Bien , une personne plus Expérimenté va venir prendre le relais juste pour te filer un script de désinfection pour
"OTL"....
:OTL
SRV - (ASKUpgrade) -- File not found
SRV - (ASKService) -- File not found
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll File not found
O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper.dll File not found
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll File not found
O3 - HKLM\..\Toolbar: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (BearShare MediaBar) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll File not found
O4 - HKCU\..\Run: [BSK91O3T6D] C:\Users\Loulou\AppData\Local\Temp\Ck0.exe File not found
F3 - HKCU WinNT: Load - (C:\Users\Loulou\AppData\Local\Temp\qp035zgr.exe) - C:\Users\Loulou\AppData\Local\Temp\qp035zgr.exe File not found
O33 - MountPoints2\{f5ac4de2-bf2e-11de-ab2e-002243c1836f}\Shell\AutoRun\command - "" = G:\ZRNO\\soli.exe -- File not found
O33 - MountPoints2\{f5ac4de2-bf2e-11de-ab2e-002243c1836f}\Shell\open\command - "" = G:\ZRNO\\soli.exe -- File not found
[2010/08/04 14:04:14 | 000,000,000 | ---D | C] -- C:\Users\Loulou\AppData\Local\jnrcggmyg
[2010/08/03 01:25:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Trymedia
[2010/08/04 14:06:43 | 000,000,000 | -H-- | M] () -- C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
:Files
C:\Users\Loulou\AppData\Local\jnrcggmyg
C:\ProgramData\Trymedia
C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
:Commands
[emptytemp]
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe ()
O4 - HKLM\..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM\..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM\..\Run: [P2Go_Menu] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU\..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU\..\Run: [gckcomka] C:\Users\Loulou\gckcomka.exe File not found
O4 - HKCU\..\Run: [Halo2] C:\Users\Loulou\AppData\Local\Temp\sshnas21.DLL File not found
O4 - HKCU\..\Run: [newreleaseversion70700.exe] C:\Users\Loulou\AppData\Roaming\CBE3FBC7AC5FADF7B4C95F3071F95353\newreleaseversion70700.exe File not found
O4 - HKCU\..\Run: [qpioinnn] C:\Users\Loulou\AppData\Local\jnrcggmyg\rnnshhktssd.exe File not found
O4 - HKCU\..\Run: [setupupdater0000.exe] C:\Users\Loulou\AppData\Roaming\CBE3FBC7AC5FADF7B4C95F3071F95353\setupupdater0000.exe File not found
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU\..\Run: [xyqzbz] C:\Users\Loulou\AppData\Local\Temp\msvjidkm.DLL File not found
O4 - Startup: C:\Users\Loulou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Antimalware Doctor.lnk = C:\Users\Loulou\AppData\Roaming\CBE3FBC7AC5FADF7B4C95F3071F95353\newreleaseversion70700.exe File not found
All processes killed
========== OTL ==========
Error: No service named ASKUpgrade was found to stop!
Service\Driver key ASKUpgrade not found.
File File not found not found.
Error: No service named ASKService was found to stop!
Service\Driver key ASKService not found.
File File not found not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A}\ not found.
Registry key HKEY_CURRENT_USER\\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\Load:C:\Users\Loulou\AppData\Local\Temp\qp035zgr.exe deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f5ac4de2-bf2e-11de-ab2e-002243c1836f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f5ac4de2-bf2e-11de-ab2e-002243c1836f}\ not found.
File G:\ZRNO\\soli.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f5ac4de2-bf2e-11de-ab2e-002243c1836f}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f5ac4de2-bf2e-11de-ab2e-002243c1836f}\ not found.
File G:\ZRNO\\soli.exe not found.
C:\Users\Loulou\AppData\Local\jnrcggmyg folder moved successfully.
Folder C:\ProgramData\Trymedia\ not found.
File C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job not found.
========== FILES ==========
File\Folder C:\Users\Loulou\AppData\Local\jnrcggmyg not found.
File\Folder C:\ProgramData\Trymedia not found.
