Win 32: malware-gen HELP !! - Page 2

Précédent
  • 1
  • 2
Réponse 21 / 28
Utilisateur anonyme
 
Rien n'est perdu, ne t'en fais pas :).

Pour demain, essaie çà :
• Faits un clic droit sur l'icône A représentant Avast

• Choisis l'option "Visualiseur de journal Avast!"

Tu devrais avoir des rapports ici.
0
Réponse 22 / 28
tamy
 
Bonjour,

J'ai regardé partout mais il n'y a pas de rapport, juste une succession de lignes d'avertissements.
Désolé!

25/02/2010 09:40:50 SYSTEM 1800 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\yqcw.tmp\svchost.exe" file.
25/02/2010 09:35:04 SYSTEM 1800 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ncor.tmp\svchost.exe" file.
25/02/2010 09:29:51 SYSTEM 1800 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\coip.tmp\svchost.exe" file.
25/02/2010 00:00:00 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\udxm.tmp\svchost.exe" file.
24/02/2010 23:54:52 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\blsg.tmp\svchost.exe" file.
24/02/2010 23:49:43 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ysgh.tmp\svchost.exe" file.
24/02/2010 23:44:32 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\aajr.tmp\svchost.exe" file.
24/02/2010 23:39:28 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tast.tmp\svchost.exe" file.
24/02/2010 23:34:09 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tbtx.tmp\svchost.exe" file.
24/02/2010 18:52:20 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\gunn.tmp\svchost.exe" file.
24/02/2010 18:43:08 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tcgr.tmp\svchost.exe" file.
24/02/2010 18:37:58 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\cgmw.tmp\svchost.exe" file.
24/02/2010 18:32:50 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ndar.tmp\svchost.exe" file.
24/02/2010 18:27:40 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ilsp.tmp\svchost.exe" file.
24/02/2010 18:22:32 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ehdu.tmp\svchost.exe" file.
24/02/2010 18:17:22 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\bgju.tmp\svchost.exe" file.
24/02/2010 18:12:13 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ebfn.tmp\svchost.exe" file.
24/02/2010 18:07:02 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ycxk.tmp\svchost.exe" file.
24/02/2010 18:01:49 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\mtqx.tmp\svchost.exe" file.
24/02/2010 17:56:24 SYSTEM 1740 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\rmkn.tmp\svchost.exe" file.
24/02/2010 17:44:15 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\aidc.tmp\svchost.exe" file.
24/02/2010 17:39:13 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\rube.tmp\svchost.exe" file.
24/02/2010 17:34:12 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\nkxd.tmp\svchost.exe" file.
24/02/2010 17:29:11 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\trog.tmp\svchost.exe" file.
24/02/2010 17:24:09 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ydwf.tmp\svchost.exe" file.
24/02/2010 17:19:08 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\uqli.tmp\svchost.exe" file.
24/02/2010 17:14:06 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ngso.tmp\svchost.exe" file.
24/02/2010 17:09:04 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jaax.tmp\svchost.exe" file.
24/02/2010 17:04:02 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\gkye.tmp\svchost.exe" file.
24/02/2010 16:59:00 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\rddq.tmp\svchost.exe" file.
24/02/2010 16:53:59 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\aumn.tmp\svchost.exe" file.
24/02/2010 16:48:57 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ygja.tmp\svchost.exe" file.
24/02/2010 16:43:54 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\wndw.tmp\svchost.exe" file.
24/02/2010 16:38:52 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\pmdp.tmp\svchost.exe" file.
24/02/2010 16:33:49 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\bdnn.tmp\svchost.exe" file.
24/02/2010 16:28:48 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\lyjy.tmp\svchost.exe" file.
24/02/2010 16:23:46 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\qgfg.tmp\svchost.exe" file.
24/02/2010 16:18:44 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\sjol.tmp\svchost.exe" file.
24/02/2010 16:13:41 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\gqpl.tmp\svchost.exe" file.
24/02/2010 16:08:39 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tbtk.tmp\svchost.exe" file.
24/02/2010 16:03:35 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\mldp.tmp\svchost.exe" file.
24/02/2010 15:58:33 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ouef.tmp\svchost.exe" file.
24/02/2010 15:53:30 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tktr.tmp\svchost.exe" file.
24/02/2010 15:48:27 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\edoe.tmp\svchost.exe" file.
24/02/2010 15:43:24 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\huuk.tmp\svchost.exe" file.
