Firefox et IE ne m'affiche pas certains sites - Page 2

Où faut-il coller le texte que tu m'as dit ?

Salut hugo

c est lié a ton infection vundo et au détournement de DNS

fais ce que je t ai expliqué

Ou télécharge t-on combofix ?

C'est bon tien l'analyse :

ComboFix 08-07-25.6 - Hugo 2008-07-26 22:07:28.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.0.1252.1.1036.18.220 [GMT 2:00]
Endroit: C:\Documents and Settings\Hugo.L0N6L2\Mes documents\Mes téléchargements\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinAntiVirus Pro 2006
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinAntiVirus Pro 2006\Avis concernant le service.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinAntiVirus Pro 2006\Base de connaissance de WinAntiVirus Pro 2006.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinAntiVirus Pro 2006\Demander des instructions.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinAntiVirus Pro 2006\Désinstaller WinAntiVirus Pro 2006.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinAntiVirus Pro 2006\Informer le défaut du Logiciel.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinAntiVirus Pro 2006\Manuel de WinAntiVirus Pro 2006.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinAntiVirus Pro 2006\Partager des Suggestions.lnk
C:\Documents and Settings\Hugo.L0N6L2\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\WINDOWS\SYSTEM32\oteufqtr.ini
C:\WINDOWS\system32\pfixfkni.ini
C:\WINDOWS\system32\phlvtiue.ini
C:\WINDOWS\system32\pwbiyvxv.ini
C:\WINDOWS\system32\qsvtksle.ini
C:\WINDOWS\system32\ramxjpel.ini
C:\WINDOWS\system32\romkjfno.ini
C:\WINDOWS\system32\sagipjtk.ini
C:\WINDOWS\system32\smcoxkdl.ini
C:\WINDOWS\system32\tcwtvlpy.ini
C:\WINDOWS\system32\thbavrrs.ini
C:\WINDOWS\system32\tkqcolia.ini
C:\WINDOWS\system32\tpfqnhsa.ini
C:\WINDOWS\system32\tvexlssn.ini
C:\WINDOWS\system32\ufkjrpkn.ini
C:\WINDOWS\system32\urlsdpsk.ini
C:\WINDOWS\system32\uyymrtff.ini
C:\WINDOWS\system32\vcgjowlp.ini
C:\WINDOWS\system32\vjvbowfo.ini
C:\WINDOWS\system32\vqlirtsb.ini
C:\WINDOWS\system32\vxskklwu.ini
C:\WINDOWS\system32\wbigxyoa.ini
C:\WINDOWS\system32\wqepweyp.ini
C:\WINDOWS\system32\wumsjbec.ini
C:\WINDOWS\system32\xchyeekw.ini
C:\WINDOWS\system32\xckgault.ini
C:\WINDOWS\system32\xdrvtfag.ini
C:\WINDOWS\system32\xlrcslko.ini
C:\WINDOWS\system32\xsdagonf.ini
C:\WINDOWS\system32\xxgamlbh.ini
C:\WINDOWS\system32\yayhrmpf.ini
C:\WINDOWS\system32\ybkodntp.ini
C:\WINDOWS\system32\yffupgfs.ini
C:\WINDOWS\system32\ykthljpb.ini

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_FOPN
-------\Legacy_FWSVC
-------\Service_FWSvc

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-26 to 2008-07-26 ))))))))))))))))))))))))))))))))))))
.

