Rapport combofixe
Bonjour,
bonjour,
Mon ordinateur est tres lent et fonctionne bizarement, jai fais 1 rapport avec combofixe, pouvez vous me dire si qquelchose cloche
Merci d'avance
________________________________________________________________________________________________________
ComboFix 07-08-09.3 - "garbarini" 2007-10-28 16:41:58.4 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP dition familiale 5.1.2600.2.1252.1.1036.18.64 [GMT 1:00]
((((((((((((((((((((((((( Files Created from 2007-09-28 to 2007-10-28 )))))))))))))))))))))))))))))))
2007-10-15 21:55 <REP> d-------- C:\WINDOWS\cache
2007-10-10 16:49 582,656 --------- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2007-10-10 09:11 <REP> d--hs---- C:\FOUND.015
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-08-22 22:40 132088 --a------ C:\WINDOWS\hpoins11.dat
2007-08-21 08:17 683520 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-08-21 08:17 683520 --------- C:\WINDOWS\system32\dllcache\inetcomm.dll
2007-08-20 11:59 824832 --a------ C:\WINDOWS\system32\dllcache\wininet.dll
2007-08-20 11:59 671232 --a------ C:\WINDOWS\system32\dllcache\mstime.dll
2007-08-20 11:59 63488 --------- C:\WINDOWS\system32\dllcache\icardie.dll
2007-08-20 11:59 6058496 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
2007-08-20 11:59 52224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-08-20 11:59 477696 --a------ C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-08-20 11:59 459264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-08-20 11:59 44544 --------- C:\WINDOWS\system32\dllcache\iernonce.dll
2007-08-20 11:59 384512 --------- C:\WINDOWS\system32\dllcache\iedkcs32.dll
2007-08-20 11:59 383488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-08-20 11:59 3584512 --a------ C:\WINDOWS\system32\dllcache\mshtml.dll
2007-08-20 11:59 27648 --a------ C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-08-20 11:59 267776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
2007-08-20 11:59 232960 --------- C:\WINDOWS\system32\dllcache\webcheck.dll
2007-08-20 11:59 230400 --------- C:\WINDOWS\system32\dllcache\ieaksie.dll
2007-08-20 11:59 214528 --a------ C:\WINDOWS\system32\dllcache\dxtrans.dll
2007-08-20 11:59 193024 --a------ C:\WINDOWS\system32\dllcache\msrating.dll
2007-08-20 11:59 153088 --------- C:\WINDOWS\system32\dllcache\ieakeng.dll
2007-08-20 11:59 132608 --a------ C:\WINDOWS\system32\dllcache\extmgr.dll
2007-08-20 11:59 124928 --------- C:\WINDOWS\system32\dllcache\advpack.dll
2007-08-20 11:59 1152000 --a------ C:\WINDOWS\system32\dllcache\urlmon.dll
2007-08-20 11:59 105984 --------- C:\WINDOWS\system32\dllcache\url.dll
2007-08-20 11:59 102400 --------- C:\WINDOWS\system32\dllcache\occache.dll
2007-08-17 12:22 63488 --------- C:\WINDOWS\system32\dllcache\ie4uinit.exe
2007-08-17 12:22 625152 --------- C:\WINDOWS\system32\dllcache\iexplore.exe
2007-08-17 12:22 13824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-08-17 09:34 161792 --------- C:\WINDOWS\system32\dllcache\ieakui.dll
2007-08-11 08:19 4212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\dllcache\cdm.dll
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\dllcache\wuapi.dll
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\dllcache\wuauclt.exe
2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\dllcache\wucltui.dll
2007-07-30 19:19 271224 --a------ C:\WINDOWS\system32\mucltui.dll
2007-07-30 19:19 207736 --a------ C:\WINDOWS\system32\muweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\dllcache\wuweb.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\dllcache\wuaueng.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\dllcache\wups.dll
2007-07-30 18:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-03-19 22:02 31800 --a------ C:\DOCUME~1\GARBAR~1\APPLIC~1\GDIPFONTCACHEV1.DAT
