Sujet Précédent Sujet Suivant

Virus adware

Fermé
sis67 Messages postés 27 Date d'inscription samedi 12 juin 2010 Statut Membre Dernière intervention 7 novembre 2012 - 12 juin 2010 à 22:15
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 - 12 juin 2010 à 22:23
Bonjour,

je désespère je ne retrouve aucun de mes messages dans ce forum
guillaume es-tu là?

A voir également:

2 réponses

Réponse 1 / 2
sis67 Messages postés 27 Date d'inscription samedi 12 juin 2010 Statut Membre Dernière intervention 7 novembre 2012
12 juin 2010 à 22:18
Ça à l'air de refonctionner (?)
Guillaume voici le rapport combofix réalisé cet après-midi
grand merci

ComboFix 10-06-11.01 - Francis 12/06/2010 19:55:40.1.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1491 [GMT 2:00]
Lancé depuis: c:\documents and settings\Francis\Bureau\asdehi.exe
AV: NOD32 Antivirus System 2.50 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Un antivirus résident est actif

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Magali\Application Data\8C5D0A2F8986D79899316E5ACC5DD66D
c:\documents and settings\Magali\Application Data\8C5D0A2F8986D79899316E5ACC5DD66D\enemies-names.txt
c:\documents and settings\Magali\Application Data\8C5D0A2F8986D79899316E5ACC5DD66D\local.ini
c:\documents and settings\Magali\Application Data\8C5D0A2F8986D79899316E5ACC5DD66D\lsrslt.ini
c:\documents and settings\Magali\Application Data\inst.exe
c:\documents and settings\Magali\Bureau\Twilight
c:\documents and settings\Magali\Bureau\Twilight
c:\windows\system32\ooxwd.dll
c:\windows\system32\oqhphiru.dll
c:\windows\system32\soXWd.dll

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_TDSSSERV


((((((((((((((((((((((((((((( Fichiers créés du 2010-05-12 au 2010-06-12 ))))))))))))))))))))))))))))))))))))
.

