Aider moi SVP virus antivirus XP 2008 - Page 2

Précédent
  • 1
  • 2
  1. pablomica
     
    Il a fallut que j'éteigne le pc en appuillant 5s sur le bouton car il a bugué voilla le rapport :

    ComboFix 08-08-09.06 - Paul 2008-08-10 13:47:16.1 - [color=red][b]FAT32[/b][/color]x86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.1403 [GMT 2:00]
    Endroit: C:\Downloads\ComboFix.exe
    * Création d'un nouveau point de restauration
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Program Files\rhctf3j0elt3
    C:\WINDOWS\BM46f977ce.txt
    C:\WINDOWS\BM46f977ce.xml
    C:\WINDOWS\cdmxtras
    C:\WINDOWS\cdmxtras\uninst.exe
    C:\WINDOWS\pskt.ini
    C:\WINDOWS\system32\AdCache
    C:\WINDOWS\system32\BIlRYcfe.ini
    C:\WINDOWS\system32\BIlRYcfe.ini2
    C:\WINDOWS\system32\blphcpf3j0elt3.scr
    C:\WINDOWS\system32\byxyAPIC.dll
    C:\WINDOWS\system32\cache329
    C:\WINDOWS\system32\drivers\npf.sys
    C:\WINDOWS\system32\efcYRlIB.dll
    C:\WINDOWS\system32\fjakjhvt.ini
    C:\WINDOWS\system32\geBsrRkk.dll
    C:\WINDOWS\system32\hjhalr.dll
    C:\WINDOWS\system32\lphcpf3j0elt3.exe
    C:\WINDOWS\system32\ohogsbkk.dll
    C:\WINDOWS\system32\opqcbwfo.dll
    C:\WINDOWS\system32\packet.dll
    C:\WINDOWS\system32\phcpf3j0elt3.bmp
    C:\WINDOWS\system32\pphcpf3j0elt3.exe
    C:\WINDOWS\system32\pthreadVC.dll
    C:\WINDOWS\system32\tvhjkajf.dll
    C:\WINDOWS\system32\wanpacket.dll
    C:\WINDOWS\system32\winjyp32.dll
    C:\WINDOWS\system32\wpcap.dll
    D:\Documents and Settings\All Users\Bureau\Antivirus XP 2008.lnk
    D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008
    D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\Antivirus XP 2008.lnk
    D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
    D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\License Agreement.lnk
    D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\Register Antivirus XP 2008.lnk
    D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\Uninstall.lnk
    D:\Documents and Settings\paul\Application Data\macromedia\Flash Player\#SharedObjects\ZEEQJ3BG\interclick.com
    D:\Documents and Settings\paul\Application Data\macromedia\Flash Player\#SharedObjects\ZEEQJ3BG\interclick.com\ud.sol
    D:\Documents and Settings\paul\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com
    D:\Documents and Settings\paul\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol
    D:\Documents and Settings\paul\Application Data\rhctf3j0elt3
    D:\install.exe
    S:\Autorun.inf

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_NNSERV
    -------\Service_NPF

    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-07-10 to 2008-08-10 ))))))))))))))))))))))))))))))))))))
    .