2006-01-08 11:50 48410384 --a------ C:\Program Files\directx_dec2005_redist.exe
2006-01-07 19:14 35246592 --a------ C:\Program Files\directx_9c_oct05sdk_redist.exe
2006-01-06 22:31 5302706 --a------ C:\Program Files\win2k_xp1418.exe
2005-12-05 18:28 916806 --------- C:\Program Files\Dec2005_MDX1_x86.cab
2005-12-05 18:28 86925 --------- C:\Program Files\Oct2005_xinput_x64.cab
2005-12-05 18:28 46247 --------- C:\Program Files\Oct2005_xinput_x86.cab
2005-12-05 18:28 41888 --------- C:\Program Files\dxdllreg_x86.cab
2005-12-05 18:28 3673932 --------- C:\Program Files\Dec2005_MDX1_x86_Archive.cab
2005-12-05 18:28 1358864 --------- C:\Program Files\Dec2005_d3dx9_28_x64.cab
2005-12-05 18:27 1080344 --------- C:\Program Files\Dec2005_d3dx9_28_x86.cab
2005-12-05 18:00 976020 --------- C:\Program Files\BDAXP.cab
2005-12-05 18:00 81092 --------- C:\Program Files\dxupdate.cab
2005-12-05 18:00 74448 --------- C:\Program Files\DSETUP.dll
2005-12-05 18:00 703080 --------- C:\Program Files\BDA.cab
2005-12-05 18:00 484560 --------- C:\Program Files\DXSETUP.exe
2005-12-05 18:00 2247888 --------- C:\Program Files\dsetup32.dll
2005-12-05 18:00 15493481 --------- C:\Program Files\DirectX.cab
2005-12-05 18:00 1351430 --------- C:\Program Files\Aug2005_d3dx9_27_x64.cab
2005-12-05 18:00 1348242 --------- C:\Program Files\Apr2005_d3dx9_25_x64.cab
2005-12-05 18:00 1336890 --------- C:\Program Files\Jun2005_d3dx9_26_x64.cab
2005-12-05 18:00 13265040 --------- C:\Program Files\dxnt.cab
2005-12-05 18:00 1248387 --------- C:\Program Files\Feb2005_d3dx9_24_x64.cab
2005-12-05 18:00 1156363 --------- C:\Program Files\BDANT.cab
2005-12-05 18:00 1079850 --------- C:\Program Files\Apr2005_d3dx9_25_x86.cab
2005-12-05 18:00 1078532 --------- C:\Program Files\Aug2005_d3dx9_27_x86.cab
2005-12-05 18:00 1065813 --------- C:\Program Files\Jun2005_d3dx9_26_x86.cab
2005-12-05 18:00 1014113 --------- C:\Program Files\Feb2005_d3dx9_24_x86.cab
2005-09-29 10:51 916815 --a------ C:\Program Files\Oct2005_MDX_x86.cab
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-02-16 09:54]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-07-27 23:03]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 01:41]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-08-23 18:36]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 23:09]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2005-10-13 00:24]
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 04:21:22]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLogoff"=0 (0x0)
"NoClose"=0 (0x0)
R0 TVALD;Toshiba ACPI-Based Value Added Logical Device Driver;C:\WINDOWS\system32\DRIVERS\TVALD.SYS
R0 TVALG;Toshiba Value Added Logical and General Purpose Device Driver;C:\WINDOWS\system32\DRIVERS\TVALG.SYS
R1 ewido security suite driver;ewido security suite driver;\??\C:\Program Files\ewido anti-malware\guard.sys
R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys
R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys
R2 LxrJD31d;LxrJD31d;\??\C:\WINDOWS\System32\Drivers\LxrJD31d.sys
R2 MioNet;MioNet Service;"C:\Program Files\MioNet\MioNetManager.exe" -s "C:\Program Files\MioNet\wrapper.conf"
R2 SoundMAX Agent Service (default);SoundMAX Agent Service;C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
R2 SPF4;Sunbelt Personal Firewall 4;"C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe"
R3 TOSHIBASoftModem;TOSHIBA Software Modem;C:\WINDOWS\system32\DRIVERS\LTSM.sys
S2 gafwload;ECI Telecom USB ADSL Loader;C:\WINDOWS\system32\DRIVERS\gafwload.sys
S3 camvid40;Philips SPC 900NC PC Camera;C:\WINDOWS\system32\DRIVERS\camdrv41.sys
S3 EPUSBSTOR;EPSON USB Storage Driver;C:\WINDOWS\system32\DRIVERS\epusbsto.sys