2010-06-12 17:15 . 2010-06-12 17:15 -------- d-sh--w- c:\documents and settings\Francis\PrivacIE
2010-06-12 17:14 . 2010-06-12 17:14 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2010-06-12 17:14 . 2010-06-12 17:14 -------- d-sh--w- c:\documents and settings\Francis\IETldCache
2010-06-12 17:04 . 2010-06-12 17:04 -------- d--h--w- c:\windows\msdownld.tmp
2010-06-12 17:03 . 2010-06-12 17:03 -------- d-----w- c:\windows\ie8updates
2010-06-12 17:01 . 2010-06-12 17:02 -------- dc-h--w- c:\windows\ie8
2010-06-12 16:58 . 2010-05-06 10:33 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-06-12 16:58 . 2010-05-06 10:33 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-06-12 16:58 . 2010-05-06 10:33 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-06-12 16:58 . 2010-04-16 11:43 41984 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-06-12 14:31 . 2008-04-13 17:34 32866 ------w- c:\windows\slrundll.exe
2010-06-12 14:31 . 2010-06-12 14:31 -------- d-----w- c:\windows\system32\fr
2010-06-12 14:31 . 2010-06-12 14:31 -------- d-----w- c:\windows\system32\bits
2010-06-12 14:21 . 2010-06-12 14:21 -------- d-----w- c:\windows\EHome
2010-06-12 13:29 . 2010-06-12 13:29 -------- d-----w- c:\program files\ZHPDiag
2010-06-12 13:14 . 2010-06-12 13:24 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-06-12 13:14 . 2010-06-12 13:19 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-06-11 13:53 . 2010-06-11 13:53 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Malwarebytes
2010-06-10 11:08 . 2010-06-10 11:08 -------- d-----w- c:\documents and settings\Magali\Application Data\AVS4YOU
2010-06-08 21:06 . 2010-06-08 21:06 327680 ----a-w- c:\windows\system32\soxwd.dll
2010-06-08 14:51 . 2010-06-08 14:51 40629 ----a-w- c:\windows\system32\foxwd.exe
2010-06-03 10:32 . 2010-06-03 10:32 -------- d-----w- c:\documents and settings\Francis\Application Data\Sky-Banners
2010-06-03 10:32 . 2010-06-03 10:32 -------- d-----w- c:\documents and settings\Francis\Application Data\Street-Ads
2010-06-03 10:32 . 2010-06-03 10:32 -------- d-----w- c:\documents and settings\Francis\Local Settings\Application Data\Conduit
2010-06-03 10:32 . 2010-06-03 10:32 -------- d-----w- c:\documents and settings\Francis\Local Settings\Application Data\Softonic_France
2010-06-01 14:17 . 2010-06-01 14:17 -------- d-----w- c:\documents and settings\Magali\Application Data\Street-Ads
2010-06-01 14:17 . 2010-06-01 14:17 -------- d-----w- c:\documents and settings\Magali\Application Data\Sky-Banners
2010-06-01 14:17 . 2010-06-01 14:17 50981 ----a-w- c:\windows\system32\afqguqjhykdtqitvi.exe
2010-06-01 14:17 . 2010-06-01 14:17 -------- d-----w- c:\program files\$NtUninstallWTF1012$
2010-05-24 16:31 . 2010-05-24 16:31 40633 ----a-w- c:\windows\system32\oplkuwjn.exe
2010-05-21 17:34 . 2008-03-05 13:56 1420824 ----a-w- c:\windows\system32\D3DCompiler_37.dll
2010-05-21 17:34 . 2008-02-05 21:07 462864 ----a-w- c:\windows\system32\d3dx10_37.dll
2010-05-21 17:34 . 2008-03-05 13:56 3786760 ----a-w- c:\windows\system32\D3DX9_37.dll
2010-05-21 17:34 . 2007-04-04 16:53 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2010-05-21 17:34 . 2010-05-21 17:34 -------- d-----w- c:\windows\system32\xlive
2010-05-21 17:34 . 2010-05-21 17:34 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-05-15 08:27 . 2010-05-15 10:10 147456 ----a-w- c:\windows\system32\vbzip10.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-12 17:32 . 2008-02-22 17:59 68432 ----a-w- c:\documents and settings\Francis\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-06-12 16:42 . 2004-08-05 12:00 84526 ----a-w- c:\windows\system32\perfc00C.dat
2010-06-12 16:42 . 2004-08-05 12:00 510324 ----a-w- c:\windows\system32\perfh00C.dat
2010-06-12 14:33 . 2008-02-09 14:17 76507 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-06-11 18:28 . 2008-12-09 21:30 1100 ----a-w- c:\windows\system32\d3d8caps.dat
2010-06-10 13:01 . 2009-04-09 06:32 -------- d-----w- c:\documents and settings\Magali\Application Data\XnView
2010-06-09 11:01 . 2010-03-16 13:35 -------- d-----w- c:\program files\Ask.com
2010-06-05 09:55 . 2009-11-11 18:46 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-01 14:23 . 2010-04-02 10:48 -------- d-----w- c:\program files\Softonic_France
2010-05-27 20:10 . 2010-03-11 15:34 443912 ----a-w- c:\documents and settings\Magali\Application Data\Real\Update\setup3.10\setup.exe
2010-05-27 10:46 . 2010-03-12 15:47 443912 ----a-w- c:\documents and settings\Francis\Application Data\Real\Update\setup3.10\setup.exe
2010-05-21 17:56 . 2009-10-25 17:08 -------- d-----w- c:\program files\Rockstar Games