24/02/2010 15:38:20 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\atiu.tmp\svchost.exe" file.
24/02/2010 15:33:17 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\xwuu.tmp\svchost.exe" file.
24/02/2010 15:28:14 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ixwq.tmp\svchost.exe" file.
24/02/2010 15:23:12 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\rjmt.tmp\svchost.exe" file.
24/02/2010 15:18:11 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\gkvp.tmp\svchost.exe" file.
24/02/2010 15:13:08 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\yiyb.tmp\svchost.exe" file.
24/02/2010 15:08:06 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tons.tmp\svchost.exe" file.
24/02/2010 15:03:04 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\sovd.tmp\svchost.exe" file.
24/02/2010 14:58:03 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\yole.tmp\svchost.exe" file.
24/02/2010 14:53:01 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ctuo.tmp\svchost.exe" file.
24/02/2010 14:48:00 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\bbfc.tmp\svchost.exe" file.
24/02/2010 14:42:59 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ykxx.tmp\svchost.exe" file.
24/02/2010 14:37:58 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\qgth.tmp\svchost.exe" file.
24/02/2010 14:32:57 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\crnj.tmp\svchost.exe" file.
24/02/2010 14:27:54 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\hguy.tmp\svchost.exe" file.
24/02/2010 14:22:53 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\nebc.tmp\svchost.exe" file.
24/02/2010 14:17:52 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\xepl.tmp\svchost.exe" file.
24/02/2010 14:12:50 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\fwuv.tmp\svchost.exe" file.
24/02/2010 14:07:49 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\bmya.tmp\svchost.exe" file.
24/02/2010 14:02:48 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\orbq.tmp\svchost.exe" file.
24/02/2010 13:57:46 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\brbq.tmp\svchost.exe" file.
24/02/2010 13:52:45 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\fwra.tmp\svchost.exe" file.
24/02/2010 13:47:43 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\xuup.tmp\svchost.exe" file.
24/02/2010 13:42:42 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ksvx.tmp\svchost.exe" file.
24/02/2010 13:37:40 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\mpqq.tmp\svchost.exe" file.
24/02/2010 13:32:38 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ikcs.tmp\svchost.exe" file.
24/02/2010 13:27:37 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\kqwn.tmp\svchost.exe" file.
24/02/2010 13:22:35 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\hppy.tmp\svchost.exe" file.
24/02/2010 13:17:34 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\epdn.tmp\svchost.exe" file.
24/02/2010 13:12:33 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\kxyn.tmp\svchost.exe" file.
24/02/2010 13:07:31 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\olju.tmp\svchost.exe" file.
24/02/2010 13:02:30 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jlqv.tmp\svchost.exe" file.
24/02/2010 12:57:28 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\yoqn.tmp\svchost.exe" file.
24/02/2010 12:52:27 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\mqoe.tmp\svchost.exe" file.
24/02/2010 12:47:26 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tuvl.tmp\svchost.exe" file.
24/02/2010 12:42:22 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\pvdg.tmp\svchost.exe" file.
24/02/2010 12:34:41 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\gosw.tmp\svchost.exe" file.
24/02/2010 12:29:26 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\avwa.tmp\svchost.exe" file.
24/02/2010 12:24:15 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\hkcj.tmp\svchost.exe" file.
24/02/2010 12:18:52 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\eytu.tmp\svchost.exe" file.
24/02/2010 12:13:39 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\wjpg.tmp\svchost.exe" file.
24/02/2010 12:08:19 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\uodu.tmp\svchost.exe" file.
24/02/2010 12:02:23 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ougd.tmp\svchost.exe" file.
24/02/2010 11:56:37 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\crnb.tmp\svchost.exe" file.
24/02/2010 11:51:29 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\omys.tmp\svchost.exe" file.
24/02/2010 11:46:20 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\xsua.tmp\svchost.exe" file.
24/02/2010 11:41:46 SYSTEM 1848 Sign of "VBS:Malware-gen" has been found in "I:\autorun.inf" file.
24/02/2010 11:40:49 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\bvcg.tmp\svchost.exe" file.
24/02/2010 11:35:41 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\leym.tmp\svchost.exe" file.
24/02/2010 11:30:19 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\mlwy.tmp\svchost.exe" file.
