Trojan Horse TR/Vundo.Gen - Page 2

si tu peux:
copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

hijackthis est ok
encore des soucis?

Je vais quand même refaire un combofix en espérant avoir un rapport.

En attendant, voici le contenu de C:\ComboFix.txt tel quel.

------------------------------------------------------------------------------------

ComboFix 08-05-21.3 - yax 2008-05-28 6:21:31.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.236 [GMT 2:00]
Endroit: C:\Documents and Settings\yax\Bureau\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

Youpie, combofix m'a sorti un rapport . Le voici.

J'espère qu'il est normal. Il est surtout très long.

-----------------------------------------------------------
ComboFix 08-05-21.3 - yax 2008-05-28 22:57:50.4 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.218 [GMT 2:00]
Endroit: C:\Documents and Settings\yax\Bureau\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Program Files\Ofb1
C:\WINDOWS\system32\Cache
C:\WINDOWS\system32\cKTDcfii.ini
C:\WINDOWS\system32\cKTDcfii.ini2
C:\WINDOWS\system32\winspool.dll
C:\WINDOWS\wl.exe

.
((((((((((((((((((((((((((((( Fichiers créés 2008-04-28 to 2008-05-28 ))))))))))))))))))))))))))))))))))))
.

2008-05-28 01:39 . 2008-05-28 07:06 <REP> d-------- C:\hijackthis
2008-05-25 23:41 . 2008-05-25 23:41 <REP> d-------- C:\Documents and Settings\yax\Application Data\Malwarebytes
2008-05-25 23:40 . 2008-05-25 23:40 <REP> d-------- C:\mbam
2008-05-25 23:40 . 2008-05-25 23:40 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-05-25 23:40 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-25 23:40 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-05-25 23:15 . 2008-05-25 23:17 <REP> d-------- C:\RRFREE
2008-05-25 22:50 . 2008-05-25 22:58 <REP> d-------- C:\fixwareout
2008-05-25 15:24 . 2008-05-25 15:24 <REP> d-------- C:\Documents and Settings\yax\Application Data\Avira
2008-05-24 16:54 . 2008-05-24 16:54 <REP> d-------- C:\Documents and Settings\LocalService\Application Data\AdobeUM
2008-05-24 06:57 . 2008-05-24 06:57 <REP> d-------- C:\Program Files\Avira
2008-05-24 05:36 . 2008-05-24 06:57 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-05-24 04:35 . 2008-05-24 07:04 <REP> d-------- C:\Program Files\BurstWriting
2008-05-24 03:24 . 2008-05-24 03:24 94 --a------ C:\WINDOWS\wininit.ini
2008-05-03 15:45 . 2008-05-03 15:45 <REP> d-------- C:\Program Files\Hercules
2008-05-03 15:45 . 2006-05-12 10:44 343,168 --a------ C:\WINDOWS\system32\drivers\rt73.sys
2008-05-03 15:45 . 2006-04-14 12:05 162,560 --a------ C:\WINDOWS\system32\drivers\rt2500usb.sys
2008-05-03 15:45 . 2005-11-30 11:33 2,048 --a------ C:\WINDOWS\system32\drivers\rt73.bin
2008-05-02 23:16 . 2008-05-02 23:26 <REP> d-------- C:\Documents and Settings\yax\OngameNetwork