S3 wanusb;ECI Telecom USB ADSL WAN Modem;C:\WINDOWS\system32\DRIVERS\gwausb.sys
S3 wlags48b;Wireless LAN PCCard Driver;C:\WINDOWS\system32\DRIVERS\wlags48b.sys
S3 wlluc48;Wireless LAN PC Card Driver;C:\WINDOWS\system32\DRIVERS\wlluc48.sys
Contents of the 'Scheduled Tasks' folder
2007-10-22 12:06:04 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
**************************************************************************
catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-28 16:48:30
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
Completion time: 2007-10-28 16:51:53
C:\ComboFix-quarantined-files.txt ... 2007-10-28 16:51
C:\ComboFix3.txt ... 2007-08-11 22:11
C:\ComboFix2.txt ... 2007-08-22 21:12
--- E O F ---
bonjour,
Mon ordinateur est tres lent et fonctionne bizarement, jai fais 1 rapport avec combofixe, pouvez vous me dire si qquelchose cloche
Merci d'avance
________________________________________________________________________________________________________
ComboFix 07-08-09.3 - "garbarini" 2007-10-28 16:41:58.4 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP dition familiale 5.1.2600.2.1252.1.1036.18.64 [GMT 1:00]
((((((((((((((((((((((((( Files Created from 2007-09-28 to 2007-10-28 )))))))))))))))))))))))))))))))
2007-10-15 21:55 <REP> d-------- C:\WINDOWS\cache
2007-10-10 16:49 582,656 --------- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2007-10-10 09:11 <REP> d--hs---- C:\FOUND.015
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-08-22 22:40 132088 --a------ C:\WINDOWS\hpoins11.dat
2007-08-21 08:17 683520 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-08-21 08:17 683520 --------- C:\WINDOWS\system32\dllcache\inetcomm.dll
2007-08-20 11:59 824832 --a------ C:\WINDOWS\system32\dllcache\wininet.dll
2007-08-20 11:59 671232 --a------ C:\WINDOWS\system32\dllcache\mstime.dll
2007-08-20 11:59 63488 --------- C:\WINDOWS\system32\dllcache\icardie.dll
2007-08-20 11:59 6058496 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
2007-08-20 11:59 52224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-08-20 11:59 477696 --a------ C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-08-20 11:59 459264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-08-20 11:59 44544 --------- C:\WINDOWS\system32\dllcache\iernonce.dll
2007-08-20 11:59 384512 --------- C:\WINDOWS\system32\dllcache\iedkcs32.dll
2007-08-20 11:59 383488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-08-20 11:59 3584512 --a------ C:\WINDOWS\system32\dllcache\mshtml.dll
2007-08-20 11:59 27648 --a------ C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-08-20 11:59 267776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
2007-08-20 11:59 232960 --------- C:\WINDOWS\system32\dllcache\webcheck.dll
2007-08-20 11:59 230400 --------- C:\WINDOWS\system32\dllcache\ieaksie.dll
2007-08-20 11:59 214528 --a------ C:\WINDOWS\system32\dllcache\dxtrans.dll
2007-08-20 11:59 193024 --a------ C:\WINDOWS\system32\dllcache\msrating.dll
2007-08-20 11:59 153088 --------- C:\WINDOWS\system32\dllcache\ieakeng.dll
2007-08-20 11:59 132608 --a------ C:\WINDOWS\system32\dllcache\extmgr.dll
2007-08-20 11:59 124928 --------- C:\WINDOWS\system32\dllcache\advpack.dll
2007-08-20 11:59 1152000 --a------ C:\WINDOWS\system32\dllcache\urlmon.dll
2007-08-20 11:59 105984 --------- C:\WINDOWS\system32\dllcache\url.dll
2007-08-20 11:59 102400 --------- C:\WINDOWS\system32\dllcache\occache.dll
2007-08-17 12:22 63488 --------- C:\WINDOWS\system32\dllcache\ie4uinit.exe
2007-08-17 12:22 625152 --------- C:\WINDOWS\system32\dllcache\iexplore.exe
2007-08-17 12:22 13824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-08-17 09:34 161792 --------- C:\WINDOWS\system32\dllcache\ieakui.dll
2007-08-11 08:19 4212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\dllcache\cdm.dll
