Trojan BNK WIN 32
Fermé
dframboise
Messages postés
165
Date d'inscription
dimanche 7 octobre 2007
Statut
Membre
Dernière intervention
14 mai 2021
-
11 juin 2011 à 18:04
dframboise Messages postés 165 Date d'inscription dimanche 7 octobre 2007 Statut Membre Dernière intervention 14 mai 2021 - 13 juin 2011 à 15:59
dframboise Messages postés 165 Date d'inscription dimanche 7 octobre 2007 Statut Membre Dernière intervention 14 mai 2021 - 13 juin 2011 à 15:59
A voir également:
- Trojan BNK WIN 32
- 32 bits - Guide
- Trojan remover - Télécharger - Antivirus & Antimalwares
- Poweriso 32 bit - Télécharger - Gravure
- Télécharger windows 7 32 bits usb - Télécharger - Systèmes d'exploitation
- Win setup from usb - Télécharger - Utilitaires
45 réponses
dframboise
Messages postés
165
Date d'inscription
dimanche 7 octobre 2007
Statut
Membre
Dernière intervention
14 mai 2021
1
13 juin 2011 à 15:31
13 juin 2011 à 15:31
je doit mettre sur mon pc combofix en premier ou dr web???
dframboise
Messages postés
165
Date d'inscription
dimanche 7 octobre 2007
Statut
Membre
Dernière intervention
14 mai 2021
1
13 juin 2011 à 15:55
13 juin 2011 à 15:55
voila je vien d'installer combo fixe sur mon pc mais maintenant je n'ais plus acces a internet ,il me dit qu'il fait partie des chose a supprimer.voici quand meme le rapport:
ComboFix 11-06-12.04 - TULIP Vision 13/06/2011 15:40:31.2.2 - x86
Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.2047.1190 [GMT 2:00]
Lancé depuis: F:\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-05-13 au 2011-06-13 ))))))))))))))))))))))))))))))))))))
.
.
2011-06-13 13:47 . 2011-06-13 13:47 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-06-13 08:55 . 2011-06-13 08:55 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-06-13 08:47 . 2011-06-13 12:33 -------- d-----w- c:\program files\ZHPDiag
2011-06-13 08:02 . 2011-06-13 08:02 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{6F551296-5ADB-4EC5-8576-647C72DDFB39}
2011-06-13 07:58 . 2011-06-13 08:03 -------- d-----w- C:\Kill'em
2011-06-13 07:53 . 2011-06-13 07:53 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{911D2ABA-EF7B-46A7-83AC-164C5E196BA2}
2011-06-12 08:26 . 2011-06-12 08:26 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{3CC85001-04D3-48F8-B3D0-5A04BAB4D4C8}
2011-06-11 19:55 . 2011-06-11 19:55 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{19BBC3F7-DD37-4348-B9BC-C7D9841C0BEB}
2011-06-11 07:55 . 2011-06-11 07:55 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{234340C5-2CDE-465F-8913-5122BA3BAB5D}
2011-06-10 16:16 . 2011-06-10 16:16 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{F1A7757A-F58F-49AB-B0B5-EADA850AF96E}
2011-06-09 16:18 . 2011-06-09 16:18 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{6D1DDBFE-9FCB-4D5E-B0B8-ED4B69F968D4}
2011-06-08 11:09 . 2011-06-08 11:09 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\Kodak
2011-06-08 11:07 . 2011-06-08 11:07 -------- d-----w- c:\program files\DIFX
2011-06-08 11:07 . 2011-06-08 11:07 -------- d-----w- c:\program files\Common Files\Kodak
2011-06-08 11:07 . 2011-06-08 11:07 -------- d-----w- c:\program files\Kodak
2011-06-08 11:06 . 2011-06-08 11:06 -------- d-----w- c:\programdata\{A2A58654-12AA-408A-B411-58A76959BE7F}