    2079-12-31 19:00 . 2004-08-27 11:18 97,920 --a------ C:\WINDOWS\system32\drivers\SI3112r.sys
    2079-12-31 19:00 . 2004-05-20 12:35 10,240 --a------ C:\WINDOWS\system32\drivers\SiWinAcc.sys
    2058-07-06 08:20 . 2007-08-06 16:57 3,120 --a------ C:\WINDOWS\MF_C421.lfa
    2058-07-06 08:20 . 2007-08-06 16:57 3,120 --a------ C:\WINDOWS\MF_C420.lfa
    2008-08-10 12:49 . 2008-08-10 12:49 2,048 --a------ C:\WINDOWS\system32\vevogdid.exe
    2008-08-10 03:50 . 2008-08-10 03:50 <REP> d-------- C:\Toolbar SD
    2008-08-10 01:48 . 2008-08-10 13:23 94,208 --a------ C:\WINDOWS\system32\23.tmp
    2008-08-10 01:24 . 2008-08-10 01:24 <REP> d-------- D:\Documents and Settings\paul\Application Data\Malwarebytes
    2008-08-10 01:24 . 2008-08-10 01:24 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-08-10 01:24 . 2008-08-10 01:24 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-08-10 01:24 . 2008-07-30 20:07 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
    2008-08-10 01:24 . 2008-07-30 20:07 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
    2008-08-10 01:22 . 2008-08-10 01:22 <REP> d-------- C:\_OTMoveIt
    2008-08-10 01:00 . 2008-08-10 01:00 <REP> d-------- C:\Lop SD
    2008-08-10 00:51 . 2008-08-10 00:51 16,384 --a------ C:\temp\Perflib_Perfdata_620.dat
    2008-08-10 00:13 . 2008-08-10 00:47 3,546 --a------ C:\WINDOWS\system32\tmp.reg
    2008-08-10 00:12 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
    2008-08-10 00:12 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
    2008-08-10 00:12 . 2008-05-29 09:35 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
    2008-08-10 00:12 . 2008-05-18 21:40 82,944 --a------ C:\WINDOWS\system32\IEDFix.exe
    2008-08-10 00:12 . 2008-07-02 13:33 82,432 --a------ C:\WINDOWS\system32\IEDFix.C.exe
    2008-08-10 00:12 . 2008-08-09 15:37 82,432 --a------ C:\WINDOWS\system32\404Fix.exe
    2008-08-10 00:12 . 2003-06-05 21:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
    2008-08-10 00:12 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
    2008-08-10 00:12 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
    2008-08-09 23:47 . 2008-08-09 23:47 <REP> d-------- C:\Program Files\Trend Micro
    2008-08-09 22:40 . 2008-08-09 22:40 <REP> d-------- C:\Program Files\Lettriq
    2008-08-09 22:19 . 2008-08-09 22:19 <REP> d-------- C:\Program Files\GUILD WARS
    2008-08-08 12:17 . 2008-08-08 12:17 <REP> d-------- C:\Program Files\GameSpy
    2008-08-07 16:46 . 2008-08-07 16:46 <REP> dr-h----- D:\Documents and Settings\paul\Application Data\SecuROM
    2008-08-07 16:46 . 2008-08-07 16:47 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
    2008-08-07 15:58 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
    2008-08-07 15:58 . 2007-05-16 16:45 3,497,832 --a------ C:\WINDOWS\system32\d3dx9_34.dll
    2008-08-07 15:58 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
    2008-08-07 15:58 . 2007-05-16 16:45 1,124,720 --a------ C:\WINDOWS\system32\D3DCompiler_34.dll
    2008-08-07 15:58 . 2008-08-07 15:58 669,184 --a------ C:\WINDOWS\system32\pbsvc.exe
    2008-08-07 15:58 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
    2008-08-07 15:58 . 2007-05-16 16:45 443,752 --a------ C:\WINDOWS\system32\d3dx10_34.dll
    2008-08-07 15:58 . 2008-08-07 15:58 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe
    2008-08-07 15:58 . 2008-08-07 15:58 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
    2008-08-07 15:58 . 2008-08-07 15:58 22,328 --a------ D:\Documents and Settings\paul\Application Data\PnkBstrK.sys
    2008-08-07 15:58 . 2008-08-07 15:58 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
    2008-08-06 19:58 . 2008-08-06 19:59 848 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
    2008-08-06 19:56 . 2008-08-06 19:56 <REP> d-------- C:\Program Files\Corel
    2008-08-04 18:51 . 2008-08-04 18:51 23,392 --a------ C:\WINDOWS\system32\nscompat.tlb
    2008-08-04 18:51 . 2008-08-04 18:51 16,832 --a------ C:\WINDOWS\system32\amcompat.tlb
    2008-08-04 16:10 . 2008-08-04 16:10 <REP> d-------- C:\Hiajckthis
    2008-08-04 15:30 . 2008-08-04 15:30 <REP> d-------- C:\Program Files\eX-Sense
    2008-08-04 15:30 . 2008-08-04 15:30 73,216 --a------ C:\WINDOWS\temp.002
    2008-08-04 15:23 . 2008-08-04 15:23 73,216 --a------ C:\WINDOWS\temp.001
    2008-08-04 15:23 . 2008-08-04 15:23 1,685 --a------ C:\WINDOWS\ST6UNST.000
    2008-08-04 15:14 . 2008-08-04 15:14 73,216 --a------ C:\WINDOWS\temp.000
    2008-08-04 13:39 . 2008-08-04 13:39 <REP> d--hs---- C:\FOUND.000
    2008-08-03 18:23 . 2008-08-03 18:23 <REP> d-------- C:\Program Files\NCSoft
    2008-08-03 18:19 . 2008-08-03 18:21 <REP> d-------- D:\Documents and Settings\paul\Application Data\GetRightToGo
    2008-08-01 11:38 . 2008-08-01 11:38 <REP> d--hs---- C:\FOUND.027
    2008-07-26 12:25 . 2008-07-26 12:25 <REP> d-------- C:\Program Files\MSXML 6.0
    2008-07-26 12:20 . 2008-07-26 12:21 <REP> d-------- C:\Program Files\MSXML 4.0
    2008-07-25 15:19 . 2008-07-25 15:20 <REP> d-------- C:\Program Files\Project64 1.6

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-08-09 15:48 --------- d-----w D:\Documents and Settings\paul\Application Data\OpenOffice.org2
    2008-08-04 13:30 311,296 ------w C:\WINDOWS\Setup1.exe
    2008-07-25 20:59 --------- d-----w D:\Documents and Settings\paul\Application Data\teamspeak2
    2008-07-03 15:24 --------- d-----w D:\Documents and Settings\paul\Application Data\Canneverbe_Limited
    2008-07-03 15:24 --------- d-----w C:\Program Files\CDBurnerXP
    2008-07-02 15:50 --------- d-----w D:\Documents and Settings\paul\Application Data\ATI
    2008-07-02 15:50 --------- d-----w D:\Documents and Settings\All Users\Application Data\ATI
    2008-07-02 15:43 --------- d-----w C:\Program Files\ATI Technologies
    2008-06-26 14:59 --------- d-----w D:\Documents and Settings\paul\Application Data\MegauploadToolbar
    2008-06-26 10:24 --------- d-----w D:\Documents and Settings\paul\Application Data\Megaupload
    2008-06-26 10:24 --------- d-----w C:\Program Files\MegauploadToolbar
    2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
    2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
    2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
    2008-06-15 16:46 --------- d-----w D:\Documents and Settings\paul\Application Data\Mumble
    2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
    2008-06-14 15:17 73,216 ------w C:\WINDOWS\ST6UNST.EXE
    2008-06-14 15:17 --------- d-----w C:\Program Files\Outlook Express Quick Backup
    2008-06-14 13:26 --------- d-----w C:\Program Files\Steam
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
    "{06663B56-0D73-4f9f-BCC5-4AA941470AFD}"= "C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL" [2007-09-09 21:16 61440]

    [HKEY_CLASSES_ROOT\clsid\{06663b56-0d73-4f9f-bcc5-4aa941470afd}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4}"= "C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL" [2007-09-09 21:16 266240]

