RESOLU - ORDI infesté [legèrement, il me semble]

lance_yien · le 23 janvier 2011

Etonnant!

Tu peux me dire si tu connais ces dossiers (en gras) et surtout s'ils son vides ou pas?

c:\program files\Bfipprnl£Â½´Ëohaffmxb.exe

c:\program files\win

c:\program files\windows

sio · le 23 janvier 2011

non je ne les connais pas !

et ils sont tous les trois vides ...

je ne sais pas si cela est lié, mais j'ai du réinstallé windows family car le fichier HAL.DLL était manquant !

lance_yien · le 23 janvier 2011

ça n'a pas d'importance, on va les supprimer et tu me dira s'il te reste encore des soucis avec ta machine.

Lancer OTL et copier la liste suivante (commençant par :OTL) et la coller dans l'espace sous "Personnalisation" (les : au début et le ] à la fin sont très important, merci de vérifier).

:OTL

O4 - HKLM..\Run: [Cmaudio] File not found

O20 - HKLM Winlogon: UserInit - (C:\Program Files\Bfipprnl£Â½´Ëohaffmxb.exe\ohaffmxb.exe) - File not found

:Services

:Reg

:Files

C:\Program Files\Panda Security

C:\WINDOWS\BDOSCAN8

C:\Documents and Settings\mp\Application Data\xssend2

C:\Documents and Settings\mp\Application Data\xssendjsxvgd2wper1dyxpatks2xu3rzubmgq

C:\Documents and Settings\LocalService\Application Data\Macromedia

C:\Documents and Settings\mp\Application Data\xssendfn2jaqj3z1ggwxlwdx1ljsjmjlhsnfo

C:\Documents and Settings\LocalService\Application Data\Adobe

C:\Documents and Settings\mp\Application Data\xssendcs3fowqcycl2zhvzayrqotgfkc3watl

C:\Documents and Settings\mp\Application Data\xssendgvmxa1l1sbvxqipmbpchwggpwpwodpb

C:\Documents and Settings\mp\Application Data\xssendqeuatxqvdmdxi3tjxjsgepmhb3kxxaa

C:\Documents and Settings\mp\Application Data\xssendcagvn1eeay2ctjckdz2vywaxfqipybm

C:\Documents and Settings\mp\Application Data\xssendxc31xh3vgwvrsp2ph3cnxstbubcjlpy

C:\Documents and Settings\mp\Application Data\xssendwojmhxxgkgtctseyljkkcugxkbbvio1

C:\Documents and Settings\mp\Application Data\xssendekayrkahkt3smrszaqlsfec3xxptby2

C:\Documents and Settings\mp\Application Data\xssendeniqfktkbvbm3krudyyylglnucznbjw

C:\Program Files\win

C:\Documents and Settings\mp\Application Data\xssendwi2kbfserbmhaornvncneshh13ratqe

C:\Documents and Settings\mp\Application Data\xssendeyjluyhugzimi1njrafla3w1kzcvzxa

C:\Documents and Settings\mp\Application Data\xssendjmseffzijrefavxjakxkki3dxtgrozk

C:\Documents and Settings\mp\Application Data\xssendrn1miffrrkmterrjmzgiesrt1kpeesj

C:\Program Files\windows

C:\Program Files\Bfipprnl£Â½´Ëohaffmxb.exe

C:\WINDOWS\tasks\*.job

:Commands

[EMPTYTEMP]

[EMPTYFLASH]

[RESETHOSTS]

Cliquer sur le bouton rouge Correction et laisser faire.

Si un ou plusieurs fichiers ne peuvent pas être supprimés normalement, le programme demandera de redémarrer la machine pour finir le processus, cliquer sur Oui.

A la fin un rapport s'ouvre dans le bloc-note. Copier son contenu et le coller dans une nouvelle réponse. Fermer le rapport et OTL.

Autres symptômes à vérifier?

sio · le 23 janvier 2011

All processes killed

========== OTL ==========

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Cmaudio not found.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\UserInit:C:\Program Files\Bfipprnl£Â½´Ëohaffmxb.exe\ohaffmxb.exe deleted successfully.

========== SERVICES/DRIVERS ==========

========== REGISTRY ==========

========== FILES ==========

C:\Program Files\Panda Security folder moved successfully.

C:\WINDOWS\BDOSCAN8\plugins folder moved successfully.

C:\WINDOWS\BDOSCAN8 folder moved successfully.

File\Folder C:\Documents and Settings\mp\Application Data\xssend2 not found.

C:\Documents and Settings\mp\Application Data\xssendjsxvgd2wper1dyxpatks2xu3rzubmgq folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\macromedia.com\support folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\macromedia.com folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\#SharedObjects\PVXJ5KG2 folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\#SharedObjects folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Macromedia folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendfn2jaqj3z1ggwxlwdx1ljsjmjlhsnfo folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Adobe\Flash Player\AssetCache\4US6PX8G folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Adobe\Flash Player\AssetCache folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Adobe\Flash Player folder moved successfully.

C:\Documents and Settings\LocalService\Application Data\Adobe folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendcs3fowqcycl2zhvzayrqotgfkc3watl folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendgvmxa1l1sbvxqipmbpchwggpwpwodpb folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendqeuatxqvdmdxi3tjxjsgepmhb3kxxaa folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendcagvn1eeay2ctjckdz2vywaxfqipybm folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendxc31xh3vgwvrsp2ph3cnxstbubcjlpy folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendwojmhxxgkgtctseyljkkcugxkbbvio1 folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendekayrkahkt3smrszaqlsfec3xxptby2 folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendeniqfktkbvbm3krudyyylglnucznbjw folder moved successfully.

C:\Program Files\win folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendwi2kbfserbmhaornvncneshh13ratqe folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendeyjluyhugzimi1njrafla3w1kzcvzxa folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendjmseffzijrefavxjakxkki3dxtgrozk folder moved successfully.

C:\Documents and Settings\mp\Application Data\xssendrn1miffrrkmterrjmzgiesrt1kpeesj folder moved successfully.

C:\Program Files\windows folder moved successfully.

C:\Program Files\Bfipprnl£Â½´Ëohaffmxb.exe folder moved successfully.

C:\WINDOWS\tasks\User_Feed_Synchronization-{72045675-8193-4D2F-A529-1D566F7874F8}.job moved successfully.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User