go6nc45.jpg )

Rechercher surement dans C:\WINDOWS\System32\ ou C:\WINDOWS\System\ le(s) fichier(s) en gras suivant(s) si présent(s):

w0178f30.dll

 

Note le chemin que tu aura trouvé tu en aura besoin

 

Ensuite fais ceci :

Assure toi d'avoir accès à tous les fichiers, certains fichiers/dossiers sont cachés!!

 

Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :

Activer l'option : Afficher les fichiers et dossiers cachés

Désactiver l'option : Masquer les extensions des fichiers dont le type est connu

Désactiver l'option : Masquer les fichiers protégés du système d'exploitation

Puis cliquer sur "Appliquer à tous les dossiers"

 

Fais soumettre le fichier en gras ici =>

1- http://virusscan.jotti.org/

2- http://www.virustotal.com/flash/index_en.html

 

Lorsque tu cliques sur ces deux adresses, tu as une case nommée "Parcourir", tu cliques dessus et une fenêtre s'ouvre=> parcours ton disque dur

Recherche le fichier en cause

Clique une fois sur le fichier (il prend une couleur bleue!) puis tu cliques sur "ouvrir" en bas de la fenêtre puis sur "submit"(soumettre)

Pour le virusscan de jotti et "send" pour virustotal.

Le scan de ce fichier va débuter.

Tu n'as plus qu'à sélectionner puis copier /coller l’analyse. Il est possible que tu reçoives ce message =>

"Server is extremely busy at the moment. Please try again later."Auquel cas il faut retenter le coup plus tard!

communiquer les 2 rapports.

 

recommence pour ce fichier

C:\WINDOWS\System32\wrmdrv.dll

 

A plus.

jerau24 Member

jerau24

Posté(e)
  • Auteur
Posté(e)

bonsoir,

 

 

 

je ne trouve pas ces fichiers ils ne sont pas dans l'ordinateur!!!!

 

 

Mais je crois que le message d'erreur dit que s'est fichier sont introuvable au démarage!!!

 

 

comment doi-je faire?

 

merci

regis56 Godlike Member

regis56

Posté(e)
Posté(e)

bonsoir jerau24 !

 

Fais ceci :

 

* cliquer ici http://www.davehigham.zen.co.uk/downloads/xphidden.zip pour télécharger xphidden.zip.

* cliquer xphidden.zip et extraire xphidden.reg de l'archive vers le bureau.

* double-cliquer xphidden.reg, et quand demandé, autoriser la modification du registre.

 

Et recommence de chercher les fichiers.

 

A plus.

regis56 Godlike Member

regis56

Posté(e)
Posté(e)

Bonjour jerau24 !

 

voici ce que tu vas faire alors :

 

-Créer un point de restauration et supprimer les anciens !: (aide visuelle http://assiste.free.fr/p/comment/activer_d...estauration.php )

Cliquer avec le bouton droit sur l'icône Poste de travail, puis cliquer sur Propriétés.

Cliquer sur l'onglet «Restauration du système».

Sélectionner «Désactiver la Restauration du système» ou «Désactiver la Restauration du système sur tous les lecteurs»

Cliquer sur Appliquer.

Comme le dit le message, ceci supprimera tous les points de restauration existants. Pour faire cela, cliquer sur Oui.

Cliquer sur OK, redémarrer le PC. Faire l'opération inverse, et réactiver la restauration:un nouveau point sera automatiquement créé.