    [HKEY_CLASSES_ROOT\clsid\{e3ea4fd9-cade-4ae5-84f7-086eee888be4}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 09:00 15360]
    "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-09-18 15:16 171464]
    "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-01-17 21:17 190024]
    "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
    "Steam"="c:\program files\steam\steam.exe" [2008-06-14 15:34 1271032]
    "Comrade.exe"="C:\Program Files\GameSpy\Comrade\Comrade.exe" [2008-07-30 01:46 763392]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 09:00 208952]
    "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 09:00 455168]
    "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 09:00 455168]
    "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 09:01 67584]
    "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-07 16:05 344064]
    "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-02-08 22:31 180269]
    "VX3000"="C:\WINDOWS\vVX3000.exe" [2006-12-05 15:39 707360]
    "Efface Historique 2.1"="C:\PROGRA~1\EFFACE~1\EFFACE~1.EXE" [2004-04-01 02:01 322560]
    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
    "SMSTray"="C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-09-20 08:23 132624]
    "WiPen"="C:\Program Files\WiPen\wpmanage.exe" [2005-10-06 14:13 566272]
    "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 12:17 61440]
    "SoundMan"="SOUNDMAN.EXE" [2005-10-24 08:45 90112 C:\WINDOWS\soundman.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 09:00 15360]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
    "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{88485281-8b4b-4f8d-9ede-82e29a064277}"= "C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL" [2004-11-23 16:51 192512]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "msacm.l3acm"= l3codecp.acm
    "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
    "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm
    "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm
    "msacm.ac3filter"= ac3filter.acm

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusDisableNotify"=dword:00000001
    "UpdatesDisableNotify"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "C:\\Program Files\\adslTV\\adslTV.exe"=
    "C:\\Program Files\\HomePlayer1.4\\HomePlayer.exe"=
    "C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
    "C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
    "C:\\Program Files\\mIRC\\mirc.exe"=
    "C:\\Program Files\\Messenger\\Msmsgs.exe"=
    "C:\\Program Files\\FlashGet\\flashget.exe"=
    "C:\\WINDOWS\\system32\\muzapp.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "C:\\WINDOWS\\system32\\PnkBstrA.exe"=
    "C:\\WINDOWS\\system32\\PnkBstrB.exe"=
    "C:\\WINDOWS\\system32\\winver.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
    "26541:TCP"= 26541:TCP:BitComet 26541 TCP
    "26541:UDP"= 26541:UDP:BitComet 26541 UDP

    R0 pe3aqb2b;Lettriq Environment Driver (pe3aqb2b);C:\WINDOWS\system32\drivers\pe3aqb2b.sys [2008-06-06 18:47]
    R0 pf2aqb2b;Lettriq File System Driver (pf2aqb2b);C:\WINDOWS\system32\drivers\pf2aqb2b.sys [2008-06-06 18:47]
    R0 SI3112r;ATI-437A Serial ATA Controller;C:\WINDOWS\system32\DRIVERS\SI3112r.sys [2004-08-27 11:18]
    R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35]
    R1 FNETDEVI;FNETDEVI;C:\WINDOWS\system32\drivers\FNETDEVI.SYS [2007-12-25 13:39]
    R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37]
    R2 MSCamSvc;MSCamSvc;C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-01-04 14:13]
    R2 NMSAccessU;NMSAccessU;C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 15:34]
    R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-27 06:51]
    R3 PTWDrv;PTW - Process monitoring driver;C:\Program Files\MainSoft\PC TimeWatch\PTWatch.sys [2003-10-20 18:07]
    R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 04:45]
    S2 ahfprog;ahfP Service;C:\WINDOWS\system32\ahfp.exe [2007-12-30 10:42]
    S2 pr2aqb2b;Lettriq Drivers Auto Removal (pr2aqb2b);C:\WINDOWS\system32\pr2aqb2b.exe svc []
    S2 PTWsvc;PCTimeWatch;C:\Program Files\MainSoft\PC TimeWatch\PTWsvc.exe [2007-08-13 01:10]
    S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-05-17 14:15]
    S3 PsSdk41;PsSdk41;C:\WINDOWS\system32\Drivers\pssdk41.sys [2008-05-11 11:03]
    S3 SCREAMINGBDRIVER;Screaming Bee Audio;C:\WINDOWS\system32\drivers\ScreamingBAudio.sys []
    S4 Boonty Games;Boonty Games;C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe []
    .
    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

    2007-02-13 C:\WINDOWS\Tasks\Rappel d'enregistrement 2.job
    - C:\WINDOWS\system32\OOBE\oobebaln.exe [2004-08-10 09:00]

    2008-07-02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
    - C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2007-01-10 15:42]

    2008-08-08 C:\WINDOWS\Tasks\Norton Security Scan.job
    - C:\Program Files\Norton Security Scan\Nss.exe []
    .
    - - - - ORPHANS REMOVED - - - -

    HKLM-Run-Adobe Photo Downloader - C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
    HKLM-Run-lphcpf3j0elt3 - C:\WINDOWS\system32\lphcpf3j0elt3.exe
    HKLM-Run-SMrhctf3j0elt3 - C:\Program Files\rhctf3j0elt3\rhctf3j0elt3.exe
    HKLM-Run-45ca4452 - C:\WINDOWS\system32\tvhjkajf.dll
    HKLM-Run-BM46f977ce - C:\WINDOWS\system32\opqcbwfo.dll
    Notify-winjyp32 - winjyp32.dll

    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - D:\Documents and Settings\paul\Application Data\Mozilla\Firefox\Profiles\oyn4aykf.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.exalead.com/

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-10 13:53:33
    Windows 5.1.2600 Service Pack 2 FAT NTAPI

    Balayage processus cach‚s ...

    Balayage cach‚ autostart entries ...

    Balayage des fichiers cach‚s ...

