plus de point de restauration systemeRésolu/Fermé

Question

Bonjour,
suite certainement à l'installation d'un jeu je suis très embetée.
mon antivirus ( avast )ne parait plus,je n'ai plus de connection,je ne peux plus ouvrir mes logiciels tels ccleaner ou spybot . j'aperçoit la page s'ouvrir mais elle disparait aussitot.
mon pc fait du bruit : le ventilateur s'en donne à coeur joie
je ne peux également faire de restauration système car je n'ai plus de point de restauration disponible.
j'ai du choper une belle saloperie mais la je seche et ne sait plus que faire.
Merci de votre aide

gégéfreu · Answer

je te conseil de réinstallé XP

calivero44 · Answer

bonsoir, voilà le résultat ComboFix 08-08-10.05 - VERO 2008-08-11 21:40:42.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1 036.18.602 [GMT 2:00] * CrÚation d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE R+CUP+RATION N' EST PAS INSTALL+E SUR CETTE MACHINE !![/b][/color] . ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))) )))))) )))))))) ))))))))))))))) . C:\WINDOWS\config.ini C:\WINDOWS\system32\drivers\downld C:\WINDOWS\system32\drivers\hldrrr.exe C:\WINDOWS\system32\drivers\mdelk.exe C:\WINDOWS\system32\drivers\srosa.sys C:\WINDOWS\system32\uninstall.exe E:\autorun.inf . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))) )))))) )))))))) )))))))))))))))) . #NOM? ((((((((((((((((((((((((( Files Created from 2008-07-11 t o 2008-08-11 ))))))) )))))) )))))))) )))))))))) . "2008-08-10 21:43 . 2008-08-10 22:48 d-------- C:\SDFi" x "2008-08-10 21:42 . 2008-08-10 21:43 d-------- C:\merd" e "2008-08-10 21:12 . 2008-08-10 21:12 d-------- C:\Prog" ram Files\SAGEM "2008-08-10 21:06 . 2005-06-17 10:26 114,688 --a------ C:\WI" NDOWS\system32\WLANUT L.dll "2008-08-10 12:03 . 2008-08-10 12:03 d-------- C:\Prog" ram Files\Malwarebyte s' Ant i-Malwar e "2008-08-10 12:03 . 2008-08-10 12:03 d-------- C:\Docu" ments and Settings\VE RO\App lication Data\Malwarebytes "2008-08-10 12:03 . 2008-08-10 12:03 d-------- C:\Docu" ments and Settings\Al l User s\Applic ation Data\Malwarebytes "2008-08-10 12:03 . 2008-07-30 20:07 38,472 --a------ C:\WIN" DOWS\system32\drivers \mbams wissarmy .sys "2008-08-10 12:03 . 2008-07-30 20:07 17,144 --a------ C:\WIN" DOWS\system32\drivers \mbam. sys "2008-08-07 22:13 . 2008-08-07 22:13 d-------- C:\Prog" ram Files\Trend Micro "2008-08-05 17:03 . 2008-08-05 17:03 d-------- C:\Temp" \3285RBT6 "2008-08-05 17:03 . 2008-08-05 17:03 d-------- C:\Temp" "2008-08-05 17:03 . 2008-08-05 18:38 d-------- C:\Prog" ram Files\PartyGaming "2008-07-30 12:16 . 2008-07-30 12:16 d-------- C:\Prog" ram Files\Cooking Aca demy . (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))) )))))) )))))))) ))))))))))))))))) . "2008-08-10 19:12 --------- d--h--w C:\Program Files\Install" Shield Installation I nforma tion "2008-08-10 10:07 --------- d-----w C:\Program Files\McDonal" dsFairies "2008-08-10 10:07 --------- d-----w C:\Program Files\McDonal" dsDragons "2008-08-05 21:12 --------- d-----w C:\Program Files\ewido a" nti-malware "2008-08-05 16:45 --------- d-----w C:\Program Files\Zylom G" ames "2008-08-04 21:17 --------- d-----w C:\Documents and Setting" s\VERO\Application Da ta\Zyl om "2008-08-03 12:42 --------- d-----w C:\Documents and Setting" s\VERO\Application Da ta\Win Butler "2008-07-29 20:32 --------- d---a-w C:\Documents and Setting" s\All Users\Applicati on Dat a\TEMP "2008-07-26 22:09 --------- d-----w C:\Documents and Setting" s\All Users\Applicati on Dat a\Fugazo "2008-06-25 16:47 30,144 ----a-w C:\Documents and Settings\V" ERO\Application Data\ wklnhs t.dat "2008-06-20 20:52 --------- d-----w C:\Program Files\DivX" "2008-06-20 10:44 360,960 ----a-w C:\WINDOWS\system32\driver" s cpip.sys "2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\driver" s\afd.sys "2008-06-20 09:32 225,920 ----a-w C:\WINDOWS\system32\driver" s cpip6.sys "2008-06-15 16:13 --------- d-----w C:\Program Files\Windows" Live Safety Center "2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\driver" s\bthport.sys "2008-06-11 20:27 --------- d-----w C:\Program Files\Turbo S" ubs "2008-06-11 20:24 --------- d-----w C:\Program Files\Alawar" "2008-03-05 21:10 0 ----a-w C:\Program Files emp01" "2007-01-09 21:17 87,608 ----a-w C:\Documents and Settings\V" ERO\Application Data\ ezpins t.exe "2007-01-09 21:17 47,360 ----a-w C:\Documents and Settings\V" ERO\Application Data\ pcouff in.sys "2006-06-11 20:09 774,144 ----a-w C:\Program Files\RngInters" titial.dll "2006-05-23 17:07 578 ----a-w C:\Program Files\INSTALL.LOG" "2006-04-21 20:42 35,080 ----a-w C:\Documents and Settings\V" ERO\Application Data\ GDIPFO NTCACHEV 1.DAT . ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))) )))))) )))))))) ))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersio n\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 1 4:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi on\Run] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2 006-04-17 15:57 15564 8] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVers ion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 1 4:00 15360] [hkey_local_machine\software\microsoft\windows\currentversi on\explorer\ShellExec uteHoo ks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "C:\Program Files \Windows Desktop Sear ch\MSN LNamespa ceMgr.dll" [2007-02-05 15:39 294400] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentve rsion\drivers32] "msacm.l3codecp"= l3codecp.acm "vidc.DIV3"= divxc32.dll "vidc.DIV4"= divxc32f.dll "vidc.X264"= x264vfw.dll "vidc.davc"= davcvfw.dll "vidc.hfyu"= huffyuv.dll "msacm.divxa32"= DivXa32.acm "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm "msacm.enc"= ITIG726.acm [HKLM\~\services\sharedaccess\parameters\firewallpolicy\sta ndardprofile\Authoriz edAppl ications \List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\CyberLink\PowerCinema\PowerCinema.exe "= "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" = "C:\Program Files\eMule\emule.exe"= "C:\Documents and Settings\VERO\Mes documents\telecharg ements\emule0.47c\e Mule0. 47c\emu le.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\InstantTouch\bin\CmCenterV2.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\Joost\xulrunner\tvprunner.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers \aswSP.sys [2008-07-1 9 16:3 5] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.s ys [2008-07-19 16:37] R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3x Hybrid.sys [2005-06-2 3 16:2 1] R3 SIS163u;SiS163 usb Wireless LAN Adapter Driver;C:\WINDOW S\system32\DRIVERS\si s163u. sys [200 5-06-20 09:12] R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVE RS\usbscan.sys [2004- 08-mars 23:58] R3 usbstor;Pilote de stockage de masse USB;C:\WINDOWS\syste m32\DRIVERS\USBSTOR.S YS [20 04/08/2005 14:00] S3 bfastfao;bfastfao;C:\DOCUME~1\VERO\LOCALS~1\Temp\bfastfa o.sys [] S3 Boonty Games;Boonty Games;C:\Program Files\Fichiers comm uns\BOONTY Shared\Ser vice\B oonty.ex e [2007-09-16 15:50] S4 ewido security suite driver;ewido security suite driver; C:\Program Files\ewid o anti #NOM? \guard.sys [2005-12-30 13:12] [HKEY_CURRENT_USER\software\microsoft\windows\currentversio n\explorer\mountpoint s2\M] \Shell\AutoRun\command - M:\LaunchU3.exe -a [HKEY_CURRENT_USER\software\microsoft\windows\currentversio n\explorer\mountpoint s2\{53 28233e-f c0c-11dc-b778-003005b251ba}] \Shell\AutoRun\command - E: ideiect.com \Shell\explore\Command - E: ideiect.com \Shell\open\Command - E: ideiect.com [HKEY_CURRENT_USER\software\microsoft\windows\currentversio n\explorer\mountpoint s2\{5d f90a6f-6 555-11dc-b6cb-003005b251ba}] \Shell\AutoRun\command - E:\LaunchU3.exe -a . Contents of the 'Scheduled Tasks' folder 2008-08-11 C:\WINDOWS\Tasks\User_Feed_Synchronization-{5B92 4472-2050-4BD9-9168-9 3F17EA 347E4}.j ob - C:\WINDOWS\system32\msfeedssync.exe [2006-10-17 12:58] . . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Documents and Settings\VERO\Applica tion Data\Mozilla\Fir efox\P rofiles\ rbfm1jbn.default\ FF -: plugin - C:\Documents and Settings\All Users\Applicat ion Data\Zylom\ZylomG amesPl ayer pz ylomgamesplayer.dll FF -: plugin - C:\Program Files\Mozilla Firefox\plugins pz ylomgamesplayer.dll FF -: plugin - C:\Program Files\Real\RealArcade\Plugins\Moz illa pracplug.dll *********************************************************** *************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware det ector by Gmer, http:/ /www.g mer.net Rootkit scan 2008-08-11 21:50:08 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 *********************************************************** *************** . ------------------------ Other Running Processes ---------- -------------- . C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv. exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.e xe C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTServic e\CLMLServer.exe C:\WINDOWS\system32\FTRTSVC.exe C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSe r.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG \MDM.EXE C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\searchindexer.exe C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSe r.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.ex e C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\searchprotocolhost.exe C:\WINDOWS\system32\searchfilterhost.exe C:\WINDOWS\system32\imapi.exe . *********************************************************** *************** . Completion time: 2008-08-11 21:58:07 - machine was rebooted ComboFix-quarantined-files.txt 2008-08-11 19:58:01 Pre-Run: 133,804,462,080 octets libres Post-Run: 134,328,770,560 octets libres "162 --- E O F --- 2008-08-02 20:47:24"

calivero44 · Answer

problème résolu,j'ai reformaté le pc entièrement.
un grand ménage fait du bien de temps en temps

Plus de point de restauration systeme

3 réponses

Discussions similaires

Newsletters