 

Ensuite fais un scan en ligne ici

http://www.kaspersky.com/virusscanner

tuto d'aide ici

http://www.malekal.com/scan_Av_en_ligne.html

 

Si le scan est propre on essayera de virer les dll

 

A plus.

jerau24 Member

jerau24

Posté(e)
  • Auteur
Posté(e)

bonjour régis 56,

 

 

voici le rapport du scan kaspersky:

 

C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\1153332834jtun_ennfull2.x86 Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Log.LiveUpdate Object is locked skipped

C:\Documents and Settings\gege\Application Data\Mozilla\Firefox\Profiles\ehmrqka7.default\cert8.db Object is locked skipped

C:\Documents and Settings\gege\Application Data\Mozilla\Firefox\Profiles\ehmrqka7.default\formhistory.dat Object is locked skipped

C:\Documents and Settings\gege\Application Data\Mozilla\Firefox\Profiles\ehmrqka7.default\history.dat Object is locked skipped

C:\Documents and Settings\gege\Application Data\Mozilla\Firefox\Profiles\ehmrqka7.default\key3.db Object is locked skipped

C:\Documents and Settings\gege\Application Data\Mozilla\Firefox\Profiles\ehmrqka7.default\parent.lock Object is locked skipped

C:\Documents and Settings\gege\Application Data\Skype\jerau24\call256.dbb Object is locked skipped

C:\Documents and Settings\gege\Application Data\Skype\jerau24\callmember256.dbb Object is locked skipped

C:\Documents and Settings\gege\Application Data\Skype\jerau24\chat512.dbb Object is locked skipped

C:\Documents and Settings\gege\Application Data\Skype\jerau24\chatmsg256.dbb Object is locked skipped

C:\Documents and Settings\gege\Application Data\Skype\jerau24\contactgroup256.dbb Object is locked skipped

C:\Documents and Settings\gege\Application Data\Skype\jerau24\index2.dat Object is locked skipped

C:\Documents and Settings\gege\Application Data\Skype\jerau24\profile256.dbb Object is locked skipped

C:\Documents and Settings\gege\Application Data\Skype\jerau24\user1024.dbb Object is locked skipped

C:\Documents and Settings\gege\Application Data\Skype\jerau24\user16384.dbb Object is locked skipped

C:\Documents and Settings\gege\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Messenger\jeraunimo24@hotmail.com\SharingMetadata\Logs\Dfsr.log Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Messenger\jeraunimo24@hotmail.com\SharingMetadata\pending.dat Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Messenger\jeraunimo24@hotmail.com\SharingMetadata\Working\database_5A94_99BE_9499_9CD7\dfsr.db Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Messenger\jeraunimo24@hotmail.com\SharingMetadata\Working\database_5A94_99BE_9499_9CD7\fsr.log Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Messenger\jeraunimo24@hotmail.com\SharingMetadata\Working\database_5A94_99BE_9499_9CD7\fsrtmp.log Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Messenger\jeraunimo24@hotmail.com\SharingMetadata\Working\database_5A94_99BE_9499_9CD7\tmp.edb Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Windows Live Contacts\jeraunimo24@hotmail.com\real\members.stg Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Microsoft\Windows Live Contacts\jeraunimo24@hotmail.com\shadow\members.stg Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Mozilla\Firefox\Profiles\ehmrqka7.default\Cache\_CACHE_001_ Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Mozilla\Firefox\Profiles\ehmrqka7.default\Cache\_CACHE_002_ Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Mozilla\Firefox\Profiles\ehmrqka7.default\Cache\_CACHE_003_ Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Application Data\Mozilla\Firefox\Profiles\ehmrqka7.default\Cache\_CACHE_MAP_ Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Temp\~DF3DCE.tmp Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Temp\~DF400B.tmp Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Temp\~DF5680.tmp Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Temp\~DF5F86.tmp Object is locked skipped

C:\Documents and Settings\gege\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\gege\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\gege\NTUSER.DAT.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Program Files\eMule\Temp\001.part Object is locked skipped

