Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

USB INFECTION

nohamg

Par nohamg
dans Analyses et éradication malwares

 Partager

Messages recommandés

nohamg Junior Member

nohamg

Posté(e)
  • Auteur
Posté(e)

Salut !

 

Voila la suite.

 

 

All processes killed

========== FILES ==========

File move failed. F:\Recycled.exe scheduled to be moved on reboot.

File move failed. F:\svchost.exe scheduled to be moved on reboot.

File move failed. G:\New Folder.exe scheduled to be moved on reboot.

File move failed. G:\New Folder (2).exe scheduled to be moved on reboot.

File move failed. G:\New Folder (3).exe scheduled to be moved on reboot.

File move failed. G:\RECYCLER.exe scheduled to be moved on reboot.

File move failed. G:\SYSTEM.exe scheduled to be moved on reboot.

File move failed. F:\TTHDHGC\DFG-2352-66235-2352322-634621321-6662355\364855.exe scheduled to be moved on reboot.

File move failed. G:\workshop report.exe scheduled to be moved on reboot.

File move failed. G:\Protocol.exe scheduled to be moved on reboot.

File move failed. G:\Nurse meeting report.exe scheduled to be moved on reboot.

File move failed. G:\MH INSERVICE TRAINING MDM.exe scheduled to be moved on reboot.

File move failed. G:\Mental Health.exe scheduled to be moved on reboot.

File move failed. G:\SOPHIE.exe scheduled to be moved on reboot.

File move failed. G:\unused.exe scheduled to be moved on reboot.

File move failed. G:\MHD Activitity.exe scheduled to be moved on reboot.

File move failed. G:\Monthly report of five(5) mental health clinics.exe scheduled to be moved on reboot.

File move failed. G:\MDM survey&workshop 2009-2010.exe scheduled to be moved on reboot.

File move failed. G:\OIC Workshop.exe scheduled to be moved on reboot.

File move failed. G:\reproductive health presentation.exe scheduled to be moved on reboot.

File move failed. G:\Monthly reports 2009.exe scheduled to be moved on reboot.

File move failed. G:\WORKSHOP LETTER.exe scheduled to be moved on reboot.

File move failed. G:\SURVEY REPORT.exe scheduled to be moved on reboot.

========== SERVICES/DRIVERS ==========

========== REGISTRY ==========

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: All Users

 

User: COOLOG

->Temp folder emptied: 9249131 bytes

->Temporary Internet Files folder emptied: 162314 bytes

->Java cache emptied: 85731186 bytes

->FireFox cache emptied: 37055919 bytes

->Flash cache emptied: 2239 bytes

 

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 41 bytes

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

 

User: Public

 

%systemdrive% .tmp files removed: 172 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 109170 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes

RecycleBin emptied: 0 bytes

 

Total Files Cleaned = 126.00 mb

 

 

[EMPTYFLASH]

 

User: All Users

 

User: COOLOG

->Flash cache emptied: 0 bytes

 

User: Default

->Flash cache emptied: 0 bytes

 

User: Default User

->Flash cache emptied: 0 bytes

 

User: Public

 

Total Flash Files Cleaned = 0.00 mb

 

 

C:\Windows\System32\drivers\etc\Hosts moved successfully.

HOSTS file reset successfully

 

OTL by OldTimer - Version 3.2.7.0 log created on 07012010_084445

 

Files\Folders moved on Reboot...

File move failed. F:\Recycled.exe scheduled to be moved on reboot.

File move failed. F:\svchost.exe scheduled to be moved on reboot.

File move failed. G:\New Folder.exe scheduled to be moved on reboot.

File move failed. G:\New Folder (2).exe scheduled to be moved on reboot.

File move failed. G:\New Folder (3).exe scheduled to be moved on reboot.

File move failed. G:\RECYCLER.exe scheduled to be moved on reboot.