2011-06-08 09:15 . 2011-06-08 09:15 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{52EEAE05-BB5A-43E6-AFF7-E86EAA4384CB}
2011-06-07 16:45 . 2011-06-07 16:45 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{5F813686-9B62-4379-A8AB-300C2624428E}
2011-06-06 15:30 . 2011-06-06 15:30 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{8027A6B4-48A8-4E97-94DF-46583A20F2C4}
2011-06-05 18:20 . 2011-06-05 18:26 -------- d-----w- c:\program files\18 Wheels of Steel American Long Haul
2011-06-05 13:34 . 2011-06-05 13:34 -------- d-----w- c:\program files\Valusoft
2011-06-05 11:25 . 2011-06-05 11:26 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{5D098672-75F1-4783-9AD8-D920775F4F48}
2011-06-04 11:56 . 2011-06-04 17:19 -------- d-----w- c:\program files\18 Wheels of Steel Extreme Trucker
2011-06-04 11:55 . 2011-06-04 11:55 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\Nosibay
2011-06-04 11:17 . 2011-06-04 11:17 -------- d-----w- C:\Archivos de programa
2011-06-04 09:09 . 2011-06-04 09:09 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{A2EAAD27-D202-4541-BF1F-AF4280008A8F}
2011-06-03 10:31 . 2011-06-03 10:31 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{EA015773-6C3E-4372-BE56-EEB315B7DA91}
2011-06-02 09:48 . 2011-06-02 09:48 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{C160E1D7-5D00-4818-8705-3840B2594B7A}
2011-06-01 14:55 . 2011-06-01 14:55 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\FileHunter
2011-06-01 14:45 . 2011-06-01 14:45 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\GetRightToGo
2011-06-01 14:43 . 2011-06-01 14:43 -------- d-----w- c:\programdata\Media Get LLC
2011-06-01 14:43 . 2011-06-01 14:43 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\Media Get LLC
2011-06-01 14:43 . 2011-06-01 14:43 -------- d-----w- c:\users\TULIP Vision\AppData\Local\Media Get LLC
2011-06-01 14:43 . 2011-06-01 14:43 -------- d-----w- c:\users\TULIP Vision\AppData\Local\MediaGet2
2011-06-01 14:40 . 2011-06-01 14:40 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\TorrentEasy
2011-06-01 14:40 . 2011-06-01 14:40 -------- d-----w- c:\programdata\TorrentEasy
2011-06-01 09:22 . 2011-06-01 09:22 82432 ----a-w- c:\users\TULIP Vision\AppData\Roaming\Microsoft\MSXML2\msxml4r.dll
2011-06-01 09:22 . 2011-06-01 09:22 44544 ----a-w- c:\users\TULIP Vision\AppData\Roaming\Microsoft\MSXML2\msxml4a.dll
2011-06-01 09:22 . 2011-06-01 09:22 1275392 ----a-w- c:\users\TULIP Vision\AppData\Roaming\Microsoft\MSXML2\msxml4.dll
2011-06-01 07:41 . 2011-06-01 07:41 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{EFED7F6B-61C4-4DBC-86F0-26D3595F5217}
2011-05-31 15:06 . 2011-06-04 17:24 -------- d-----w- c:\program files\VirtualBus
2011-05-31 14:14 . 2011-06-04 17:20 -------- d-----w- c:\program files\Bus Simulator 2008 Demo
2011-05-31 14:07 . 2011-05-31 14:07 -------- d-----w- c:\program files\Windows iLivid Toolbar
2011-05-31 10:14 . 2011-05-31 10:15 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{5C9F4BCE-5316-49BA-8E89-44C22DE352A3}
2011-05-30 15:48 . 2011-05-30 15:48 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{36BB4770-8A29-41E9-B3E8-F1241A3A98AC}
2011-05-29 14:33 . 2011-05-29 14:33 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{4E40A197-4AFF-4405-815C-D39583B94EDC}
