Infecté par crypt .xpack.gen - Page 6

Précédent
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  2. jojo
     
    ComboFix 09-07-09.08 - m 10/07/2009 19:48.2.2 - NTFSx86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.786 [GMT 2:00]
    Lancé depuis: c:\documents and settings\m\Bureau\ComboFix.exe
    Commutateurs utilisés :: c:\documents and settings\m\Bureau\CFScript.txt
    AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
    AV: VirusKeeper 2009 Pro antivirus *On-access scanning enabled* (Updated) {165EE528-D666-4745-B14E-AA998BBEC191}
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\Installer\13b5685.msi

    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_TMCOMM
    -------\Service_tmcomm

    ((((((((((((((((((((((((((((( Fichiers créés du 2009-06-10 au 2009-07-10 ))))))))))))))))))))))))))))))))))))
    .

    2009-07-10 11:58 . 2009-07-10 11:58 -------- d-----w- C:\_OTM
    2009-07-07 17:44 . 2009-06-24 19:02 299008 ----a-w- c:\windows\system32\TubeFinder.exe
    2009-07-07 17:44 . 2009-06-19 17:51 9728 ----a-w- c:\windows\system32\PCCLPFR.DLL
    2009-07-07 17:44 . 2009-07-07 19:12 -------- d-----w- c:\program files\Free FLV Converter
    2009-06-30 22:00 . 2009-06-30 22:00 -------- d-----w- c:\documents and settings\m\Application Data\Canneverbe_Limited
    2009-06-30 22:00 . 2009-06-30 22:00 -------- d-----w- c:\program files\CDBurnerXP
    2009-06-29 09:51 . 2009-06-29 09:51 -------- d-----w- c:\documents and settings\m\Application Data\Apple Computer
    2009-06-27 19:25 . 2009-06-27 19:25 -------- d-sh--w- c:\documents and settings\m\IECompatCache
    2009-06-27 19:24 . 2009-06-27 19:24 -------- d-sh--w- c:\documents and settings\m\PrivacIE
    2009-06-27 17:20 . 2009-06-27 17:20 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
    2009-06-26 23:10 . 2009-06-26 23:10 -------- d-sh--w- c:\documents and settings\m\IETldCache
    2009-06-26 23:08 . 2009-06-02 10:12 102912 -c----w- c:\windows\system32\dllcache\iecompat.dll
    2009-06-26 23:08 . 2009-06-26 23:08 -------- d-----w- c:\windows\ie8updates
    2009-06-26 23:08 . 2009-04-30 21:16 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
    2009-06-26 23:08 . 2009-04-30 21:16 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
    2009-06-26 23:05 . 2009-06-26 23:08 -------- dc-h--w- c:\windows\ie8
    2009-06-23 23:00 . 2009-06-23 23:00 152576 ----a-w- c:\documents and settings\m\Application Data\Sun\Java\jre1.6.0_14\lzma.dll
    2009-06-23 21:43 . 2009-06-23 21:44 -------- d-----w- c:\program files\QuickTime
    2009-06-23 21:43 . 2009-06-23 21:43 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
    2009-06-23 21:42 . 2009-06-23 21:42 -------- d-----w- c:\program files\Apple Software Update
    2009-06-23 21:42 . 2009-06-23 21:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
    2009-06-23 21:32 . 2009-06-23 21:32 -------- d-----w- c:\documents and settings\m\Local Settings\Application Data\Apple
    2009-06-23 21:13 . 2009-06-23 21:13 -------- d-----w- c:\documents and settings\m\Local Settings\Application Data\Apple Computer
    2009-06-19 21:40 . 2009-06-19 21:40 -------- d-----w- c:\program files\ASFTOAVI
    2009-06-19 21:33 . 2009-06-19 21:33 -------- d-----w- c:\program files\AsfTools 3.1
    2009-06-18 01:32 . 2009-06-18 01:32 -------- d-----w- c:\program files\Free iPod Video Converter
    2009-06-16 18:51 . 2008-05-30 12:19 507400 ----a-w- c:\windows\system32\XAudio2_1.dll
    2009-06-16 18:51 . 2008-05-30 12:17 65032 ----a-w- c:\windows\system32\XAPOFX1_0.dll
    2009-06-16 18:51 . 2008-05-30 12:18 238088 ----a-w- c:\windows\system32\xactengine3_1.dll
    2009-06-16 18:51 . 2008-05-30 12:17 25608 ----a-w- c:\windows\system32\X3DAudio1_4.dll
    2009-06-16 18:51 . 2008-05-30 12:11 467984 ----a-w- c:\windows\system32\d3dx10_38.dll
    2009-06-16 18:51 . 2008-05-30 12:11 1491992 ----a-w- c:\windows\system32\D3DCompiler_38.dll
    2009-06-16 18:51 . 2008-05-30 12:11 3850760 ----a-w- c:\windows\system32\D3DX9_38.dll
    2009-06-16 18:50 . 2009-06-16 18:50 -------- d-----w- c:\windows\Logs
    2009-06-12 19:31 . 2009-06-12 19:31 -------- d-----w- c:\documents and settings\m\Application Data\Grisoft
    2009-06-12 19:31 . 2007-05-30 12:10 10872 ----a-w- c:\windows\system32\drivers\AvgAsCln.sys
    2009-06-12 19:31 . 2009-06-12 19:31 -------- d-----w- c:\documents and settings\All Users\Application Data\Grisoft
    2009-06-11 17:58 . 2009-06-11 17:58 -------- d-----w- c:\program files\NVIDIA Corporation
    2009-06-11 17:52 . 2008-07-29 10:33 446464 ----a-w- c:\windows\system32\nvunrm.exe
    2009-06-10 23:30 . 2009-06-11 00:00 -------- d-----w- C:\FindyKill
    2009-06-10 22:26 . 2009-06-10 23:16 -------- d-----w- C:\UsbFix

