rapport de combofixFermé

Question

Bonjour, voila le rapport de combofix de mon pc et merci12-24.01 - Administrateur 2008-12-26 0:41:06.4 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.446.180 [GMT 13:00] Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé . ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-25 au 2008-12-25 )))))))))))))))))))))))))))))))))))) . 2008-12-25 01:29 . 2008-12-25 01:29 d-------- c:\documents and settings\Administrateur\Application Data\DivX 2008-12-23 23:36 . 2008-12-23 23:36 d-------- c:\program files\Avira 2008-12-23 16:16 . 2008-12-25 02:23 d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab 2008-12-23 16:15 . 2008-12-23 16:15 d-------- C:\KAV 2008-12-18 17:01 . 2008-12-18 17:01 d--h----- c:\windows\PIF 2008-12-18 02:22 . 2008-12-18 02:22 d-------- c:\program files\aljazeera news 2008-12-17 23:25 . 2008-12-17 23:25 508 --a------ c:\windows\system32\%LocalXml% 2008-12-16 01:58 . 2008-12-24 18:16 d-------- C:\WinAVI MP4 Converter 2008-12-15 23:44 . 2008-12-15 23:44 d-------- C:\ConvertTemp 2008-12-15 23:15 . 2008-12-15 23:15 33 --a------ c:\windows\Multimedia manager.INI 2008-12-14 15:07 . 2008-12-14 15:07 d-------- c:\documents and settings\All Users\Application Data\Bluetooth 2008-12-14 05:27 . 2006-05-03 22:53 174,592 --a------ c:\windows\system32\framedyn.dll 2008-12-14 05:27 . 2005-08-30 01:49 94,000 --a------ c:\windows\system32\drivers\ssm_mdm.sys 2008-12-14 05:27 . 2005-08-30 01:47 58,320 --a------ c:\windows\system32\drivers\ssm_bus.sys 2008-12-14 05:27 . 2005-08-30 01:49 8,336 --a------ c:\windows\system32\drivers\ssm_mdfl.sys 2008-12-14 05:27 . 2005-08-30 01:49 6,176 --a------ c:\windows\system32\drivers\ssm_cmnt.sys 2008-12-14 05:27 . 2005-08-30 01:49 6,176 --a------ c:\windows\system32\drivers\ssm_cm.sys 2008-12-14 05:27 . 2005-08-30 01:47 5,840 --a------ c:\windows\system32\drivers\ssm_whnt.sys 2008-12-14 05:27 . 2005-08-30 01:47 5,840 --a------ c:\windows\system32\drivers\ssm_wh.sys 2008-12-14 05:26 . 2008-12-14 05:27 d-------- c:\windows\system32\Samsung_USB_Drivers 2008-12-14 05:26 . 2005-08-30 17:59 94,000 --a------ c:\windows\system32\drivers\ss_mdm.sys 2008-12-14 05:26 . 2005-08-30 17:57 58,320 --a------ c:\windows\system32\drivers\ss_bus.sys 2008-12-14 05:26 . 2005-08-30 17:58 8,304 --a------ c:\windows\system32\drivers\ss_mdfl.sys 2008-12-14 05:26 . 2005-08-30 17:58 6,144 --a------ c:\windows\system32\drivers\ss_cmnt.sys 2008-12-14 05:26 . 2005-08-30 17:58 6,144 --a------ c:\windows\system32\drivers\ss_cm.sys 2008-12-14 05:26 . 2005-08-30 17:57 5,808 --a------ c:\windows\system32\drivers\ss_whnt.sys 2008-12-14 05:26 . 2005-08-30 17:57 5,808 --a------ c:\windows\system32\drivers\ss_wh.sys 2008-12-14 05:26 . 2005-08-28 20:51 766 --a------ c:\windows\system32\Uninstall.ico 2008-12-14 05:25 . 2008-12-14 05:25 d-------- c:\program files\Samsung 2008-12-14 05:25 . 2008-12-13 20:23 5,632 --a------ c:\windows\system32\drivers\StarOpen.sys 2008-12-13 20:27 . 2008-12-13 20:27 d-------- c:\documents and settings\Administrateur\Application Data\Samsung 2008-12-10 01:29 . 2008-12-14 01:09 d-------- c:\documents and settings\Administrateur\Application Data\IDM 2008-12-08 18:40 . 2008-12-11 06:47 230,424 --a------ C:\img2-001.raw 2008-11-30 00:48 . 2008-12-23 16:16 d-------- c:\program files\Kaspersky Lab 2008-11-28 10:31 . 2008-12-10 14:10 3,218 --a------ c:\windows\system32\PerfStringBackup.TMP 2008-11-25 14:22 . 2008-12-14 01:16 d-------- c:\program files\Internet Download Manager . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-25 11:45 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP 2008-12-24 12:44 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-23 10:36 --------- d-----w c:\documents and settings\All Users\Application Data\Avira 2008-12-20 10:30 --------- d-----w c:\program files\Google 2008-12-16 00:29 --------- d-----w c:\program files\QuickTime 2008-12-13 12:10 --------- d-----w c:\documents and settings\Administrateur\Application Data\DMCache 2008-12-10 01:17 --------- d-----w c:\program files\GamesBar 2008-12-02 03:46 --------- d-----w c:\program files\FLV Player 2008-11-11 19:06 --------- d-----w c:\program files\Trend Micro 2008-10-31 13:24 --------- d-----w c:\documents and settings\Administrateur\Application Data\Image Zone Express 2008-10-30 02:09 --------- d-----w c:\program files\CFWebAdvancedU 2008-10-28 18:59 --------- d-----w c:\program files\DAP 2008-10-28 18:59 --------- d-----w c:\documents and settings\All Users\Application Data\SpeedBit 2008-10-28 00:58 --------- d-----w c:\program files\Paprikari 2008-05-29 11:59 1,043,456 ----a-w c:\program files\FLV PlayerRCATSetup.exe 2008-05-29 11:54 411,248 ----a-w c:\program files\FLV PlayerRCSetup.exe 2008-02-12 00:06 1,525 ----a-w c:\program files\AvRack.lnk . ((((((((((((((((((((((((((((( snapshot@2008-11-28_14.45.55.17 ))))))))))))))))))))))))))))))))))))))))) . - 2005-10-20 20:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE + 2005-10-20 07:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE - 2005-10-20 20:02:28 163,328 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE + 2005-10-20 07:02:28 163,328 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE - 2000-08-31 08:00:00 89,504 ----a-w c:\windows\fdsv.exe + 2000-08-30 19:00:00 89,504 ----a-w c:\windows\fdsv.exe - 2000-08-31 08:00:00 80,412 ----a-w c:\windows\grep.exe + 2000-08-30 19:00:00 80,412 ----a-w c:\windows\grep.exe - 2000-08-31 08:00:00 28,672 ----a-w c:\windows\NIRCMD.exe + 2000-08-30 19:00:00 28,672 ----a-w c:\windows\NIRCMD.exe - 2000-08-31 08:00:00 98,816 ----a-w c:\windows\sed.exe + 2000-08-30 19:00:00 98,816 ----a-w c:\windows\sed.exe - 2000-08-31 08:00:00 161,792 ----a-w c:\windows\SWREG.exe + 2000-08-30 19:00:00 161,792 ----a-w c:\windows\SWREG.exe - 2000-08-31 08:00:00 136,704 ----a-w c:\windows\SWSC.exe + 2000-08-30 19:00:00 136,704 ----a-w c:\windows\SWSC.exe - 2000-08-31 08:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe + 2000-08-30 19:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe - 2005-04-08 17:19:24 49,152 ----a-w c:\windows\system32\btfunc.dll + 2005-04-08 04:19:24 49,152 ----a-w c:\windows\system32\btfunc.dll - 2004-09-21 18:18:40 7,680 ----a-w c:\windows\system32\btinstall.dll + 2004-09-21 05:18:40 7,680 ----a-w c:\windows\system32\btinstall.dll - 2008-11-28 12:05:02 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat + 2008-12-23 08:31:50 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat - 2008-11-28 12:05:02 32,768 ----a-w c:\windows\system32\config\systemprofile\Historique\History.IE5\index.dat + 2008-12-23 08:31:50 32,768 ----a-w c:\windows\system32\config\systemprofile\Historique\History.IE5\index.dat - 2008-11-28 12:05:02 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2008-12-23 08:31:50 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2008-07-25 08:34:54 81,920 ----a-w c:\windows\system32\dpl100.dll + 2008-07-25 08:34:46 294,912 ----a-w c:\windows\system32\dpu10.dll + 2008-07-25 08:34:46 294,912 ----a-w c:\windows\system32\dpu11.dll + 2008-07-25 08:34:50 53,248 ----a-w c:\windows\system32\dpuGUI10.dll + 2008-07-25 08:34:46 593,920 ----a-w c:\windows\system32\dpuGUI11.dll + 2008-07-25 08:34:46 344,064 ----a-w c:\windows\system32\dpus11.dll + 2008-07-25 08:34:46 57,344 ----a-w c:\windows\system32\dpv11.dll + 2008-01-21 05:12:56 41,792 ----a-w c:\windows\system32\drivers\avgntdd.sys + 2008-01-21 05:11:28 22,336 ----a-w c:\windows\system32\drivers\avgntmgr.sys + 2008-03-04 00:28:53 79,424 ----a-w c:\windows\system32\drivers\avipbb.sys - 2004-09-21 18:18:36 148,830 ----a-w c:\windows\system32\drivers\bcbthub.sys + 2004-09-21 05:18:36 148,830 ----a-w c:\windows\system32\drivers\bcbthub.sys - 2005-05-31 15:40:20 20,480 ----a-w c:\windows\system32\drivers\blueletaudio.sys + 2005-05-31 02:40:20 20,480 ----a-w c:\windows\system32\drivers\blueletaudio.sys - 2005-05-31 09:42:28 23,000 ----a-w c:\windows\system32\drivers\btcusb.sys + 2005-05-30 20:42:28 23,000 ----a-w c:\windows\system32\drivers\btcusb.sys - 2005-04-30 14:50:10 28,271 ----a-w c:\windows\system32\drivers\BTHidMgr.sys + 2005-04-30 01:50:10 28,271 ----a-w c:\windows\system32\drivers\BTHidMgr.sys - 2005-04-30 14:48:58 10,804 ----a-w c:\windows\system32\drivers\BtNetDrv.sys + 2005-04-30 01:48:58 10,804 ----a-w c:\windows\system32\drivers\BtNetDrv.sys - 2004-12-16 16:32:54 13,304 ----a-w c:\windows\system32\drivers\BTNetFilter.sys + 2004-12-16 03:32:54 13,304 ----a-w c:\windows\system32\drivers\BTNetFilter.sys + 2008-07-23 16:50:48 9,336 ------w c:\windows\system32\drivers\cdr4_xp.sys + 2008-07-23 16:50:48 9,464 ------w c:\windows\system32\drivers\cdralw2k.sys - 2004-08-03 23:08:00 60,288 ----a-w c:\windows\system32\drivers\drmk.sys + 2004-08-03 10:08:00 60,288 ----a-w c:\windows\system32\drivers\drmk.sys - 2004-09-21 18:18:36 116,021 ----a-w c:\windows\system32\drivers\fw203x.sys + 2004-09-21 05:18:36 116,021 ----a-w c:\windows\system32\drivers\fw203x.sys - 2004-08-03 23:15:22 140,928 ----a-w c:\windows\system32\drivers\ks.sys + 2004-08-03 10:15:22 140,928 ----a-w c:\windows\system32\drivers\ks.sys - 2004-08-03 23:15:50 145,792 ----a-w c:\windows\system32\drivers\portcls.sys + 2004-08-03 10:15:50 145,792 ----a-w c:\windows\system32\drivers\portcls.sys + 2008-07-23 16:50:48 43,528 ------w c:\windows\system32\drivers\PxHelp20.sys + 2007-02-28 21:34:22 28,352 ----a-w c:\windows\system32\drivers\ssmdrv.sys - 2004-08-03 23:08:04 48,640 ----a-w c:\windows\system32\drivers\stream.sys + 2004-08-03 10:08:04 48,640 ----a-w c:\windows\system32\drivers\stream.sys - 2005-04-30 14:50:20 11,860 ----a-w c:\windows\system32\drivers\vbtenum.sys + 2005-04-30 01:50:20 11,860 ----a-w c:\windows\system32\drivers\vbtenum.sys - 2004-10-19 13:37:38 61,312 ----a-w c:\windows\system32\drivers\VComm.sys + 2004-10-19 00:37:38 61,312 ----a-w c:\windows\system32\drivers\VComm.sys - 2005-03-25 17:18:48 82,148 ----a-w c:\windows\system32\drivers\VcommMgr.sys + 2005-03-25 04:18:48 82,148 ----a-w c:\windows\system32\drivers\VcommMgr.sys - 2004-08-04 00:54:44 54,784 ----a-w c:\windows\system32\drivers\vfwwdm32.dll + 2004-08-03 11:54:44 54,784 ----a-w c:\windows\system32\drivers\vfwwdm32.dll - 2005-04-30 14:50:24 11,736 ----a-w c:\windows\system32\drivers\VHIDMini.sys + 2005-04-30 01:50:24 11,736 ----a-w c:\windows\system32\drivers\VHIDMini.sys + 2008-07-25 08:34:52 196,608 ----a-w c:\windows\system32\dtu100.dll - 2004-08-04 00:54:30 47,616 ----a-w c:\windows\system32\iyuv_32.dll + 2004-08-03 11:54:30 47,616 ----a-w c:\windows\system32\iyuv_32.dll + 2008-07-23 16:48:40 1,044,480 ----a-w c:\windows\system32\libdivx.dll - 2004-08-04 00:55:04 294,912 ----a-w c:\windows\system32\msh263.drv + 2004-08-03 11:55:04 294,912 ----a-w c:\windows\system32\msh263.drv - 2008-08-13 22:59:40 348,160 ----a-w c:\windows\system32\msvcr71.dll + 2003-02-21 05:42:22 348,160 ----a-w