File\Folder C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job not found.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Default User
User: Loulou
->Temp folder emptied: 49980967 bytes
->Temporary Internet Files folder emptied: 4330460 bytes
->Java cache emptied: 11504425 bytes
->Google Chrome cache emptied: 74988608 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 26393 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 1152888 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2831807 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 393585 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 138,00 mb
OTL by OldTimer - Version 3.2.5.3 log created on 08062010_000146
Files\Folders moved on Reboot...
File\Folder C:\Windows\temp\_avast5_\Webshlock.txt not found!
Registry entries deleted on Reboot...
======= RAPPORT D'AD-REMOVER 2.0.0.1,D | UNIQUEMENT XP/VISTA/7 =======
Mis à jour par C_XX le 26/07/10 à 12:00
Contact: AdRemover.contact[AT]gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 00:42:09 le 06/08/2010, Mode normal
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1 (X86)
Loulou@PC-DE-LOULOU (ASUSTeK Computer Inc. N50Vn)
============== ACTION(S) ==============
3,Fichier supprimé: C:\Users\Loulou\AppData\Local\weygy.bat
(!) -- Fichiers temporaires supprimés.
============== SCAN ADDITIONNEL ==============
** Internet Explorer Version [7.0.6001.18000] **
[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
[HKLM\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
========================================
C:\Program Files\Ad-Remover\Quarantine: 12 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 30 Fichier(s)
C:\Ad-Report-CLEAN[2].txt - 06/08/2010 (1899 Octet(s))
Fin à: 00:47:50, 06/08/2010
============== E.O.F ==============
Malware -> File G:\ZRNO\\soli.exe not found. => Infection USB (USB.Troj)
File G:\ZRNO\\soli.exe not found. => Infection USB (USB.Troj)
CTRL+A pour tout sélectionner
CTRL+C pour copier
CTRL+V pour coller dans la réponse
############################## | UsbFix 7.019 | [Suppression]
Utilisateur: Loulou (Administrateur) # PC-DE-LOULOU [ASUSTeK Computer Inc. N50Vn]
Mis à jour le 03/08/10 par El Desaparecido / C_XX
Lancé à 11:27:20 | 06/08/2010
Site Web: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com
CPU: Intel(R) Core(TM)2 Duo CPU T9400 @ 2.53GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T9400 @ 2.53GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-Bit) # Service Pack 1
Internet Explorer 7.0.6001.18000
Pare-feu Windows: Activé
RAM -> 3070 Mo
C:\ (%systemdrive%) -> Disque fixe # 149 Go (18 Go libre(s) - 12%) [CARLOS] # NTFS
D:\ -> Disque fixe # 139 Go (66 Go libre(s) - 47%) [JEAN-EUDE] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> Disque fixe # 233 Go (82 Go libre(s) - 35%) [LaCie] # FAT32
H:\ -> Disque amovible # 973 Mo (919 Mo libre(s) - 94%) [LOIUTA 2] # FAT
