|
|
Auteur
|
Message
|
1
|
|
|
|
Bonjour a tous ,
ayant vu le nombre de personnes ayant le meem probleme que moi (a savoir le spam intepestif de fenetre web CID), je me permet de faire mon rapport ici :
J'appel donc une ame charitable pour me renseigner sur la suite 
Merci
-->Message édité par Anthony10 le 16/04/2007 20:03:26<--
|
|
|
|
|
Bonjour BobHemson,
Télécharge HijackThis que tu placeras dans un répertoire dédié tel C:\Program Files\HijackThis.
Double-clique sur HijackThis.exe pour lancer l'outil.
Ferme toutes les applications en cours sauf HijackThis.
Clique sur le bouton Do a system scan and save a logfile.
Un rapport sera généré puis le Bloc-notes l'affichera.
Dans le Bloc-notes, clique en haut sur le menu Edition puis choisis Sélectionner tout.
Dans le Bloc-notes, clique en haut sur le menu Edition puis choisis Copier.
Dans ta future réponse, colle le rapport de HijackThis.
A suivre,
En cas de difficulté, voir le tutorial d'HijackThis sur le site de Malekal_Morte
|
|
|
|
|
Et voila me rapport (désolé pour le retard)
Logfile of HijackThis v1.99.1
Scan saved at 11:57:00, on 18/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\progra~1\intern~1\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.packardbell.fr/center
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par Planetis
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SurfairyHlp Class - {E0B9B5FE-B66E-4FB0-A1D9-726F0E743CFD} - C:\Program Files\Surfairy\SurfairyPP.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MOREMIXINFOWARN] C:\Documents and Settings\All Users\Application Data\Defy user more mix\Play Send.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [new stop] C:\DOCUME~1\PCHOME~1\APPLIC~1\MESSHT~1\encfast.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?f1e08fca627c4303a99e9066fa5f0a56
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?f1e08fca627c4303a99e9066fa5f0a56
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Suggestions - {2223664C-1942-4276-9A2D-E8D8F547C5D2} - res://EffiPeled (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=www.packardbell.fr/center
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
Merci pour la suite
|
|
|
|
|
Bonjour,
Télécharge ComboFix.exe (par sUBs) sur ton Bureau
Double clique ComboFix.exe et suis les invites.
Lorsque le scan sera fini, un rapport apparaîtra.
Copie/colle ce rapport dans ta prochaine réponse.
|
|
|
|
|
Et voila :
"PC Home" - 07-04-19 13:37:31 Service Pack 2
ComboFix 07-04-19.1V - Running from: C:\Documents and Settings\PC Home\Bureau\
((((((((((((((((((((((((((((((( Files Created from 2007-03-19 to 2007-04-19 ))))))))))))))))))))))))))))))))))
2007-04-17 17:01 <REP> d-------- C:\Program Files\MESS HTM EGGS
2007-04-16 20:58 <REP> d--h----- C:\WINDOWS\$hf_mig$
2007-04-16 20:58 <REP> d-------- C:\WINDOWS\system32\PreInstall
2007-04-15 20:25 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Defy user more mix
2007-04-15 20:23 <REP> d-------- C:\DOCUME~1\LOCALS~1\Menu D‚marrer
2007-04-15 20:20 <REP> d-------- C:\WINDOWS\Prefetch
2007-04-15 19:57 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-04-15 19:54 <REP> d-------- C:\WINDOWS\provisioning
2007-04-15 19:54 <REP> d-------- C:\WINDOWS\peernet
2007-04-15 19:49 <REP> d-------- C:\WINDOWS\ServicePackFiles
2007-04-15 19:42 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-04-15 19:37 <REP> d-------- C:\WINDOWS\EHome
2007-04-15 17:11 <REP> d-------- C:\Program Files\Teamspeak2_RC2
2007-04-15 17:11 <REP> d-------- C:\DOCUME~1\PCHOME~1\APPLIC~1\teamspeak2
2007-04-15 14:19 <REP> d-------- C:\Program Files\uTorrent
2007-04-15 14:19 <REP> d-------- C:\DOCUME~1\PCHOME~1\APPLIC~1\uTorrent
2007-04-13 14:31 4,569 --------- C:\WINDOWS\system32\secupd.dat
2007-04-13 14:31 11,776 --------- C:\WINDOWS\system32\spnpinst.exe
2007-03-31 21:27 <REP> d-------- C:\Program Files\Brochette Online V2
2007-03-31 14:37 <REP> d-------- C:\Downloads
2007-03-31 14:28 <REP> d-------- C:\Program Files\FlashGet
2007-03-30 15:37 <REP> d-------- C:\DOCUME~1\PCHOME~1\APPLIC~1\Screenshot Sender
2007-03-28 10:44 65,536 --a------ C:\WINDOWS\winmsgr.exe
2007-03-28 09:08 <REP> d---s---- C:\DOCUME~1\PCHOME~1\UserData
2007-03-24 16:07 <REP> d-------- C:\Program Files\Adverts
2007-03-24 16:07 <REP> d-------- C:\DOCUME~1\PCHOME~1\APPLIC~1\MESS HTM EGGS
2007-03-24 16:07 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Stop Settings New Bits
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-04-19 13:31 -------- d-------- C:\Program Files\emule
2007-04-19 13:31 -------- d-------- C:\Program Files\emule
2007-04-18 17:56 -------- d-------- C:\Program Files\steam
2007-04-18 17:56 -------- d-------- C:\Program Files\steam
2007-04-18 11:02 -------- d-------- C:\Program Files\silver-ro
2007-04-18 11:02 -------- d-------- C:\Program Files\silver-ro
2007-04-17 06:45 46106 --a------ C:\WINDOWS\system32\perfc00c.dat
2007-04-17 06:45 361558 --a------ C:\WINDOWS\system32\perfh00c.dat
2007-04-17 03:10 -------- d-------- C:\Program Files\messenger
2007-04-17 03:10 -------- d-------- C:\Program Files\messenger
2007-04-15 20:29 -------- d-------- C:\Program Files\msn messenger
2007-04-15 20:29 -------- d-------- C:\Program Files\msn messenger
2007-04-15 19:54 -------- d-------- C:\Program Files\movie maker
2007-04-15 19:54 -------- d-------- C:\Program Files\movie maker