24/02/2010 11:25:11 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\sbag.tmp\svchost.exe" file.
24/02/2010 11:20:03 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\lgkh.tmp\svchost.exe" file.
24/02/2010 11:14:53 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ejxc.tmp\svchost.exe" file.
24/02/2010 11:09:27 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\dusr.tmp\svchost.exe" file.
24/02/2010 11:03:20 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\crdv.tmp\svchost.exe" file.
24/02/2010 10:58:05 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\fmqb.tmp\svchost.exe" file.
24/02/2010 10:52:57 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\wseq.tmp\svchost.exe" file.
24/02/2010 10:47:49 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\qqen.tmp\svchost.exe" file.
24/02/2010 10:42:38 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\doce.tmp\svchost.exe" file.
24/02/2010 10:37:30 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\iocs.tmp\svchost.exe" file.
24/02/2010 10:32:14 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\qfka.tmp\svchost.exe" file.
24/02/2010 10:26:59 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\inhl.tmp\svchost.exe" file.
24/02/2010 10:21:40 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jcdr.tmp\svchost.exe" file.
23/02/2010 23:58:28 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\oscw.tmp\svchost.exe" file.
23/02/2010 23:53:21 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\nwms.tmp\svchost.exe" file.
23/02/2010 23:48:00 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\fuic.tmp\svchost.exe" file.
23/02/2010 23:42:43 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\lfrp.tmp\svchost.exe" file.
23/02/2010 23:37:29 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ytkq.tmp\svchost.exe" file.
23/02/2010 23:32:22 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\alcd.tmp\svchost.exe" file.
23/02/2010 23:27:13 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\fjba.tmp\svchost.exe" file.
23/02/2010 23:22:02 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ivhq.tmp\svchost.exe" file.
23/02/2010 23:16:48 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\qhcv.tmp\svchost.exe" file.
23/02/2010 23:11:36 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\knrc.tmp\svchost.exe" file.
23/02/2010 23:06:22 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\huta.tmp\svchost.exe" file.
23/02/2010 23:01:10 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\wvgd.tmp\svchost.exe" file.
23/02/2010 22:55:58 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\wgwr.tmp\svchost.exe" file.
23/02/2010 22:50:49 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\brss.tmp\svchost.exe" file.
23/02/2010 22:45:32 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\fmbj.tmp\svchost.exe" file.
23/02/2010 22:40:02 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\sqoi.tmp\svchost.exe" file.
23/02/2010 22:34:50 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\bbhf.tmp\svchost.exe" file.
23/02/2010 22:29:38 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\oyqm.tmp\svchost.exe" file.
23/02/2010 22:24:28 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\syep.tmp\svchost.exe" file.
23/02/2010 22:19:13 SYSTEM 1668 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\rbcx.tmp\svchost.exe" file.
23/02/2010 22:08:23 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\algc.tmp\svchost.exe" file.
23/02/2010 22:03:15 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jiks.tmp\svchost.exe" file.
23/02/2010 21:57:59 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\osvp.tmp\svchost.exe" file.
23/02/2010 21:52:42 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\walv.tmp\svchost.exe" file.
23/02/2010 21:47:32 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\whru.tmp\svchost.exe" file.
23/02/2010 21:42:23 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\pkgn.tmp\svchost.exe" file.
23/02/2010 21:35:59 SYSTEM 1848 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\mbvx.tmp\svchost.exe" file.
23/02/2010 21:26:11 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\yndh.tmp\svchost.exe" file.
23/02/2010 21:20:31 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\dwso.tmp\svchost.exe" file.
23/02/2010 21:10:03 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\bmtt.tmp\svchost.exe" file.
23/02/2010 21:04:56 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\wlir.tmp\svchost.exe" file.
23/02/2010 20:59:46 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\odmy.tmp\svchost.exe" file.
23/02/2010 20:54:34 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tmag.tmp\svchost.exe" file.
23/02/2010 20:49:26 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\adwk.tmp\svchost.exe" file.
23/02/2010 20:44:14 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ovkt.tmp\svchost.exe" file.
23/02/2010 20:39:06 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\npbb.tmp\svchost.exe" file.
23/02/2010 20:33:35 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ffmo.tmp\svchost.exe" file.