    Scan termin‚ avec succŠs
    Les fichiers cach‚s: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\PSSdk23]
    "ImagePath"="\??\C:\WINDOWS\system32\Drivers\PsSdk23.drv"
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
    C:\WINDOWS\ehome\mcrdsvc.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files\MainSoft\PC TimeWatch\PctwTI.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    .
    **************************************************************************
    .
    Temps d'accomplissement: 2008-08-10 13:58:02 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-08-10 11:58:00

    Pre-Run: 8,685,658,112 octets libres
    Post-Run: 8,727,330,816 octets libres

    288 --- E O F --- 2008-08-06 17:07:32
    0
  2. Utilisateur anonyme
     
    Copie le texte ci-dessous :

    File::
    C:\WINDOWS\system32\vevogdid.exe
    C:\temp\Perflib_Perfdata_620.dat
    C:\WINDOWS\system32\tmp.reg
    C:\WINDOWS\system32\VCCLSID.exe
    C:\WINDOWS\system32\SrchSTS.exe
    C:\WINDOWS\system32\VACFix.exe
    C:\WINDOWS\system32\IEDFix.exe
    C:\WINDOWS\system32\IEDFix.C.exe
    C:\WINDOWS\system32\404Fix.exe
    C:\WINDOWS\system32\Process.exe
    C:\WINDOWS\system32\dumphive.exe
    C:\WINDOWS\system32\WS2Fix.exe

    Folder::
    C:\Toolbar SD
    C:\Program Files\PandoBar
    C:\PROGRA~1\EFFACE~1
    C:\Program Files\Fichiers communs\BOONTY Shared

    Registry::
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
    "{06663B56-0D73-4f9f-BCC5-4AA941470AFD}"=-
    [-HKEY_CLASSES_ROOT\clsid\{06663b56-0d73-4f9f-bcc5-4aa941470afd}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{E3EA4FD9-CADE-4ae5-84F7-086EEE888BE4}"=-
    [-HKEY_CLASSES_ROOT\clsid\{e3ea4fd9-cade-4ae5-84f7-086eee888be4}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Efface Historique 2.1"=-

    Driver::
    Boonty Games

    Ouvre le Bloc-Notes puis colle le texte copié.
    (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
    Sauvegarde ce fichier sous le nom de CFScript.txt

    Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

    http://sd-1.archive-host.com/membres/up/1366464061/CFScript.gif

    Cela va relancer Combofix,

    Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

    Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

    Ne touche à rien tant que le scan n'est pas terminé.

    Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.

    S'il n'y a pas de rédémarrage, poste quand même les rapports.

    0
  3. pablomica
     
    ComboFix 08-08-09.06 - Paul 2008-08-10 14:27:02.3 - [color=red][b]FAT32[/b][/color]x86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.1475 [GMT 2:00]
    Endroit: C:\Downloads\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    ---- Previous Run -------
    .
    C:\PROGRA~1\EFFACE~1
    C:\PROGRA~1\EFFACE~1\EffaceHistorique.exe
    C:\Program Files\PandoBar
    C:\Program Files\PandoBar\bar\1.bin\NPPANDBR.DLL
    C:\Program Files\PandoBar\bar\1.bin\P4FFXTBR.JAR
    C:\Program Files\PandoBar\bar\1.bin\P4FFXTBR.MANIFEST
    C:\Program Files\PandoBar\bar\1.bin\P4HIGHIN.EXE
    C:\Program Files\PandoBar\bar\1.bin\P4NTSTBR.JAR
    C:\Program Files\PandoBar\bar\1.bin\P4NTSTBR.MANIFEST
    C:\Program Files\PandoBar\bar\1.bin\P4PLUGIN.DLL
    C:\Program Files\PandoBar\bar\1.bin\PANDOBAR.DLL
    C:\Program Files\PandoBar\bar\Cache\[u]0[/u]1EE9392
    C:\Program Files\PandoBar\bar\Cache\[u]0[/u]1EE978A.bin
    C:\Program Files\PandoBar\bar\Cache\[u]0[/u]1EE9B52.bin
    C:\Program Files\PandoBar\bar\Cache\[u]0[/u]1EE9CBA.bin
    C:\Program Files\PandoBar\bar\Cache\[u]0[/u]1EE9ECD.bin
    C:\Program Files\PandoBar\bar\Cache\[u]0[/u]1EEA015.bin
    C:\Program Files\PandoBar\bar\Cache\[u]0[/u]1EEA19C.bin
    C:\Program Files\PandoBar\bar\Cache\[u]0[/u]1EEA2E4.bin
    C:\Program Files\PandoBar\bar\Cache\files.ini
    C:\Program Files\PandoBar\bar\History\search2
    C:\Program Files\PandoBar\bar\Settings\prevcfg2.htm
    C:\Program Files\PandoBar\SrchAstt\1.bin\P4SRCHAS.DLL
    C:\temp\Perflib_Perfdata_620.dat
    C:\Toolbar SD
    C:\Toolbar SD\Back.cmd
    C:\Toolbar SD\Backup-TB\DOCUME~1\paul\LOCALS~1\Temp\fhg.inf
    C:\Toolbar SD\Backup-TB\DOCUME~1\paul\LOCALS~1\Temp\l3codeca.acm
    C:\Toolbar SD\Backup-TB\Program Files\Fichiers communs\WhenU\DTAdapter.exe
    C:\Toolbar SD\Backup-TB\Program Files\Fichiers communs\WhenU\DTPlugin.dll
    C:\Toolbar SD\Backup-TB\Program Files\MOZILL~1\EXTENS~1\chrome.manifest
    C:\Toolbar SD\Backup-TB\Program Files\MOZILL~1\EXTENS~1\install.rdf
    C:\Toolbar SD\Backup-TB\Reg\HKCU_Run.reg
    C:\Toolbar SD\Backup-TB\Reg\HKLM_BHO.reg
    C:\Toolbar SD\Backup-TB\Reg\HKLM_Classes.reg
    C:\Toolbar SD\Backup-TB\Reg\HKLM_Run.reg
    C:\Toolbar SD\Backup-TB\Reg\HKLM_ToolBar.reg
    C:\Toolbar SD\Backup-TB\Reg\HKLM_Uninstall.reg
    C:\Toolbar SD\Backup-TB\WINDOWS\Fonts\acrsec.fon
    C:\Toolbar SD\Backup-TB\WINDOWS\smdat32a.sys
    C:\Toolbar SD\Backup-TB\WINDOWS\smdat32m.sys
    C:\Toolbar SD\DemP.cmd
    C:\Toolbar SD\DirectFix.cmd
    C:\Toolbar SD\Fich.cmd
    C:\Toolbar SD\FixExt.cmd
    C:\Toolbar SD\KILL.cmd
    C:\Toolbar SD\Langues.cmd
    C:\Toolbar SD\osVer.exe
    C:\Toolbar SD\paths.bat
    C:\Toolbar SD\Process.exe
    C:\Toolbar SD\Rech.cmd
    C:\Toolbar SD\RegP2.txt
    C:\Toolbar SD\RegP3.txt
    C:\Toolbar SD\RegP4.txt
    C:\Toolbar SD\RegP5.txt
    C:\Toolbar SD\RegPCU.txt
    C:\Toolbar SD\RegPLM.txt
    C:\Toolbar SD\RegTBSD.reg
    C:\Toolbar SD\sed.exe
    C:\Toolbar SD\setpath.exe
    C:\Toolbar SD\ToolBar S&D.lnk
    C:\Toolbar SD\ToolBarSD.cmd
    C:\Toolbar SD\ToolBarSD.ico
    C:\Toolbar SD\Uninstal.exe
    C:\WINDOWS\system32\404Fix.exe
    C:\WINDOWS\system32\dumphive.exe
    C:\WINDOWS\system32\IEDFix.C.exe
    C:\WINDOWS\system32\IEDFix.exe
    C:\WINDOWS\system32\Process.exe
    C:\WINDOWS\system32\SrchSTS.exe
    C:\WINDOWS\system32\tmp.reg
    C:\WINDOWS\system32\VACFix.exe
    C:\WINDOWS\system32\VCCLSID.exe
    C:\WINDOWS\system32\vevogdid.exe
    C:\WINDOWS\system32\WS2Fix.exe