C:\Program Files\eMule\Temp\003.part Object is locked skipped

C:\Program Files\eMule\Temp\004.part Object is locked skipped

C:\Program Files\eMule\Temp\005.part Object is locked skipped

C:\Program Files\eMule\Temp\006.part Object is locked skipped

C:\Program Files\eMule\Temp\007.part Object is locked skipped

C:\Program Files\Norton AntiVirus\AVApp.log Object is locked skipped

C:\Program Files\Norton AntiVirus\AVError.log Object is locked skipped

C:\Program Files\Norton AntiVirus\AVVirus.log Object is locked skipped

C:\Program Files\Norton AntiVirus\Quarantine\085A3ABD/data.rar/dotrm.dll Infected: Trojan-Downloader.Win32.ConHook.ad skipped

C:\Program Files\Norton AntiVirus\Quarantine\085A3ABD/data.rar/dotdr.exe Infected: Trojan-Downloader.Win32.Adload.ch skipped

C:\Program Files\Norton AntiVirus\Quarantine\085A3ABD/data.rar Infected: Trojan-Downloader.Win32.Adload.ch skipped

C:\Program Files\Norton AntiVirus\Quarantine\085A3ABD RarSFX: infected - 3 skipped

C:\Program Files\Norton AntiVirus\Quarantine\085A3ABD CryptFF: infected - 3 skipped

C:\Program Files\Norton AntiVirus\Quarantine\09B41D40 Infected: Trojan-Downloader.Win32.Adload.ch skipped

C:\Program Files\Norton AntiVirus\Quarantine\09B7473D Infected: Trojan-Downloader.Win32.Adload.ef skipped

C:\Program Files\Norton AntiVirus\Quarantine\09BA7139 Infected: Trojan-Downloader.Win32.VB.ajz skipped

C:\Program Files\Norton AntiVirus\Quarantine\09BE1B35 Infected: Trojan-Downloader.Win32.VB.ajz skipped

C:\Program Files\Norton AntiVirus\Quarantine\09C14532 Infected: Trojan-Downloader.Win32.TSUpdate.l skipped

C:\Program Files\Norton AntiVirus\Quarantine\09CB4327 Infected: Trojan-Downloader.Win32.TSUpdate.p skipped

C:\Program Files\Norton AntiVirus\Quarantine\09CE6D23 Infected: Trojan-Downloader.Win32.TSUpdate.n skipped

C:\Program Files\Norton AntiVirus\Quarantine\09D5411C Infected: Trojan-Downloader.Win32.Adload.ef skipped

C:\Program Files\Norton AntiVirus\Quarantine\09D86B19 Infected: Trojan-Downloader.Win32.Small.buy skipped

C:\Program Files\Norton AntiVirus\Quarantine\09DB1515 Infected: Trojan-Downloader.Win32.Small.buy skipped

C:\Program Files\Norton AntiVirus\Quarantine\09E5130A Infected: Trojan-Dropper.Win32.Small.qn skipped

C:\Program Files\Norton AntiVirus\Quarantine\09E83D07 Infected: Trojan-Dropper.Win32.Small.qn skipped

C:\Program Files\Norton AntiVirus\Quarantine\09EB6703 Infected: Trojan-Downloader.Win32.TSUpdate.o skipped

C:\Program Files\Norton AntiVirus\Quarantine\09EF1100/WISE0009.BIN Infected: Trojan-Downloader.Win32.TSUpdate.n skipped

C:\Program Files\Norton AntiVirus\Quarantine\09EF1100/WISE0010.BIN Infected: Trojan-Downloader.Win32.TSUpdate.p skipped

C:\Program Files\Norton AntiVirus\Quarantine\09EF1100/WISE0011.BIN Infected: Trojan-Downloader.Win32.TSUpdate.l skipped

C:\Program Files\Norton AntiVirus\Quarantine\09EF1100/WISE0012.BIN Infected: Trojan-Downloader.Win32.TSUpdate.f skipped

C:\Program Files\Norton AntiVirus\Quarantine\09EF1100 WiseSFX: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\09EF1100 CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\0B2525AA.exe/data.rar/dotrm.dll Infected: Trojan-Downloader.Win32.ConHook.ad skipped