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-07-10 18:00 . 2004-08-05 12:00 77468 ----a-w- c:\windows\system32\perfc00C.dat
    2009-07-10 18:00 . 2004-08-05 12:00 473864 ----a-w- c:\windows\system32\perfh00C.dat
    2009-07-10 16:51 . 2008-04-25 18:02 -------- d-----w- c:\documents and settings\m\Application Data\Skype
    2009-07-10 13:35 . 2008-04-20 13:29 -------- d-----w- c:\program files\Steam
    2009-07-10 12:43 . 2008-04-25 18:03 -------- d-----w- c:\documents and settings\m\Application Data\skypePM
    2009-07-04 18:33 . 2008-07-21 17:36 -------- d-----w- c:\documents and settings\m\Application Data\dvdcss
    2009-06-30 22:32 . 2008-04-20 12:08 -------- d-----w- c:\program files\eMule
    2009-06-23 23:00 . 2008-04-21 03:38 -------- d-----w- c:\program files\Java
    2009-06-19 20:36 . 2008-08-09 16:14 -------- d-----w- c:\documents and settings\m\Application Data\VSO
    2009-06-19 20:34 . 2009-03-14 13:08 -------- d-----w- c:\program files\Lx_cats
    2009-06-17 23:05 . 2009-03-20 11:11 -------- d-----w- c:\program files\Lexmark 2300 Series
    2009-06-17 19:03 . 2008-11-22 23:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2009-06-16 18:51 . 2009-05-16 19:32 -------- d-----w- c:\program files\Electronic Arts
    2009-06-11 16:45 . 2008-05-16 19:59 -------- d-----w- c:\program files\ma-config.com
    2009-06-11 16:45 . 2008-05-16 19:59 -------- d-----w- c:\documents and settings\All Users\Application Data\ma-config.com
    2009-06-09 20:55 . 2009-04-12 18:45 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2009-06-04 11:50 . 2009-06-04 11:50 -------- d-----w- c:\program files\FireFly Studios
    2009-06-04 11:50 . 2009-06-04 11:50 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-05-26 11:20 . 2009-04-12 18:45 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-05-26 11:19 . 2009-04-12 18:45 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
    2009-05-23 14:03 . 2008-04-20 02:29 20136 ----a-w- c:\documents and settings\m\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-05-21 09:33 . 2008-12-10 14:17 410984 ----a-w- c:\windows\system32\deploytk.dll
    2009-05-17 14:21 . 2009-05-17 14:21 -------- d-----w- c:\program files\Fichiers communs\Logitech
    2009-05-16 20:11 . 2009-05-16 20:11 -------- d--h--r- c:\documents and settings\m\Application Data\SecuROM
    2009-05-16 20:11 . 2009-05-16 20:11 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
    2009-05-16 19:47 . 2009-05-16 19:47 -------- d-----w- c:\program files\Avira
    2009-05-16 19:47 . 2009-05-16 19:47 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
    2009-05-14 22:47 . 2009-01-23 21:34 -------- d-----w- c:\documents and settings\m\Application Data\AVS4YOU
    2009-05-14 22:47 . 2009-05-14 22:46 -------- d-----w- c:\program files\AVS4YOU
    2009-05-14 22:46 . 2008-07-21 17:51 -------- d-----w- c:\program files\Fichiers communs\AVSMedia
    2009-05-14 21:02 . 2009-05-14 21:02 -------- d-----w- c:\program files\IVCsoft
    2009-05-13 05:04 . 2004-08-05 12:00 915456 ----a-w- c:\windows\system32\wininet.dll
    2009-05-08 23:14 . 2007-06-22 10:34 1418120 ----a-w- c:\windows\system32\wdfcoinstaller01005.dll
    2009-05-07 15:33 . 2004-08-05 12:00 348672 ----a-w- c:\windows\system32\localspl.dll
    2009-05-04 13:07 . 2009-05-14 22:33 2298680 ----a-w- c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
    2009-05-04 09:54 . 2003-02-21 03:42 348160 ----a-w- c:\windows\system32\msvcr71.dll
    2009-05-04 09:54 . 2003-03-18 19:14 499712 ----a-w- c:\windows\system32\msvcp71.dll
    2009-04-30 22:31 . 2009-04-30 22:31 1505824 ----a-w- c:\windows\system32\nvcpluir.dll
    2009-04-30 22:30 . 2009-04-30 22:30 1194528 ----a-w- c:\windows\system32\nvcplui.exe
    2009-04-30 20:02 . 2009-04-30 20:02 663552 ----a-w- c:\windows\system32\nvcuvid.dll
    2009-04-30 20:02 . 2009-04-30 20:02 1579630 ----a-w- c:\windows\system32\nvdata.bin
    2009-04-30 20:02 . 2009-04-30 20:02 1314816 ----a-w- c:\windows\system32\nvcuvenc.dll
    2009-04-30 20:02 . 2008-04-20 02:32 457248 ----a-w- c:\windows\system32\nvudisp.exe
    2009-04-28 20:01 . 2009-04-28 19:48 123994 ----a-w- c:\documents and settings\m\Application Data\TVU networks\TVU AutoUpgrade\TVUPlayer2.4.5.1.exe
    2009-04-26 22:42 . 2008-04-20 02:31 457248 ----a-w- c:\windows\system32\NVUNINST.EXE
    2009-04-19 19:50 . 2004-08-05 12:00 1847296 ----a-w- c:\windows\system32\win32k.sys
    2009-04-15 14:53 . 2004-08-05 12:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll
    .