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_BOONTY_GAMES
    -------\Service_Boonty Games

    ((((((((((((((((((((((((((((( Fichiers créés 2008-07-10 to 2008-08-10 ))))))))))))))))))))))))))))))))))))
    .

    2079-12-31 19:00 . 2004-08-27 11:18 97,920 --a------ C:\WINDOWS\system32\drivers\SI3112r.sys
    2079-12-31 19:00 . 2004-05-20 12:35 10,240 --a------ C:\WINDOWS\system32\drivers\SiWinAcc.sys
    2058-07-06 08:20 . 2007-08-06 16:57 3,120 --a------ C:\WINDOWS\MF_C421.lfa
    2058-07-06 08:20 . 2007-08-06 16:57 3,120 --a------ C:\WINDOWS\MF_C420.lfa
    2008-08-10 14:22 . 2008-08-10 14:22 16,384 --a----t- C:\temp\Perflib_Perfdata_638.dat
    2008-08-10 01:48 . 2008-08-10 13:23 94,208 --a------ C:\WINDOWS\system32\23.tmp
    2008-08-10 01:24 . 2008-08-10 01:24 <REP> d-------- D:\Documents and Settings\paul\Application Data\Malwarebytes
    2008-08-10 01:24 . 2008-08-10 01:24 <REP> d-------- D:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-08-10 01:24 . 2008-08-10 01:24 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-08-10 01:24 . 2008-07-30 20:07 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
    2008-08-10 01:24 . 2008-07-30 20:07 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
    2008-08-10 01:22 . 2008-08-10 01:22 <REP> d-------- C:\_OTMoveIt
    2008-08-10 01:00 . 2008-08-10 01:00 <REP> d-------- C:\Lop SD
    2008-08-09 23:47 . 2008-08-09 23:47 <REP> d-------- C:\Program Files\Trend Micro
    2008-08-09 22:40 . 2008-08-09 22:40 <REP> d-------- C:\Program Files\Lettriq
    2008-08-09 22:19 . 2008-08-09 22:19 <REP> d-------- C:\Program Files\GUILD WARS
    2008-08-08 12:17 . 2008-08-08 12:17 <REP> d-------- C:\Program Files\GameSpy
    2008-08-07 16:46 . 2008-08-07 16:46 <REP> dr-h----- D:\Documents and Settings\paul\Application Data\SecuROM
    2008-08-07 16:46 . 2008-08-07 16:47 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
    2008-08-07 15:58 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
    2008-08-07 15:58 . 2007-05-16 16:45 3,497,832 --a------ C:\WINDOWS\system32\d3dx9_34.dll
    2008-08-07 15:58 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
    2008-08-07 15:58 . 2007-05-16 16:45 1,124,720 --a------ C:\WINDOWS\system32\D3DCompiler_34.dll
    2008-08-07 15:58 . 2008-08-07 15:58 669,184 --a------ C:\WINDOWS\system32\pbsvc.exe
    2008-08-07 15:58 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
    2008-08-07 15:58 . 2007-05-16 16:45 443,752 --a------ C:\WINDOWS\system32\d3dx10_34.dll
    2008-08-07 15:58 . 2008-08-07 15:58 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe
    2008-08-07 15:58 . 2008-08-07 15:58 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
    2008-08-07 15:58 . 2008-08-07 15:58 22,328 --a------ D:\Documents and Settings\paul\Application Data\PnkBstrK.sys
    2008-08-07 15:58 . 2008-08-07 15:58 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
    2008-08-06 19:58 . 2008-08-06 19:59 848 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
    2008-08-06 19:56 . 2008-08-06 19:56 <REP> d-------- C:\Program Files\Corel
    2008-08-04 18:51 . 2008-08-04 18:51 23,392 --a------ C:\WINDOWS\system32\nscompat.tlb
    2008-08-04 18:51 . 2008-08-04 18:51 16,832 --a------ C:\WINDOWS\system32\amcompat.tlb
    2008-08-04 16:10 . 2008-08-04 16:10 <REP> d-------- C:\Hiajckthis
    2008-08-04 15:30 . 2008-08-04 15:30 <REP> d-------- C:\Program Files\eX-Sense
    2008-08-04 15:30 . 2008-08-04 15:30 73,216 --a------ C:\WINDOWS\temp.002
    2008-08-04 15:23 . 2008-08-04 15:23 73,216 --a------ C:\WINDOWS\temp.001
    2008-08-04 15:23 . 2008-08-04 15:23 1,685 --a------ C:\WINDOWS\ST6UNST.000
    2008-08-04 15:14 . 2008-08-04 15:14 73,216 --a------ C:\WINDOWS\temp.000
    2008-08-04 13:39 . 2008-08-04 13:39 <REP> d--hs---- C:\FOUND.000
    2008-08-03 18:23 . 2008-08-03 18:23 <REP> d-------- C:\Program Files\NCSoft
    2008-08-03 18:19 . 2008-08-03 18:21 <REP> d-------- D:\Documents and Settings\paul\Application Data\GetRightToGo
    2008-08-01 11:38 . 2008-08-01 11:38 <REP> d--hs---- C:\FOUND.027
    2008-07-26 12:25 . 2008-07-26 12:25 <REP> d-------- C:\Program Files\MSXML 6.0
    2008-07-26 12:20 . 2008-07-26 12:21 <REP> d-------- C:\Program Files\MSXML 4.0
    2008-07-25 15:19 . 2008-07-25 15:20 <REP> d-------- C:\Program Files\Project64 1.6