2011-05-26 15:26 . 2011-05-26 15:26 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{A1F028FD-DA63-4D59-BBAE-FACB8A4E84A8}
2011-05-25 10:11 . 2011-05-25 10:11 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{BF80E62C-BF08-4C07-96FF-60E36A2B041D}
2011-05-24 18:20 . 2011-05-24 18:20 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{85A1DA50-24C9-486F-919E-FF570CC71AA1}
2011-05-23 15:41 . 2011-05-23 15:41 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{0C723C93-334F-424E-854B-A35165D6E9EC}
2011-05-22 09:09 . 2011-05-22 09:09 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{1B248C4D-9A19-463C-AA50-E1DC62AEE480}
2011-05-21 16:29 . 2011-05-21 16:29 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{7C4ECCDC-E63A-42D4-8549-A5A2E9C6B1EF}
2011-05-20 18:41 . 2011-05-20 18:41 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{0D78E0DA-5779-4080-AEDA-691A89A62446}
2011-05-19 17:53 . 2011-05-19 17:53 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{DD547BC8-44C2-4F76-989B-6D857864DC51}
2011-05-18 10:43 . 2011-05-18 10:43 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{46C5C7BB-B8B0-4CD1-B587-1BB6CD0E0B3F}
2011-05-17 15:30 . 2011-04-09 05:56 123904 ----a-w- c:\windows\system32\poqexec.exe
2011-05-17 15:28 . 2011-05-17 15:29 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{E7C01C93-74C4-48E8-BB3D-01DD873F2E29}
2011-05-15 19:40 . 2011-05-15 19:40 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{5A72478C-4584-427E-9413-54BDF0B370BE}
2011-05-15 07:40 . 2011-05-15 07:40 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{BBAA36CA-FF1B-4AFA-84BD-F534F7ECD72C}
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-09 06:13 . 2011-05-11 18:14 3957632 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-04-09 06:13 . 2011-05-11 18:14 3901824 ----a-w- c:\windows\system32\ntoskrnl.exe
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{3248f342-70c6-418d-a300-b8e925e95556}"= "c:\program files\Jeux-\tbJeux.dll" [2010-06-13 2734688]
"{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}"= "c:\program files\uTorrentBar_FR\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{3248f342-70c6-418d-a300-b8e925e95556}]
.
[HKEY_CLASSES_ROOT\clsid\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}]
2010-12-09 11:51 3911776 ----a-w- c:\program files\uTorrentBar_FR\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{07C92F45-3193-4FD9-AF54-B1925707C872}]
2010-08-31 19:19 86696 ----a-w- c:\program files\magentictb\magenticDx.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3248f342-70c6-418d-a300-b8e925e95556}]
2010-06-13 18:10 2734688 ----a-w- c:\program files\Jeux-\tbJeux.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B3312915-9368-4FE4-8D4E-B60E5B36D0FF}]
2010-08-31 19:19 262312 ----a-w- c:\program files\magentictb\auxi\magenticAu.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3248f342-70c6-418d-a300-b8e925e95556}"= "c:\program files\Jeux-\tbJeux.dll" [2010-06-13 2734688]
"{07C92F45-3193-4FD9-AF54-B1925707C872}"= "c:\program files\magentictb\magenticDx.dll" [2010-08-31 86696]
"{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}"= "c:\program files\uTorrentBar_FR\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{3248f342-70c6-418d-a300-b8e925e95556}]
.
[HKEY_CLASSES_ROOT\clsid\{07c92f45-3193-4fd9-af54-b1925707c872}]
.