C:\Program Files\Norton AntiVirus\Quarantine\0B2525AA.exe/data.rar/dotdr.exe Infected: Trojan-Downloader.Win32.Adload.ch skipped

C:\Program Files\Norton AntiVirus\Quarantine\0B2525AA.exe/data.rar Infected: Trojan-Downloader.Win32.Adload.ch skipped

C:\Program Files\Norton AntiVirus\Quarantine\0B2525AA.exe RarSFX: infected - 3 skipped

C:\Program Files\Norton AntiVirus\Quarantine\0B2525AA.exe CryptFF: infected - 3 skipped

C:\Program Files\Norton AntiVirus\Quarantine\0D460952.exe Infected: Backdoor.Win32.Rbot.gen skipped

C:\Program Files\Norton AntiVirus\Quarantine\11CE640E Infected: Trojan-Downloader.Win32.Small.cyh skipped

C:\Program Files\Norton AntiVirus\Quarantine\13870829.dll Infected: Backdoor.Win32.Agent.ff skipped

C:\Program Files\Norton AntiVirus\Quarantine\138E5C22.dll Infected: Backdoor.Win32.Agent.ff skipped

C:\Program Files\Norton AntiVirus\Quarantine\13E973BD Infected: Backdoor.Win32.SdBot.aad skipped

C:\Program Files\Norton AntiVirus\Quarantine\142B3B75.txt Infected: Trojan-Downloader.Win32.Agent.aol skipped

C:\Program Files\Norton AntiVirus\Quarantine\14E24E97 Infected: Trojan-Downloader.Win32.Adload.ef skipped

C:\Program Files\Norton AntiVirus\Quarantine\187456BE Infected: Trojan-Downloader.Win32.Small.cyh skipped

C:\Program Files\Norton AntiVirus\Quarantine\19CD1789.exe/data.rar/dotrm.dll Infected: Trojan-Downloader.Win32.ConHook.ad skipped

C:\Program Files\Norton AntiVirus\Quarantine\19CD1789.exe/data.rar/dotdr.exe Infected: Trojan-Downloader.Win32.Adload.ch skipped

C:\Program Files\Norton AntiVirus\Quarantine\19CD1789.exe/data.rar Infected: Trojan-Downloader.Win32.Adload.ch skipped

C:\Program Files\Norton AntiVirus\Quarantine\19CD1789.exe RarSFX: infected - 3 skipped

C:\Program Files\Norton AntiVirus\Quarantine\19CD1789.exe CryptFF: infected - 3 skipped

C:\Program Files\Norton AntiVirus\Quarantine\1AE32A0F Infected: Trojan-Downloader.Win32.ConHook.ad skipped

C:\Program Files\Norton AntiVirus\Quarantine\1CB61E0D Infected: Trojan-Downloader.Win32.ConHook.ad skipped

C:\Program Files\Norton AntiVirus\Quarantine\20730A95 Infected: Trojan-Downloader.Win32.VB.ajz skipped

C:\Program Files\Norton AntiVirus\Quarantine\20E05FD1 Infected: Trojan-Downloader.Win32.VB.ajz skipped

C:\Program Files\Norton AntiVirus\Quarantine\29EF230D Infected: Trojan-Downloader.Win32.VB.ajz skipped

C:\Program Files\Norton AntiVirus\Quarantine\43243E91 Infected: Trojan-Downloader.Win32.TSUpdate.f skipped

C:\Program Files\Norton AntiVirus\Quarantine\4B4F1B0E.exe Infected: Trojan.Win32.Crypt.d skipped

C:\Program Files\Norton AntiVirus\Quarantine\4EB47A90 Infected: Trojan-Downloader.Win32.Small.buy skipped

C:\Program Files\Norton AntiVirus\Quarantine\56781CC6.exe/data.rar/dotrm.dll Infected: Trojan-Downloader.Win32.ConHook.ad skipped