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-08-09 15:48 --------- d-----w D:\Documents and Settings\paul\Application Data\OpenOffice.org2
    2008-08-04 13:30 311,296 ------w C:\WINDOWS\Setup1.exe
    2008-07-25 20:59 --------- d-----w D:\Documents and Settings\paul\Application Data\teamspeak2
    2008-07-03 15:24 --------- d-----w D:\Documents and Settings\paul\Application Data\Canneverbe_Limited
    2008-07-03 15:24 --------- d-----w C:\Program Files\CDBurnerXP
    2008-07-02 15:50 --------- d-----w D:\Documents and Settings\paul\Application Data\ATI
    2008-07-02 15:50 --------- d-----w D:\Documents and Settings\All Users\Application Data\ATI
    2008-07-02 15:43 --------- d-----w C:\Program Files\ATI Technologies
    2008-06-26 14:59 --------- d-----w D:\Documents and Settings\paul\Application Data\MegauploadToolbar
    2008-06-26 10:24 --------- d-----w D:\Documents and Settings\paul\Application Data\Megaupload
    2008-06-26 10:24 --------- d-----w C:\Program Files\MegauploadToolbar
    2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
    2008-06-20 17:41 247,808 ------w C:\WINDOWS\system32\dllcache\mswsock.dll
    2008-06-20 17:41 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
    2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
    2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys
    2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
    2008-06-20 10:44 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys
    2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
    2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
    2008-06-15 16:46 --------- d-----w D:\Documents and Settings\paul\Application Data\Mumble
    2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
    2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\dllcache\bthport.sys
    2008-06-14 15:17 73,216 ------w C:\WINDOWS\ST6UNST.EXE
    2008-06-14 15:17 --------- d-----w C:\Program Files\Outlook Express Quick Backup
    2008-06-14 13:26 --------- d-----w C:\Program Files\Steam
    2008-06-06 16:48 415,088 ----a-w C:\WINDOWS\system32\pr2aqb2b.exe
    2008-06-03 06:20 3,100,160 ----a-w C:\WINDOWS\system32\dllcache\ati2mtag.sys
    2008-06-03 03:46 10,276,864 ----a-w C:\WINDOWS\system32\atioglx2.dll
    2008-06-03 03:22 413,696 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll
    2008-06-03 03:21 306,688 ----a-w C:\WINDOWS\system32\ati2dvag.dll
    2008-06-03 03:11 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll
    2008-06-03 03:11 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe
    2008-06-03 03:11 180,224 ----a-w C:\WINDOWS\system32\atipdlxx.dll
    2008-06-03 03:11 139,264 ----a-w C:\WINDOWS\system32\Oemdspif.dll
    2008-06-03 03:11 139,264 ----a-w C:\WINDOWS\system32\ati2evxx.dll
    2008-06-03 03:09 552,960 ----a-w C:\WINDOWS\system32\ati2evxx.exe
    2008-06-03 03:08 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL
    2008-06-03 03:04 245,760 ----a-w C:\WINDOWS\system32\atiok3x2.dll
    2008-06-03 03:02 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll
    2008-06-03 02:59 3,500,352 ----a-w C:\WINDOWS\system32\ati3duag.dll
    2008-06-03 02:48 2,120,832 ----a-w C:\WINDOWS\system32\ativvaxx.dll
    2008-06-03 02:33 48,128 ----a-w C:\WINDOWS\system32\amdpcom32.dll
    2008-06-03 02:29 348,160 ----a-w C:\WINDOWS\system32\atikvmag.dll
    2008-06-03 02:28 23,040 ----a-w C:\WINDOWS\system32\atiadlxx.dll
    2008-06-03 02:28 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll
    2008-06-03 02:22 5,439,488 ----a-w C:\WINDOWS\system32\atioglxx.dll
    2008-06-03 02:21 557,056 ----a-w C:\WINDOWS\system32\ati2cqag.dll
    2008-06-02 19:05 593,920 ------w C:\WINDOWS\system32\ati2sgag.exe
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 09:00 15360]
    "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-09-18 15:16 171464]
    "MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2008-01-17 21:17 190024]
    "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
    "Steam"="c:\program files\steam\steam.exe" [2008-06-14 15:34 1271032]
    "Comrade.exe"="C:\Program Files\GameSpy\Comrade\Comrade.exe" [2008-07-30 01:46 763392]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 09:00 208952]
    "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 09:00 455168]
    "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 09:00 455168]
    "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 09:01 67584]
    "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-07 16:05 344064]
    "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-02-08 22:31 180269]
    "VX3000"="C:\WINDOWS\vVX3000.exe" [2006-12-05 15:39 707360]
    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
    "SMSTray"="C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-09-20 08:23 132624]
    "WiPen"="C:\Program Files\WiPen\wpmanage.exe" [2005-10-06 14:13 566272]
    "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 12:17 61440]
    "SoundMan"="SOUNDMAN.EXE" [2005-10-24 08:45 90112 C:\WINDOWS\soundman.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 09:00 15360]