[HKEY_CLASSES_ROOT\clsid\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}"= "c:\program files\uTorrentBar_FR\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2011-02-25 353736]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-12-09 39408]
"MediaGet2"="c:\users\TULIP Vision\AppData\Local\MediaGet2\mediaget.exe" [2011-05-11 5988072]
"Bubble Dock"="c:\users\TULIP Vision\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe" [2011-06-01 447912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-03 8120864]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"SSDMonitor"="c:\program files\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2010-08-05 104408]
"Network Error Advisor"="c:\program files\magentictb\ExeRunner.exe" [2010-03-31 58368]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-09 136176]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 camfilt2;camfilt2;c:\windows\system32\DRIVERS\camfilt2.sys [2007-08-29 96384]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-09 136176]
R3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 ovt530;Hercules Deluxe Webcam;c:\windows\system32\Drivers\ov530vid.sys [2007-02-02 167464]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-18 1343400]
R3 XDva369;XDva369;c:\windows\system32\XDva369.sys [x]
R3 XDva375;XDva375;c:\windows\system32\XDva375.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\Common Files\PC Tools\sMonitor\StartManSvc.exe [2010-08-05 583640]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-01-11 240232]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-05-22 167936]
S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;c:\windows\system32\DRIVERS\WlanBZXP.sys [2006-03-21 402944]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
.
Contenu du dossier 'Tâches planifiées'
.
2011-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-09 12:29]
.
2011-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-09 12:29]
.
2011-06-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-170245483-1511231933-2240437521-1000Core.job
- c:\users\TULIP Vision\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-05 08:32]
.
2011-06-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-170245483-1511231933-2240437521-1000UA.job
- c:\users\TULIP Vision\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-05 08:32]
.
2011-06-12 c:\windows\Tasks\RMSchedule.job
- c:\program files\Registry Mechanic\RegMech.exe [2010-12-11 07:46]
.
.
------- Examen supplémentaire -------
.
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab
.
- - - - ORPHELINS SUPPRIMES - - - -
.
AddRemove-Shareaza MediaBar - c:\program files\Shareaza Applications\MediaBar\uninstall.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-170245483-1511231933-2240437521-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*¬*l%]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-170245483-1511231933-2240437521-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*¬*l%\OpenWithList]
@Class="Shell"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'Explorer.exe'(6264)
c:\users\TULIP Vision\AppData\Roaming\magentictb\incredimailya1_0dn.dll
.
Heure de fin: 2011-06-13 15:48:53
ComboFix-quarantined-files.txt 2011-06-13 13:48
ComboFix2.txt 2011-06-13 10:52
.
Avant-CF: 511 408 390 144 octets libres
Après-CF: 511 356 354 560 octets libres
.
- - End Of File - - 78FF6569880B98701F74E95CF765A032
NB:je ne peut pas non plus intaller dr web,il me met le meme message que pour internet.
ComboFix 11-06-12.04 - TULIP Vision 13/06/2011 15:40:31.2.2 - x86
Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.2047.1190 [GMT 2:00]
Lancé depuis: F:\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-05-13 au 2011-06-13 ))))))))))))))))))))))))))))))))))))
.
.
2011-06-13 13:47 . 2011-06-13 13:47 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-06-13 08:55 . 2011-06-13 08:55 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-06-13 08:47 . 2011-06-13 12:33 -------- d-----w- c:\program files\ZHPDiag
2011-06-13 08:02 . 2011-06-13 08:02 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{6F551296-5ADB-4EC5-8576-647C72DDFB39}
2011-06-13 07:58 . 2011-06-13 08:03 -------- d-----w- C:\Kill'em
2011-06-13 07:53 . 2011-06-13 07:53 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{911D2ABA-EF7B-46A7-83AC-164C5E196BA2}
2011-06-12 08:26 . 2011-06-12 08:26 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{3CC85001-04D3-48F8-B3D0-5A04BAB4D4C8}
2011-06-11 19:55 . 2011-06-11 19:55 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{19BBC3F7-DD37-4348-B9BC-C7D9841C0BEB}
2011-06-11 07:55 . 2011-06-11 07:55 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{234340C5-2CDE-465F-8913-5122BA3BAB5D}
2011-06-10 16:16 . 2011-06-10 16:16 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{F1A7757A-F58F-49AB-B0B5-EADA850AF96E}
2011-06-09 16:18 . 2011-06-09 16:18 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{6D1DDBFE-9FCB-4D5E-B0B8-ED4B69F968D4}
2011-06-08 11:09 . 2011-06-08 11:09 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\Kodak
2011-06-08 11:07 . 2011-06-08 11:07 -------- d-----w- c:\program files\DIFX
2011-06-08 11:07 . 2011-06-08 11:07 -------- d-----w- c:\program files\Common Files\Kodak
2011-06-08 11:07 . 2011-06-08 11:07 -------- d-----w- c:\program files\Kodak
2011-06-08 11:06 . 2011-06-08 11:06 -------- d-----w- c:\programdata\{A2A58654-12AA-408A-B411-58A76959BE7F}
2011-06-08 09:15 . 2011-06-08 09:15 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{52EEAE05-BB5A-43E6-AFF7-E86EAA4384CB}
2011-06-07 16:45 . 2011-06-07 16:45 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{5F813686-9B62-4379-A8AB-300C2624428E}
2011-06-06 15:30 . 2011-06-06 15:30 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{8027A6B4-48A8-4E97-94DF-46583A20F2C4}
2011-06-05 18:20 . 2011-06-05 18:26 -------- d-----w- c:\program files\18 Wheels of Steel American Long Haul
2011-06-05 13:34 . 2011-06-05 13:34 -------- d-----w- c:\program files\Valusoft
2011-06-05 11:25 . 2011-06-05 11:26 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{5D098672-75F1-4783-9AD8-D920775F4F48}
2011-06-04 11:56 . 2011-06-04 17:19 -------- d-----w- c:\program files\18 Wheels of Steel Extreme Trucker
2011-06-04 11:55 . 2011-06-04 11:55 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\Nosibay
2011-06-04 11:17 . 2011-06-04 11:17 -------- d-----w- C:\Archivos de programa
2011-06-04 09:09 . 2011-06-04 09:09 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{A2EAAD27-D202-4541-BF1F-AF4280008A8F}
2011-06-03 10:31 . 2011-06-03 10:31 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{EA015773-6C3E-4372-BE56-EEB315B7DA91}
2011-06-02 09:48 . 2011-06-02 09:48 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{C160E1D7-5D00-4818-8705-3840B2594B7A}
2011-06-01 14:55 . 2011-06-01 14:55 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\FileHunter
2011-06-01 14:45 . 2011-06-01 14:45 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\GetRightToGo
2011-06-01 14:43 . 2011-06-01 14:43 -------- d-----w- c:\programdata\Media Get LLC
2011-06-01 14:43 . 2011-06-01 14:43 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\Media Get LLC
2011-06-01 14:43 . 2011-06-01 14:43 -------- d-----w- c:\users\TULIP Vision\AppData\Local\Media Get LLC
2011-06-01 14:43 . 2011-06-01 14:43 -------- d-----w- c:\users\TULIP Vision\AppData\Local\MediaGet2
2011-06-01 14:40 . 2011-06-01 14:40 -------- d-----w- c:\users\TULIP Vision\AppData\Roaming\TorrentEasy
2011-06-01 14:40 . 2011-06-01 14:40 -------- d-----w- c:\programdata\TorrentEasy
2011-06-01 09:22 . 2011-06-01 09:22 82432 ----a-w- c:\users\TULIP Vision\AppData\Roaming\Microsoft\MSXML2\msxml4r.dll
2011-06-01 09:22 . 2011-06-01 09:22 44544 ----a-w- c:\users\TULIP Vision\AppData\Roaming\Microsoft\MSXML2\msxml4a.dll
2011-06-01 09:22 . 2011-06-01 09:22 1275392 ----a-w- c:\users\TULIP Vision\AppData\Roaming\Microsoft\MSXML2\msxml4.dll