23/02/2010 20:28:24 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\dcbv.tmp\svchost.exe" file.
23/02/2010 20:22:18 SYSTEM 1712 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\vrxn.tmp\svchost.exe" file.
23/02/2010 20:14:23 SYSTEM 1796 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\mpcx.tmp\svchost.exe" file.
23/02/2010 20:09:11 SYSTEM 1796 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\cppc.tmp\svchost.exe" file.
23/02/2010 20:04:04 SYSTEM 1796 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ycvx.tmp\svchost.exe" file.
23/02/2010 19:58:48 SYSTEM 1796 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\uamk.tmp\svchost.exe" file.
23/02/2010 19:53:23 SYSTEM 1796 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tqvc.tmp\svchost.exe" file.
23/02/2010 18:20:57 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\puyt.tmp\svchost.exe" file.
23/02/2010 18:15:49 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\evwq.tmp\svchost.exe" file.
23/02/2010 18:10:40 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ymdv.tmp\svchost.exe" file.
23/02/2010 18:05:25 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\cfxl.tmp\svchost.exe" file.
23/02/2010 18:00:17 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\xyfl.tmp\svchost.exe" file.
23/02/2010 17:55:09 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\adki.tmp\svchost.exe" file.
23/02/2010 17:50:02 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\acfi.tmp\svchost.exe" file.
23/02/2010 17:44:50 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\pxmk.tmp\svchost.exe" file.
23/02/2010 17:39:42 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ukpe.tmp\svchost.exe" file.
23/02/2010 17:34:32 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\lecm.tmp\svchost.exe" file.
23/02/2010 17:29:22 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\kbua.tmp\svchost.exe" file.
23/02/2010 17:24:11 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\phjt.tmp\svchost.exe" file.
23/02/2010 17:17:34 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\rysl.tmp\svchost.exe" file.
23/02/2010 17:12:32 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jbcu.tmp\svchost.exe" file.
23/02/2010 17:07:25 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\hymv.tmp\svchost.exe" file.
23/02/2010 17:02:17 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\kcbk.tmp\svchost.exe" file.
23/02/2010 16:57:17 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\761C.tmp" file.
23/02/2010 16:56:57 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\docy.tmp\svchost.exe" file.
23/02/2010 16:51:28 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ocib.tmp\svchost.exe" file.
23/02/2010 16:46:20 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\oafq.tmp\svchost.exe" file.
23/02/2010 16:41:12 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\iynj.tmp\svchost.exe" file.
23/02/2010 16:36:05 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jmpg.tmp\svchost.exe" file.
23/02/2010 16:30:58 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tkhq.tmp\svchost.exe" file.
23/02/2010 16:24:15 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\yjqq.tmp\svchost.exe" file.
23/02/2010 16:19:03 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jisl.tmp\svchost.exe" file.
23/02/2010 16:13:56 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\rchp.tmp\svchost.exe" file.
23/02/2010 16:08:49 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\buvy.tmp\svchost.exe" file.
23/02/2010 16:00:19 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\cpds.tmp\svchost.exe" file.
23/02/2010 15:34:14 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\vxuq.tmp\svchost.exe" file.
23/02/2010 15:29:07 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jjgn.tmp\svchost.exe" file.
23/02/2010 15:23:59 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\cwsy.tmp\svchost.exe" file.
23/02/2010 15:18:53 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\qbsi.tmp\svchost.exe" file.
23/02/2010 15:11:25 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\usei.tmp\svchost.exe" file.
23/02/2010 15:05:55 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\mvul.tmp\svchost.exe" file.
23/02/2010 15:00:46 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\yvsq.tmp\svchost.exe" file.
23/02/2010 14:55:36 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\dyef.tmp\svchost.exe" file.
23/02/2010 14:50:27 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\nvxf.tmp\svchost.exe" file.
23/02/2010 14:45:18 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\xepa.tmp\svchost.exe" file.
23/02/2010 14:37:08 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jhed.tmp\svchost.exe" file.
23/02/2010 14:31:59 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ryru.tmp\svchost.exe" file.
23/02/2010 14:26:49 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ilce.tmp\svchost.exe" file.
23/02/2010 14:21:37 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\veek.tmp\svchost.exe" file.