File move failed. G:\SYSTEM.exe scheduled to be moved on reboot.

File move failed. F:\TTHDHGC\DFG-2352-66235-2352322-634621321-6662355\364855.exe scheduled to be moved on reboot.

File move failed. G:\workshop report.exe scheduled to be moved on reboot.

File move failed. G:\Protocol.exe scheduled to be moved on reboot.

File move failed. G:\Nurse meeting report.exe scheduled to be moved on reboot.

File move failed. G:\MH INSERVICE TRAINING MDM.exe scheduled to be moved on reboot.

File move failed. G:\Mental Health.exe scheduled to be moved on reboot.

File move failed. G:\SOPHIE.exe scheduled to be moved on reboot.

File move failed. G:\unused.exe scheduled to be moved on reboot.

File move failed. G:\MHD Activitity.exe scheduled to be moved on reboot.

File move failed. G:\Monthly report of five(5) mental health clinics.exe scheduled to be moved on reboot.

File move failed. G:\MDM survey&workshop 2009-2010.exe scheduled to be moved on reboot.

File move failed. G:\OIC Workshop.exe scheduled to be moved on reboot.

File move failed. G:\reproductive health presentation.exe scheduled to be moved on reboot.

File move failed. G:\Monthly reports 2009.exe scheduled to be moved on reboot.

File move failed. G:\WORKSHOP LETTER.exe scheduled to be moved on reboot.

File move failed. G:\SURVEY REPORT.exe scheduled to be moved on reboot.

File move failed. C:\Windows\temp\logishrd\LVPrcInj01.dll scheduled to be moved on reboot.

 

Registry entries deleted on Reboot...

 

 

 

 

 

 

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

 

Database version: 4263

 

Windows 6.0.6001 Service Pack 1

Internet Explorer 7.0.6001.18000

 

7/1/2010 11:41:54 AM

mbam-log-2010-07-01 (11-41-54).txt

 

Scan type: Quick scan

Objects scanned: 127196

Time elapsed: 7 minute(s), 1 second(s)

 

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

 

Memory Processes Infected:

(No malicious items detected)

 

Memory Modules Infected:

(No malicious items detected)

 

Registry Keys Infected:

(No malicious items detected)

 

Registry Values Infected:

(No malicious items detected)

 

Registry Data Items Infected:

(No malicious items detected)

 

Folders Infected:

(No malicious items detected)

 

Files Infected:

(No malicious items detected)

no.ppp Extrem Member

no.ppp

Posté(e)
Posté(e)

Salut,

 

Désolé, j'avais supprimé mon ancien message ..

 

Fais ceci :

 

080821120923886402.png Commence par envoyer ceci : C:\UsbFix_Upload_Me_COOLOG-PC.zip à Upload pour UsbFix, Ad-Remover & FindyKill

Bizarre qu'UsbFix n'ait rien supprimé, j'ai informé le développeur.

 

080821120923886402.png Désactive tes protections résidentes et relance UsbFix en mode suppression.

Ce sont tes protections qui ont fait foirer la suppression je pense.

nohamg Junior Member

nohamg

Posté(e)
  • Auteur
Posté(e)

Salut,

 

 

 

080821120923886402.png Commence par envoyer ceci : C:\UsbFix_Upload_Me_COOLOG-PC.zip à Upload pour UsbFix, Ad-Remover & FindyKill

Bizarre qu'UsbFix n'ait rien supprimé, j'ai informé le développeur.

 

Ca ete fait ! Dis moi s'il me faut le refaire.

 

Désactive tes protections résidentes

 

Humm comment dois je faire cela ?

 

Une idee pour se débarrasser des troyan (troyan horse agent2.atxc / generic13.POPQ / dropper generic2.LEH) ?

 

Merci

no.ppp Extrem Member

no.ppp

Posté(e)
Posté(e) (modifié)

Re,

 

Nop, c'est bon, ça a été envoyé. :super:

 

Tu as AVG et Avast comme antivirus ? Supprime Avast!