2010-05-21 17:55 . 2008-02-09 14:45 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-05-12 20:31 . 2010-05-12 20:31 21304816 ----a-w- c:\documents and settings\Magali\Application Data\Real\Update\setup3.10\rp\RealPlayerSPGold_fr.exe
2010-05-10 10:49 . 2009-09-05 15:14 -------- d-----w- c:\documents and settings\Francis\Application Data\Image Zone Express
2010-05-09 12:14 . 2009-07-28 08:25 -------- d-----w- c:\documents and settings\Magali\Application Data\Image Zone Express
2010-05-06 10:33 . 2004-08-05 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-02 08:08 . 2005-10-06 03:08 1851392 ----a-w- c:\windows\system32\win32k.sys
2010-04-30 20:14 . 2008-09-23 16:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-04-29 13:39 . 2008-09-23 16:37 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 13:39 . 2008-09-23 16:37 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-04-26 18:58 . 2010-04-26 18:58 -------- d-----w- c:\program files\ColorMailer
2010-04-20 05:30 . 2004-08-05 12:00 285696 ----a-w- c:\windows\system32\atmfd.dll
2010-04-07 14:01 . 2010-01-11 15:41 4 ----a-w- C:\timestmp.tmp
2010-03-31 12:33 . 2010-03-30 14:40 45056 ----a-w- c:\windows\NCUNINST.EXE
2010-03-29 19:14 . 2009-11-23 20:38 79488 ----a-w- c:\documents and settings\Francis\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-03-29 19:08 . 2009-11-23 18:39 79488 ----a-w- c:\documents and settings\Magali\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-03-26 08:33 . 2010-04-21 18:06 1496064 ----a-w- c:\documents and settings\Francis\Application Data\Mozilla\Firefox\Profiles\fdn6cq0a.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-03-26 08:33 . 2010-04-14 11:07 1496064 ----a-w- c:\documents and settings\Magali\Application Data\Mozilla\Firefox\Profiles\090uv6ad.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-03-26 08:33 . 2010-04-21 18:06 43008 ----a-w- c:\documents and settings\Francis\Application Data\Mozilla\Firefox\Profiles\fdn6cq0a.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-03-26 08:33 . 2010-04-21 18:06 339456 ----a-w- c:\documents and settings\Francis\Application Data\Mozilla\Firefox\Profiles\fdn6cq0a.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-03-26 08:33 . 2010-04-14 11:08 43008 ----a-w- c:\documents and settings\Magali\Application Data\Mozilla\Firefox\Profiles\090uv6ad.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-03-26 08:33 . 2010-04-14 11:08 339456 ----a-w- c:\documents and settings\Magali\Application Data\Mozilla\Firefox\Profiles\090uv6ad.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-03-26 08:32 . 2010-04-21 18:06 346112 ----a-w- c:\documents and settings\Francis\Application Data\Mozilla\Firefox\Profiles\fdn6cq0a.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-03-26 08:32 . 2010-04-14 11:08 346112 ----a-w- c:\documents and settings\Magali\Application Data\Mozilla\Firefox\Profiles\090uv6ad.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2008-04-26 23:31 . 2008-04-26 23:31 4688 ----a-w- c:\program files\satsukidecodersettings.ini
2008-04-26 23:31 . 2008-04-26 23:31 3476 ----a-w- c:\program files\mpc7.reg
2008-04-26 23:31 . 2008-04-26 23:31 3428 ----a-w- c:\program files\mpc4.reg
2008-04-26 23:31 . 2008-04-26 23:31 3026 ----a-w- c:\program files\mpc3.reg
2008-04-26 23:31 . 2008-04-26 23:31 18156 ----a-w- c:\program files\mpc6.reg
2008-04-26 23:31 . 2008-04-26 23:31 16282 ----a-w- c:\program files\mpc5.reg
2008-04-26 23:31 . 2008-04-26 23:31 680 ----a-w- c:\program files\mpc2.reg
2008-04-26 23:31 . 2008-04-26 23:31 596 ----a-w- c:\program files\mpc1.reg
2008-04-26 23:31 . 2008-04-26 23:31 31570 ----a-w- c:\program files\ffdsvsetts.reg
2008-04-26 23:31 . 2008-04-26 23:31 1658 ----a-w- c:\program files\ffdssetts.reg
2008-04-26 23:31 . 2008-04-26 23:31 1292 ----a-w- c:\program files\ffdsasetts.reg
2008-04-17 13:58 . 2008-04-17 13:58 6604 ----a-w- c:\program files\Uninstall.dat
2008-04-17 13:58 . 2008-04-17 13:58 163840 ----a-w- c:\program files\Uninstall.exe
2002-08-01 15:33 . 2008-04-17 13:58 17384 ----a-w- c:\program files\Install instructions.rtf
2002-08-01 15:20 . 2008-04-17 13:58 7618 ----a-w- c:\program files\License.rtf
2002-08-01 15:18 . 2008-04-17 13:58 135 ----a-w- c:\program files\EasyDivX web.url
2002-07-03 20:14 . 2008-04-17 13:58 1586688 ----a-w- c:\program files\EasyDivX_082.exe
2001-11-26 21:37 . 2008-04-17 13:58 1357 ----a-w- c:\program files\subresync_doc.txt
2001-09-22 19:12 . 2008-04-17 13:58 90112 ----a-w- c:\program files\subresync.exe
2008-04-15 11:31 . 2008-04-14 13:37 72 --sh--w- c:\windows\SBA21D309.tmp
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]

