[LOGICIEL] ouverture des .exe

newmember · le 15 janvier 2009

Bonjour,

je n'arrive plus a ouvrir mes .exe , c'est l'enfer !

Dans "outil/option de dossier/type de fichier" je clique sur nouveau, je met exe je l'associe a "application" je ferme mais il ne veut qd meme pas les ouvrir !

2C.LiryC · le 15 janvier 2009

Bonsoir,

Ca me semble un peu chaud comme situation (pour retrouver un fonctionnement normal) mais, sait-on jamais... :keskidit:

La restauration système ne peut résoudre ce soucis ?

Que donne un démarrage en Mode sans Echec ? Même symptôme ?

Et en créant une nouvelle session (ça permet d'avoir tous le paramètres "utilisateur" par défaut) ?

snooky · le 15 janvier 2009

Ca sent l'infection ...

Lance ce fix : http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

Tape msconfig dans Exécuter , va à l'onglet Démarrage et décoche tout.

Redémarre le pc .

Lance ensuite ComboFix , puis poste le rapport créé ( n'installe pas la console de récupération pour le moment )

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

2C.LiryC · le 15 janvier 2009

Ca sent l'infection ...

:transpi:

Je préférais que ce soit toi qui le dise :craint: .

newmember · le 16 janvier 2009

voila, si ca peut vous aider ...

ComboFix 09-01-16.02 - arnaud 2009-01-17 0:12:57.1 - NTFSx86

Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.2047.1628 [GMT 1:00]

Lancé depuis: c:\documents and settings\arnaud.UNICORNI-AD6F3F\Bureau\ComboFix.exe

AV: ESET NOD32 antivirus system 2.70 *On-access scanning disabled* (Outdated)

* Un nouveau point de restauration a été créé

* Resident AV is active

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\program files\Fichiers communs\PagingSYS.dll

c:\users\Arnaud\AppData\Roaming\drivers\downld

c:\users\Arnaud\AppData\Roaming\drivers\downld\100324.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\102508.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\102882.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\103116.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\104286.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\104770.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\121321.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\122476.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\122944.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\128139.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\170711.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\171226.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\172381.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\173176.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\173301.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\173395.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\174689.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\175454.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\175563.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\179011.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\181054.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\181507.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\181881.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\188152.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\190212.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\191023.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\191662.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\192396.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\193113.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\193363.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\193378.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\193410.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\193893.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\193987.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\194970.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\195781.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\196358.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\207918.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\208464.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\209353.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\209790.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\215281.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\216451.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\216856.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\218463.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\219415.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\219852.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\249773.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\254390.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\263111.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\265030.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\265825.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\265888.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\266714.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\268852.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\271020.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\272798.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\280895.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\282346.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\282829.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\283703.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\284577.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\285091.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\288726.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\290692.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\291113.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\294295.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\295294.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\295715.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\301144.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\302953.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\303359.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\307009.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\312657.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\313468.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\318366.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\319193.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\319256.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\320301.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\320316.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\329115.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\334637.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\335355.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\336104.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\336572.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\336946.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\337492.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\337773.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\338459.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\338537.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\338958.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\340877.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\342094.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\342203.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\343092.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\344107.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\344231.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\349520.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\349957.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\350549.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\352921.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\360502.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\360783.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\361594.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\361859.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\362281.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\362577.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\362827.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\363310.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\363591.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\364465.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\365603.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\366087.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\373497.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\378146.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\378895.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\378988.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\387834.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\389253.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\390080.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\392888.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\399643.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\401640.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\401671.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\402154.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\403886.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\404307.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\404370.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\404978.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\407271.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\408176.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\408675.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\409533.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\409627.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\410064.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\410501.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\423901.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\425430.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\425991.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\426771.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\426865.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\427707.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\428238.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\435929.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\438706.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\439142.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\452122.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\453042.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\453136.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\459422.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\460561.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\461326.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\486270.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\487159.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\487300.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\499484.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\502775.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\503649.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\503727.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\510045.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\526690.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\528609.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\529061.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\55380.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\553819.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\581977.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\58313.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\583584.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\583818.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\60497.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\61152.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\626624.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\627514.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\627654.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\680460.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\681193.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\681256.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\69638.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\70652.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\72368.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\726637.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\728087.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\728571.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\72930.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\729523.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\730459.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\731020.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\74693.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\754077.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\755263.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\755762.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\764592.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\766682.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\767119.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\818771.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\833185.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\833825.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\833981.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\84817.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\88982.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\90527.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\91088.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\92461.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\98140.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\98187.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\99388.exe

c:\users\Arnaud\AppData\Roaming\drivers\downld\99793.exe

c:\users\Arnaud\AppData\Roaming\drivers\srosa.sys

c:\users\Arnaud\AppData\Roaming\drivers\srosa2.sys

c:\users\Arnaud\AppData\Roaming\drivers\winupgro.exe

.

((((((((((((((((((((((((((((( Fichiers créés du 2008-12-16 au 2009-01-16 ))))))))))))))))))))))))))))))))))))

.

2009-01-16 09:43 . 2009-01-16 19:54 <REP> d-------- c:\windowso\system32\CatRoot_bak

2009-01-15 17:03 . 2008-06-14 18:59 272,768 --------- c:\windowso\system32\drivers\bthport.sys

2009-01-15 17:03 . 2008-06-14 18:59 272,768 -----c--- c:\windowso\system32\dllcache\bthport.sys

2009-01-14 23:19 . 2009-01-16 03:02 <REP> d--h----- c:\windowso\$hf_mig$

2009-01-14 22:38 . 2009-01-14 22:42 <REP> d-------- c:\documents and settings\arnaud.UNICORNI-AD6F3F\Application Data\U3

2009-01-14 20:45 . 2008-08-14 14:44 2,182,400 -----c--- c:\windowso\system32\dllcache\ntoskrnl.exe

2009-01-14 20:45 . 2008-08-14 14:44 2,138,112 -----c--- c:\windowso\system32\dllcache\ntkrnlmp.exe

2009-01-14 20:45 . 2008-08-14 14:44 2,059,776 -----c--- c:\windowso\system32\dllcache\ntkrnlpa.exe

2009-01-14 20:45 . 2008-08-14 14:44 2,017,792 -----c--- c:\windowso\system32\dllcache\ntkrpamp.exe

2009-01-14 20:45 . 2008-10-24 12:10 453,632 -----c--- c:\windowso\system32\dllcache\mrxsmb.sys

2009-01-14 19:03 . 2009-01-16 22:57 69 --a------ c:\windowso\NeroDigital.ini

2009-01-14 17:35 . 2009-01-14 19:05 <REP> d-------- c:\documents and settings\arnaud.UNICORNI-AD6F3F\Application Data\Ahead

2009-01-14 17:33 . 2009-01-14 17:33 <REP> d-------- c:\documents and settings\All Users.WINDOWSO\Application Data\Nero

2009-01-14 04:04 . 2004-08-04 01:39 58,496 --a------ c:\windowso\system32\drivers\redbook.sys

2009-01-14 04:04 . 2004-08-04 01:54 21,504 --a------ c:\windowso\system32\hidserv.dll

2009-01-14 04:04 . 2001-08-17 22:59 3,072 --a------ c:\windowso\system32\drivers\audstub.sys

2009-01-14 04:03 . 2004-08-04 01:54 77,312 --a------ c:\windowso\system32\usbui.dll

2009-01-14 04:03 . 2001-08-17 22:46 6,400 --a------ c:\windowso\system32\drivers\enum1394.sys

2009-01-14 04:01 . 2009-01-14 04:01 <REP> d--h----- c:\documents and settings\Default User.WINDOWSO\Voisinage réseau

2009-01-14 04:01 . 2009-01-14 04:01 <REP> d--h----- c:\documents and settings\Default User.WINDOWSO\Voisinage d'impression

2009-01-14 04:01 . 2009-01-14 03:05 <REP> d--h----- c:\documents and settings\Default User.WINDOWSO\Modèles

2009-01-14 04:01 . 2009-01-14 04:01 <REP> d-------- c:\documents and settings\Default User.WINDOWSO\Mes documents

2009-01-14 04:01 . 2009-01-14 04:01 <REP> dr------- c:\documents and settings\Default User.WINDOWSO\Menu Démarrer

2009-01-14 04:01 . 2009-01-14 03:09 <REP> d-------- c:\documents and settings\Default User.WINDOWSO\Favoris

2009-01-14 04:01 . 2009-01-14 04:01 <REP> d-------- c:\documents and settings\Default User.WINDOWSO\Bureau

2009-01-14 04:01 . 2009-01-14 04:01 <REP> d--h----- c:\documents and settings\All Users.WINDOWSO\Modèles

2009-01-14 04:01 . 2009-01-14 03:10 <REP> dr------- c:\documents and settings\All Users.WINDOWSO\Menu Démarrer