2011-06-01 07:41 . 2011-06-01 07:41 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{EFED7F6B-61C4-4DBC-86F0-26D3595F5217}
2011-05-31 15:06 . 2011-06-04 17:24 -------- d-----w- c:\program files\VirtualBus
2011-05-31 14:14 . 2011-06-04 17:20 -------- d-----w- c:\program files\Bus Simulator 2008 Demo
2011-05-31 14:07 . 2011-05-31 14:07 -------- d-----w- c:\program files\Windows iLivid Toolbar
2011-05-31 10:14 . 2011-05-31 10:15 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{5C9F4BCE-5316-49BA-8E89-44C22DE352A3}
2011-05-30 15:48 . 2011-05-30 15:48 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{36BB4770-8A29-41E9-B3E8-F1241A3A98AC}
2011-05-29 14:33 . 2011-05-29 14:33 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{4E40A197-4AFF-4405-815C-D39583B94EDC}
2011-05-26 15:26 . 2011-05-26 15:26 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{A1F028FD-DA63-4D59-BBAE-FACB8A4E84A8}
2011-05-25 10:11 . 2011-05-25 10:11 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{BF80E62C-BF08-4C07-96FF-60E36A2B041D}
2011-05-24 18:20 . 2011-05-24 18:20 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{85A1DA50-24C9-486F-919E-FF570CC71AA1}
2011-05-23 15:41 . 2011-05-23 15:41 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{0C723C93-334F-424E-854B-A35165D6E9EC}
2011-05-22 09:09 . 2011-05-22 09:09 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{1B248C4D-9A19-463C-AA50-E1DC62AEE480}
2011-05-21 16:29 . 2011-05-21 16:29 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{7C4ECCDC-E63A-42D4-8549-A5A2E9C6B1EF}
2011-05-20 18:41 . 2011-05-20 18:41 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{0D78E0DA-5779-4080-AEDA-691A89A62446}
2011-05-19 17:53 . 2011-05-19 17:53 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{DD547BC8-44C2-4F76-989B-6D857864DC51}
2011-05-18 10:43 . 2011-05-18 10:43 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{46C5C7BB-B8B0-4CD1-B587-1BB6CD0E0B3F}
2011-05-17 15:30 . 2011-04-09 05:56 123904 ----a-w- c:\windows\system32\poqexec.exe
2011-05-17 15:28 . 2011-05-17 15:29 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{E7C01C93-74C4-48E8-BB3D-01DD873F2E29}
2011-05-15 19:40 . 2011-05-15 19:40 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{5A72478C-4584-427E-9413-54BDF0B370BE}
2011-05-15 07:40 . 2011-05-15 07:40 -------- d-----w- c:\users\TULIP Vision\AppData\Local\{BBAA36CA-FF1B-4AFA-84BD-F534F7ECD72C}
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-09 06:13 . 2011-05-11 18:14 3957632 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-04-09 06:13 . 2011-05-11 18:14 3901824 ----a-w- c:\windows\system32\ntoskrnl.exe
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{3248f342-70c6-418d-a300-b8e925e95556}"= "c:\program files\Jeux-\tbJeux.dll" [2010-06-13 2734688]
"{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}"= "c:\program files\uTorrentBar_FR\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{3248f342-70c6-418d-a300-b8e925e95556}]
.
[HKEY_CLASSES_ROOT\clsid\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}]
2010-12-09 11:51 3911776 ----a-w- c:\program files\uTorrentBar_FR\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{07C92F45-3193-4FD9-AF54-B1925707C872}]
2010-08-31 19:19 86696 ----a-w- c:\program files\magentictb\magenticDx.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3248f342-70c6-418d-a300-b8e925e95556}]
2010-06-13 18:10 2734688 ----a-w- c:\program files\Jeux-\tbJeux.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B3312915-9368-4FE4-8D4E-B60E5B36D0FF}]
2010-08-31 19:19 262312 ----a-w- c:\program files\magentictb\auxi\magenticAu.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3248f342-70c6-418d-a300-b8e925e95556}"= "c:\program files\Jeux-\tbJeux.dll" [2010-06-13 2734688]
"{07C92F45-3193-4FD9-AF54-B1925707C872}"= "c:\program files\magentictb\magenticDx.dll" [2010-08-31 86696]
"{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}"= "c:\program files\uTorrentBar_FR\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{3248f342-70c6-418d-a300-b8e925e95556}]
.