2008-07-26 21:53 . 2008-07-26 21:53 <REP> d-------- C:\VundoFix Backups
2008-07-25 22:32 . 2008-07-26 21:02 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Incomplete
2008-07-25 22:31 . 2008-07-26 21:01 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Application Data\LimeWire
2008-07-25 22:30 . 2008-07-25 22:31 <REP> d-------- C:\Program Files\LimeWire
2008-07-25 21:57 . 2008-07-25 21:57 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\dwhelper
2008-07-25 21:52 . 2008-07-25 21:52 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Application Data\vlc
2008-07-25 21:39 . 2008-07-25 21:39 <REP> d-------- C:\Program Files\Tomato
2008-07-25 21:39 . 2008-07-03 14:26 6,294,528 --a------ C:\WINDOWS\SYSTEM32\MediaIO1.dll
2008-07-24 10:39 . 2008-07-24 10:39 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-07-24 10:39 . 2008-07-24 10:39 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Application Data\Malwarebytes
2008-07-24 10:39 . 2008-07-24 10:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-24 10:39 . 2008-07-23 20:09 38,472 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\mbamswissarmy.sys
2008-07-24 10:39 . 2008-07-23 20:09 17,144 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\mbam.sys
2008-07-23 12:44 . 2008-07-23 12:44 <REP> d-------- C:\Program Files\Avira
2008-07-23 12:44 . 2008-07-23 12:44 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-07-22 19:50 . 2008-07-26 14:30 <REP> d-------- C:\hijackthis
2008-07-22 12:17 . 2008-07-22 12:17 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Application Data\Talkback
2008-07-20 19:57 . 2008-07-20 19:58 <REP> d-------- C:\Program Files\Avant Browser
2008-07-20 12:22 . 2008-07-23 12:12 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Application Data\MxBoost
2008-07-20 12:21 . 2008-07-25 21:42 <REP> d-------- C:\Program Files\Maxthon2
2008-07-19 23:26 . 2008-07-19 23:26 268 --ah----- C:\sqmdata16.sqm
2008-07-19 23:26 . 2008-07-19 23:26 244 --ah----- C:\sqmnoopt16.sqm
2008-07-19 14:14 . 2008-07-20 16:16 <REP> d-------- C:\Program Files\CamStudio
2008-07-19 14:13 . 2008-07-19 14:13 <REP> d-------- C:\WINDOWS\7BB40A228D9843F9A08AE7EFF5AB1324.TMP
2008-07-19 14:08 . 2008-07-19 14:08 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2008-07-17 00:22 . 2008-07-17 00:22 268 --ah----- C:\sqmdata15.sqm
2008-07-17 00:22 . 2008-07-17 00:22 244 --ah----- C:\sqmnoopt15.sqm
2008-07-13 12:51 . 2008-07-13 12:52 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WinZip
2008-07-13 12:03 . 2008-07-13 12:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Trymedia
2008-07-13 11:58 . 2008-07-13 12:13 <REP> d-------- C:\Program Files\eidos
2008-07-13 10:51 . 2008-07-13 10:51 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Application Data\BitZipper
2008-07-13 10:50 . 2008-07-13 12:51 <REP> d-------- C:\Program Files\BitZipper
2008-07-13 10:04 . 2008-07-13 10:04 807 --a------ C:\WINDOWS\_ISENV31.INI
2008-07-13 10:01 . 2008-07-13 10:01 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\WINDOWS
2008-07-13 10:01 . 2008-07-13 10:04 502 --a------ C:\WINDOWS\_iserr31.ini
2008-07-13 10:01 . 2008-07-13 10:01 126 --a------ C:\WINDOWS\_delis43.ini
2008-07-12 11:34 . 2008-07-12 11:34 <REP> dr------- C:\Documents and Settings\Lucie.L0N6L2\Favoris
2008-07-12 11:34 . 2008-07-20 14:22 <REP> d-------- C:\Documents and Settings\Lucie.L0N6L2\Bureau
2008-07-12 11:33 . 2008-01-28 18:55 <REP> d--h----- C:\Documents and Settings\Lucie.L0N6L2\Voisinage r‚seau
2008-07-12 11:33 . 2008-01-28 18:55 <REP> d--h----- C:\Documents and Settings\Lucie.L0N6L2\Voisinage d'impression
2008-07-12 11:33 . 2008-01-28 18:55 <REP> d--h----- C:\Documents and Settings\Lucie.L0N6L2\ModŠles
2008-07-12 11:33 . 2008-07-12 11:34 <REP> dr------- C:\Documents and Settings\Lucie.L0N6L2\Mes documents
2008-07-12 11:33 . 2008-01-28 18:55 <REP> dr------- C:\Documents and Settings\Lucie.L0N6L2\Menu D‚marrer
2008-07-12 11:33 . 2008-07-26 14:37 <REP> d-------- C:\Documents and Settings\Lucie.L0N6L2
2008-07-10 21:50 . 2008-07-10 21:50 <REP> d-------- C:\WINDOWS\ShellNew
2008-07-10 21:48 . 2008-07-10 21:48 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Application Data\Microsoft Web Folders
2008-07-10 21:42 . 1998-03-06 17:34 55,296 --------- C:\WINDOWS\SYSTEM32\SERVICE.CPL
2008-07-02 21:02 . 2008-07-09 22:11 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Application Data\MSN6
2008-07-02 18:29 . 2008-07-02 18:29 <REP> d---s---- C:\Documents and Settings\Hugo.L0N6L2\UserData
2008-07-02 18:10 . 2008-07-02 18:10 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Application Data\Avant Profiles
2008-07-02 17:35 . 2008-07-11 19:19 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Contacts
2008-07-02 17:33 . 2008-01-28 18:55 <REP> d--h----- C:\Documents and Settings\Hugo.L0N6L2\Voisinage r‚seau
2008-07-02 17:33 . 2008-01-28 18:55 <REP> d--h----- C:\Documents and Settings\Hugo.L0N6L2\Voisinage d'impression
2008-07-02 17:33 . 2008-01-28 18:55 <REP> d--h----- C:\Documents and Settings\Hugo.L0N6L2\ModŠles
2008-07-02 17:33 . 2008-07-26 22:05 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Mes documents
2008-07-02 17:33 . 2008-07-20 19:58 <REP> dr------- C:\Documents and Settings\Hugo.L0N6L2\Menu D‚marrer
2008-07-02 17:33 . 2008-07-02 17:34 <REP> dr------- C:\Documents and Settings\Hugo.L0N6L2\Favoris
2008-07-02 17:33 . 2008-07-26 21:53 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2\Bureau
2008-07-02 17:33 . 2008-07-26 14:37 <REP> d-------- C:\Documents and Settings\Hugo.L0N6L2

