Bonjour tout le monde je pense que mon pc il est infecter
Voila le rapport de combofix
pouvez vous me dire c'est quoi sa veux dire
ComboFix 11-09-29.05 - martin 2011-09-29 12:40:18.1.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.2.1036.18.1919.1555 [GMT -4:00]
Lancé depuis: c:\documents and settings\martin\Mes documents\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-08-28 au 2011-09-29 ))))))))))))))))))))))))))))))))))))
.
.
2011-09-23 18:22 . 2011-09-23 18:22 -------- d-----w- C:\ATI
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-09 09:12 . 2008-04-13 23:33 606208 ----a-w- c:\windows\system32\crypt32.dll
2011-08-01 19:58 . 2009-05-09 05:14 21784 ----a-w- c:\windows\system32\drivers\nuidfltr.sys
2011-07-28 21:49 . 2011-07-28 21:49 53760 ----a-w- c:\windows\system32\OVDecode.dll
2011-07-28 21:48 . 2011-07-28 21:48 43520 ----a-w- c:\windows\system32\OpenCL.dll
2011-07-28 21:48 . 2011-07-28 21:48 13555712 ----a-w- c:\windows\system32\amdocl.dll
2011-07-15 13:29 . 2008-04-13 16:17 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2008-04-13 15:57 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-06-02 . A9DB4F9557F6580FB9417D4991980E64 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
2010-02-08 14:51 1015808 ----a-w- c:\program files\Ares\Ares.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2011-09-23 22:51 136176 ----atw- c:\documents and settings\martin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\itype]
2011-08-01 19:58 1313672 ----a-w- c:\program files\Microsoft IntelliType Pro\itype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2011-08-31 21:00 449608 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2010-02-11 03:32 61440 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]
2009-03-24 20:40 446571 ----a-w- c:\program files\IDT\WDM\sttray.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Ares\\Ares.exe"=
.
R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-09-11 14776]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-09-29 442200]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-09-29 320856]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-09-29 20568]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-09-12 366152]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\drivers\dc3d.sys [2011-09-23 45288]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-09-12 22216]
R3 TrueSight;TrueSight;c:\documents and settings\martin\Mes documents\Downloads\TrueSight.sys [2011-09-29 111104]
R3 usbfilter;AMD USB Filter Driver;c:\windows\system32\drivers\usbfilter.sys [2011-09-11 30392]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2011-08-08 311928]
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - TRUESIGHT
.
Contenu du dossier 'Tâches planifiées'
.
2011-09-22 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2011-09-11 13:26]
.
2011-09-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-583907252-838170752-1801674531-1004Core.job
- c:\documents and settings\martin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2011-09-23 22:51]
.
2011-09-22 c:\windows\Tasks\SmartDefrag_Startup.job
- c:\program files\IObit\Smart Defrag 2\SmartDefrag.exe [2011-09-11 14:35]
.
.
------- Examen supplémentaire -------
.
TCP: DhcpNameServer = 192.168.1.254
TCP: Interfaces\{25F6B19C-8CAF-428C-940A-4862B23755E9}: NameServer = 8.8.8.8,8.8.4.4
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2011-09-29 12:43
Windows 5.1.2600 Service Pack 3 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
.
C:\## aswSnx private storage
.
Scan terminé avec succès
Fichiers cachés: 1
.
**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'winlogon.exe'(580)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(112)
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Heure de fin: 2011-09-29 12:46:14
ComboFix-quarantined-files.txt 2011-09-29 16:46
.
Avant-CF: 438 658 772 992 octets libres
Après-CF: 438 644 764 672 octets libres
.
WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect
.
- - End Of File - - A767F692E56698C7740D26A679D63385