    D:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
    PC TimeWatch Tray Icon.lnk - C:\Program Files\MainSoft\PC TimeWatch\PctwTI.exe [2007-05-12 12:03:10 553984]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
    "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{88485281-8b4b-4f8d-9ede-82e29a064277}"= "C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL" [2004-11-23 16:51 192512]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "msacm.l3acm"= l3codecp.acm
    "msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
    "msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm
    "msacm.mpegacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\mpegacm.acm
    "msacm.ac3filter"= ac3filter.acm

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusDisableNotify"=dword:00000001
    "UpdatesDisableNotify"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "C:\\Program Files\\adslTV\\adslTV.exe"=
    "C:\\Program Files\\HomePlayer1.4\\HomePlayer.exe"=
    "C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
    "C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
    "C:\\Program Files\\mIRC\\mirc.exe"=
    "C:\\Program Files\\Messenger\\Msmsgs.exe"=
    "C:\\Program Files\\FlashGet\\flashget.exe"=
    "C:\\WINDOWS\\system32\\muzapp.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "C:\\WINDOWS\\system32\\PnkBstrA.exe"=
    "C:\\WINDOWS\\system32\\PnkBstrB.exe"=
    "C:\\WINDOWS\\system32\\winver.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
    "26541:TCP"= 26541:TCP:BitComet 26541 TCP
    "26541:UDP"= 26541:UDP:BitComet 26541 UDP

    R0 pe3aqb2b;Lettriq Environment Driver (pe3aqb2b);C:\WINDOWS\system32\drivers\pe3aqb2b.sys [2008-06-06 18:47]
    R0 pf2aqb2b;Lettriq File System Driver (pf2aqb2b);C:\WINDOWS\system32\drivers\pf2aqb2b.sys [2008-06-06 18:47]
    R0 SI3112r;ATI-437A Serial ATA Controller;C:\WINDOWS\system32\DRIVERS\SI3112r.sys [2004-08-27 11:18]
    R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35]
    R1 FNETDEVI;FNETDEVI;C:\WINDOWS\system32\drivers\FNETDEVI.SYS [2007-12-25 13:39]
    R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37]
    R2 MSCamSvc;MSCamSvc;C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2007-01-04 14:13]
    R2 NMSAccessU;NMSAccessU;C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 15:34]
    R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-05-27 06:51]
    R3 PTWDrv;PTW - Process monitoring driver;C:\Program Files\MainSoft\PC TimeWatch\PTWatch.sys [2003-10-20 18:07]
    R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-11-28 04:45]
    S2 ahfprog;ahfP Service;C:\WINDOWS\system32\ahfp.exe [2007-12-30 10:42]
    S2 pr2aqb2b;Lettriq Drivers Auto Removal (pr2aqb2b);C:\WINDOWS\system32\pr2aqb2b.exe svc []
    S2 PTWsvc;PCTimeWatch;C:\Program Files\MainSoft\PC TimeWatch\PTWsvc.exe [2007-08-13 01:10]
    S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-05-17 14:15]
    S3 PsSdk41;PsSdk41;C:\WINDOWS\system32\Drivers\pssdk41.sys [2008-05-11 11:03]
    S3 SCREAMINGBDRIVER;Screaming Bee Audio;C:\WINDOWS\system32\drivers\ScreamingBAudio.sys []

    *Newly Created Service* - CATCHME
    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'

    2007-02-13 C:\WINDOWS\Tasks\Rappel d'enregistrement 2.job
    - C:\WINDOWS\system32\OOBE\oobebaln.exe [2004-08-10 09:00]

    2008-07-02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
    - C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2007-01-10 15:42]

    2008-08-08 C:\WINDOWS\Tasks\Norton Security Scan.job
    - C:\Program Files\Norton Security Scan\Nss.exe []
    .
    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - D:\Documents and Settings\paul\Application Data\Mozilla\Firefox\Profiles\oyn4aykf.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.exalead.com/

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-10 14:28:20
    Windows 5.1.2600 Service Pack 2 FAT NTAPI

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\PSSdk23]
    "ImagePath"="\??\C:\WINDOWS\system32\Drivers\PsSdk23.drv"
    .
    Temps d'accomplissement: 2008-08-10 14:29:04
    ComboFix-quarantined-files.txt 2008-08-10 12:28:52
    ComboFix2.txt 2008-08-10 11:58:04

    Pre-Run: 8,651,431,936 octets libres
    Post-Run: 8,631,795,712 octets libres

    304 --- E O F --- 2008-08-06 17:07:32
    0
  4. Utilisateur anonyme
     
    un nouveau rapport hijackthis et on termine
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. pablomica
     
    voila le rapport c'est bon ?