c:\windows\system32\msvcr71.dll + 2003-04-18 03:46:22 1,233,920 ----a-w c:\windows\system32\msxml4.dll + 2003-04-18 03:29:26 82,432 ----a-w c:\windows\system32\msxml4r.dll - 2004-08-04 00:54:36 17,408 ----a-w c:\windows\system32\msyuv.dll + 2004-08-03 11:54:36 17,408 ----a-w c:\windows\system32\msyuv.dll - 2008-10-17 21:54:11 58,596 ----a-w c:\windows\system32\perfc009.dat + 2008-12-10 01:10:53 58,828 ----a-w c:\windows\system32\perfc009.dat - 2008-10-17 21:54:11 71,248 ----a-w c:\windows\system32\perfc00C.dat + 2008-12-10 01:10:53 71,544 ----a-w c:\windows\system32\perfc00C.dat - 2008-10-17 21:54:11 392,296 ----a-w c:\windows\system32\perfh009.dat + 2008-12-10 01:10:53 392,912 ----a-w c:\windows\system32\perfh009.dat - 2008-10-17 21:54:11 458,230 ----a-w c:\windows\system32\perfh00C.dat + 2008-12-10 01:10:53 458,986 ----a-w c:\windows\system32\perfh00C.dat + 2008-07-23 16:50:46 551,672 ------w c:\windows\system32\px.dll + 2008-07-23 16:50:46 129,784 ------w c:\windows\system32\pxafs.dll + 2008-07-23 16:50:46 66,296 ------w c:\windows\system32\pxcpya64.exe + 2008-07-23 16:50:48 120,056 ------w c:\windows\system32\pxcpyi64.exe + 2008-07-23 16:50:48 518,904 ------w c:\windows\system32\pxdrv.dll + 2008-07-23 16:50:48 72,440 ------w c:\windows\system32\pxhpinst.exe + 2008-07-23 16:50:46 64,760 ------w c:\windows\system32\pxinsa64.exe + 2008-07-23 16:50:46 118,520 ------w c:\windows\system32\pxinsi64.exe + 2008-07-23 16:50:50 187,128 ------w c:\windows\system32\pxmas.dll + 2008-07-23 16:50:48 1,628,920 ------w c:\windows\system32\pxsfs.dll + 2008-07-23 16:50:48 379,640 ------w c:\windows\system32\pxwave.dll + 2008-07-23 16:50:52 3,596,288 ----a-w c:\windows\system32\qt-dx331.dll + 2004-10-19 00:37:38 61,312 ----a-w c:\windows\system32\ReinstallBackups\[u]0/u014\DriverFiles\VComm.sys - 2008-10-28 00:30:19 573,376 ----a-w c:\windows\system32\Restore\rstrlog.dat + 2008-12-10 13:29:46 75,316 ----a-w c:\windows\system32\Restore\rstrlog.dat + 2005-08-30 04:57:18 58,320 ----a-w c:\windows\system32\Samsung_USB_Drivers\1\ss_bus.sys + 2005-08-30 04:58:50 6,144 ----a-w c:\windows\system32\Samsung_USB_Drivers\1\ss_cmnt.sys + 2005-08-30 04:58:56 8,304 ----a-w c:\windows\system32\Samsung_USB_Drivers\1\ss_mdfl.sys + 2005-08-30 04:59:00 94,000 ----a-w c:\windows\system32\Samsung_USB_Drivers\1\ss_mdm.sys + 2005-08-26 05:07:28 81,920 ----a-w c:\windows\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe + 2005-08-30 04:57:14 5,808 ----a-w c:\windows\system32\Samsung_USB_Drivers\1\ss_whnt.sys + 2005-08-29 12:47:38 58,320 ----a-w c:\windows\system32\Samsung_USB_Drivers\2\ssm_bus.sys + 2005-08-29 12:49:28 6,176 ----a-w c:\windows\system32\Samsung_USB_Drivers\2\ssm_cmnt.sys + 2005-08-29 12:49:34 8,336 ----a-w c:\windows\system32\Samsung_USB_Drivers\2\ssm_mdfl.sys + 2005-08-29 12:49:38 94,000 ----a-w c:\windows\system32\Samsung_USB_Drivers\2\ssm_mdm.sys + 2005-08-29 12:46:16 81,920 ----a-w c:\windows\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe + 2005-08-29 12:47:34 5,840 ----a-w c:\windows\system32\Samsung_USB_Drivers\2\ssm_whnt.sys + 2005-12-21 23:24:50 80,272 ----a-w c:\windows\system32\Samsung_USB_Drivers\3\sscdbus.sys + 2005-12-21 23:24:52 11,877 ----a-w c:\windows\system32\Samsung_USB_Drivers\3\sscdcmnt.sys + 2005-12-21 23:24:52 10,864 ----a-w c:\windows\system32\Samsung_USB_Drivers\3\sscdmdfl.sys + 2005-12-21 23:24:52 137,884 ----a-w c:\windows\system32\Samsung_USB_Drivers\3\sscdmdm.sys + 2005-12-21 23:24:52 108,003 ----a-w c:\windows\system32\Samsung_USB_Drivers\3\sscdserd.sys + 2005-12-21 23:24:52 65,536 ----a-w c:\windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe + 2005-12-21 23:24:54 11,188 ----a-w c:\windows\system32\Samsung_USB_Drivers\3\sscdwhnt.sys + 2006-07-20 23:12:56 66,672 ----a-w c:\windows\system32\Samsung_USB_Drivers\5\sssdbus.sys + 2006-07-20 23:15:26 6,208 ----a-w c:\windows\system32\Samsung_USB_Drivers\5\sssdcmnt.sys + 2006-07-20 23:13:48 9,232 ----a-w c:\windows\system32\Samsung_USB_Drivers\5\sssdmdfl.sys + 2006-07-20 23:13:52 100,304 ----a-w c:\windows\system32\Samsung_USB_Drivers\5\sssdmdm.sys + 2006-07-20 23:14:40 91,744 ----a-w c:\windows\system32\Samsung_USB_Drivers\5\sssdmgmt.sys + 2006-07-20 23:15:28 89,584 ----a-w c:\windows\system32\Samsung_USB_Drivers\5\sssdobex.sys + 2006-07-20 23:15:56 53,760 ----a-w c:\windows\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe + 2006-07-20 23:12:52 5,872 ----a-w c:\windows\system32\Samsung_USB_Drivers\5\sssdwhnt.sys + 2007-01-07 05:10:28 66,880 ----a-w c:\windows\system32\Samsung_USB_Drivers\6\ssbcbus.sys + 2007-01-07 05:11:16 6,272 ----a-w c:\windows\system32\Samsung_USB_Drivers\6\ssbccmnt.sys + 2007-01-07 05:11:18 9,360 ----a-w c:\windows\system32\Samsung_USB_Drivers\6\ssbcmdfl.sys + 2007-01-07 05:11:22 100,864 ----a-w c:\windows\system32\Samsung_USB_Drivers\6\ssbcmdm.sys + 2007-01-07 05:11:48 55,296 ----a-w c:\windows\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe + 2007-01-07 05:10:24 5,936 ----a-w c:\windows\system32\Samsung_USB_Drivers\6\ssbcwhnt.sys + 2008-07-23 16:48:40 200,704 ----a-w c:\windows\system32\ssldivx.dll - 2001-08-23 17:47:20 8,192 ----a-w c:\windows\system32\tsbyuv.dll + 2001-08-23 04:47:20 8,192 ----a-w c:\windows\system32\tsbyuv.dll + 2008-07-23 16:50:46 88,824 ------w c:\windows\system32\vxblock.dll - 2000-08-31 08:00:00 49,152 ----a-w c:\windows\VFIND.exe + 2000-08-30 19:00:00 49,152 ----a-w c:\windows\VFIND.exe - 2000-08-31 08:00:00 68,096 ----a-w c:\windows\zip.exe + 2000-08-30 19:00:00 68,096 ----a-w c:\windows\zip.exe . -- Instantané actualisé -- . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-10-30 39408] "DownloadAccelerator"="c:\program files\DAP\DAP.EXE" [2008-10-29 3061248] "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2008-06-14 5674352] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-09-02 282624] "snpstd3"="c:\windows\vsnpstd3.exe" [2005-09-05 339968] "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-08-14 185896] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792] "avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 262401] "VTTimer"="VTTimer.exe" [2005-03-08 c:\windows\system32\VTTimer.exe] "VTTrayp"="VTtrayp.exe" [2005-11-01 c:\windows\system32\VTTrayp.exe] "SoundMan"="SOUNDMAN.EXE" [2006-11-17 c:\windows\soundman.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\iPMS.exe] "Debugger"=dummy.dat [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\iPMS20.exe] "Debugger"=dummy.dat [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Authentication Packages REG_MULTI_SZ msv1_0 nwprovau [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^BlueSoleil.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\BlueSoleil.lnk backup=c:\windows\pss\BlueSoleil.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] --a------ 2004-08-04 11:54 15360 c:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DownloadAccelerator] --a------ 2008-10-29 07:59 3061248 c:\program files\DAP\DAP.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] --a------ 2006-02-19 13:41 49152 c:\program files\HP\HP Software Update\hpwuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] --a------ 2008-06-14 10:58 5674352 c:\program files\MSN Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2006-09-02 03:57 282624 c:\program files\QuickTime\qttask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3] --a------ 2005-09-05 20:55 339968 c:\windows\vsnpstd3.