 

Clique-droit sur l'icône d'AVG dans la barre des tâches à droite (systray) et clique sur Quitter ou un truc du genre

 

Et désactive le pare-feu Windows.

 

Et relance UsbFix

Modifié par no.ppp
nohamg Junior Member

nohamg

Posté(e)
  • Auteur
Posté(e)

Salut,

 

Voila le rapport. C'est possible qu'il manque certains details j'ai lance la suppresion 2 fois (ici tu as le deuxieme rapport), la premiere fois notre generateur a coupe sans que je sache si le scan etait finit (j'ai pas verifier le dossier C:\UsbFix.txt a ce moment...).

 

 

 

 

 

############################## | UsbFix 7.014 | [Deletion]

 

User: COOLOG (Administrator) # COOLOG-PC [Dell Inc. Vostro 1000]

Updated 24/06/10 by El Desaparecido / C_XX

Started at 10:22:47 | 02/07/2010

Website: Bienvenue dans nos Pages Persos

Contact: FindyKill.Contact@gmail.com

 

CPU: AMD Athlon 64 X2 Dual-Core Processor TK-57

CPU 2: AMD Athlon 64 X2 Dual-Core Processor TK-57

Microsoft® Windows Vista™ Home Basic (6.0.6001 32-Bit) # Service Pack 1

Internet Explorer 7.0.6001.18000

 

Windows Firewall: Disabled /!\

RAM -> 1917 Mb

C:\ (%systemdrive%) -> Fixed drive # 139 Gb (17 Mb free - 12%) [OS] # NTFS

D:\ -> Fixed drive # 10 Gb (1 Mb free - 14%) [RECOVERY] # NTFS

E:\ -> CD-ROM

F:\ -> Removable drive # 968 Mb (862 Mb free - 89%) [THOMAS KEY] # FAT32

G:\ -> Removable drive # 1000 Mb (931 Mb free - 93%) [ GONWHIDRUM] # FAT

H:\ -> Removable drive # 4 Gb (4 Mb free - 99%) [] # FAT32

I:\ -> Fixed drive # 466 Gb (66 Mb free - 14%) [LaCie] # FAT32

 

################## | Files # Infected Folders |

 

Deleted ! H:\autorun.0nf

 

################## | Registry |

 

 

################## | Mountpoints2 |

 

 

################## | Listing |

 