################## | Éléments infectieux |
Non supprimé ! F:\Autorun.inf
Supprimé! G:\winfile.jpg
Supprimé! H:\ravmon.exe
################## | Registre |
Supprimé! HKCU\Software\10DPP6O2VE
################## | Mountpoints2 |
################## | Listing |
[06/08/2010 - 11:34:07 | SHD ] C:\$RECYCLE.BIN
[06/08/2010 - 01:52:21 | A | 1968] C:\Ad-Report-CLEAN[3].txt
[31/10/2008 - 15:42:17 | HD ] C:\ASUS.SYS
[18/09/2006 - 23:43:36 | A | 24] C:\autoexec.bat
[08/06/2010 - 20:17:50 | RASHD ] C:\Autorun.inf
[23/06/2010 - 00:58:12 | D ] C:\Bloc note
[16/04/2008 - 13:27:15 | SHD ] C:\Boot
[21/01/2008 - 04:24:42 | RASH | 333203] C:\bootmgr
[16/04/2008 - 13:27:17 | RAS | 8192] C:\BOOTSECT.BAK
[18/09/2006 - 23:43:37 | A | 10] C:\config.sys
[02/11/2006 - 15:02:03 | SHD ] C:\Documents and Settings
[04/05/2010 - 02:43:36 | SHD ] C:\found.000
[11/07/2010 - 05:57:28 | SHD ] C:\found.001
[06/08/2010 - 02:02:28 | ASH | 3220295680] C:\hiberfil.sys
[18/01/2010 - 20:47:45 | RASH | 0] C:\IO.SYS
[18/01/2010 - 20:47:45 | RASH | 0] C:\MSDOS.SYS
[31/10/2008 - 13:33:10 | RHD ] C:\MSOCache
[06/08/2010 - 02:02:26 | ASH | 3533873152] C:\pagefile.sys
[05/08/2010 - 17:36:15 | RD ] C:\Program Files
[05/08/2010 - 16:34:04 | HD ] C:\ProgramData
[04/08/2010 - 13:26:53 | SHD ] C:\System Volume Information
[06/08/2010 - 11:34:07 | D ] C:\UsbFix
[06/08/2010 - 11:27:20 | A | 2317] C:\UsbFix.txt
[25/12/2008 - 05:04:10 | RD ] C:\Users
[04/08/2010 - 13:46:36 | D ] C:\Windows
[05/08/2010 - 17:58:39 | D ] C:\_OTL
[06/08/2010 - 11:34:07 | SHD ] D:\$RECYCLE.BIN
[25/09/2009 - 17:39:17 | D ] D:\Architecture
[08/06/2010 - 20:17:50 | RASHD ] D:\Autorun.inf
[10/01/2010 - 18:11:08 | D ] D:\Conférences - Pavillon De L'Arsenal
[19/07/2010 - 20:32:37 | D ] D:\Films
[05/08/2010 - 17:34:11 | D ] D:\Musique
[02/10/2008 - 19:18:22 | A | 229921202] D:\Neufert.pdf
[04/08/2010 - 01:30:08 | RD ] D:\Pictures
[17/06/2009 - 20:06:50 | A | 7979088] D:\plan masse 2 500.pdf
[30/05/2010 - 15:32:56 | D ] D:\Program Files
[13/05/2009 - 23:50:12 | A | 598493] D:\pré rendu 2.pdf
[17/06/2009 - 22:31:16 | A | 17907983] D:\rendu a0 3.pdf
[25/09/2009 - 18:25:35 | D ] D:\Stage Juillet 2009
[31/10/2008 - 13:26:32 | SHD ] D:\System Volume Information
[27/06/2005 - 15:16:56 | R | 145] F:\autorun.inf
[11/10/2005 - 13:58:51 | R | 921600] F:\LaunchU3.exe
[12/10/2005 - 00:35:44 | R | 3046200] F:\LaunchPad.zip
[29/03/2006 - 13:08:32 | AH | 82] G:\._System Volume Information
[16/02/2009 - 19:12:34 | AH | 4096] G:\._.Trashes
[16/02/2009 - 19:12:34 | HD ] G:\.Trashes
[06/08/2010 - 01:45:26 | SHD ] G:\FOUND.000
[15/03/2010 - 11:39:10 | D ] G:\Photographies
[25/10/2008 - 18:33:56 | SHD ] G:\$RECYCLE.BIN
[16/02/2009 - 19:12:34 | HD ] G:\.Spotlight-V100
[17/06/2009 - 22:31:16 | A | 17907983] G:\rendu a0 3.pdf
[29/09/2009 - 10:19:36 | AH | 4096] G:\._Binder1.pdf
[24/02/2010 - 14:43:32 | D ] G:\Textures
[27/04/2010 - 12:35:56 | D ] G:\Musée 23.04.10