2009-01-14 04:01 . 2009-01-14 04:01 <REP> d-------- c:\documents and settings\All Users.WINDOWSO\Favoris

2009-01-14 04:01 . 2009-01-14 03:06 <REP> dr------- c:\documents and settings\All Users.WINDOWSO\Documents

2009-01-14 04:01 . 2009-01-14 21:46 <REP> d-------- c:\documents and settings\All Users.WINDOWSO\Bureau

2009-01-14 04:01 . 2001-08-24 13:00 176,157 --a--c--- c:\windowso\system32\dllcache\dgrpsetu.dll

2009-01-14 04:00 . 2004-08-04 00:45 1,897,552 --a--c--- c:\windowso\system32\dllcache\NT5.CAT

2008-12-23 11:38 . 2008-12-23 11:38 <REP> d-------- c:\users\Arnaud\AppData\Roaming\MessengerGadget

2008-12-22 21:30 . 2009-01-17 00:13 <REP> d--h----- c:\users\Arnaud\AppData\Roaming\drivers

2008-12-18 22:24 . 2002-01-01 01:34 <REP> d-------- c:\documents and settings\Arnaud\Tracing

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-01-16 23:15 --------- d-----w c:\program files\Common Files

2009-01-16 23:12 --------- d-----w c:\program files\ESET

2009-01-16 22:16 --------- d-----w c:\program files\eMule

2009-01-16 02:09 --------- d-----w c:\program files\Steam

2009-01-15 18:59 --------- d-----w c:\documents and settings\All Users.WINDOWSO\Application Data\Microsoft Help

2009-01-14 16:33 --------- d-----w c:\program files\Nero

2009-01-14 02:44 315,392 ----a-w c:\windowso\HideWin.exe

2009-01-14 02:44 --------- d-----w c:\program files\Realtek

2009-01-14 02:42 512,096 ----a-w c:\windowso\system32\drivers\amon.sys

2009-01-14 02:42 15,424 ----a-w c:\windowso\system32\drivers\nod32drv.sys

2009-01-14 02:09 --------- d-----w c:\program files\microsoft frontpage

2009-01-14 02:07 --------- d-----w c:\program files\Services en ligne

2009-01-13 22:33 --------- d-----w c:\program files\MSBuild

2009-01-13 22:09 --------- d-----w c:\documents and settings\arnaud.UNICORNI-AD6F3F\Application Data\vlc

2009-01-13 20:43 --------- d-----w c:\documents and settings\All Users.WINDOWSO\Application Data\nView_Profiles

2009-01-13 20:32 --------- d-----w c:\documents and settings\arnaud.UNICORNI-AD6F3F\Application Data\Logitech

2009-01-13 20:31 0 ---ha-w c:\windowso\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf

2009-01-13 20:31 0 ---ha-w c:\windowso\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf

2009-01-13 20:31 0 ---ha-w c:\windowso\system32\drivers\Msft_Kernel_LHidFilt_01005.Wdf

2009-01-13 20:31 --------- d-----w c:\documents and settings\All Users.WINDOWSO\Application Data\LogiShrd

2009-01-13 20:30 --------- d--h--w c:\program files\InstallShield Installation Information

2009-01-13 20:30 --------- d-----w c:\program files\Logitech

2009-01-13 20:30 --------- d-----w c:\documents and settings\All Users.WINDOWSO\Application Data\Logitech

2009-01-13 20:15 --------- d-----w c:\program files\ma-config.com

2009-01-13 20:15 --------- d-----w c:\documents and settings\All Users.WINDOWSO\Application Data\ma-config.com

2009-01-13 20:06 --------- d-----w c:\program files\Alice

2008-12-25 23:08 6,301,344 ----a-w c:\windowso\system32\drivers\nv4_mini.sys

2008-12-18 21:46 --------- d-----w c:\program files\Valve

2008-12-18 21:15 --------- d-----w c:\program files\Windows Live

2008-12-18 21:15 --------- d-----w c:\program files\Microsoft Silverlight

2008-12-18 21:15 --------- d-----w c:\program files\Microsoft Office Outlook Connector

2008-12-18 21:15 --------- d-----w c:\program files\Microsoft

2008-12-18 21:14 --------- d-----w c:\program files\Microsoft Sync Framework

2008-12-18 21:14 --------- d-----w c:\program files\Microsoft SQL Server Compact Edition