[01/06/2010 - 18:09:36 | HD ] C:\$AVG

[02/07/2010 - 10:25:39 | SHD ] C:\$Recycle.Bin

[13/03/2009 - 15:26:18 | D ] C:\ATI

[18/09/2006 - 21:43:36 | A | 24] C:\autoexec.bat

[02/07/2010 - 09:52:24 | RASHD ] C:\Autorun.inf

[03/02/2008 - 23:33:27 | SHD ] C:\Boot

[21/01/2008 - 02:34:29 | RASH | 333203] C:\bootmgr

[24/06/2010 - 17:23:50 | HD ] C:\Config.Msi

[18/09/2006 - 21:43:37 | A | 10] C:\config.sys

[13/03/2009 - 14:31:14 | D ] C:\DELL

[09/09/2008 - 04:24:28 | RAH | 4224] C:\dell.sdr

[08/10/2007 - 06:46:36 | D ] C:\doctemp

[13/03/2009 - 11:51:53 | SHD ] C:\Documents and Settings

[13/12/2007 - 22:09:44 | D ] C:\Drivers

[02/07/2010 - 09:43:54 | ASH | 2011217920] C:\hiberfil.sys

[02/06/2010 - 16:23:20 | RASH | 0] C:\IO.SYS

[02/06/2010 - 16:23:20 | RASH | 0] C:\MSDOS.SYS

[09/06/2009 - 22:30:16 | D ] C:\Netgear

[09/09/2008 - 01:51:38 | A | 22729] C:\newfile.enc

[09/09/2008 - 01:51:38 | A | 22729] C:\newkey

[02/07/2010 - 09:43:52 | ASH | 2325032960] C:\pagefile.sys

[21/01/2008 - 02:43:50 | D ] C:\PerfLogs

[01/07/2010 - 09:39:30 | RD ] C:\Program Files

[02/07/2010 - 09:42:28 | HD ] C:\ProgramData

[28/06/2010 - 15:26:14 | D ] C:\rsit

[02/07/2010 - 09:42:39 | SHD ] C:\System Volume Information

[22/01/2010 - 09:36:41 | D ] C:\Temp

[02/07/2010 - 10:25:39 | D ] C:\UsbFix

[02/07/2010 - 10:22:48 | A | 2525] C:\UsbFix.txt

[02/07/2010 - 09:52:24 | A | 4259] C:\UsbFix_Upload_Me_COOLOG-PC.zip

[28/06/2010 - 08:28:59 | RD ] C:\Users

[02/07/2010 - 09:42:32 | D ] C:\Windows

[01/07/2010 - 08:44:45 | D ] C:\_OTL

[02/07/2010 - 10:25:39 | SHD ] D:\$RECYCLE.BIN

[02/07/2010 - 09:52:24 | RASHD ] D:\Autorun.inf

[16/06/2010 - 11:31:52 | D ] D:\COOLOG-PC

[09/09/2008 - 05:04:02 | D ] D:\dell

[16/06/2010 - 11:26:16 | RA | 528] D:\MediaID.bin

[19/01/2008 - 08:45:45 | D ] D:\Program Files

[19/01/2008 - 08:45:30 | HD ] D:\ProgramData

[29/01/2008 - 17:53:24 | D ] D:\sources

[08/09/2008 - 20:28:57 | SHD ] D:\System Volume Information

[09/09/2008 - 05:15:34 | D ] D:\Tools

[19/01/2008 - 08:45:30 | RD ] D:\Users

[09/09/2008 - 05:03:19 | D ] D:\Windows

[13/03/2008 - 23:28:12 | RAD ] E:\VIDEO_TS

[13/03/2008 - 23:28:12 | RAD ] E:\AUDIO_TS

[13/11/2009 - 10:49:50 | RSHD ] F:\TO BE SENT

[17/12/2009 - 12:36:10 | RSHD ] F:\MOMED

[23/02/2010 - 10:41:22 | A | 26624] F:\Emmett_February 20.doc

[09/09/2009 - 12:25:08 | RSHD ] F:\RECYCLER

[02/06/2010 - 15:32:14 | RSHD ] F:\TTHDHGC

[23/02/2010 - 10:38:24 | RSHD ] F:\astry

[03/11/2009 - 16:15:38 | RSHD ] F:\gb accountancy

[02/06/2010 - 11:41:18 | A | 579584] F:\MON database 01 2010 MON 1ST PAYROLL_Leo.xls

[21/01/2010 - 11:43:34 | RSHD ] F:\bkup

[23/03/2009 - 08:19:12 | RSHD ] F:\Driver Printers

[30/06/2010 - 15:21:22 | RASHD ] F:\Autorun.inf

[25/02/2010 - 08:52:46 | RSHD ] F:\LEO

[03/11/2009 - 20:04:50 | RSHD ] F:\ALICE

[15/01/2010 - 12:39:10 | A | 2854400] F:\MON - Accountancy 122009 - CORRECTION_LEO 20100115.xls

[14/12/2009 - 15:24:40 | RSHD ] F:\Scanned Docs

[25/02/2010 - 13:22:50 | RSHD ] F:\Docs

[20/05/2002 - 17:13:44 | A | 19968] F:\National Info.xls

[18/11/2009 - 11:40:24 | RSHD ] F:\bin

[18/01/2010 - 10:25:52 | A | 2903552] F:\MON - Accountancy 112009 MON - CHECK LEO 20100115.xls