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-25 20:27 --------- d-----w C:\Program Files\eMule
2008-07-25 19:48 --------- d-----w C:\Program Files\VideoLAN
2008-07-20 14:18 --------- d-----w C:\Program Files\Opera
2008-07-11 21:02 --------- d-----w C:\Program Files\Opera 9.5 beta
2008-07-10 19:46 --------- d-----w C:\Program Files\microsoft frontpage
2008-06-22 16:27 --------- d-----w C:\Program Files\Web Media Player
2008-06-21 20:54 --------- d-----w C:\Program Files\Yahoo!
2008-04-07 13:41 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
2008-03-18 17:05 0 -c--a-w C:\Program Files\temp01
2008-01-12 16:37 266 --sha-w C:\Program Files\desktop.ini
2008-01-12 16:37 11,208 ---ha-w C:\Program Files\folder.htt
2008-04-13 20:15 8 --sha-w C:\WINDOWS\All users\DRM\pdrm.dat
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2001-08-28 12:00 13312]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55 5674352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.EXE" [2002-02-04 22:32 53248]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-03-01 13:32 385024]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
"SoundMan"="SOUNDMAN.EXE" [2005-09-22 16:42 90112 C:\WINDOWS\SOUNDMAN.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2001-08-28 12:00 13312]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=bfbvhafq.dll vpfeelog.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.VDOM"= vdowave.drv

