Bonjour, svp voici mon rapport combofix. je voudrais le faire examiner please help me. thanx
ComboFix 10-01-29.09 - Lançon 30/01/2010 18:52:17.1.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.1015.747 [GMT 1:00]
Lancé depuis: c:\documents and settings\Lançon\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\kmj.exe
D:\Autorun.inf
D:\kmj.exe
E:\kmj.exe
F:\kmj.exe
.
((((((((((((((((((((((((((((( Fichiers créés du 2009-12-28 au 2010-01-30 ))))))))))))))))))))))))))))))))))))
.
2010-01-30 16:17 . 2010-01-30 16:17 -------- d-----w- c:\program files\Fichiers communs\Adobe
2010-01-30 16:09 . 2009-09-10 13:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-30 16:09 . 2010-01-30 16:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-30 16:09 . 2010-01-30 16:09 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-01-30 16:09 . 2009-09-10 13:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-30 15:33 . 2010-01-30 15:48 -------- d-----w- c:\windows\system32\NtmsData
2010-01-29 13:40 . 2010-01-29 13:40 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-01-29 13:38 . 2010-01-29 13:38 -------- d-----w- c:\program files\Ontrack
2010-01-28 09:47 . 2010-01-28 09:47 63600 ----a-w- c:\documents and settings\Home\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-28 09:45 . 2010-01-28 09:45 -------- d-----w- c:\program files\Fichiers communs\Hewlett-Packard
2010-01-28 09:45 . 2010-01-28 09:45 -------- d-----w- c:\program files\Fichiers communs\HP
2010-01-28 09:44 . 2010-01-28 09:44 -------- dc----w- c:\windows\system32\DRVSTORE
2010-01-28 09:44 . 2010-01-28 09:44 -------- d-----w- c:\program files\HP
2010-01-28 09:42 . 2010-01-28 09:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Hewlett-Packard
2010-01-28 09:41 . 2007-11-08 14:52 271704 ----a-r- c:\windows\system32\hpzids01.dll
2010-01-28 09:41 . 2007-10-20 17:25 117760 ----a-w- c:\windows\system32\hpzll5mu.dll
2010-01-28 09:41 . 2007-10-20 17:21 278016 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpzpp5mu.dll
2010-01-28 09:24 . 2004-08-03 22:01 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys
2010-01-28 09:24 . 2004-08-03 22:01 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2010-01-28 09:23 . 2004-08-03 22:08 31616 -c--a-w- c:\windows\system32\dllcache\usbccgp.sys
2010-01-28 09:23 . 2004-08-03 22:08 31616 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2010-01-27 21:58 . 2010-01-30 16:03 -------- d-----w- c:\program files\trend micro
2010-01-27 21:58 . 2010-01-27 21:58 -------- d-----w- C:\rsit
2010-01-27 21:52 . 2008-09-01 08:44 12416 ----a-r- c:\windows\system32\drivers\netnnusb.sys
2010-01-27 21:43 . 2010-01-27 21:43 -------- d--h--w- c:\windows\msdownld.tmp
2010-01-27 21:40 . 2010-01-27 21:40 -------- d-----w- c:\program files\Beijing xinwei
2010-01-27 21:38 . 2009-01-07 17:21 26144 ----a-w- c:\windows\system32\spupdsvc.exe
2010-01-27 21:36 . 2010-01-27 21:42 -------- dc-h--w- c:\windows\ie8
2010-01-27 21:36 . 2010-01-27 21:41 -------- d-----w- c:\windows\system32\fr-FR
2010-01-27 20:39 . 2010-01-27 20:39 -------- d-----w- c:\program files\OfflineBible
2010-01-27 20:34 . 2009-03-30 09:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-01-27 20:34 . 2009-03-24 15:07 55640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-01-27 20:34 . 2009-02-13 11:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-01-27 20:34 . 2009-02-13 11:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-01-27 20:30 . 2010-01-27 20:30 -------- d-----r- C:\MSOCache
2010-01-27 18:52 . 2010-01-27 18:52 -------- d-----w- c:\program files\Avira
2010-01-27 18:52 . 2010-01-27 18:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2010-01-27 18:48 . 2004-08-03 22:08 26496 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2010-01-27 13:49 . 2010-01-27 13:49 -------- d-----w- C:\found.000
2010-01-27 12:35 . 2010-01-27 12:35 720896 ----a-w- c:\windows\iun6002.exe
2010-01-27 12:35 . 2010-01-27 12:35 -------- d-----w- c:\program files\CDImage GUI
2010-01-27 12:19 . 2003-06-19 00:31 18944 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\mdippr.dll
2010-01-27 12:19 . 2003-06-19 00:31 17920 ----a-w- c:\windows\system32\mdimon.dll
2010-01-27 12:16 . 2010-01-27 12:16 -------- d-----w- c:\program files\Microsoft.NET
2010-01-27 12:13 . 2010-01-28 09:57 -------- d-----w- c:\program files\Microsoft Works
2010-01-27 12:12 . 2010-01-28 09:55 -------- d-----w- c:\windows\SHELLNEW
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-30 15:38 . 2010-01-27 10:52 86331 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-29 13:37 . 2010-01-27 11:08 -------- d-----w- c:\program files\Fichiers communs\InstallShield
2010-01-27 21:40 . 2010-01-27 11:08 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-27 11:11 . 2001-10-02 18:18 48856 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-27 11:11 . 2001-10-02 18:18 368076 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-27 11:10 . 2010-01-27 11:10 -------- d-----w- c:\program files\CONEXANT
2010-01-27 11:08 . 2010-01-27 11:08 -------- d-----w- c:\program files\Analog Devices
2010-01-27 10:55 . 2010-01-27 10:55 -------- d-----w- c:\program files\microsoft frontpage
2010-01-27 10:51 . 2010-01-27 10:51 -------- d-----w- c:\program files\Services en ligne
2010-01-27 10:48 . 2010-01-27 10:48 21892 ----a-w- c:\windows\system32\emptyregdb.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 1388544]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-04-05 94208]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-04-05 77824]
"Persistence"="c:\windows\system32\igfxpers.exe" [2005-04-05 114688]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
Lancement rapide de Microsoft Office OneNote 2003.lnk - c:\program files\Microsoft Office\OFFICE11\ONENOTEM.EXE [2003-8-6 51776]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [27/01/2010 21:34 108289]
R3 XinweiIad;Xinwei Networks Modem;c:\windows\system32\drivers\netnnusb.sys [27/01/2010 22:52 12416]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Contenu du dossier 'Tâches planifiées'
2010-01-30 c:\windows\Tasks\User_Feed_Synchronization-{50F25BA5-2F7A-4228-8D03-B50319A3B745}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Examen supplémentaire -------
.
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2010-01-30 18:56
Windows 5.1.2600 Service Pack 2 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
.
Heure de fin: 2010-01-30 18:58:27
ComboFix-quarantined-files.txt 2010-01-30 17:58
Avant-CF: 21 697 335 296 octets libres
Après-CF: 21 777 297 408 octets libres
WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect
- - End Of File - - 1EA42832688E143CC5702C3BAC4BC4E2
Afficher la suite