[05/03/2010 - 09:58:50 | A | 39424] F:\INTERNAL CASH REQUEST FORM USD.xls

[16/04/2010 - 14:23:58 | A | 54784] F:\20100412 LIB Raprochement T12704 Fev_Leo.xls

[02/04/2010 - 23:15:40 | A | 102400] F:\LIB - Cash controls 201003.xls

[15/04/2010 - 17:22:48 | A | 2846208] F:\LIB - Accountancy 03 2010 - voucher OK.xls

[17/04/2010 - 12:33:46 | A | 30720] F:\20100412 LIB Raprochement T12704 willie.xls

[03/06/2010 - 13:14:44 | A | 49152] F:\200901007- ADM006 Ministry of Labour.doc

[01/06/2010 - 18:44:06 | A | 50176] F:\Advance- Return.xls

[20/05/2002 - 14:20:14 | A | 2966016] F:\MON - Accountancy 04 2010 - ChecK_LEO.xls

[02/06/2010 - 17:05:54 | A | 115712] F:\LIB - Cash controls 201005.xls

[24/06/2010 - 14:40:00 | A | 46080] F:\TENDER FOR THE SALE.doc

[30/10/2009 - 15:25:46 | RSHD ] F:\HR

[01/06/2010 - 17:33:52 | RSHD ] F:\Usb 2.0 Driver

[31/05/2010 - 09:02:40 | A | 30208] G:\New cases form.xls

[09/10/2009 - 08:56:20 | RSHD ] G:\Exchange MDM & Cap

[24/02/2010 - 08:48:40 | RSHD ] G:\Nurse meeting report

[28/05/2010 - 16:48:18 | A | 49664] G:\JOB DESCRIPTION may 2010.doc

[24/02/2010 - 10:32:26 | RSHD ] G:\MH INSERVICE TRAINING MDM

[29/04/2010 - 10:51:38 | RSHD ] G:\Mental Health

[24/02/2010 - 09:04:28 | RSHD ] G:\Guideline+Case study

[09/10/2009 - 08:46:24 | RSHD ] G:\kpoe document

[09/10/2009 - 08:49:12 | RSHD ] G:\master trainer

[09/10/2009 - 08:50:18 | RSHD ] G:\MDM activities

[09/10/2009 - 09:58:12 | RSHD ] G:\MDM + PHEBE mou

[24/02/2010 - 10:24:20 | RSHD ] G:\MHD Activitity

[18/02/2010 - 11:51:40 | A | 1890304] G:\DATA COLLECTION TOOL - Blank format.xls

[03/04/2010 - 12:56:46 | A | 882688] G:\In-service & SBMR.ppt

[23/06/2009 - 15:33:14 | A | 37888] G:\Road Map 2009-2012.doc

[19/02/2010 - 15:40:40 | RSHD ] G:\Monthly report of five(5) mental health clinics

[28/05/2010 - 16:40:34 | RSHD ] G:\Usb 2.0 Driver

[26/04/2010 - 12:01:56 | A | 93184] G:\Gbarpolu Co. Training Budget.doc

[24/02/2010 - 08:41:50 | RSHD ] G:\MDM survey&workshop 2009-2010

[19/04/2010 - 15:35:30 | A | 93184] G:\Copy of Gbarpolu Co. Training Budget.doc

[22/04/2010 - 08:09:40 | A | 238592] G:\OIC training.doc

[12/03/2010 - 11:00:08 | A | 239104] G:\Workshop March.ppt

[27/04/2010 - 15:28:22 | A | 598528] G:\DATA COLLECTION TOOL 2010 - New Version MHT.xls