23/02/2010 14:16:29 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\tkfl.tmp\svchost.exe" file.
23/02/2010 14:11:21 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jbed.tmp\svchost.exe" file.
23/02/2010 14:06:13 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\pymk.tmp\svchost.exe" file.
23/02/2010 14:00:58 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\pjfh.tmp\svchost.exe" file.
23/02/2010 13:55:46 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\qtrq.tmp\svchost.exe" file.
23/02/2010 13:50:33 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\xefy.tmp\svchost.exe" file.
23/02/2010 13:45:20 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\hcfa.tmp\svchost.exe" file.
23/02/2010 13:36:10 SYSTEM 1820 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ppmy.tmp\svchost.exe" file.
23/02/2010 12:49:36 Stef 1896 Sign of "Win32:DNSChanger-VJ [Trj]" has been found in "C:\Windows\MEMORY.DMP" file.
23/02/2010 11:09:42 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\vffx.tmp\svchost.exe" file.
23/02/2010 10:55:18 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ajke.tmp\svchost.exe" file.
23/02/2010 10:50:07 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\rvfm.tmp\svchost.exe" file.
23/02/2010 10:44:55 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\enwi.tmp\svchost.exe" file.
23/02/2010 10:39:28 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\mvpt.tmp\svchost.exe" file.
23/02/2010 10:34:20 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\naqs.tmp\svchost.exe" file.
23/02/2010 10:29:13 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\aafo.tmp\svchost.exe" file.
23/02/2010 10:24:05 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\lpxd.tmp\svchost.exe" file.
23/02/2010 10:18:56 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\lfuj.tmp\svchost.exe" file.
23/02/2010 10:08:28 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\wwbh.tmp\svchost.exe" file.
23/02/2010 10:03:19 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\xise.tmp\svchost.exe" file.
23/02/2010 09:58:11 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\dtcm.tmp\svchost.exe" file.
23/02/2010 09:52:59 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\jrld.tmp\svchost.exe" file.
23/02/2010 09:47:49 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ptpu.tmp\svchost.exe" file.
23/02/2010 09:42:30 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\aphe.tmp\svchost.exe" file.
23/02/2010 09:37:13 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\awde.tmp\svchost.exe" file.
23/02/2010 09:31:39 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\sdtj.tmp\svchost.exe" file.
23/02/2010 09:26:22 SYSTEM 1824 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\eyci.tmp\svchost.exe" file.
23/02/2010 01:27:55 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\ouxb.tmp\svchost.exe" file.
23/02/2010 01:22:45 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\dbrr.tmp\svchost.exe" file.
23/02/2010 01:17:34 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\cuva.tmp\svchost.exe" file.
23/02/2010 01:12:22 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\vfsm.tmp\svchost.exe" file.
23/02/2010 01:06:39 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\bfqk.tmp\svchost.exe" file.
23/02/2010 01:00:39 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\cqnq.tmp\svchost.exe" file.
23/02/2010 00:55:27 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\eyuo.tmp\svchost.exe" file.
23/02/2010 00:50:12 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\desb.tmp\svchost.exe" file.
23/02/2010 00:44:51 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\uhcv.tmp\svchost.exe" file.
23/02/2010 00:39:40 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\fskp.tmp\svchost.exe" file.
23/02/2010 00:34:29 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\imqe.tmp\svchost.exe" file.
23/02/2010 00:28:22 SYSTEM 1688 Sign of "Win32:Malware-gen" has been found in "C:\Windows\Temp\eihe.tmp\svchost.exe" file.
22/02/2010 15:21:46 SYSTEM 532 Sign of "VBS:Malware-gen" has been found in "H:\autorun.inf" file.
22/02/2010 12:27:28 Stef 2832 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "c:\windows\system32\drivers\agp440.sys" file.
22/02/2010 12:00:16 SYSTEM 2016 Sign of "JS:Prontexi-R [Trj]" has been found in "C:\Users\Stef\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q4PKPV38\login[1].htm" file.
22/02/2010 11:21:48 SYSTEM 1924 Sign of "Win32:Malware-gen" has been found in "C:\Users\Stef\AppData\Local\Temp\mcbvcpae.exe" file.
22/02/2010 11:21:30 SYSTEM 1924 Sign of "Win32:Malware-gen" has been found in "C:\Users\Stef\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UKX9L8U3\vzgomuf[1].htm" file.
22/02/2010 11:20:45 SYSTEM 1924 Sign of "Win32:Malware-gen" has been found in "C:\Users\Stef\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZUBIQYLI\vzgomuf[1].htm" file.
22/02/2010 11:20:41 SYSTEM 1924 Sign of "Win32:Malware-gen" has been found in "C:\Users\Stef\AppData\Local\Temp\mcbvcpae.exe" file.
0
Réponse 23 / 28
Utilisateur anonyme
 
Fais ceci :

• Télécharge gmer sur ton bureau à partir de ce lien ==> http://www.gmer.net/#files en cliquant sur le bouton "Download EXE".
Note : le fichier téléchargé aura un nom aléatoire, c'est normal, garde ce nom

• Lance gmer à partir du fichier au nom aléatoire

• Un scan va se lancer dès le lancement, laisse le faire.

• Si il détecte tout de suite le rootkit, il va te proposer de scanner le PC en entier, accepte.
• Sinon, coche sur la droite les cases "Services", "Registry" et "Files" et clique sur le bouton scan

• Laisse travailler l'outil

• A la fin du scan, clique sur le bouton Save... et enregistre le rapport sur ton bureau

• Copie/colle le contenu du rapport dans ta réponse

Puis refais un rapport RSIT stp.
0
Réponse 24 / 28
tamy
 
Voici le CR GMER et je suis entrain de passer de RSIT :

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-02-25 15:14:16
Windows 6.0.6002 Service Pack 2
Running: hsu6jm19.exe; Driver: C:\Users\Stef\AppData\Local\Temp\kwrdypog.sys

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 6988309
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 272468659
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 2
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x3C 0x74 0x7E 0xC8 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xB6 0xED 0xB1 0x53 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x8B 0xC6 0x4F 0x95 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x2A 0x72 0xD9 0x4A ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 1
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x3C 0x74 0x7E 0xC8 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xB6 0xED 0xB1 0x53 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x8B 0xC6 0x4F 0x95 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x2A 0x72 0xD9 0x4A ...