[HKEY_CLASSES_ROOT\clsid\{07c92f45-3193-4fd9-af54-b1925707c872}]
.
[HKEY_CLASSES_ROOT\clsid\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}"= "c:\program files\uTorrentBar_FR\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2011-02-25 353736]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-12-09 39408]
"MediaGet2"="c:\users\TULIP Vision\AppData\Local\MediaGet2\mediaget.exe" [2011-05-11 5988072]
"Bubble Dock"="c:\users\TULIP Vision\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe" [2011-06-01 447912]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-03 8120864]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"SSDMonitor"="c:\program files\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2010-08-05 104408]
"Network Error Advisor"="c:\program files\magentictb\ExeRunner.exe" [2010-03-31 58368]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-09 136176]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 camfilt2;camfilt2;c:\windows\system32\DRIVERS\camfilt2.sys [2007-08-29 96384]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-12-09 136176]
R3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 ovt530;Hercules Deluxe Webcam;c:\windows\system32\Drivers\ov530vid.sys [2007-02-02 167464]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-18 1343400]
R3 XDva369;XDva369;c:\windows\system32\XDva369.sys [x]
R3 XDva375;XDva375;c:\windows\system32\XDva375.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files\Common Files\PC Tools\sMonitor\StartManSvc.exe [2010-08-05 583640]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-01-11 240232]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-05-22 167936]
S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;c:\windows\system32\DRIVERS\WlanBZXP.sys [2006-03-21 402944]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
.
Contenu du dossier 'Tâches planifiées'
.
2011-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-09 12:29]
.
2011-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-12-09 12:29]
.
2011-06-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-170245483-1511231933-2240437521-1000Core.job
- c:\users\TULIP Vision\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-05 08:32]
.
2011-06-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-170245483-1511231933-2240437521-1000UA.job
- c:\users\TULIP Vision\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-05 08:32]
.
2011-06-12 c:\windows\Tasks\RMSchedule.job
- c:\program files\Registry Mechanic\RegMech.exe [2010-12-11 07:46]
.
.
------- Examen supplémentaire -------
.
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab
.
- - - - ORPHELINS SUPPRIMES - - - -
.
AddRemove-Shareaza MediaBar - c:\program files\Shareaza Applications\MediaBar\uninstall.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-170245483-1511231933-2240437521-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*¬*l%]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-170245483-1511231933-2240437521-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*¬*l%\OpenWithList]
@Class="Shell"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'Explorer.exe'(6264)
c:\users\TULIP Vision\AppData\Roaming\magentictb\incredimailya1_0dn.dll
.
Heure de fin: 2011-06-13 15:48:53
ComboFix-quarantined-files.txt 2011-06-13 13:48
ComboFix2.txt 2011-06-13 10:52
.
Avant-CF: 511 408 390 144 octets libres
Après-CF: 511 356 354 560 octets libres
.
- - End Of File - - 78FF6569880B98701F74E95CF765A032
NB:je ne peut pas non plus intaller dr web,il me met le meme message que pour internet.
Utilisateur anonyme
13 juin 2011 à 15:57
13 juin 2011 à 15:57
reddemarre ton pc pour le message d'erreur
par contre , les indications n'ont toujours pas été suivies....
j'abandonne
par contre , les indications n'ont toujours pas été suivies....
j'abandonne
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
dframboise
Messages postés
165
Date d'inscription
dimanche 7 octobre 2007
Statut
Membre
Dernière intervention
14 mai 2021
1
13 juin 2011 à 15:59
13 juin 2011 à 15:59
pour ce qui est des indication dite moi ce que je fait de mal car je'ai suivi a la lettre ce qu'il y a décrit sur votre message.