[29/04/2010 - 10:54:20 | RSHD ] G:\OIC Workshop

[06/05/2010 - 15:25:06 | RSHD ] G:\Dweh cuc

[04/05/2010 - 06:22:26 | RSHD ] G:\Dweh

[12/03/2010 - 10:28:38 | A | 22016] G:\MH General assessment tool

[19/02/2010 - 16:09:00 | RSHD ] G:\MDM Day - February 2010

[04/05/2010 - 19:43:32 | A | 60928] G:\evaluation.xls

[06/02/2009 - 15:12:06 | RSHD ] G:\Data collection tool 2009

[15/06/2010 - 11:13:58 | A | 599] G:\MPCHS strategy planning report june 2010.lnk

[14/06/2010 - 15:19:34 | RSHD ] G:\workshop letter

[14/06/2010 - 15:20:32 | RSHD ] G:\SOPHIE

[16/06/2010 - 17:06:16 | A | 59392] G:\MDM presentation june 2010.doc

[15/06/2010 - 16:53:46 | A | 23552] G:\Doran,s base meeting, June 16, 2010.doc

[21/06/2010 - 15:33:42 | A | 75264] G:\MH Presentation PP.ppt

[24/06/2010 - 09:03:18 | RSHD ] G:\New Folder

[24/06/2010 - 09:05:30 | RSHD ] G:\ASSESSMENT REPORT

[24/06/2010 - 10:05:28 | RSHD ] G:\New Folder (2)

[24/06/2010 - 10:13:38 | RSHD ] G:\New Folder (3)