[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{364d4e0c-543f-4b85-abe3-19551139da4f}]
2010-06-01 14:23 2515552 ----a-w- c:\program files\Softonic_France\tbSof1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C1244DB1-ED1A-4F6F-8D38-1A6959714663}]
2010-06-08 21:06 327680 ----a-w- c:\windows\system32\soxwd.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-05-26 13:23 1385864 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{364d4e0c-543f-4b85-abe3-19551139da4f}"= "c:\program files\Softonic_France\tbSof1.dll" [2010-06-01 2515552]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]

[HKEY_CLASSES_ROOT\clsid\{364d4e0c-543f-4b85-abe3-19551139da4f}]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]
"{364D4E0C-543F-4B85-ABE3-19551139DA4F}"= "c:\program files\Softonic_France\tbSof1.dll" [2010-06-01 2515552]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CLASSES_ROOT\clsid\{364d4e0c-543f-4b85-abe3-19551139da4f}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2006-06-01 94208]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Raccourci vers la page des propriétés de High Definition Audio"="HDAShCut.exe" [2005-01-07 61952]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-30 136600]
"RTHDCPL"="RTHDCPL.EXE" [2006-06-28 16248320]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-04-27 7573504]
"nwiz"="nwiz.exe" [2006-04-27 1519616]
"WinDVR SchSvr"="c:\program files\Fichiers communs\InterVideo\SchSvr\SchSvr.exe" [2005-04-13 106496]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2008-02-09 917504]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-04-27 86016]
"SpeedTouch USB Diagnostics"="c:\program files\Thomson\SpeedTouch USB\Dragdiag.exe" [2004-01-26 866816]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 6.0\apdproxy.exe" [2007-09-10 67488]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-13 110592]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-11-18 198160]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-02-16 282624]
"skb"="soxwd.dll" [2010-06-08 327680]
"MChk"="c:\windows\system32\foxwd.exe" [2010-06-08 40629]

c:\documents and settings\Magali\Menu D'marrer\Programmes\D'marrage\
Adobe Gamma.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

c:\documents and settings\Francis\Menu D'marrer\Programmes\D'marrage\
Adobe Gamma.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
Outil de d'tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2009-10-5 344064]

c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
InterVideo WinCinema Manager.lnk - c:\program files\InterVideo\Common\Bin\WinCinemaMgr.exe [2008-2-9 204800]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-13 17:34 15360 ----a-w- c:\windows\system32\ctfmon.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
"c:\\Program Files\\Sierra\\Empire Earth II\\EE2.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R3 PhTVTune;Hercules Smart TV 3 WDM TVTuner (FM1216ME);c:\windows\system32\drivers\PhTvTune.sys [09/02/2008 16:45 27808]
R3 SIS163u;SiS163 usb Wireless LAN Adapter Driver;c:\windows\system32\drivers\sis163u.sys [09/02/2008 16:37 215040]
.
Contenu du dossier 'Tâches planifiées'