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\dllcache\wuapi.dll
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\dllcache\wuauclt.exe
2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\dllcache\wucltui.dll
2007-07-30 19:19 271224 --a------ C:\WINDOWS\system32\mucltui.dll
2007-07-30 19:19 207736 --a------ C:\WINDOWS\system32\muweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\dllcache\wuweb.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\dllcache\wuaueng.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\dllcache\wups.dll
2007-07-30 18:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-03-19 22:02 31800 --a------ C:\DOCUME~1\GARBAR~1\APPLIC~1\GDIPFONTCACHEV1.DAT
2006-01-08 11:50 48410384 --a------ C:\Program Files\directx_dec2005_redist.exe
2006-01-07 19:14 35246592 --a------ C:\Program Files\directx_9c_oct05sdk_redist.exe
2006-01-06 22:31 5302706 --a------ C:\Program Files\win2k_xp1418.exe
2005-12-05 18:28 916806 --------- C:\Program Files\Dec2005_MDX1_x86.cab
2005-12-05 18:28 86925 --------- C:\Program Files\Oct2005_xinput_x64.cab
2005-12-05 18:28 46247 --------- C:\Program Files\Oct2005_xinput_x86.cab
2005-12-05 18:28 41888 --------- C:\Program Files\dxdllreg_x86.cab
2005-12-05 18:28 3673932 --------- C:\Program Files\Dec2005_MDX1_x86_Archive.cab
2005-12-05 18:28 1358864 --------- C:\Program Files\Dec2005_d3dx9_28_x64.cab
2005-12-05 18:27 1080344 --------- C:\Program Files\Dec2005_d3dx9_28_x86.cab
2005-12-05 18:00 976020 --------- C:\Program Files\BDAXP.cab
2005-12-05 18:00 81092 --------- C:\Program Files\dxupdate.cab
2005-12-05 18:00 74448 --------- C:\Program Files\DSETUP.dll
2005-12-05 18:00 703080 --------- C:\Program Files\BDA.cab
2005-12-05 18:00 484560 --------- C:\Program Files\DXSETUP.exe
2005-12-05 18:00 2247888 --------- C:\Program Files\dsetup32.dll
2005-12-05 18:00 15493481 --------- C:\Program Files\DirectX.cab
2005-12-05 18:00 1351430 --------- C:\Program Files\Aug2005_d3dx9_27_x64.cab
2005-12-05 18:00 1348242 --------- C:\Program Files\Apr2005_d3dx9_25_x64.cab
2005-12-05 18:00 1336890 --------- C:\Program Files\Jun2005_d3dx9_26_x64.cab
2005-12-05 18:00 13265040 --------- C:\Program Files\dxnt.cab
2005-12-05 18:00 1248387 --------- C:\Program Files\Feb2005_d3dx9_24_x64.cab
2005-12-05 18:00 1156363 --------- C:\Program Files\BDANT.cab
2005-12-05 18:00 1079850 --------- C:\Program Files\Apr2005_d3dx9_25_x86.cab
2005-12-05 18:00 1078532 --------- C:\Program Files\Aug2005_d3dx9_27_x86.cab
2005-12-05 18:00 1065813 --------- C:\Program Files\Jun2005_d3dx9_26_x86.cab
2005-12-05 18:00 1014113 --------- C:\Program Files\Feb2005_d3dx9_24_x86.cab
2005-09-29 10:51 916815 --a------ C:\Program Files\Oct2005_MDX_x86.cab
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-02-16 09:54]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-07-27 23:03]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 01:41]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-08-23 18:36]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 23:09]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2005-10-13 00:24]
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 04:21:22]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLogoff"=0 (0x0)
"NoClose"=0 (0x0)
R0 TVALD;Toshiba ACPI-Based Value Added Logical Device Driver;C:\WINDOWS\system32\DRIVERS\TVALD.SYS
R0 TVALG;Toshiba Value Added Logical and General Purpose Device Driver;C:\WINDOWS\system32\DRIVERS\TVALG.SYS
R1 ewido security suite driver;ewido security suite driver;\??\C:\Program Files\ewido anti-malware\guard.sys
R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys
R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys
R2 LxrJD31d;LxrJD31d;\??\C:\WINDOWS\System32\Drivers\LxrJD31d.sys
R2 MioNet;MioNet Service;"C:\Program Files\MioNet\MioNetManager.exe" -s "C:\Program Files\MioNet\wrapper.conf"
R2 SoundMAX Agent Service (default);SoundMAX Agent Service;C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
R2 SPF4;Sunbelt Personal Firewall 4;"C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe"
R3 TOSHIBASoftModem;TOSHIBA Software Modem;C:\WINDOWS\system32\DRIVERS\LTSM.sys
S2 gafwload;ECI Telecom USB ADSL Loader;C:\WINDOWS\system32\DRIVERS\gafwload.sys
S3 camvid40;Philips SPC 900NC PC Camera;C:\WINDOWS\system32\DRIVERS\camdrv41.sys
S3 EPUSBSTOR;EPSON USB Storage Driver;C:\WINDOWS\system32\DRIVERS\epusbsto.sys
S3 wanusb;ECI Telecom USB ADSL WAN Modem;C:\WINDOWS\system32\DRIVERS\gwausb.sys
S3 wlags48b;Wireless LAN PCCard Driver;C:\WINDOWS\system32\DRIVERS\wlags48b.sys
S3 wlluc48;Wireless LAN PC Card Driver;C:\WINDOWS\system32\DRIVERS\wlluc48.sys
Contents of the 'Scheduled Tasks' folder
2007-10-22 12:06:04 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
**************************************************************************
catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-28 16:48:30
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
Completion time: 2007-10-28 16:51:53
C:\ComboFix-quarantined-files.txt ... 2007-10-28 16:51
C:\ComboFix3.txt ... 2007-08-11 22:11
C:\ComboFix2.txt ... 2007-08-22 21:12
--- E O F ---
Configuration: Windows XP Internet Explorer 7.0
3 réponses
-
Ok, merci voila le rapport
____________________________________________________________________________________________________________
Logfile of HijackThis v1.99.1
Scan saved at 19:32:12, on 28/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\MioNet\MioNetManager.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\MioNet\jvm\bin\MioNet.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\System32\msiexec.exe
C:\DOCUME~1\GARBAR~1\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis_199.zip\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\YAHOO!\COMMON\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\YAHOO!\COMMON\yhexbmesfr.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://m6video.m6.fr/1click/install/files/installer2.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.photoservice.com/aurigma/ImageUploader4.cab
O16 - DPF: {983AB2CC-3D50-11D9-ADFE-00062919A34C} (ActiveXUpload.UserCtrl) - http://www.photoservice.com/activeX/newUpload.CAB
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lexar JD31 (LxrJD31s) - Unknown owner - LxrJD31s.exe (file missing)
O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe" -s "C:\Program Files\MioNet\wrapper.conf (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe -
Bonjour
il ne semble pas être anormal mais il serait préférable de nous mettre un rapport hijackthis plutôt qu'un rapport combofix
-
Rigoureusement rien d'anormal dans ton log
Maintenant pour accélérer ton PC tu peux éventuellement cocher et fixer toutes les lignes suivantes.
A toi de voir si tu le juges utile ou pas...
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\YAHOO!\COMMON\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\YAHOO!\COMMON\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
Inconnu
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://m6video.m6.fr/1click/install/files/installer2.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.photoservice.com/aurigma/ImageUploader4.cab
O16 - DPF: {983AB2CC-3D50-11D9-ADFE-00062919A34C} (ActiveXUpload.UserCtrl) - http://www.photoservice.com/activeX/newUpload.CAB
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Lexar JD31 (LxrJD31s) - Unknown owner - LxrJD31s.exe (file missing)
O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe" -s "C:\Program Files\MioNet\wrapper.conf (file missing)