2008-12-18 21:12 --------- d-----w c:\program files\Windows Live SkyDrive

2008-12-18 21:03 --------- d-----w c:\program files\Google

2008-12-13 02:00 --------- d-----w c:\program files\Intel

2008-12-13 01:56 --------- d-----w c:\users\Arnaud\AppData\Roaming\ACD Systems

2008-12-13 01:55 --------- d-----w c:\users\Arnaud\AppData\Roaming\Notepad++

2008-12-13 01:34 --------- d-----w c:\program files\AGEIA Technologies

2008-12-13 00:57 --------- d-----w c:\program files\TechCity Solutions

2008-12-13 00:27 --------- d-----w c:\users\Arnaud\AppData\Roaming\U3

2008-12-13 00:14 --------- d-----w c:\users\Arnaud\AppData\Roaming\vlc

2008-12-13 00:14 --------- d-----w c:\program files\VideoLAN

2008-12-11 11:57 333,184 ----a-w c:\windowso\system32\drivers\srv.sys

2008-01-19 20:00 174 --sh--w c:\program files\desktop.ini

1601-01-01 00:00 0 ------w c:\program files\Fichiers communs\

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"AliceSAV"="c:\program files\TechCity Solutions\AliceSAV\AliceAgent.exe" [2005-12-16 81408]

"MSConfig"="c:\windowso\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2004-08-03 160768]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]

2008-11-07 16:41 72208 c:\program files\Fichiers communs\logishrd\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

@=""

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWSO^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk]

path=c:\documents and settings\All Users.WINDOWSO\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk

backup=c:\windowso\pss\Logitech SetPoint.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

--a------ 2008-06-12 02:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

--a------ 2006-12-23 18:05 143360 c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

--a------ 2004-08-03 23:54 15360 c:\windowso\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eMuleAutoStart]

--a------ 2008-08-01 18:41 5480448 c:\program files\eMule\emule.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

--a------ 2006-01-12 15:40 155648 c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nod32kui]

--a------ 2009-01-14 03:42 949376 c:\program files\ESET\nod32kui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]

--a------ 2008-12-26 00:08 13680640 c:\windowso\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]

--a------ 2008-12-26 00:08 86016 c:\windowso\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]

--a------ 2009-01-13 23:38 1410296 c:\program files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\{0228e555-4f9c-4e35-a3ec-b109a192b4c2}]

--a------ 2005-07-15 22:48 479232 c:\program files\Google\Gmail Notifier\gnotify.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]

--a------ 2005-05-03 18:43 69632 c:\windowso\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]

--a------ 2008-10-10 14:46 69632 c:\windowso\KHALMNPR.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]

--a------ 2008-12-26 00:08 1657376 c:\windowso\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]

--a------ 2007-12-20 16:47 16860672 c:\windowso\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\eMule\\emule.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Steam\\steamapps\\vuache74520\\half-life 2 deathmatch\\hl2.exe"=

R1 nod32drv;nod32drv;c:\windowso\system32\drivers\nod32drv.sys [2009-01-14 15424]

R3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver;c:\windowso\system32\drivers\usb8023.sys [2004-08-03 12672]

R4 LBeepKE;LBeepKE;c:\windowso\system32\drivers\LBeepKE.sys [2009-01-13 10384]

S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-12-19 195752]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]

\Shell\AutoRun\command - F:\LaunchU3.exe -a

.

- - - - ORPHELINS SUPPRIMES - - - -

MSConfigStartUp-Bluetooth Connection Assistant - LBTWIZ.EXE

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.aliceadsl.fr

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

LSP: c:\windowso\system32\imon.dll

FF - ProfilePath - c:\documents and settings\arnaud.UNICORNI-AD6F3F\Application Data\Mozilla\Firefox\Profiles\ifg20xe9.default\

FF - prefs.js: browser.startup.homepage - hxxp://mail.google.com/mail/?shva=1#inbox

FF - plugin: c:\documents and settings\arnaud.UNICORNI-AD6F3F\Application Data\Mozilla\Firefox\Profiles\ifg20xe9.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll

FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll

.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-01-17 00:16:09

Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

AliceSAV = c:\program files\TechCity Solutions\AliceSAV\AliceAgent.exe????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

Recherche de fichiers cachés ...

Scan terminé avec succès

Fichiers cachés: 0

**************************************************************************

.

--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(720)

c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll

c:\program files\fichiers communs\logishrd\bluetooth\LBTServ.dll

- - - - - - - > 'lsass.exe'(776)

c:\windowso\system32\imon.dll

c:\program files\Eset\pr_imon.dll

.

