Solution pour KavoO

Bonjour,
Aujord'hui je suis entièrement satisfait du logiciel Combofix pour la résolution du problèeme KavoO; Ci-dessous le rapport de ce programme après exécution sur mon ordinateur!

Merci pour m'avoir donner ce programme; à très bientôt sur comment ca marche !

ComboFix 08-08-08.08 - cgi 2008-08-09 19:01:16.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.19 [GMT 0:00]
Endroit: C:\Documents and Settings\cgi\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\tyktjfww.exe
C:\WINDOWS\system32\amvo.exe
C:\WINDOWS\system32\amvo1.dll
C:\WINDOWS\system32\ckvo.exe
C:\WINDOWS\system32\ckvo1.dll
C:\x0.cmd
E:\autorun.inf
E:\tyktjfww.exe
E:\x0.cmd

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-07-09 to 2008-08-09 ))))))))))))))))))))))))))))))))))))
.

2008-08-09 16:50 . 2008-08-09 18:55 <REP> d-------- C:\Documents and Settings\cgi\Application Data\LimeWire
2008-08-09 16:49 . 2008-08-09 16:49 <REP> d-------- C:\WINDOWS\Sun
2008-08-09 16:48 . 2008-08-09 16:48 <REP> d-------- C:\Program Files\Sun
2008-08-09 16:46 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-08-09 16:44 . 2008-08-09 16:46 <REP> d-------- C:\Program Files\Java
2008-08-09 16:38 . 2008-08-09 16:38 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-08-09 16:25 . 2008-08-09 16:29 <REP> d-------- C:\Program Files\LimeWire
2008-08-09 16:25 . 2008-08-09 16:25 4,898,144 --a------ C:\LimeWireWin.exe
2008-08-09 10:10 . 2008-08-09 14:46 <REP> d-------- C:\Documents and Settings\cgi\Application Data\Canon
2008-08-09 10:07 . 2008-08-09 10:07 <REP> d-------- C:\Documents and Settings\cgi\Application Data\Arcsoft
2008-08-08 20:45 . 2008-08-08 20:45 <REP> d-------- C:\Program Files\Philips Semiconductors
2008-08-08 20:45 . 2004-11-30 04:00 286,720 -ra------ C:\WINDOWS\713xRMT.exe
2008-08-08 20:44 . 2008-08-08 20:44 <REP> d-------- C:\WINDOWS\MyInstall
2008-08-08 20:44 . 2008-08-08 20:44 <REP> d-------- C:\Program Files\honestech
2008-08-08 20:44 . 2001-05-11 12:18 420,240 --a------ C:\WINDOWS\system32\mpg4c32.dll
2008-08-08 20:44 . 2001-05-16 16:54 309,616 --a------ C:\WINDOWS\system32\wmv8dmod.dll
2008-08-08 20:41 . 2004-08-03 22:58 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2008-08-08 20:41 . 2004-08-03 22:58 5,504 --a--c--- C:\WINDOWS\system32\dllcache\mstee.sys
2008-08-08 20:39 . 2004-11-30 04:00 276,736 -ra------ C:\WINDOWS\system32\drivers\SAA713x.sys
2008-08-08 20:37 . 2004-08-03 22:58 207,360 --a------ C:\WINDOWS\system32\drivers\Dot4.sys
2008-08-08 20:37 . 2004-08-03 22:58 207,360 --a--c--- C:\WINDOWS\system32\dllcache\dot4.sys
2008-08-08 20:37 . 2001-08-23 17:11 24,064 --a------ C:\WINDOWS\system32\drivers\Dot4usb.sys
2008-08-08 20:37 . 2001-08-23 17:11 24,064 --a--c--- C:\WINDOWS\system32\dllcache\dot4usb.sys
2008-08-08 20:37 . 2001-08-17 21:47 12,928 --a------ C:\WINDOWS\system32\drivers\Dot4Prt.sys
2008-08-08 20:37 . 2001-08-17 21:47 12,928 --a--c--- C:\WINDOWS\system32\dllcache\dot4prt.sys
2008-08-08 20:35 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-08-08 20:35 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
2008-08-08 20:29 . 2008-08-09 17:21 <REP> d-------- C:\Program Files\Fichiers communs\LightScribe
2008-08-08 20:27 . 2008-08-09 17:22 <REP> d-------- C:\Documents and Settings\cgi\Application Data\Ahead
2008-08-08 20:24 . 2008-08-08 20:24 <REP> d-------- C:\Program Files\Nero
2008-08-08 20:24 . 2008-08-08 20:29 <REP> d-------- C:\Program Files\Fichiers communs\Ahead
2008-08-08 20:24 . 2008-08-08 20:24 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Nero
2008-08-08 20:14 . 2008-08-08 20:14 <REP> d-------- C:\Documents and Settings\cgi\Application Data\ScanSoft
2008-08-08 20:14 . 2008-08-08 20:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\SSScanWizard
2008-08-08 20:14 . 2008-08-08 20:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\SSScanAppDataDir
2008-08-08 20:14 . 2008-08-08 20:14 525 --a------ C:\WINDOWS\MAXLINK.INI
2008-08-08 20:13 . 2008-08-08 20:13 <REP> d-------- C:\Program Files\ScanSoft