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-28 20:22 --------- d-----w C:\Program Files\Lx_cats
2008-05-28 20:20 0 ----a-w C:\WINDOWS\system32\drivers\lvuvc.hs
2008-05-24 14:00 --------- d-----w C:\Program Files\Lexmark 6300 Series
2008-05-03 13:45 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-19 12:59 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-04-19 12:59 --------- d-----w C:\Program Files\Windows Live
2008-04-19 12:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-04-12 11:05 --------- d-----w C:\Documents and Settings\yax\Application Data\Skype
2008-03-24 05:58 691,545 ----a-w C:\WINDOWS\unins000.exe
2007-08-03 11:02 108,330 ----a-w C:\Documents and Settings\All Users\Application Data\firstlsp.reg.dat
2007-06-25 02:35 21,864 ----a-w C:\Documents and Settings\yax\Application Data\GDIPFONTCACHEV1.DAT
2006-11-11 14:39 3,762 -c--a-w C:\Program Files\INSTALL.LOG
1999-06-25 08:55 149,504 ----a-w C:\Program Files\UNWISE.EXE
2006-05-06 16:42 7,260,160 ----a-w C:\Program Files\mozilla firefox\plugins\libvlc.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:54 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [ ]
"SpybotSD TeaTimer"="D:\DOWNLOAD\Anti virus\Spybot - Search & Destroy\TeaTimer.exe" [ ]
"NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [2004-09-07 12:55 1871872]
"LowRateVoip"="D:\TELECHARGEMENTS\Pgms d'Installation\LowRateVoip\LowRateVoip.exe" [2008-01-05 02:07 8885560]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-01-18 18:07 196608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WireLessMouse"="C:\Program Files\12018SC Multimedia Mouse Driver\StartAutorun.exe" [2005-11-30 13:48 94208]
"WiFiCtrl"="C:\Program Files\Hercules\Hercules WiFi Controller Software\WiFiCtrl.exe" [2006-09-23 16:30 11755520]
"TomTomHOME.exe"="d:\mes documents\tom tom home\TomTomHOME.exe" [2007-03-14 17:52 3770024]
"NWEReboot"="" []
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-06-15 11:20 86016]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-06-15 11:20 6803456]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"lxcdmon.exe"="C:\Program Files\Lexmark 6300 Series\lxcdmon.exe" [2005-06-24 19:17 200704]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-09-01 14:04 221184]
"LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-09-07 07:39 73728]
"LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [2004-11-01 19:22 262144]
"LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-09-07 07:33 434176]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2005-01-07 17:07 61952 C:\WINDOWS\system32\HdAShCut.exe]
"FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [2005-07-12 11:36 299008]
"EzPrint"="C:\Program Files\Lexmark 6300 Series\ezprint.exe" [2005-07-05 13:51 94208]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe" [2008-02-12 10:06 262401]
"AVGCtrl"="C:\Program Files\AVPersonal\AVGNT.exe" [ ]
"AlcWzrd"="ALCWZRD.EXE" [2005-05-04 04:01 2805248 C:\WINDOWS\ALCWZRD.EXE]
"LXCDCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCDtime.dll" [2005-07-11 18:35 69632]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:54 15360]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Color Calibration.lnk - C:\Program Files\SEC\MagicTune3.5_Client\GammaTray.exe [2005-11-01 19:07:44 36864]
MagicTune3.5.lnk - C:\Program Files\SEC\MagicTune3.5_Client\MagicTuneTray.exe [2005-11-01 19:07:49 45056]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll
"msacm.ac3filter"= ac3filter.acm

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!]
--a------ 2008-05-16 01:19 79224 C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SandraTheSrv"=3 (0x3)
"SandraDataSrv"=3 (0x3)
"gusvc"=3 (0x3)
"AVWUpSrv"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\lxcdcoms.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"C:\\Program Files\\BitTornado\\btdownloadgui.exe"=
"C:\\Program Files\\BitSpirit\\BitSpirit.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"D:\\TELECHARGEMENTS\\Pgms d'Installation\\LowRateVoip\\LowRateVoip.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 AntiVirMailService;Avira AntiVir Premium MailGuard;"C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe" [2008-05-24 06:59]
R2 antivirwebservice;Avira AntiVir Premium WebGuard;"C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE" [2008-04-09 15:57]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
R2 AVEService;Avira AntiVir Premium MailGuard helper service;"C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe" [2008-02-07 10:06]
R3 Cap713x;Philips Cap713x Video Capture;C:\WINDOWS\system32\DRIVERS\Cap713x.sys [2004-12-29 00:03]
R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-09-01 14:11]
S3 BT4501G;SpeedTouch 121g Wireless USB Adapter Driver;C:\WINDOWS\system32\DRIVERS\BT4501G.sys [2005-11-16 12:21]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1285fa74-c024-11db-835e-0013d4e8741f}]
\Shell\AutoRun\command - ie.exe
\Shell\explore\Command - ie.exe
\Shell\open\Command - ie.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c7db8c4-b078-11db-8350-0013d4e8741f}]
\Shell\AutoRun\command - H:\setupSNK.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6595b670-ab2d-11db-8343-0013d4e8741f}]
\Shell\AutoRun\command - ie.exe
\Shell\explore\Command - ie.exe
\Shell\open\Command - ie.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dbb2e2b2-886a-11db-8319-0013d4e8741f}]
\Shell\AutoRun\command - G:\InstallTomTomHOME.exe

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-05-28 20:39:01 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-28 22:59:57
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-05-28 23:01:28
ComboFix-quarantined-files.txt 2008-05-28 21:01:18

Pre-Run: 6,353,166,336 octets libres
Post-Run: 6,347,935,744 octets libres

160 --- E O F --- 2008-03-08 02:08:26

tu as quels problèmes actuellement?

J'ai obtenu une aide inespérée et de ce site, dans la formr et dans le fond, par jlpjlp.
Je recommande à tous. MERCI