[28/06/2010 - 14:41:50 | D ] G:\autorun.inf

[08/05/2009 - 16:52:00 | RSHD ] G:\SYSTEM

[08/05/2009 - 16:52:00 | RSHD ] G:\DATA

[13/05/2009 - 08:50:06 | RSHD ] G:\Protocol

[14/05/2009 - 13:50:02 | RSHD ] G:\Evaluations

[22/05/2009 - 13:25:56 | RSHD ] G:\In-service training BPHS

[25/06/2009 - 09:22:56 | RSHD ] G:\reproductive health presentation

[25/06/2009 - 15:00:16 | RSHD ] G:\group 1 modules

[25/06/2009 - 15:02:26 | RSHD ] G:\RECYCLER

[10/07/2009 - 14:44:08 | RSHD ] G:\2009

[10/07/2009 - 14:44:52 | RSHD ] G:\Monthly reports 2009

[20/08/2009 - 16:36:52 | RSHD ] G:\Edmund document

[16/06/2008 - 16:22:40 | A | 2914296] H:\ccsetup208.exe

[04/05/2010 - 10:19:36 | D ] H:\Constrof HandOver

[18/05/2010 - 19:03:46 | A | 5577728] H:\paul.doc

[04/06/2010 - 20:53:30 | D ] H:\Noam

[17/06/2010 - 16:00:14 | D ] H:\autorun.inf

[12/06/2010 - 13:40:10 | D ] H:\leo

[01/07/2009 - 08:49:30 | HD ] H:\.Trashes

[01/07/2009 - 08:49:32 | AH | 4096] H:\._.Trashes

[01/07/2009 - 08:58:58 | AH | 82] H:\._CV Gaudin Noham.doc

[29/03/2006 - 14:08:32 | AH | 82] I:\._System Volume Information

[24/08/2009 - 16:56:52 | RSHD ] I:\AUTOPLAY

[24/08/2009 - 16:56:52 | RSHD ] I:\System Volume Information

[24/08/2009 - 16:56:52 | RSHD ] I:\MOVIES

[24/08/2009 - 16:56:52 | RSHD ] I:\PICTURES

[24/08/2009 - 16:56:52 | RSHD ] I:\UPDATE

[09/09/2009 - 14:56:46 | RSHD ] I:\Noham

[20/09/2009 - 17:17:28 | RSHD ] I:\.Trashes

[09/09/2009 - 14:59:58 | RSHD ] I:\Recycled

[20/09/2009 - 17:17:28 | AH | 4096] I:\._.Trashes

[26/12/2009 - 11:22:20 | AH | 6148] I:\.DS_Store

[20/09/2009 - 14:54:36 | RSHD ] I:\$RECYCLE.BIN

[24/10/2009 - 09:55:36 | RSHD ] I:\PRO

[13/03/2010 - 20:07:48 | RSHD ] I:\Copy Cles USB

[01/06/2002 - 08:28:50 | RSHD ] I:\Usb 2.0 Driver

[02/06/2010 - 17:09:34 | D ] I:\Noam

[07/06/2010 - 08:53:20 | D ] I:\MUSICS

[11/06/2010 - 08:17:54 | D ] I:\FILM

[30/06/2010 - 15:21:24 | RASHD ] I:\Autorun.inf

 

################## | Vaccin |

 

C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

D:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

F:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

H:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

I:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

 

################## | Upload |

 

Please send the file: C:\UsbFix_Upload_Me_COOLOG-PC.zip

Upload pour UsbFix, Ad-Remover & FindyKill

Thank you for your contribution.

 

################## | E.O.F |

no.ppp Extrem Member

no.ppp

Posté(e)
Posté(e)

Salut,

 

080821120923886402.png Comme la dernière fois : C:\UsbFix_Upload_Me_COOLOG-PC.zip à Upload pour UsbFix, Ad-Remover & FindyKill

 

080821120923886402.png Encore des problèmes ?

 

080821120923886402.pngNous allons rechercher les restes à l'aide d'un scan en ligne :

 

*Clique avec le bouton droit de ta souris sur ce lien et ouvre-le dans une nouvelle fenêtre : ESET OnlineScan

~ Cette manipulation doit se faire avec Internet Explorer !

 

  • Clique ensuite sur ce bouton pour lancer l'analyse : esetOnline.png
  • Choisis YES pour accepter les termes de la license.
  • Clique alors sur le bouton esetStart.png
    => Clique dans la barre jaune qui risque d'apparaître et autorise le programme (il est évidemment sans risque)
  • Coche la case "Scan Archives"
  • Appuie alors sur "Start"
    => L'outil se met à jour, installe les nouvelles bases de données et commencer l'analyse, cela va prendre beaucoup de temps; sois patient !
  • Lorsqu'il a terminé, clique sur le bouton "List of found threats"
  • Clique alors "Export to text file..." et enregistre le fichier sur ton bureau.
  • Poste son contenu dans ta prochaine réponse.

nohamg Junior Member

nohamg

Posté(e)
  • Auteur
Posté(e)

Salut,

 

Je voulai te demander si tu savais comment decocher la fonction "cache" des dossiers (la fonction qui ont etaient mis en quarentaine par l'antivirus les reconnaissant comme des .exe ? Ils sont cache mais accessibles, ca serait juste quand bien plus pratique de pouvoir les remettre en affichage "normal".

1278068756_Untitled.jpg

no.ppp Extrem Member

no.ppp

Posté(e)
Posté(e)

Re,

 

J'ai compris çà uniquement :

Je voulai te demander si tu savais comment decocher la fonction "cache" des dossiers

 

Le reste, j'ai rien capté :D

nohamg Junior Member

nohamg

Posté(e)
  • Auteur
Posté(e) (modifié)

Ouia desole si j'ai pas ete clair .... :outch:

 

Je retente ma chance :

Alors pour ces meme clefs il me reste encore a:

  1. retirer les troyens detecte par l'antivirus
     
  2. remettre les dossiers en "non caches" (-d'apres ce que j'ai pu lire sur les autres postes- ils sont devenu cache a cause de l'antivirus qui c'est fait pieger par l'autorun.inf et les a reconnu comme de fichier ".exe". Donc du coup ils ont etait mis en quarentaine et la pas moyen de les retablirs comme fichiers a lecture normale.

Modifié par nohamg

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...