Utilisateur indésirable? (suite)

[Ordinoob]

Pas possible d'ouvrir la page 3 du post déavant, alors j'encréé un autre.... Désolé....

 

J'ai effectué 1 scan avec avira antivir qui m'a trouvé 10x le trojan (cf ci dessous) qui se cachait sous le nom kokukquoo.exe

 

 

 

Avira AntiVir Personal

Report file date: jeudi 4 septembre 2008 22:42

 

Scanning for 1598352 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 3) [5.1.2600]

Boot mode: Normally booted

Username: SYSTEM

Computer name: WHAOUUU

 

Version information:

BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00

AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53

AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40

LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19

LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:15

ANTIVIR2.VDF : 7.0.6.94 2998784 Bytes 31/08/2008 20:40:42

ANTIVIR3.VDF : 7.0.6.118 179712 Bytes 04/09/2008 20:40:45

Engineversion : 8.1.1.28

AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21

AESCRIPT.DLL : 8.1.0.70 319866 Bytes 04/09/2008 20:40:59

AESCN.DLL : 8.1.0.23 119156 Bytes 10/07/2008 12:44:49

AERDL.DLL : 8.1.1.1 397683 Bytes 04/09/2008 20:40:57

AEPACK.DLL : 8.1.2.1 364917 Bytes 15/07/2008 12:58:35

AEOFFICE.DLL : 8.1.0.23 196987 Bytes 04/09/2008 20:40:55

AEHEUR.DLL : 8.1.0.51 1397111 Bytes 04/09/2008 20:40:54

AEHELP.DLL : 8.1.0.15 115063 Bytes 10/07/2008 12:44:48

AEGEN.DLL : 8.1.0.36 315764 Bytes 04/09/2008 20:40:49

AEEMU.DLL : 8.1.0.7 430452 Bytes 31/07/2008 08:33:21

AECORE.DLL : 8.1.1.11 172406 Bytes 04/09/2008 20:40:48

AEBB.DLL : 8.1.0.1 53617 Bytes 10/07/2008 12:44:48

AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05

AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01

AVREP.DLL : 8.0.0.2 98344 Bytes 04/09/2008 20:40:46

AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40

AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40

NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07

RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

 

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:,

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: Intelligent file selection

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

 

Start of the scan: jeudi 4 septembre 2008 22:42

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'SpybotSD.exe' - '1' Module(s) have been scanned

Scan process 'wuauclt.exe' - '1' Module(s) have been scanned

Scan process 'COCIManager.exe' - '1' Module(s) have been scanned

Scan process 'KHALMNPR.exe' - '1' Module(s) have been scanned

Scan process 'KEM.exe' - '1' Module(s) have been scanned

Scan process 'dlbcserv.exe' - '1' Module(s) have been scanned

Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned

Scan process 'CTXFISPI.EXE' - '1' Module(s) have been scanned

Scan process 'avgas.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'LCDMedia.exe' - '1' Module(s) have been scanned

Scan process 'LCDPop3.exe' - '1' Module(s) have been scanned

Scan process 'LCDClock.exe' - '1' Module(s) have been scanned

Scan process 'LCDCountdown.exe' - '1' Module(s) have been scanned

Scan process 'Communications_Helper.exe' - '1' Module(s) have been scanned

Scan process 'ehmsas.exe' - '1' Module(s) have been scanned

Scan process 'Quickcam.exe' - '1' Module(s) have been scanned

Scan process 'LGDCore.exe' - '1' Module(s) have been scanned

Scan process 'LCDMon.exe' - '1' Module(s) have been scanned

Scan process 'CTHELPER.EXE' - '1' Module(s) have been scanned

Scan process 'tfswctrl.exe' - '1' Module(s) have been scanned

Scan process 'DVDLauncher.exe' - '1' Module(s) have been scanned

Scan process 'ehtray.exe' - '1' Module(s) have been scanned

Scan process 'ctfmon.exe' - '1' Module(s) have been scanned

Scan process 'mcagent.exe' - '1' Module(s) have been scanned

Scan process 'SiteAdv.exe' - '1' Module(s) have been scanned

Scan process 'jusched.exe' - '1' Module(s) have been scanned

Scan process 'VolPanel.exe' - '1' Module(s) have been scanned

Scan process 'DLLML.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'LVComSer.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned

Scan process 'iexplore.exe' - '1' Module(s) have been scanned

Scan process 'AcroRd32.exe' - '1' Module(s) have been scanned

Scan process 'WINWORD.EXE' - '1' Module(s) have been scanned

Scan process 'COCIManager.exe' - '1' Module(s) have been scanned

Scan process 'KHALMNPR.exe' - '1' Module(s) have been scanned

Scan process 'KEM.exe' - '1' Module(s) have been scanned

Scan process 'dlbcserv.exe' - '1' Module(s) have been scanned

Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned

Scan process 'steam.exe' - '1' Module(s) have been scanned

Scan process 'mcsysmon.exe' - '1' Module(s) have been scanned

Scan process 'ctfmon.exe' - '1' Module(s) have been scanned

Scan process 'avgas.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'LCDMedia.exe' - '1' Module(s) have been scanned

Scan process 'LCDPop3.exe' - '1' Module(s) have been scanned

Scan process 'LCDCountdown.exe' - '1' Module(s) have been scanned

Scan process 'LCDClock.exe' - '1' Module(s) have been scanned

Scan process 'EKIJ5000MUI.exe' - '1' Module(s) have been scanned

Scan process 'Communications_Helper.exe' - '1' Module(s) have been scanned

Scan process 'Quickcam.exe' - '1' Module(s) have been scanned

Scan process 'LGDCore.exe' - '1' Module(s) have been scanned

Scan process 'LCDMon.exe' - '1' Module(s) have been scanned

Scan process 'ehmsas.exe' - '1' Module(s) have been scanned

Scan process 'CTHELPER.EXE' - '1' Module(s) have been scanned

Scan process 'tfswctrl.exe' - '1' Module(s) have been scanned

Scan process 'DVDLauncher.exe' - '1' Module(s) have been scanned

Scan process 'ehtray.exe' - '1' Module(s) have been scanned

Scan process 'McAfeeDataBackup.exe' - '1' Module(s) have been scanned

Scan process 'CTXFISPI.EXE' - '1' Module(s) have been scanned

Scan process 'SiteAdv.exe' - '1' Module(s) have been scanned

Scan process 'jusched.exe' - '1' Module(s) have been scanned

Scan process 'VolPanel.exe' - '1' Module(s) have been scanned

Scan process 'DLLML.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'mcagent.exe' - '1' Module(s) have been scanned

Scan process 'alg.exe' - '1' Module(s) have been scanned

Scan process 'dllhost.exe' - '1' Module(s) have been scanned

Scan process 'mcrdsvc.exe' - '1' Module(s) have been scanned

Scan process 'UAService7.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'PnkBstrA.exe' - '1' Module(s) have been scanned

Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned

Scan process 'msksrver.exe' - '1' Module(s) have been scanned

Scan process 'MpfSrv.exe' - '1' Module(s) have been scanned

Scan process 'Mcshield.exe' - '1' Module(s) have been scanned

Scan process 'McProxy.exe' - '1' Module(s) have been scanned

Scan process 'McNASvc.exe' - '1' Module(s) have been scanned

Scan process 'mcmscsvc.exe' - '1' Module(s) have been scanned

Scan process 'MBackMonitor.exe' - '1' Module(s) have been scanned

Scan process 'LVComSer.exe' - '1' Module(s) have been scanned

Scan process 'KodakSvc.exe' - '1' Module(s) have been scanned

Scan process 'ehSched.exe' - '1' Module(s) have been scanned

Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned

Scan process 'CTSVCCDA.EXE' - '1' Module(s) have been scanned

Scan process 'guard.exe' - '0' Module(s) have been scanned

Scan process 'LEXPPS.EXE' - '1' Module(s) have been scanned

Scan process 'LVPrcSrv.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'LEXBCES.EXE' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

109 processes with 109 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

Master boot sector HD1

[iNFO] No virus was found!

[WARNING] System error [21]: Le périphérique n'est pas prêt.

Master boot sector HD2

[iNFO] No virus was found!

[WARNING] System error [21]: Le périphérique n'est pas prêt.

Master boot sector HD3

[iNFO] No virus was found!

[WARNING] System error [21]: Le périphérique n'est pas prêt.

Master boot sector HD4

[iNFO] No virus was found!

[WARNING] System error [21]: Le périphérique n'est pas prêt.

 

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '69' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\'

C:\hiberfil.sys

[WARNING] The file could not be opened!