    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-27 68856]
    "Steam"="c:\program files\steam\steam.exe" [2009-06-10 1217784]
    "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-04-23 22058792]
    "Google Update"="c:\documents and settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-03-24 133104]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2008-02-13 564496]
    "LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-02-13 2196240]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
    "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-05-04 198160]
    "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-16 13680640]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-16 86016]
    "!AVG Anti-Spyware"="c:\program files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 6731312]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-21 148888]
    "LXCGCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2005-07-20 73728]
    "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-11-22 16858112]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

    c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    BTTray.lnk - c:\program files\WIDCOMM\Logiciel Bluetooth\BTTray.exe [2003-9-19 503869]
    Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
    Pinnacle Scheduler.lnk - c:\program files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe [2008-11-29 237568]
    Utilitaire r‚seau pour SAGEM Wi-Fi 11g USB adapter.lnk - c:\program files\Utilitaire r‚seau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe [2008-5-29 925696]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
    @="Service"

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AVG Anti-Spyware Guard]
    @="Service"

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
    @=""

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\eMule\\emule.exe"=
    "c:\\Program Files\\Steam\\steamapps\\royjeremy\\counter-strike source\\hl2.exe"=
    "c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Civilization4.exe"=
    "c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword.exe"=
    "c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword_PitBoss.exe"=
    "c:\\Program Files\\Steam\\steamapps\\royjeremy\\counter-strike\\hl.exe"=
    "c:\\Program Files\\Steam\\steamapps\\killin jack\\counter-strike source\\hl2.exe"=
    "c:\\Program Files\\Steam\\steamapps\\killin jack\\counter-strike\\hl.exe"=
    "c:\\Program Files\\Steam\\steamapps\\panchovillaetzapata\\counter-strike source\\hl2.exe"=
    "c:\\WINDOWS\\system32\\dpvsetup.exe"=
    "c:\\Program Files\\Steam\\steamapps\\killin jack\\day of defeat\\hl.exe"=
    "c:\\Program Files\\Steam\\steamapps\\panchovillaetzapata\\day of defeat source\\hl2.exe"=
    "c:\\Program Files\\SopCast\\SopCast.exe"=
    "c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
    "c:\\Program Files\\TVAnts\\Tvants.exe"=
    "c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
    "c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
    "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe"=

    R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [16/05/2009 21:47 108289]
    R3 pctvvbi;PCTVVBI;c:\windows\system32\drivers\pctvvbi.sys [29/11/2008 15:21 6400]
    S2 vkservice;VirusKeeper antivirus/antispyware;c:\program files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe --> c:\program files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe [?]
    S3 Brndis;External USB Cable Modem;c:\windows\system32\drivers\Brndis.sys [20/04/2008 04:52 16512]
    S3 fbxusb;Carte réseau virtuelle FreeBox USB (32 bits);c:\windows\system32\drivers\fbxusb32.sys [02/07/2008 13:45 31128]
    S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [29/05/2009 17:13 234864]
    S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;c:\windows\system32\drivers\WlanBZXP.sys [29/05/2008 01:54 402432]
    S3 ZDCndis5;ZDCndis5 Protocol Driver;\??\c:\windows\system32\ZDCndis5.SYS --> c:\windows\system32\ZDCndis5.SYS [?]

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
    "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
    .
    Contenu du dossier 'Tâches planifiées'

    2009-06-23 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

    2009-07-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1844237615-2052111302-725345543-1004Core.job
    - c:\documents and settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-03-24 08:38]

    2009-07-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1844237615-2052111302-725345543-1004UA.job
    - c:\documents and settings\m\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-03-24 08:38]
    .
    - - - - ORPHELINS SUPPRIMES - - - -

    SafeBoot-AVG Anti-Spyware Driver

    .
    ------- Examen supplémentaire -------
    .
    uDefault_Search_URL = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
    IE: Envoyer à &Bluetooth - c:\program files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
    LSP: %SYSTEMROOT%\system32\nvLsp.dll
    DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    FF - ProfilePath - c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/firefox
    FF - plugin: c:\documents and settings\m\Application Data\Mozilla\Firefox\Profiles\bupj6usf.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
    FF - plugin: c:\documents and settings\m\Local Settings\Application Data\Google\Update\1.2.183.7\npGoogleOneClick8.dll
    FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
    FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
    FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
    FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
    FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

    ---- PARAMETRES FIREFOX ----
    FF - user.js: yahoo.homepage.dontask - true.

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-07-10 20:18
    Windows 5.1.2600 Service Pack 3 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    LXCGCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------

    [HKEY_USERS\S-1-5-21-1844237615-2052111302-725345543-1004\Software\SecuROM\License information*]
    "datasecu"=hex:6a,c6,8d,21,b7,ed,7a,ff,10,71,05,cd,b9,3b,3c,54,81,37,f2,d7,20,
    6b,86,92,f3,ee,50,a0,b0,16,6f,be,ca,6d,2c,d5,e7,8c,c0,0e,a7,5f,69,9d,2e,92,\
    "rkeysecu"=hex:92,d1,d0,90,45,bd,3e,ee,74,8c,f8,88,91,bc,15,69
    .
    --------------------- DLLs chargées dans les processus actifs ---------------------

    - - - - - - - > 'lsass.exe'(864)
    c:\windows\system32\nvLsp.dll

    - - - - - - - > 'explorer.exe'(6264)
    c:\windows\TEMP\logishrd\LVPrcInj01.dll
    c:\windows\system32\eappprxy.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\btncopy.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\windows\system32\nvsvc32.exe
    c:\program files\Lavasoft\Ad-Aware\aawservice.exe
    c:\program files\Avira\AntiVir Desktop\avguard.exe
    c:\program files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    c:\program files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    c:\program files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    c:\program files\CDBurnerXP\NMSAccessU.exe
    c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
    c:\program files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
    c:\windows\system32\rundll32.exe
    c:\windows\system32\rundll32.exe
    c:\program files\Fichiers communs\LogiShrd\LQCVFX\COCIManager.exe
    c:\program files\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter\WLANUTL.exe
    c:\program files\Skype\Plugin Manager\skypePM.exe
    .
    **************************************************************************
    .
    Heure de fin: 2009-07-10 20:22 - La machine a redémarré
    ComboFix-quarantined-files.txt 2009-07-10 18:21

    Avant-CF: 12 736 528 384 octets libres
    Après-CF: 12 641 189 888 octets libres

    269 --- E O F --- 2009-07-10 13:13
    0
  4. gen-hackman
     
    =hello

    fort possible tu devrais la faire verifier
    0
Précédent
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6

Discussions similaires

Comment décrypter (ouvrir) un fichier .crypt14 Whatsapp
questionuser -
jordane45 -

5 réponses
Comment récupérer des fichiers crypt14 supprimes accident ?
CharlesIII -
Charlesiii -

4 réponses
Comment récupérer mes fichiers msg.db.crypt effacés
RommelMax -
RommelMax -

2 réponses
Dechiffrer un fichier db.crypt
fabie54 -
Utilisateur anonyme -

15 réponses
Infecte par un virus
sapard -
seb77150 -

3 réponses