2008-08-08 20:13 . 2008-08-08 20:14 <REP> d-------- C:\Program Files\Fichiers communs\ScanSoft Shared
2008-08-08 20:12 . 2008-08-08 20:12 <REP> d-------- C:\Program Files\Canon
2008-08-08 20:12 . 1999-05-26 09:46 212,480 --a------ C:\WINDOWS\pcdlib32.dll
2008-08-08 20:11 . 2008-08-08 20:45 <REP> d--h----- C:\Program Files\InstallShield Installation Information
2008-08-08 20:11 . 2008-08-08 20:43 <REP> d-------- C:\Program Files\Fichiers communs\InstallShield
2008-08-08 20:11 . 2008-08-08 20:12 <REP> d-------- C:\Program Files\ArcSoft
2008-08-08 20:11 . 1995-07-31 13:44 212,480 --a------ C:\WINDOWS\system32\PCDLIB32.DLL
2008-08-08 20:11 . 1996-07-01 00:00 77,312 --a------ C:\WINDOWS\system32\TWAIN_32.DLL
2008-08-08 20:10 . 1998-11-13 11:07 307,712 --a------ C:\WINDOWS\IsUn0410.exe
2008-08-08 20:09 . 2008-08-08 20:09 <REP> d--h----- C:\CanoScan
2008-08-08 20:09 . 2002-11-20 15:15 729,088 --a------ C:\WINDOWS\system32\CNQA1209.DLL
2008-08-08 20:09 . 2002-11-20 13:42 507,904 --a------ C:\WINDOWS\system32\CNQL1209.DLL
2008-08-08 20:09 . 2001-07-20 15:25 393,225 --a------ C:\WINDOWS\system32\CNQ1209F.PLG
2008-08-08 20:09 . 2001-08-31 19:02 393,225 --a------ C:\WINDOWS\system32\CNQ1209B.PLG
2008-08-08 20:09 . 2001-09-26 13:20 393,225 --a------ C:\WINDOWS\system32\CNQ12091.PLG
2008-08-08 20:09 . 2002-05-24 03:04 389,180 --a------ C:\WINDOWS\system32\UCS32P.DLL
2008-08-08 20:09 . 2002-11-15 10:15 40,960 --a------ C:\WINDOWS\system32\CNQU83.DLL
2008-08-08 20:01 . 2008-08-08 20:01 <REP> d-------- C:\Program Files\Alwil Software
2008-08-08 20:01 . 2003-03-18 20:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2008-08-08 20:00 . 2008-08-08 20:19 <REP> d-------- C:\Program Files\Fichiers communs\Adobe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-08 19:49 --------- d-----w C:\Program Files\Microsoft.NET
2008-08-08 19:48 --------- d-----w C:\Program Files\Microsoft Works
2008-08-08 19:37 --------- d-----w C:\Program Files\microsoft frontpage
2008-08-08 19:33 --------- d-----w C:\Program Files\Services en ligne
2008-08-06 09:03 88,762 --sh--r C:\x.com
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 16:09 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 14:38 78008]
"Omnipage"="C:\Program Files\ScanSoft\OmniPageSE\opware32.exe" [2002-06-03 11:38 49152]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648]
"TV Card Remote Control Applet"="C:\WINDOWS\713xRMT.exe" [2004-11-30 04:00 286720]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 16:09 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 14:35]
R2 713xTVCard;SAA7130 TV Card;C:\WINDOWS\system32\DRIVERS\SAA713x.sys [2004-11-30 04:00]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 14:37]
R2 WDMTVTuner;Universal WDM TV Tuner;C:\WINDOWS\system32\drivers\WDMTuner.sys [2004-11-30 04:00]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{19772667-65ee-11dd-99da-0002b349b456}]
\Shell\AutoRun\command - E:\tyktjfww.exe
\Shell\explore\Command - E:\tyktjfww.exe
\Shell\open\Command - E:\tyktjfww.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{19772668-65ee-11dd-99da-0002b349b456}]
\Shell\AutoRun\command - E:\tyktjfww.exe
\Shell\explore\Command - E:\tyktjfww.exe
\Shell\open\Command - E:\tyktjfww.exe
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-kamsoft - C:\WINDOWS\system32\ckvo.exe

.
------- Supplementary Scan -------
.
O8 -: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-09 19:06:22
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
TV Card Remote Control Applet = C:\WINDOWS\713xRMT.exe?????????????????????????????????????????????????????????????????????????????????????????????????????????????w???w????????T???a?@?????????r?@?X???????????????d???????SAA7130 TV Card Remote Control Receiver?????????????????????????7?!?W(@

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\honestech\honestech TVR\scheduleTV.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-08-09 19:11:09 - machine was rebooted
ComboFix-quarantined-files.txt 2008-08-09 19:10:48

Pre-Run: 33,519,464,448 octets libres
Post-Run: 33,674,067,968 octets libres

159