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\Documents and Settings\LocalService\Application Data\Microsoft\kokukequoo.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\Documents and Settings\Paul-Emile\Local Settings\Temporary Internet Files\Content.IE5\ZYSD4F4Z\enavweb[1].cab

[0] Archive type: CAB (Microsoft)

--> navex32a.dll

[WARNING] No further files can be extracted from this archive. The archive will be closed

C:\Documents and Settings\Valérian\Local Settings\Temp\hoonapezy.tmp

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP1002\A0410372.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP1002\A0410374.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP1003\A0411398.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '48f4620c.qua'!

C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP1003\A0411409.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP1003\A0412429.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP1008\A0412593.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP1023\A0418544.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{C75D780B-5CD4-494E-AB96-5DA2A6677439}\RP998\A0409720.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\WINDOWS\system32\drivers\sptd.sys

[WARNING] The file could not be opened!

C:\WINDOWS\system32\drivers\sptd9533.sys

[WARNING] The file could not be opened!

C:\_OTMoveIt\MovedFiles\09022008_211037\Documents and Settings\Frédérique\Application Data\Microsoft\kokukequoo.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

 

 

End of the scan: vendredi 5 septembre 2008 00:57

Used time: 2:14:54 Hour(s)

 

The scan has been done completely.

 

10258 Scanning directories

468161 Files were scanned

11 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

10 files were deleted

0 files were repaired

1 files were moved to quarantine

0 files were renamed

4 Files cannot be scanned

468146 Files not concerned

8142 Archives were scanned

9 Warnings

11 Notes

[chrifleur]

je ne peux plus accèder moi aussi depuis hier soir...voici la manip que je t'avais donnée à effectuer.

 

Avis aux autres lecteurs, ce code a été rédigé spécialement pour cet utilisateur, il serait dangereux de le réutiliser sur votre ordinateur !

 

/!\ Désactive ton antivirus / antispyware résident / TeaTimer de Spybot (si présent)

Désactiver les protections résidentes - Tutoriel

 

http://forum.pcastuces.com/desactiver_les_...entes-f31s4.htm

 

Sélectionne et copie (Ctrl+C) le texte (en bleu) ci-dessous :

KillAll::

Driver::

38f1b4w7

asbp2poa

Registry::

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\cuciquud]

[HKEY_USERS\S-1-5-21-1316576355-2183960598-615534113-1008\Software\Microsoft\Windows\ShellNoRoam\MUICache]

"C:\\WINDOWS\\system32\\cuciquud.exe"=-

[HKEY_USERS\S-1-5-21-1316576355-2183960598-615534113-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]

"C:\\Documents and Settings\\Frédérique\\Application Data\\Microsoft\\kokukequoo.exe"=-

[HKEY_USERS\S-1-5-21-1316576355-2183960598-615534113-1006\Software\Microsoft\Windows\ShellNoRoam\MUICache]

"C:\\WINDOWS\\system32\\kokukequoo.exe"=-

[HKEY_USERS\S-1-5-21-1316576355-2183960598-615534113-1008\Software\Microsoft\Windows\ShellNoRoam\MUICache]

"C:\\WINDOWS\\system32\\kokukequoo.exe"=-

File::

c:\Documents and Settings\LocalService\Application Data\Microsoft\kokukequoo.exe

C:\WINDOWS\system32\cuciquud.exe

C:\DOCUME~1\FRDRIQ~1\LOCALS~1\Temp\f0YmHzHK

C:\DOCUME~1\PAUL-E~1\LOCALS~1\Temp\asbp2poa.sys

C:\WINDOWS\system32\WinSys.exe

 

Ouvre le Bloc-Notes puis colle (Ctrl+V) le texte précédemment copié. (Bloc-Notes: démarrer > Tous les programmes > Accessoires > Bloc-Notes...)

 

Sauvegarde ce fichier sous le nom de: CFScript.txt

 

Comme l'image le montre, fais glisser CFScript.txt sur ComboFix.exe

 

Une fenêtre bleue va apparaître; au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

 

Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises, c'est normal!

 

Ne touche à rien tant que le scan n'est pas terminé.

 

Une fois le scan achevé, un rapport va s'afficher: poste son contenu dans ton prochain message.

 

Si le fichier ne s'ouvre pas, tu le trouveras dans -> C:\ComboFix.txt

 

 

ceci a été intentionnellement rédigé pour CET utilisateur.

si vous n'êtes pas CET utilisateur, NE PAS appliquer ces directives : elles pourraient endommager votre système.

Modifié le 5 septembre 2008 par chrifleur

[Ordinoob]

voila

 

ComboFix 08-09-04.09 - Pascal 2008-09-05 22:09:56.2 - NTFSx86

Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1587 [GMT 2:00]

Endroit: C:\ComboFix.exe

Command switches used :: C:\CFScript.txt

* Création d'un nouveau point de restauration

 

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\WINDOWS\system32\WinSys.exe

 

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Legacy_ASBP2POA

-------\Service_38f1b4w7

-------\Service_asbp2poa

 

 

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-08-05 to 2008-09-05 ))))))))))))))))))))))))))))))))))))

.

 

2008-09-04 22:39 . 2008-09-04 22:39 <REP> d-------- C:\Program Files\Avira

2008-09-04 22:39 . 2008-09-04 22:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira

2008-09-04 17:01 . 2008-09-04 17:01 244 --ah----- C:\sqmnoopt02.sqm

2008-09-04 17:01 . 2008-09-04 17:01 232 --ah----- C:\sqmdata02.sqm

2008-09-03 20:21 . 2008-09-03 20:21 <REP> d-------- C:\Documents and Settings\Valérian

2008-09-03 20:21 . 2008-09-03 20:21 <REP> d-------- C:\Documents and Settings\Frédérique

2008-09-03 17:28 . 2008-09-03 17:28 268 --ah----- C:\sqmdata01.sqm

2008-09-03 17:28 . 2008-09-03 17:28 244 --ah----- C:\sqmnoopt01.sqm

2008-09-03 12:44 . 2008-09-03 12:44 268 --ah----- C:\sqmdata00.sqm

2008-09-03 12:44 . 2008-09-03 12:44 244 --ah----- C:\sqmnoopt00.sqm

2008-09-02 21:10 . 2008-09-02 21:10 <REP> d-------- C:\_OTMoveIt

2008-09-02 18:49 . 2008-09-03 15:42 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll

2008-09-02 18:42 . 2008-09-02 18:42 <REP> d-------- C:\Program Files\Buena Vista Games

2008-09-02 08:54 . 2008-09-02 08:54 <REP> d-------- C:\WINDOWS\system32\fr

2008-09-02 08:54 . 2008-09-02 08:54 <REP> d-------- C:\WINDOWS\system32\bits

2008-09-02 08:54 . 2008-09-02 08:54 <REP> d-------- C:\WINDOWS\l2schemas

2008-09-02 08:51 . 2008-09-02 08:51 <REP> d-------- C:\WINDOWS\ServicePackFiles

2008-09-02 08:48 . 2008-09-02 08:59 2,639 --a------ C:\WINDOWS\imsins.BAK

2008-09-02 00:40 . 2008-09-02 00:40 <REP> d-------- C:\DiagHelp

2008-09-01 19:37 . 2008-09-02 18:39 <REP> d-------- C:\Program Files\Navilog1

2008-08-31 12:43 . 2008-08-31 12:43 <REP> d-------- C:\Documents and Settings\Paul-Emile\Application Data\Grisoft

2008-08-30 18:59 . 2008-08-30 18:59 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware

2008-08-30 18:59 . 2008-08-30 18:59 <REP> d-------- C:\Documents and Settings\Pascal\Application Data\Malwarebytes

2008-08-30 18:59 . 2008-08-30 18:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes

2008-08-30 18:59 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys

2008-08-30 18:59 . 2008-08-17 15:01 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys

2008-08-30 12:21 . 2008-08-30 13:08 6,018 --a------ C:\Documents and Settings\Orph.egd

2008-08-30 12:19 . 2008-08-30 13:08 <REP> d-------- C:\ToolBar SD

2008-08-30 09:21 . 2008-08-30 09:21 <REP> d-------- C:\Program Files\Trend Micro

2008-08-30 09:21 . 2008-08-30 09:21 812,344 --a------ C:\hijackthis_hijackthis_2.02_anglais_17891.exe

2008-08-29 22:04 . 2008-08-31 22:56 <REP> d-------- C:\WINDOWS\BDOSCAN8

2008-08-29 21:52 . 2008-08-29 21:52 <REP> d-------- C:\Documents and Settings\Pascal\Application Data\Grisoft

2008-08-29 21:52 . 2008-08-29 21:52 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft

2008-08-29 21:52 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys

2008-08-29 21:46 . 2008-08-29 21:46 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion

2008-08-29 21:43 . 2008-08-29 21:43 <REP> d-------- C:\Program Files\Yahoo!

2008-08-29 21:43 . 2008-08-29 21:44 <REP> d-------- C:\Program Files\CCleaner

2008-08-29 21:16 . 2008-08-29 22:00 <REP> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP

2008-08-29 20:54 . 2008-08-29 20:54 <REP> d-------- C:\Program Files\Sun

2008-08-29 20:53 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl

2008-08-29 19:48 . 2008-08-29 20:03 <REP> d-------- C:\Documents and Settings\Paul-Emile\.housecall6.6

2008-08-26 13:33 . 2001-05-17 05:18 190,976 --a------ C:\WINDOWS\RRKW.POL

2008-08-24 15:32 . 2008-08-24 15:32 792,685 --a------ C:\voute.pdf

2008-08-23 21:59 . 2008-08-24 10:34 <REP> d---s---- C:\Program Files\Xfire

2008-08-23 21:59 . 2008-09-05 21:59 <REP> d-------- C:\Documents and Settings\Pascal\Application Data\Xfire

2008-08-16 20:50 . 2008-08-16 20:50 <REP> d-------- C:\Documents and Settings\Pascal\Application Data\Apple Computer

2008-08-16 20:49 . 2008-08-16 20:49 54,156 --ah----- C:\WINDOWS\QTFont.qfn

2008-08-16 20:49 . 2008-08-16 20:49 1,409 --a------ C:\WINDOWS\QTFont.for

2008-08-15 18:05 . 2008-05-01 16:36 331,776 --------- C:\WINDOWS\system32\dllcache\msadce.dll

2008-08-15 18:04 . 2008-04-11 21:05 691,712 --------- C:\WINDOWS\system32\dllcache\inetcomm.dll

2008-08-14 23:57 . 2008-08-15 00:05 512 --a------ C:\drmHeader.bin

2008-08-13 00:08 . 2008-08-13 00:08 42,320 --a------ C:\WINDOWS\system32\xfcodec.dll

2008-08-09 13:14 . 2008-09-05 22:17 182,038 --a------ C:\WINDOWS\system32\nvapps.xml

2008-08-09 13:13 . 2008-08-09 13:13 <REP> d-------- C:\WINDOWS\nview

2008-08-09 13:13 . 2008-08-09 13:14 <REP> d-------- C:\WINDOWS\NV2044220.TMP

2008-08-09 13:06 . 2008-08-09 13:06 <REP> d-------- C:\Program Files\MSI

2008-08-09 13:05 . 2008-08-09 13:05 <REP> d-------- C:\Program Files\Setup Files

2008-08-09 12:57 . 2008-08-09 12:57 0 --a------ C:\WINDOWS\msicpl.ini

2008-08-09 12:34 . 1998-10-02 19:00 327,168 --a------ C:\WINDOWS\IsUninst.exe

2008-08-09 12:32 . 2008-08-09 13:11 <REP> d-------- C:\WINDOWS\NV18241376.TMP

2008-08-09 12:32 . 2006-12-15 04:58 208,896 -ra------ C:\WINDOWS\system32\sw20.exe

2008-08-09 12:32 . 2006-06-01 11:22 114,688 -ra------ C:\WINDOWS\system32\sysinfo.dll

2008-08-09 12:32 . 2006-12-15 04:58 69,632 -ra------ C:\WINDOWS\system32\sw24.exe

2008-08-09 12:32 . 2006-06-01 11:22 9,728 -ra------ C:\WINDOWS\system32\sysinfoX64.sys

2008-08-09 12:32 . 2006-06-01 11:22 8,883 -ra------ C:\WINDOWS\system32\sysinfo.vxd

2008-08-09 12:32 . 2006-06-01 11:22 8,192 -ra------ C:\WINDOWS\system32\sysinfo.sys

2008-08-08 08:42 . 2008-08-08 08:42 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Dell

2008-08-07 21:15 . 2008-05-16 11:48 446,464 --a------ C:\WINDOWS\system32\NVUNINST.EXE

2008-08-07 21:09 . 2008-05-16 14:01 446,464 --a------ C:\WINDOWS\system32\nvudisp.exe

2008-08-07 21:09 . 2008-06-05 16:50 18,818 --a------ C:\WINDOWS\system32\nvdisp.nvu

2008-08-07 18:47 . 2008-08-07 18:47 <REP> d-------- C:\Program Files\NVIDIA Corporation

2008-08-07 18:46 . 2008-08-07 20:58 <REP> d-------- C:\Program Files\NVIDIA nTune Performance Application

2008-08-05 00:09 . 2008-04-14 04:33 712,704 --------- C:\WINDOWS\system32\windowscodecs.dll

2008-08-05 00:09 . 2008-04-14 04:33 346,112 --------- C:\WINDOWS\system32\windowscodecsext.dll

2008-08-05 00:09 . 2008-04-14 04:33 276,992 --------- C:\WINDOWS\system32\wmphoto.dll

2008-08-05 00:09 . 2008-04-14 04:33 69,120 --------- C:\WINDOWS\system32\wlanapi.dll

2008-08-05 00:07 . 2008-04-14 04:33 1,888,992 --------- C:\WINDOWS\system32\ati3duag.dll

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-09-05 20:08 2,845,681 ----a-r C:\ComboFix.exe

2008-09-05 16:00 --------- d-----w C:\Program Files\Norton Security Scan

2008-09-05 15:28 137,656 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys

2008-09-05 10:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

2008-09-05 06:13 --------- d-----w C:\Program Files\McAfee

2008-09-04 20:33 --------- d-----w C:\Program Files\Spybot - Search & Destroy

2008-09-04 10:20 --------- d-----w C:\Program Files\Steam

2008-09-02 16:46 --------- d--h--w C:\Program Files\InstallShield Installation Information

2008-09-02 07:01 96,384 ----a-w C:\WINDOWS\system32\drivers\sptd9533.sys

2008-08-29 20:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\McAfee

2008-08-29 19:58 --------- d-----w C:\Program Files\Google

2008-08-29 18:53 --------- d-----w C:\Program Files\Java

2008-08-29 16:01 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared

2008-08-28 19:13 --------- d-----w C:\Program Files\eMule

2008-08-26 11:33 --------- d-----w C:\Program Files\Mindscape

2008-08-25 19:46 --------- d-----w C:\Program Files\Activision

2008-08-07 15:29 106,496 ----a-w C:\WINDOWS\DUMP65af.tmp

2008-08-05 21:41 --------- d-----w C:\Documents and Settings\Pascal\Application Data\SiteAdvisor

2008-07-06 08:35 --------- d-----w C:\Program Files\Sony

2008-07-06 08:35 --------- d-----w C:\Program Files\Fichiers communs\Sony Shared

2008-05-09 07:28 22,328 ----a-w C:\Documents and Settings\Pascal\Application Data\PnkBstrK.sys

2006-01-20 21:35 251 ----a-w C:\Program Files\wt3d.ini

2006-04-16 10:10 104 --sh--r C:\WINDOWS\system32\0853486DF1.sys

2006-04-16 10:10 6,580 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys

.

 

((((((((((((((((((((((((((((( snapshot@2008-09-03_20.21.09.95 )))))))))))))))))))))))))))))))))))))))))

.

+ 2008-01-15 20:12:48 296,336 ----a-w C:\WINDOWS\Downloaded Program Files\rufsi.dll

- 2008-03-14 16:10:06 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe

+ 2008-09-04 15:02:13 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe

- 2008-09-03 16:38:07 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat

+ 2008-09-05 17:34:31 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat

- 2008-09-03 16:38:07 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat

+ 2008-09-05 17:34:31 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat

+ 2008-05-09 11:15:51 45,376 ----a-w C:\WINDOWS\system32\drivers\avgntdd.sys

+ 2008-01-21 16:11:28 22,336 ----a-w C:\WINDOWS\system32\drivers\avgntmgr.sys

+ 2008-06-27 13:03:55 75,072 ----a-w C:\WINDOWS\system32\drivers\avipbb.sys

+ 2007-03-01 08:34:22 28,352 ----a-w C:\WINDOWS\system32\drivers\ssmdrv.sys

- 2008-09-03 14:12:16 111,928 ----a-w C:\WINDOWS\system32\PnkBstrB.exe

+ 2008-09-05 15:28:33 111,928 ----a-w C:\WINDOWS\system32\PnkBstrB.exe

.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-05 68856]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"AudioDrvEmulator"="C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-06-16 49152]

"MBkLogOnHook"="C:\Program Files\McAfee\MBK\LogOnHook.exe" [2007-01-08 20480]

"VolPanel"="C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" [2005-07-11 122880]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]

"SiteAdvisor"="C:\Program Files\SiteAdvisor\6253\SiteAdv.exe" [2007-02-09 36904]

"mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" [2007-08-03 582992]

"McAfee Backup"="C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe" [2007-01-22 4838952]

"ISUSPM Startup"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]

"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb03.exe" [2001-06-19 200704]

"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 67584]

"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-02-23 53248]

"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2005-05-31 122941]

"Launch LCDMon"="C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2007-12-13 2051096]