---- EOF - GMER 1.0.15 ----
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 25 / 28
tamy
 
CR RSIT :

Logfile of random's system information tool 1.06 (written by random/random)
Run by Stef at 2010-02-25 15:15:36
Microsoft® Windows Vista™ Professionnel Service Pack 2
System drive C: has 33 GB (31%) free of 105 GB
Total RAM: 2038 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:15:46, on 25/02/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\sony\VAIO Camera Utility\VCUServe.exe
C:\Program Files\sony\ISB Utility\ISBMgr.exe
C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Mindjet\MindManager 7\MmReminderService.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\sony\Network Utility\LANUtil.exe
C:\Program Files\Neuf\Kit\9props.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\Stef\Desktop\RSIT.exe
C:\Program Files\trend micro\Stef.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: CmjBrowserHelperObject Object - {07A11D74-9D25-4fea-A833-8B0D76A5577A} - C:\Program Files\Mindjet\MindManager 7\Mm7InternetExplorer.dll
O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\Neuf\Kit\SFRNavErrorHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [DRCU] "C:\Program Files\Sony\DRCU\DRCU.exe"
O4 - HKLM\..\Run: [VAIOCameraUtility] "C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe"
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SFR-PC] "C:\Program Files\SFR-PC\SFR-PC.exe" /check
O4 - HKLM\..\Run: [MMReminderService] C:\Program Files\Mindjet\MindManager 7\MMReminderService.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [IS CfgWiz] "C:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKCU\..\Run: [NSUFloatingUI] "C:\Program Files\Sony\Network Utility\LANUtil.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Connexion SFR 9props.exe] "C:\Program Files\Neuf\Kit\9props.exe" /trayicon
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Microsoft Office Groove.lnk = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Envoyer à Mindjet MindManager - {941E1A34-C6AF-4baa-A973-224F9C3E04BF} - C:\Program Files\Mindjet\MindManager 7\Mm7InternetExplorer.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O13 - Gopher Prefix:
O15 - Trusted Zone: http://intranet.trexia.fr
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.mypix.com/fr/fr/importer/newconf/aurigma5.8.1.0/ImageUploader5.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.mypix.com/fr/fr/importer/ImageUploader4.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = trexia.fr
O17 - HKLM\Software\..\Telephony: DomainName = trexia.fr
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = trexia.fr
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = trexia.fr
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: hihosove.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AvLib\MSCSPTISRV.exe
O23 - Service: NSUService - Sony Corporation - C:\Program Files\sony\Network Utility\NSUService.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AvLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AvLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AvLib\SSScsiSV.exe
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\stacsv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) - Sony Corporation - C:\Program Files\sony\VAIO Media Integrated Server\UCLS.exe
O23 - Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) - Sony Corporation - C:\Program Files\sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) - Sony Corporation - C:\Program Files\sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VUAgent - Sony Corporation - C:\Program Files\sony\VAIO Update 5\VUAgent.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
0
Réponse 26 / 28
Utilisateur anonyme
 
• Sous XP : Double clique sur OTM.exe (présent sur ton bureau)
• Sous Vista : Fais un clic droit sur OTM.exe (présent sur ton bureau) et sélectionne "Exécuter en tant qu'administrateur"

• Copie la liste ci-dessous et colle-la dans le cadre jaune (celui de gauche) de OTM sous Paste Instructions for Items to be Moved 

:files
C:\WINDOWS\SYSTEM32\PEDEWOVO.DLL
C:\WINDOWS\SYSTEM32\hihosove.dll

:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=""

:commands
[emptytemp]


• Clique sur le bouton MoveIt! pour lancer la suppression.

• Clique sur le bouton YES pour redémarrer le PC

• Un rapport s'ouvre au redémarrage du PC, copie/colle le dans ta réponse

▲ Le rapport est sauvegardé dans C:\_OTM\MovedFiles
0
Réponse 27 / 28
tamy
 
Merci beaucoup pour ton aide mais j'avais besoin de recuperer mon ordi rapidement!
il s'est bloqué vendredi matin du coup j'ai tout formaté! exit le virus ;)

tout va bien et ca m'a permis de mettre windows 7!

Merci en tout cas de ta patience et tes conseils!

bonne journée
0
Réponse 28 / 28
Utilisateur anonyme
 
D'accord, merci d'avoir prévenu :)
On peut donc mettre le sujet en résolu.
0
Précédent
  • 1
  • 2

Discussions similaires

svp 32Gb est il egal a 32Go??
William Fernand -
nemrod18 -

3 réponses