[15/04/2010 - 23:53:22 | D ] G:\Archicad 13frMAC
[31/05/2010 - 01:49:32 | D ] G:\BXL - Diner Presque Parfait
[21/06/2010 - 18:00:32 | D ] G:\DPP - Video
[17/06/2009 - 20:06:50 | A | 7979088] G:\plan masse 2 500.pdf
[07/03/2010 - 23:14:40 | D ] G:\Series
[28/10/2008 - 15:48:28 | SHD ] G:\System Volume Information
[22/06/2010 - 08:46:22 | D ] G:\Sylvie de merde
[30/07/2010 - 14:10:22 | D ] G:\Stage Juillet 2010
[21/07/2009 - 22:02:52 | D ] G:\Stage de Chantier - Olivia
[30/07/2009 - 12:14:48 | D ] G:\Stage Juillet 2009
[24/04/2010 - 19:02:08 | D ] G:\Music Tinmar
[24/04/2010 - 19:03:18 | D ] G:\Bruxelles
[24/04/2010 - 19:00:34 | D ] G:\Documentaire
[17/12/2008 - 19:23:24 | D ] G:\Nouveau dossier (2)
[15/01/2009 - 16:15:28 | D ] G:\ADOBE
[19/03/2010 - 18:45:16 | ASH | 55296] G:\Thumbs.db
[16/03/2009 - 19:54:52 | D ] G:\Films
[11/05/2009 - 16:20:48 | D ] G:\Architecture
[13/05/2009 - 23:31:36 | A | 1999382] G:\Pré rendu 1.pdf
[13/05/2009 - 23:50:12 | A | 598493] G:\pré rendu 2.pdf
[21/05/2009 - 13:38:24 | D ] G:\Fondation Beyeler (R.Piano)
[12/05/2008 - 18:34:30 | AH | 4096] H:\._.Trashes
[16/06/2010 - 10:20:46 | HD ] H:\System
[16/06/2010 - 10:55:40 | A | 49708] H:\Ruskin.pdf
[12/05/2008 - 18:34:30 | HD ] H:\.Trashes
[12/05/2008 - 18:34:32 | HD ] H:\.Spotlight-V100
[03/12/2006 - 15:49:00 | RHD ] H:\Application Data
[16/06/2010 - 10:55:48 | AH | 4096] H:\._Ruskin.pdf
[16/11/2009 - 15:04:40 | AH | 12292] H:\.DS_Store
[16/06/2010 - 10:20:46 | D ] H:\Documents
[16/11/2009 - 15:23:10 | AH | 47522] H:\._001.pdf
[11/10/2005 - 13:58:52 | RA | 921600] H:\LaunchU3.exe
[04/08/2010 - 14:35:36 | A | 1415820] H:\AD-R.exe
[16/11/2009 - 15:23:30 | AH | 47457] H:\._002.pdf
[10/06/2010 - 00:13:06 | AH | 4096] H:\._Rendu 28-05-2010.pdf
[01/08/2010 - 21:44:58 | A | 563091] H:\INT23260566 (1).pdf
[10/06/2010 - 00:13:30 | AH | 4096] H:\._AFFICHAGE.pdf
[04/08/2010 - 16:06:50 | A | 36317320] H:\7.0.0.543e-sdsetup-Revenue(207).exe
[05/08/2010 - 16:03:42 | A | 67436] H:\rapport05.08.10.Txt
[01/08/2010 - 22:32:42 | AH | 4096] H:\._The.Lovely.Bones.FRENCH.REPACK.1CD.BDRip.XviD-Ateam-Share.By.OrAnGeS.avi
[05/08/2010 - 16:42:14 | A | 2061] H:\mbam-log-2010-08-05 (16-40-36).txt
[06/05/2010 - 13:21:24 | AH | 4096] H:\._Morphologie et Densité Urbaine - Marseille.pdf
[05/08/2010 - 16:35:38 | A | 5724] H:\Ad-Report-CLEAN[1].txt
[12/03/2010 - 15:24:52 | AH | 4096] H:\._logement imprim.pdf
################## | Vaccin |
C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
G:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
H:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
################## | Upload |
Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_PC-DE-LOULOU.zip
http://chiquitine.changelog.fr/Sample/Upload.php
Merci de votre contribution.
################## | E.O.F |
Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 5 invités
.: Nous contacter :: Flux RSS :: Données personnelles :. |