"Launch LGDCore"="C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2007-12-13 2095640]

"LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 2178832]

"LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 563984]

"EKIJ5000StatusMonitor"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe" [2007-11-13 1052672]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-05-03 13529088]

"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-05-03 86016]

"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 6731312]

"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-09-01 282624]

"SpybotSnD"="C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" [2008-07-07 4891472]

"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]

"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-10-21 C:\WINDOWS\KHALMNPR.Exe]

"CTHelper"="CTHELPER.EXE" [2005-09-20 C:\WINDOWS\CTHELPER.EXE]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles

"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"VIDC.XFR1"= xfcodec.dll

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

SecurityProviders msapsspc.dllschannel.dlldigest.dllmsnsspc.dll

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\drivers

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\drivers\audio

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\drivers\audio\addon

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\drivers\audio\addon\common

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\drivers\audio\addon\common\i386

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusDisableNotify"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]

"DisableMonitoring"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]

"DisableMonitoring"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=

"C:\\WINDOWS\\system32\\LEXPPS.EXE"=

"C:\\Program Files\\Steam\\SteamApps\\common\\red orchestra\\System\\RedOrchestra.exe"=

"C:\\WINDOWS\\system32\\mmc.exe"=

"C:\\Program Files\\Messenger\\msmsgs.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"C:\\Program Files\\Xfire\\Xfire.exe"=

"C:\\Program Files\\McAfee\\MBK\\McAfeeDataBackup.exe"=

"C:\\Program Files\\eMule\\emule.exe"=

"C:\\Program Files\\Steam\\steam.exe"=

"C:\\WINDOWS\\system32\\PnkBstrA.exe"=

"C:\\WINDOWS\\system32\\PnkBstrB.exe"=

"C:\\Program Files\\DNA\\btdna.exe"=

"C:\\Program Files\\Fichiers communs\\McAfee\\MNA\\McNASvc.exe"=

"C:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=

"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

 

R2 KodakSvc;Kodak AiO Device Service;C:\Program Files\Kodak\printer\center\KodakSvc.exe [2007-12-13 18944]

R3 ha20x2k;Creative 20X HAL Driver;C:\WINDOWS\system32\drivers\ha20x2k.sys [2005-09-20 1093632]

R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

S2 oxu4yena7n0e;ASUSKeyboardService;C:\WINDOWS\system32\cuciquud.exe [ ]

S3 fbxusb;FreeBox USB Network Adapter;C:\WINDOWS\system32\DRIVERS\fbxusb.sys [2003-12-31 18848]

S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]

.

Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

.

 

**************************************************************************

 

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-09-05 22:17:21

Windows 5.1.2600 Service Pack 3 NTFS

 

Balayage processus cach‚s ...

 

Balayage cach‚ autostart entries ...

 

Balayage des fichiers cach‚s ...

 

Scan termin‚ avec succŠs

Les fichiers cach‚s: 0

 

**************************************************************************

.

--------------------- DLLs a charg‚ sous des processus courants ---------------------

 

PROCESS: C:\WINDOWS\explorer.exe

-> C:\Program Files\SiteAdvisor\6253\saHook.dll

-> C:\Program Files\Logitech\SetPoint\lgscroll.dll

.

------------------------ Other Running Processes ------------------------

.

C:\WINDOWS\system32\savedump.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\LEXPPS.EXE

C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\WINDOWS\system32\CTSVCCDA.EXE

C:\WINDOWS\ehome\ehrecvr.exe

C:\WINDOWS\ehome\ehSched.exe

C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe

C:\Program Files\McAfee\MBK\MBackMonitor.exe

C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe

C:\Program Files\Fichiers communs\McAfee\MNA\McNASvc.exe

C:\PROGRA~1\FICHIE~1\McAfee\McProxy\McProxy.exe

C:\Program Files\McAfee\VirusScan\Mcshield.exe

C:\Program Files\McAfee\MPF\MpfSrv.exe

C:\Program Files\McAfee\MSK\msksrver.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\PROGRA~1\McAfee.com\Agent\mcagent.exe

C:\WINDOWS\system32\UAService7.exe

C:\WINDOWS\ehome\mcrdsvc.exe

C:\WINDOWS\system32\dllhost.exe

C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe

C:\WINDOWS\system32\CTXFISPI.EXE

C:\WINDOWS\ehome\ehmsas.exe

C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe

C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe

C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe

C:\Program Files\Dell Photo Printer 720\dlbcserv.exe

C:\Program Files\Logitech\SetPoint\KEM.exe

C:\Program Files\Logitech\SetPoint\KHALMNPR.exe

C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe

C:\Program Files\Fichiers communs\LogiShrd\LQCVFX\COCIManager.exe

.