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] --a------ 2008-08-14 11:59 185896 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager] --a------ 2007-08-31 04:43 4670704 c:\progra~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent] --a------ 2004-08-04 11:55 110592 c:\windows\system32\bthprops.cpl [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] -ra------ 2006-11-17 17:42 577536 c:\windows\soundman.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer] --a------ 2005-03-08 15:33 53248 c:\windows\system32\VTTimer.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTrayp] --a------ 2005-11-01 16:15 163840 c:\windows\system32\VTTrayp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "BthServ"=2 (0x2) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "c:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"= "c:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"= "c:\Program Files\Yahoo!\Messenger\YServer.exe"= "c:\Program Files\DAP\DAP.exe"= "c:\Program Files\MSN Messenger\msnmsgr.exe"= "c:\Program Files\MSN Messenger\livecall.exe"= S3 xAntiArp;xAntiArpSpoof Service;c:\windows\system32\DRIVERS\xAntiArp.sys [] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b7c68066-c29e-11dd-916a-00030d000001}] \shelL\aUtOPLaY\CommAnd - F:\sjqkci.cmd \shelL\AutoRun\command - F:\sjqkci.cmd \shelL\exPloRe\coMMAnd - F:\sjqkci.cmd \shelL\OPEN\coMManD - F:\sjqkci.cmd [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ebe35734-8590-11dd-90ab-101111111111}] \Shell\AutoRun\command - F:\start.exe . . ------- Examen supplémentaire ------- . uStart Page = about:blank uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyServer = 202.114.66.175:80 uSearchURL,(Default) = hxxp://www.google.com/keyword/%s IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm IE: &Download with &DAP - c:\program files\DAP\dapextie.htm IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O16 -: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} - hxxp://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe FF - ProfilePath - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ntsh094q.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - prefs.js: browser.search.selectedEngine - Yahoo FF - prefs.js: browser.startup.homepage - hxxp://fr.msn.com/ FF - prefs.js: keyword.URL - hxxp://search.speedbit.com/searchresults.asp?src=default&q= FF - component: c:\program files\DAP\DAPFireFox\components\DAPFireFox.dll FF - plugin: c:\program files\Yahoo!\Shared\npYState.dll . . ------- Associations de fichier ------- . txtfile=c:\windows\notepad.exe %1 . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-26 00:45:09 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe c:\windows\system32\drivers\CDAC11BA.EXE c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE c:\windows\system32\HPZipm12.exe c:\windows\system32\wscntfy.exe . ************************************************************************** . Heure de fin: 2008-12-26 0:48:25 - La machine a redémarré ComboFix-quarantined-files.txt 2008-12-25 11:48:08 ComboFix2.txt 2008-11-28 14:48:08 ComboFix3.txt 2008-11-12 01:16:33 Avant-CF: 5 780 365 312 octets libres Après-CF: 5,806,927,872 octets libres 356

jet · Answer

salut,a present fait se si  pour recherche d infection si present
- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

mosaab20 · Answer

hoo mon dieu merci bko mon frere

Rapport de combofix

2 réponses

Discussions similaires

Newsletters