C:\Program Files\Norton AntiVirus\Quarantine\56781CC6.exe/data.rar/dotdr.exe Infected: Trojan-Downloader.Win32.Adload.ch skipped

C:\Program Files\Norton AntiVirus\Quarantine\56781CC6.exe/data.rar Infected: Trojan-Downloader.Win32.Adload.ch skipped

C:\Program Files\Norton AntiVirus\Quarantine\56781CC6.exe RarSFX: infected - 3 skipped

C:\Program Files\Norton AntiVirus\Quarantine\56781CC6.exe CryptFF: infected - 3 skipped

C:\Program Files\Norton AntiVirus\Quarantine\5C4A1D82.dll Infected: Trojan-Downloader.Win32.ConHook.ad skipped

C:\Program Files\Norton AntiVirus\Quarantine\5DEE463C Infected: Trojan-Downloader.Win32.VB.ajz skipped

C:\Program Files\Norton AntiVirus\Quarantine\607831C4.dll Infected: Trojan-Spy.Win32.Agent.nv skipped

C:\Program Files\Norton AntiVirus\Quarantine\607C5BC1.dll Infected: Trojan-Downloader.Win32.Agent.aol skipped

C:\Program Files\Norton AntiVirus\Quarantine\663B6894 Infected: Trojan-Downloader.Win32.Adload.ef skipped

C:\Program Files\Norton AntiVirus\Quarantine\69504FCC/WISE0009.BIN Infected: Trojan-Downloader.Win32.TSUpdate.n skipped

C:\Program Files\Norton AntiVirus\Quarantine\69504FCC/WISE0010.BIN Infected: Trojan-Downloader.Win32.TSUpdate.r skipped

C:\Program Files\Norton AntiVirus\Quarantine\69504FCC/WISE0011.BIN Infected: Trojan-Downloader.Win32.TSUpdate.l skipped

C:\Program Files\Norton AntiVirus\Quarantine\69504FCC/WISE0012.BIN Infected: Trojan-Downloader.Win32.TSUpdate.f skipped

C:\Program Files\Norton AntiVirus\Quarantine\69504FCC WiseSFX: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\69504FCC CryptFF: infected - 4 skipped

C:\Program Files\Norton AntiVirus\Quarantine\6B6415C0.exe Infected: Backdoor.Win32.SdBot.aad skipped

C:\Program Files\Norton AntiVirus\Quarantine\6D64558C.exe Infected: Backdoor.Win32.Rbot.gen skipped

C:\Program Files\Norton AntiVirus\Quarantine\6D717D7E.exe Infected: Backdoor.Win32.Rbot.gen skipped

C:\Program Files\Norton AntiVirus\Quarantine\71652E8C Infected: Trojan-Downloader.Win32.TSUpdate.o skipped

C:\Program Files\Sygate\SPF\debug.log Object is locked skipped

C:\Program Files\Sygate\SPF\rawlog.log Object is locked skipped

C:\Program Files\Sygate\SPF\seclog.log Object is locked skipped

C:\Program Files\Sygate\SPF\syslog.log Object is locked skipped

C:\Program Files\Sygate\SPF\tralog.log Object is locked skipped

C:\RECYCLER\NPROTECT\NPROTECT.LOG Object is locked skipped

C:\System Volume Information\_restore{B5E5922E-643A-40E3-BFF7-5CBA517F2685}\RP1\change.log Object is locked skipped

C:\WINDOWS\Debug\oakley.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\system32\CnxDslWz.log Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat Object is locked skipped

C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\Temp\Perflib_Perfdata_88.dat Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

jerau24 Member

jerau24

Posté(e)
  • Auteur
Posté(e)

bonjour régis,

 

 

donc j'ai plus qu'un message d'erreur qui nomme le fichier w0178f30.dll

 

 

 

pour les clé de registre j'ai effacé que les verte j'ai pas tenté d'effacé les rouges!!!

 

 

 

merci d'avance,

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...