**************************************************************************

.

Temps d'accomplissement: 2008-09-05 22:21:14 - machine was rebooted

ComboFix-quarantined-files.txt 2008-09-05 20:21:06

ComboFix2.txt 2008-09-03 18:21:56

 

Pre-Run: 187,842,084,864 octets libres

Post-Run: 187,858,374,656 octets libres

 

283 --- E O F --- 2008-09-05 17:40:04

[chrifleur]

des soucis encore?

[Ordinoob]

Plus pour l'instant ^^.

Merci pour tout ce temps passé pour ceux qui comme moi ont des soucis.

 

Une question: comme mon antivirus n'est visiblement pas efficace, que puis je ajouter comme protections (gratuite)?

Modifié le 6 septembre 2008 par Ordinoob

[chrifleur]

Si tout va bien supprime tout ce qu'on a utilisé, car ce ne sera plus utile désormais

Conserve néanmoins Ccleaner ou

Télécharge : - Ccleaner

http://www.pcastuces.com/logitheque/ccleaner.htm

Ce logiciel va permettre de supprimer tous les fichiers temporaires. Avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires". Ensuite, Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.

 

Installe ce logiciel très utile et Scanne ton PC avec une fois par semaine au moins...

MalwareByte

http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Installe-le mets-le à jour

Dans l'onglet Recherche, clique sur Exécuter un examen complet puis sur Rechercher.

Sélectionne ton (tes) disques durs.

Lancer l'examen supprimer tout ce qu’il trouve

Clique sur Enregistrer le rapport et choisis ton Bureau

 

tu peux le coupler avec celui-ci

Spybot Search and Destroy

http://www.safer-networking.org/?page=download

 

défragmente

 

pense à bien te protéger, j'ai découvert ce lien qui est plutôt pas mal à ce sujet

 

http://forum.pcastuces.com/sujet.asp?f=25&s=25892

 

désactive ta restauration

clique droit sur poste de travail/propriétés/coche la case désactiver la restauration, appliquer

redémarre ton PC

clique droit sur poste de travail/propriétés/décoche la case désactiver la restauration, appliquer

 

 

la sécurité c'est très important mais ne remplace pas l'internaute, un surf prudent en évitant le crack, les sites "chauds", permet déjà d'éviter bien des soucis, le P2P lui aussi est source d'infections...

 

 

et bon surf

Modifié le 6 septembre 2008 par chrifleur

[facks]

la sécurité c'est très important mais ne remplace pas l'internaute, un surf prudent en évitant le crack, les sites "chauds", permet déjà d'éviter bien des soucis, le P2P lui aussi est source d'infections...

 

Bonjour, maintenant que la désinfection est terminer, je peux intervenir, car ci tu continu a télécharger tout et n'importe quoi par Emule, tu risque de revenir ici tres rapidement pour une nouvelle désinfection.

Emule, shareaza, EOrezo, Call of dutty en téléchargement, X gratuit, Casino en ligne, etc,etc, ne sont pas t'es amies.

 

Loin de moi l'idée de faire la morale, le tout c'est de faire extrêmement attention au cites que nous fréquentons.

 

Ceci pour une bonne défragmentation http://cybersecurite.xooit.com/t509-Auslog...Disk-Defrag.htm

Amicalement, et bonne continuation.

Modifié le 7 septembre 2008 par facks

[Falkra]

On fait ça aussi, Facks... depuis le tmeps que tu lis tout ça tu dois t'en être aperçu.

[facks]

Oui,oui en effet, en grand boulet que je suis, j'ai eu la délicatesse d'attendre la fin pour intervenir.

Vu que je ne suis pas capable de suivre les cours d'une certaine academie ( excellente au demeurant, mais ne correspondant pas a mon état d'esprit du moment) je voulais tout de même apporter ma pierre a l'édifice, qui est la désinfection et la mise en garde des internautes.

Ci vous estimer que cette pierre est inutile, ou vous semble dérangeante, faites le savoir

Non je plaisante, j'aime bien rajouter un petit détail, vous ne pouvez pas tout faire non plus.

[Falkra]

vous ne pouvez pas tout faire non plus

Rien contre toi en particulier, mais quand 50 personnes interviennent, tout le monde s'y met, ça retarde notre boulot, le dépannage, etc : tout.