------------------------ Autres processus actifs ------------------------

.

c:\program files\Common Files\Logishrd\Bluetooth\LBTServ.exe

c:\program files\Common Files\LightScribe\LSSrvc.exe

c:\program files\ESET\nod32krn.exe

c:\windowso\system32\nvsvc32.exe

c:\program files\Logitech\SetPoint\LBTWiz.exe

.

**************************************************************************

.

Heure de fin: 2009-01-17 0:17:15 - La machine a redémarré

ComboFix-quarantined-files.txt 2009-01-16 23:17:12

Avant-CF: 452'896'436'224 octets libres

Après-CF: 452,924,497,920 octets libres

416 --- E O F --- 2009-01-16 02:02:21

newmember · le 16 janvier 2009

En fait je viens de remarquer que si je fais un "propriété" / "ouvrir avec" le fichier ne s'appelle plus x.exe, mais x.exe.egisenc ...

bizarre non ?

crocodudule · le 16 janvier 2009

Si j'ai bon ton problème de sexexution aurait pour origine l'érection sur ton système du virus Win32.Gpcode.ak .

J'ai en revanche du mal comprendre un truc, si l'installation d'un logiciel est fraiche tu peux encore le sexecuté c'est ça?

Si oui, installer antivir et lancer un scan de la machine, tu n'auras pas a rebooter après l'installation de cette antivirus.

http://www.clubic.com/telecharger-fiche108...sonal-free.html

(puis après http://www.clubic.com/telecharger-fiche215...ti-malware.html )

Si en revanche tu peux vraiment rien lancer ca va se compliquer (une restauration ou alors passer par une distrib. linux et passer clam).

ps: c'est mal barré pour récupérer tes exe, désinfecter c'est une chose, récupérer les exe cryptés...

http://www.viruslist.com/fr/viruses/encycl...?virusid=313444

(l'ancienne version utilisait une clef de 660 bit, la nouvelle fait 1024 (RSA-1024), si c'est vraiment ce virus, il faut espérer que seuls les exe sont touchés et pas tes données, dans le cas contraire tu vas devoir faire chauffer tes sauvegardes).

newmember · le 18 janvier 2009

Si j'ai bon ton problème de sexexution aurait pour origine l'érection sur ton système du virus Win32.Gpcode.ak .
J'ai en revanche du mal comprendre un truc, si l'installation d'un logiciel est fraiche tu peux encore le sexecuté c'est ça?

Si oui, installer antivir et lancer un scan de la machine, tu n'auras pas a rebooter après l'installation de cette antivirus.

http://www.clubic.com/telecharger-fiche108...sonal-free.html

(puis après http://www.clubic.com/telecharger-fiche215...ti-malware.html )

Si en revanche tu peux vraiment rien lancer ca va se compliquer (une restauration ou alors passer par une distrib. linux et passer clam).

ps: c'est mal barré pour récupérer tes exe, désinfecter c'est une chose, récupérer les exe cryptés...

http://www.viruslist.com/fr/viruses/encycl...?virusid=313444

(l'ancienne version utilisait une clef de 660 bit, la nouvelle fait 1024 (RSA-1024), si c'est vraiment ce virus, il faut espérer que seuls les exe sont touchés et pas tes données, dans le cas contraire tu vas devoir faire chauffer tes sauvegardes).

Waouhhh

bon, c'est bizarre, j'arrive a executer les exe autres que ceux touchés par la vérrue

en fait juste un dossier a été touché sur mon DD ext. a l'interieur de ce dossier par contre,

c'est la cata, il n'y a pas que les exe, mais quasi tous les fichiers, rar, avi, jpg, txt ...

tous les fichiers sont en TXTENX JPGENX AVIENX RARENX EXEENX ...

par contre aucun autre dossier n'est touché sur ce DD ni ailleurs.

Alors j'ai fait Avira antivir et antimalware, RAS pour ce dernier, il n'a rien trouvé, voici le rapport:

Malwarebytes' Anti-Malware 1.33

Version de la base de données: 1663

Windows 5.1.2600 Service Pack 2

18.01.2009 09:52:00

mbam-log-2009-01-18 (09-52-00).txt

Type de recherche: Examen complet (C:\|F:\|)

Eléments examinés: 129714

Temps écoulé: 1 hour(s), 1 minute(s), 55 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

Processus mémoire infecté(s):