2007-04-15 19:49 -------- d-------- C:\Program Files\windows nt
2007-04-15 19:49 -------- d-------- C:\Program Files\windows nt
2007-03-24 16:07 -------- d-------- C:\Program Files\messenger plus! live
2007-03-24 16:07 -------- d-------- C:\Program Files\messenger plus! live
2007-03-17 15:44 293376 --a------ C:\WINDOWS\system32\winsrv.dll
2007-03-08 17:37 578560 --a------ C:\WINDOWS\system32\user32.dll
2007-03-08 17:37 40960 --a------ C:\WINDOWS\system32\mf3216.dll
2007-03-08 17:37 281600 --a------ C:\WINDOWS\system32\gdi32.dll
2007-03-08 17:33 1843712 --a------ C:\WINDOWS\system32\win32k.sys
2007-02-24 11:59 -------- d---s---- C:\Program Files\xfire
2007-02-24 11:59 -------- d---s---- C:\Program Files\xfire
2007-02-05 22:19 185344 --a------ C:\WINDOWS\system32\upnphost.dll
2007-01-27 20:36 560102 --a------ C:\WINDOWS\revolution script cs uninstaller.exe
2007-01-19 13:53 51056 --a------ C:\WINDOWS\system32\sirenacm.dll
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} C:\Program Files\Windows Live Toolbar\msntb.dll
{E0B9B5FE-B66E-4FB0-A1D9-726F0E743CFD} C:\Program Files\Surfairy\SurfairyPP.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"MOREMIXINFOWARN"="C:\\Documents and Settings\\All Users\\Application Data\\Defy user more mix\\Play Send.exe"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"new stop"="C:\\DOCUME~1\\PCHOME~1\\APPLIC~1\\MESSHT~1\\encfast.exe"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EM_EXEC]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="EM_EXEC"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\MOUSEW~1\\SYSTEM\\EM_EXEC.EXE"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="hkcmd"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\System32\\hkcmd.exe"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="igfxtray"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\System32\\igfxtray.exe"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="dumprep 0 -k"
"hkey"="HKLM"
"command"="%systemroot%\\system32\\dumprep 0 -k"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MessengerPlus3]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MsgPlus"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\MessengerPlus! 3\\MsgPlus.exe\" /WinStart"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MoneyAgent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Money Express"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Microsoft Money\\System\\Money Express.exe\""
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MsnMsgr"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\new bits lies audio]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="01 part"
"hkey"="HKLM"
"command"="C:\\Documents and Settings\\All Users\\Application Data\\Stop Settings New Bits\\01 part.exe"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\new stop]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="encfast"
"hkey"="HKCU"
"command"="C:\\DOCUME~1\\PCHOME~1\\APPLIC~1\\MESSHT~1\\encfast.exe"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NvCpl"
"hkey"="HKLM"
"command"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NvMcTray"
"hkey"="HKLM"
"command"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvMcTray.dll,NvTaskbarInit"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="nwiz"
"hkey"="HKLM"
"command"="nwiz.exe /install"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"=""
"hkey"="HKCU"
"command"=""
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="jusched"
"hkey"="HKLM"
"command"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinMsg]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="winmsgr"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\winmsgr.exe"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOKIT]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Shell"
"hkey"="HKCU"
"command"="C:\\PROGRA~1\\Wanadoo\\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM="
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="GestMaj"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\Wanadoo\\GestMaj.exe TaskBarIcon.exe"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Watch"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\Wanadoo\\Watch.exe"
"inimapping"="0"
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\AACA224D90F1A001.job
C:\WINDOWS\tasks\SBRegReminder.job
C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
********************************************************************
catchme 0.2 W2K/XP/Vista - userland rootkit detector by Gmer, 17 October 2006
http://www.gmer.net
scanning hidden processes ...
scanning hidden services ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
********************************************************************
Completion time: 07-04-19 13:49:31
C:\ComboFix-quarantined-files.txt ... 07-04-19 13:49
Merci d'avance pour votre aide
|
|
|
|
|
Bonjour,
Télécharge NoLop (de Skate_Punk_21) sur ton Bureau.
Double-clique sur NoLop.exe pour le lancer.
Clique sur Search and Destroy.
Lorsque l'analyse est finie et si une infection est trouvée, un message apparaîtra pour redémarrer, clique sur OK.
Clique sur REBOOT
Un message apparaîtra au redémarrage.
Envoies dans ta future réponse le rapport C:\NoLop.log et un nouveau log HijackThis.
A suivre,
|
|
|
1
|
|
|
|