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Hugo^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=C:\Documents and Settings\Hugo\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PMXInit]
--a------ 2001-06-06 00:00 700176 C:\WINDOWS\SYSTEM32\pmxinit.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]
--a------ 2007-12-06 11:58 1069920 C:\Program Files\Search Settings\SearchSettings.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Shareaza]
--a------ 2008-02-12 10:31 5214208 C:\Program Files\Crux P2P\Crux P2P.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"RaidTool"=C:\Program Files\VIA\RAID\raid_tool.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\setup\disabledrunkeys]
"LoadPowerProfile"=Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
"PMXInit"=C:\WINDOWS\SYSTEM32\PMXINIT.EXE -SetupRunOnce
"SoundMan"=SOUNDMAN.EXE
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
"InvokeSvc.exe"=C:\Program Files\Wireless 802.11g Monitor\WLanCfgG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntivirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

R0 avgntmgr;avgntmgr;C:\WINDOWS\System32\DRIVERS\avgntmgr.sys [2008-01-21 18:11]
R1 avgntdd;avgntdd;C:\WINDOWS\System32\DRIVERS\avgntdd.sys [2008-01-21 18:12]
R2 NwSapAgent;Agent SAP;C:\WINDOWS\System32\svchost.exe [2001-08-28 12:00]
S3 Boonty Games;Boonty Games;C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2008-05-07 20:38]
S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2008-07-23 20:09]
S3 o1394bul;o1394bul;C:\DOCUME~1\HUGO~1.L0N\LOCALS~1\Temp\o1394bul.sys []
S3 SlowDownCPU;SlowDownCPU;E:\ChipSet\V2-CPU\NTGLM7X.sys []
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2001-08-17 22:03]
S3 ZD1211BU(BLUESTORK);Bluestork BS-W-USB Wifi 54g USB Module Driver(BLUESTORK);C:\WINDOWS\System32\DRIVERS\zd1211Bu.sys [2006-04-19 10:03]
.
- - - - ORPHANS REMOVED - - - -

BHO-{6BD219F1-109B-45BC-BC0B-80AAA5D364EF} - C:\Documents and Settings\Lucie.L0N6L2\Local Settings\Temporary Internet Files\Content.IE5\8FW3GK4Q\3077ahntdksr[1].dll
BHO-{8E67F654-4ED2-4BF7-9B09-38CEB7711516} - C:\WINDOWS\System32\dpsrmiij.dll
BHO-{E8957F36-147C-4E44-83DD-F9BF3E183535} - C:\WINDOWS\System32\dpsrmiij.dll
ShellIconOverlayIdentifiers-{7D688A77-C613-11D0-999B-00C04FD655E1} - (no file)
HKLM-Run-WinampAgent - C:\Program Files\Winamp\winampa.exe
HKLM-Run-BMe3b1b3c0 - C:\WINDOWS\System32\evtdygxf.dll
MSConfigStartUp-SlowDownCPU - C:\WINDOWS\INF\MSI\SlowDownCPU\SlowDownCPU.exe
MSConfigStartUp-swg - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

.
------- Supplementary Scan -------
.
R0 -: HKLM-Main,Start Page = hxxp://fr.yahoo.com
O9 -: {c95fe080-8f5d-11d2-a20b-00aa003c157a} - %SystemRoot%\web\related.htm
O17 -: HKLM\CCS\Interface\{0AC38F4C-74B8-4D51-BAD8-69E75AC29FD4}: NameServer = 212.216.212.112,212.216.172.62

O16 -: DirectAnimation Java Classes - file://C:\WINDOWS\SYSTEM\dajava.cab
C:\WINDOWS\Downloaded Program Files\DirectAnimation Java Classes.osd

O16 -: Internet Explorer Classes for Java - file://C:\WINDOWS\SYSTEM\iejava.cab
C:\WINDOWS\Downloaded Program Files\Internet Explorer Classes for Java.osd

O16 -: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso4.cab
C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-26 22:12:40
Windows 5.1.2600 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\SYSTEM32\wdfmgr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\SYSTEM32\imapi.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-07-26 22:17:21 - machine was rebooted [Hugo]
ComboFix-quarantined-files.txt 2008-07-26 20:17:16

Pre-Run: 28,633,211,392 octets libres
Post-Run: 28,748,886,528 octets libres

233 --- E O F --- 2008-01-31 07:24:41