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:40:49, on 10/08/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16674)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\Program Files\CDBurnerXP\NMSAccessU.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\WiPen\wpmanage.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\program files\steam\steam.exe
    C:\Program Files\MainSoft\PC TimeWatch\PctwTI.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    c:\program files\steam\steamapps\sniper_91\counter-strike source\hl2.exe
    C:\program files\steam\GameOverlayUI.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll (file missing)
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll (file missing)
    O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
    O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - (no file)
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
    O4 - HKLM\..\Run: [WiPen] C:\Program Files\WiPen\wpmanage.exe
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [Comrade.exe] C:\Program Files\GameSpy\Comrade\Comrade.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: PC TimeWatch Tray Icon.lnk = C:\Program Files\MainSoft\PC TimeWatch\PctwTI.exe
    O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
    O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
    O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{1FEAAB54-B2EE-4793-AE01-0F4DD7122B75}: NameServer = 212.27.32.176,212.27.32.177
    O17 - HKLM\System\CCS\Services\Tcpip\..\{48D6C6D5-AE07-44B2-BE16-991E41A0231E}: NameServer = 212.27.53.252,212.27.54.252
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: ahfP Service (ahfprog) - Unknown owner - C:\WINDOWS\system32\ahfp.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
    O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: Lettriq Drivers Auto Removal (pr2aqb2b) (pr2aqb2b) - Vocabelum Inc - C:\WINDOWS\system32\pr2aqb2b.exe
    O23 - Service: PCTimeWatch (PTWsvc) - MainSoft - C:\Program Files\MainSoft\PC TimeWatch\PTWsvc.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    O23 - Service: VundoFix Service (VundoFixSvc) - Atribune.org - C:\WINDOWS\SYSTEM32\VundoFixSVC.exe
    O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
    0
  7. Utilisateur anonyme
     
    réouvre hijackthis
    fis scan only
    coches ces lignes :

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll (file missing)
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll (file missing)

    O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - (no file)

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/default.aspx
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/default.aspx

    tu les coches et tu clic sur fix checked

    ensuite :

    Démarrer > executer > tape : services.msc

    - Clic droit sur le service cité - Google Updater Service
    - propriétés
    - et dans "type de démarrage" et mets le sur « désactivé ».
    - Ensuite si le "Status du service" est sur "Démarré" faire : « arrêté »

    Tutorial : https://www.zebulon.fr/dossiers/windows/31-services.html

    fais la meme chose pour : Service de l'iPod

    ensuite désinstal java car pas a jours et telechrage et instal cette version :

    https://sdlc-esd.oracle.com/ESD44/JSCDL/jdk/6u7/jre-6u7-windows-i586-p-s.exe?GroupName=JSC&FilePath=/ESD44/JSCDL/jdk/6u7/jre-6u7-windows-i586-p-s.exe&BHost=javadl.sun.com&File=jre-6u7-windows-i586-p-s.exe&AuthParam=1580978146_46494a57fbc0e7c89e79cfb72e28cd3a&ext=.exe

    ensuite :

    regarde ceci concernant avast :

    antivir vs avast :

    -> http://forum.malekal.com/ftopic3528.php

    alors je te conseille de le desinstaller et d´installer antivir a la place

    Telecharge et instales l'antivirus Antivir Personal Edition Classic :

    ->https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/13198.html

    tuto : http://www.swl1f.net/viewtopic.php?f=14&t=59

    Pour désinstaller Avast telecharge cet outil

    https://www.avast.com/fr-fr/uninstall-utility

    ensuite :

    * pour supprimer les outils/fix utilisés :

    Télécharge ToolsCleaner sur ton bureau.
    -->
    ftp://ftp.commentcamarche.com/download/ToolsCleaner2.exe
    http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
    http://pc-system.fr/

    # Clique sur Recherche et laisse le scan agir ...
    # Clique sur Suppression pour finaliser.
    # Tu peux, si tu le souhaites, te servir des Options facultatives.
    # Clique sur Quitter pour obtenir le rapport.
    # Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    0
  8. pablomica
     
    voila j'ai fait tout sa mais je n'est pas eu de rapport a la racine C: de mon disque dure en tout cas mon pc a l'aire daller beaucoup mieux

    Ccleaner a effacer 5 truc et en a supprimer 5 mais pas de rapport ...

    Il y a autre chose a faire ?

    merci
    0
  9. Utilisateur anonyme
     
    oui tu peux faire ceci et ça sera good , et tu pourras mettre resolu

    Désactive et réactive ta restauration system

    Tuto xp : http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924
    0
  10. pablomica
     
    voila c'est fait un grand merci a toi "Chiquitine29" sans toi je c'est pas ce que j'aurais fait !!!

    merci beaucoup .

    PS : Une derniere question si mon antivirus (antivir) detecte des virus il faud faire quoi ? ( supprimer ou ne rien faire ou mettre en quarantaine ? )
    0
  11. Utilisateur anonyme
     
    tu mets en quarantaine et tu vide la quarantaine le lendemain si tout va bien

    @++
    0
  12. pablomica
     
    oki merci comment on fait pour mettre resolu au message stp ?

    encore merci de ton aide :)

    +++
    0
Précédent
  • 1
  • 2

Discussions similaires

Ou trouver le pilote pour epson xp-2205
lutttinette -
kaneagle -

19 réponses
probleme configuration wifi epson xp-225
sam099 -
Elchaco -

35 réponses
Google Chrome "  Échec de l'analyse antivirus "
jmpower -
RBmoon -

18 réponses