[XP] Impossible de démarrer le service Pare-feu Windows

[ZeDevil]

Je suis obligé de les desinstaller, je ne peux pas simplement les fermer ?

Sinon voilà le rapport que j'ai eu pour SDFix :

catchme 0.3.1333.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-01-02 18:33:02

Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

IPC error: 2 Le fichier spécifié est introuvable.

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\CfgD79C293C1ED61418462E24595C90D04]

"p0"="C:\Programmes\Alcohol Soft\Alcohol 120\"

"h0"=dword:00000000

"ujdew"=hex:52,2e,6d,d8,42,0f,a8,0e,3e,15,39,31,84,17,42,1e,f2,7c,ae,e8,8d,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]

"h0"=dword:00000001

"khjeh"=hex:13,74,3f,8f,b3,57,23,23,2d,be,e6,6a,73,60,dd,16,08,ca,b8,d2,b4,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]

"s1"=dword:e24a4f94

"s2"=dword:b0add1ff

"h0"=dword:00000003

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\CfgD79C293C1ED61418462E24595C90D04]

"h0"=dword:00000000

"ujdew"=hex:69,00,a0,a4,56,3f,ad,c7,46,10,77,ad,90,ad,a1,68,84,16,e2,66,eb,..

"p0"="C:\Programmes\Alcohol 120\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC000001]

"a0"=hex:20,01,00,00,75,62,59,08,ed,01,c7,3c,3d,9f,70,78,53,1c,16,60,0b,..

"hdf12"=hex:93,bc,13,81,ad,83,1b,a0,4e,76,31,13,41,ba,a1,cf,44,14,84,74,ff,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC000001\gdq0]

"hdf12"=hex:0e,e8,d2,36,8a,9d,b5,32,0e,be,7f,cc,46,64,72,3c,f6,7a,67,4f,70,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]

"h0"=dword:00000001

"khjeh"=hex:13,74,3f,8f,b3,57,23,23,2d,be,e6,6a,73,60,dd,16,08,ca,b8,d2,b4,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\CfgD79C293C1ED61418462E24595C90D04]

"h0"=dword:00000000

"ujdew"=hex:69,00,a0,a4,56,3f,ad,c7,46,10,77,ad,90,ad,a1,68,84,16,e2,66,eb,..

"p0"="C:\Programmes\Alcohol 120\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]

"p0"="C:\Programmes\DAEMON Tools Pro\"

"h0"=dword:00000002

"hdf12"=hex:c9,8f,ec,a3,e5,1b,a6,b5,3a,91,01,9e,50,2a,90,eb,56,bf,fd,94,f4,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC000001]

"a0"=hex:20,01,00,00,75,62,59,08,ed,01,c7,3c,3d,9f,70,78,53,1c,16,60,0b,..

"hdf12"=hex:93,bc,13,81,ad,83,1b,a0,4e,76,31,13,41,ba,a1,cf,44,14,84,74,ff,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC000001\gdq0]

"hdf12"=hex:0e,e8,d2,36,8a,9d,b5,32,0e,be,7f,cc,46,64,72,3c,f6,7a,67,4f,70,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]

"h0"=dword:00000001

"khjeh"=hex:13,74,3f,8f,b3,57,23,23,2d,be,e6,6a,73,60,dd,16,08,ca,b8,d2,b4,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\CfgD79C293C1ED61418462E24595C90D04]

"h0"=dword:00000000

"ujdew"=hex:69,00,a0,a4,56,3f,ad,c7,46,10,77,ad,90,ad,a1,68,84,16,e2,66,eb,..

"p0"="C:\Programmes\Alcohol 120\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]

"p0"="C:\Programmes\DAEMON Tools Pro\"

"h0"=dword:00000002

"hdf12"=hex:c9,8f,ec,a3,e5,1b,a6,b5,3a,91,01,9e,50,2a,90,eb,56,bf,fd,94,f4,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC000001]

"a0"=hex:20,01,00,00,75,62,59,08,ed,01,c7,3c,3d,9f,70,78,53,1c,16,60,0b,..

"hdf12"=hex:93,bc,13,81,ad,83,1b,a0,4e,76,31,13,41,ba,a1,cf,44,14,84,74,ff,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC000001\gdq0]

"hdf12"=hex:0e,e8,d2,36,8a,9d,b5,32,0e,be,7f,cc,46,64,72,3c,f6,7a,67,4f,70,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]

"h0"=dword:00000001

"khjeh"=hex:13,74,3f,8f,b3,57,23,23,2d,be,e6,6a,73,60,dd,16,08,ca,b8,d2,b4,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully

hidden processes: 0

hidden services: 0

hidden files: 4

[snooky]

Non , il faut les désinstaller .

Passe Clean , option 1 et poste le rapport créé :

http://mickael.barroux.free.fr/securite/clean.php

[ZeDevil]

Voilà le rapport pour Clean :

03/01/2008 a 10:50:00,03

*** Recherche des fichiers dans C:

*** Recherche des fichiers dans C:\WINDOWS\

*** Recherche des fichiers dans C:\WINDOWS\system32

*** Recherche des fichiers dans C:\Program Files

"C:\Program Files\AskTBar\" FOUND

*** Fin du rapport !

[snooky]

Relance Clean , option 2 .

[ZeDevil]

Rapport :

Rapport clean par Malekal_morte - http://www.malekal.com

Script execute en mode sans echec 03/01/2008 a 13:23:16,42

Microsoft Windows XP [version 5.1.2600]

*** Suppression des fichiers dans C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32

*** Suppression des fichiers dans C:\Program Files

tentative de suppression de "C:\Program Files\AskTBar\"

*** Suppression des clefs du registre effectuee..

*** Fin du rapport !

[snooky]

Si tu as désinstallé ZA , Kaspersky et TuneUP , poste un nouveau rapport Hijackthis .

[ZeDevil]

Non, je n'ai pas eu le temps aujourd'hui.

J'ai desinstallé TuneUp tout à l'heure, mais avant de desinstaller Kaspersky, je voulais faire une analyse complete, et elle n'est pas encore fini.

Je pense demain ca sera bon !

Qu'est ce que ca aporte de les desinstaller ?