2010-06-08 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-01-10 14:42]

2010-06-12 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2010-05-26 13:23]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.01net.com/
uInternet Settings,ProxyOverride = <local>
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
LSP: imon.dll
DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab
FF - ProfilePath - c:\documents and settings\Francis\Application Data\Mozilla\Firefox\Profiles\fdn6cq0a.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Bing
FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/firefox
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?mkt=fr-FR&form=MIAWB1&q=
FF - component: c:\documents and settings\Francis\Application Data\Mozilla\Firefox\Profiles\fdn6cq0a.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\components\SEPsearchhelperff.dll
FF - component: c:\program files\Real\RealPlayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\innoPlus\Panorama-Viewer-innoPlus\npirsviewer.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{1767D0F6-D7BC-4E7F-BDC6-EDCBDEAFB40B} - c:\windows\system32\ooxwd.dll
BHO-{7B3B9B4D-2875-574A-E7D1-5B816BF13A0A} - (no file)



**************************************************************************
Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés:

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BEB3C0C7-B648-4257-96D9-B5D024816E27}\Version*Version]
"Version"=hex:e1,f1,70,ce,5a,c5,22,15,b5,97,e1,da,d1,f0,2a,ac,e6,16,f7,91,5d,
28,3a,b0,4d,e7,52,ae,d1,29,f7,05,60,4e,48,6b,44,9c,6d,fd,b2,b4,65,83,f9,74,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø*€|ÿÿÿÿ*€|ù*9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Minnetonka Audio Software\SurCode Dolby Digital Premiere\Version*Version]
"Version"=hex:e1,f1,70,ce,5a,c5,22,15,b5,97,e1,da,d1,f0,2a,ac,e6,16,f7,91,5d,
28,3a,b0,4d,e7,52,ae,d1,29,f7,05,60,4e,48,6b,44,9c,6d,fd,b2,b4,65,83,f9,74,\
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'lsass.exe'(936)
c:\windows\system32\imon.dll
c:\program files\Eset\pr_imon.dll

- - - - - - - > 'explorer.exe'(2716)
c:\program files\Fichiers communs\Ahead\Lib\NeroSearchBar.dll
c:\program files\Fichiers communs\Ahead\Lib\NeroSearchTrayHook.dll
c:\program files\Fichiers communs\Ahead\Lib\MFC71U.DLL
c:\program files\Fichiers communs\Ahead\Lib\BCGCBPRO800u.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\eappprxy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Eset\nod32krn.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\HPZipm12.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
.
**************************************************************************
.
Heure de fin: 2010-06-12 20:17:22 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-06-12 18:17

Avant-CF: 32 114 462 720 octets libres
Après-CF: 32 405 454 848 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

- - End Of File - - 4FA75A23674BE36DC24BC586F00090E2
0
Réponse 2 / 2
Destrio5 Messages postés 85985 Date d'inscription dimanche 11 juillet 2010 Statut Modérateur Dernière intervention 17 février 2023 10 299
12 juin 2010 à 22:23
Bonjour,

Ton sujet se trouve ici :
https://forums.commentcamarche.net/forum/affich-18116536-virus-adware
0

Discussions similaires

Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Est ce que le site tlauncher est dangereux ?
caribou -
bazfile -

1 réponse
4 virus en raison d’un porno ????
valou -
Bello040420 -

9 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses