trojan qui désactive antivir Fermé

Question

Bonjour,

J'ai besoin d'un coup de main; je ne parvient plus à acceder à mon compte utilisateur des alertes incessantes de trojan sont signalées par antivir jusqu'au moment ou ce dernier se désactive. Ensuite le pc rame .

En changeant de compte utilisateur rien à signaler.

Je vous joint un log hisjackthis 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:43:58, on 24/08/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\oodag.exe
C:\PROGRA~1\FICHIE~1\Stardock\SDMCP.exe
c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
c:\program files\avira\antivir personaledition classic\avcenter.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://side.search.ke.voila.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {140BD8E3-C167-11D4-B4A3-080000180323} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - (no file)
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TE_RegProtect] C:\Program Files\Anti Trojan Elite\TERegPct.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin
pjpi160_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin
pjpi160_03.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070501/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {13149882-F480-4F6B-8C6A-0764F75B99ED} (CrazyTalk4 Control) - http://plug-in.reallusion.com/crazytalk4.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {3D54FEE0-CE46-11D4-8288-0050BA6A5ABF} (WebPie2 Class) - file://C:\Program Files\Newsoft\Presto! Mr. Photo 3\CardExpr\iepiev20.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: CLKERN.DLL
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\acer\Acer eConsole\MediaServerService.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

parisestmagic63 · Answer

si tu es sur que c'est un trojan...
TROJAN REMOVER !!!
Et ca sera vite supprimé...

nolan59 · Answer

la periode d'essai est finie ils me demande la clé d'activation :(

voyageurdumonde · Answer

bonjour, essaie 'sdfix' en mode sans echec.
Le description est disponible sur cette site.

nolan59 · Answer

je ne peu plu demarrer en mode sans echec , lors d'une tentative il était marqué qu'un programme était la cause de cet échec

^^Marie^^ · Answer

salut

N'aurais-tu pas téléchargé un crack récemment ?
Un crack est un keygen ou une clé illégale permettant d'activer un logiciel payant. Beaucoup d'infections de type Bagle sont véhiculées par les cracks. 
http://www.commentcamarche.net/faq/sujet 9889 comment supprimer le virus beagle bagle


Rends toi sur ce site :
http://www.zonavirus.com/datos/descargas/95/elibagla.asp
tout en bas de cette page tu trouveras un outil
à télécharger, clique sur "escargar Elibagla" (le numéro de version change au fur et à mesure des mises à jour)
installe ce fichier sur le bureau.
ensuite double-clic sur Elibagla.exe
>laisse la case "eliminar ficheros automaticamente" coché
>clique sur"explorar"
>laisse-le travailler
>poste le rapport final qui sera dans c:\infosat.txt 

Si, dans le rapport, tu vois un texte semblable à celui-ci 

Por favor, envienos una muestra del fichero 
C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 
a "virus@satinfo.es". Gracias;

envoie ce(s) fichier(s) (dans l'exemple C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 ) à l'adresse e-mail indiquée (virus@satinfo.es).

L'outil a rencontré un fichier qu'il reconnaît mais ne sait pas encore éradiquer. Dans 24 heures environ, sur le site, la version de déchargement (v10.24 dans l'exemple) aura changé par rapport à celle actuelle. Tu re téléchargeras l'outil, tu le relanceras et tu posteras le rapport.


Evitez de donner vos coordonnées par MP -- adresse MSN et autres
Evitez les désinfections en MP

nolan59 · Answer

voyez vous quelquechose dans le log hisjackthis?

nolan59 · Answer

si marie c'est exact :(

nolan59 · Answer

Rapport elibagla

	  Sun Aug 24 14:16:48 2008
EliBagle v11.66  (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 1 de Agosto del 2008)
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Sun Aug 24 14:16:52 2008
EliBagle v11.66  (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 1 de Agosto del 2008)
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

nolan59 · Answer

Rapprt combofix ComboFix 08-08-23.03 - doro 2008-08-24 14:23:19.3 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.496 [GMT 2:00] Endroit: C:\Documents and Settings\doro\Bureau\chtimic.exe [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\InfoSat.txt . ((((((((((((((((((((((((((((( Fichiers créés 2008-07-24 to 2008-08-24 )))))))))))))))))))))))))))))))))))) . 2008-08-24 14:20 . 2008-08-24 14:20 250 --a------ C:\WINDOWS\gmer.ini 2008-08-24 13:43 . 2008-08-24 14:01 d-------- C:\Documents and Settings\doro\Contacts 2008-08-24 13:35 . 2008-08-24 13:35 d-------- C:\Muestras 2008-08-24 13:17 . 2008-08-24 13:17 d-------- C:\Program Files\TeaTimer (Spybot - Search & Destroy) 2008-08-24 12:33 . 2008-08-24 12:33 d-------- C:\Documents and Settings\doro\Application Data\TrojanHunter 2008-08-24 11:30 . 2008-08-24 11:30 d-------- C:\Documents and Settings\Invité\Application Data\Malwarebytes 2008-08-24 11:29 . 2008-08-24 11:29 d-------- C:\Documents and Settings\Invité\Application Data\Grisoft 2008-08-24 11:00 . 2008-08-24 11:00 d-------- C:\Program Files\SWF-AVI-GIF Converter 2008-08-23 15:38 . 2008-08-23 15:46 d-------- C:\Program Files\123 AVI to GIF Converter 2008-08-23 15:01 . 2008-08-24 11:16 d-------- C:\Program Files\vgif 2008-08-23 11:40 . 2008-08-23 11:40 d-------- C:\Program Files\FLVPlayer 2008-08-23 11:33 . 2008-08-23 11:33 d-------- C:\WINDOWS\PreviewSoft 2008-08-23 11:33 . 1999-10-15 12:50 1,056,768 --a------ C:\WINDOWS\system32\ROBOEX32.DLL 2008-08-23 11:33 . 1999-01-28 15:44 49,152 --a------ C:\WINDOWS\system32\INETWH32.dll 2008-08-23 11:33 . 2008-08-23 11:33 4,508 --a------ C:\WINDOWS\system32\gaeffect.sti 2008-08-23 11:33 . 2008-08-23 11:33 3,176 --a------ C:\WINDOWS\system32\gafilter.sti 2008-08-23 11:33 . 2008-08-23 15:18 549 --ah----- C:\WINDOWS\system32\ws344069.ocx 2008-08-23 11:33 . 2008-08-23 15:18 463 --ah----- C:\os466477.bin 2008-08-23 11:33 . 2008-08-23 15:18 330 --a------ C:\WINDOWS\ULEAD32.INI 2008-08-23 11:32 . 2008-08-23 11:32 d-------- C:\WINDOWS\Noslip 2008-08-19 10:10 . 2008-08-19 10:10 d-------- C:\WINDOWS\system32\fr 2008-08-19 10:10 . 2008-08-19 10:10 d-------- C:\WINDOWS\system32\bits 2008-08-19 10:10 . 2008-08-19 10:10 d-------- C:\WINDOWS\l2schemas 2008-08-19 10:08 . 2008-08-19 10:11 d-------- C:\WINDOWS\ServicePackFiles 2008-08-19 10:05 . 2008-08-19 10:14 2,675 --a------ C:\WINDOWS\imsins.BAK 2008-08-19 10:02 . 2008-08-19 10:02 d-------- C:\WINDOWS\EHome 2008-08-19 07:56 . 2004-08-04 00:38 327,168 --------- C:\WINDOWS\system32\drivers\ati2mtaa.sys 2008-08-18 10:47 . 2008-08-18 11:55 d-------- C:\WINDOWS\BDOSCAN8 2008-08-18 10:39 . 2008-08-18 10:45 d-------- C:\Documents and Settings\Tourolle Michaël\.housecall6.6 2008-08-18 10:39 . 2008-08-18 10:45 d-------- C:\Documents and Settings\Tourolle Michaël\.housecall6.6 2008-08-17 20:37 . 2008-08-17 20:37 d-------- C:\Program Files\TVAnts 2008-08-17 10:40 . 2008-08-17 10:40 d-------- C:\Program Files\Fichiers communs\Scanner 2008-08-17 10:40 . 2008-08-17 10:40 d-------- C:\Program Files\CA Yahoo! Anti-Spy 2008-08-16 14:13 . 2008-08-16 14:13 d-------- C:\Program Files\VS Revo Group 2008-08-16 12:30 . 2008-08-16 12:30 d-------- C:\Documents and Settings\Tourolle Michaël\Application Data\TrojanHunter 2008-08-16 11:53 . 2008-08-17 11:40 d-------- C:\Program Files\TrojanHunter 5.0 2008-08-15 06:05 . 2008-04-11 21:05 691,712 --------- C:\WINDOWS\system32\dllcache\inetcomm.dll 2008-08-14 23:11 . 2008-08-16 11:34 d-------- C:\Program Files\Trojan Remover 2008-08-14 23:11 . 2003-02-02 20:06 153,088 --a------ C:\WINDOWS\system32\UNRAR3.dll 2008-08-14 23:11 . 2005-08-26 01:50 77,312 --a------ C:\WINDOWS\system32\ztvunace26.dll 2008-08-14 23:11 . 2002-03-06 01:00 75,264 --a------ C:\WINDOWS\system32\unacev2.dll 2008-08-14 23:11 . 2006-06-19 13:01 69,632 --a------ C:\WINDOWS\system32\ztvcabinet.dll 2008-08-13 11:04 . 2008-08-14 15:29 d-------- C:\Program Files\EsetOnlineScanner 2008-08-10 03:00 . 2008-08-10 03:00 d-------- C:\Program Files\MSXML 6.0 2008-08-09 17:34 . 2004-08-17 02:40 16,384 --a------ C:\WINDOWS\system32\FileOps.exe 2008-08-09 17:31 . 2008-08-09 17:31 d-------- C:\WINDOWS\Adobe Illustrator CS 2008-08-09 17:03 . 2008-08-09 17:03 d-------- C:\Documents and Settings\Tourolle Michaël\Application Data\Corel 2008-08-09 17:03 . 2008-08-09 18:07 2,828 --ahs---- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys 2008-08-09 17:03 . 2008-08-09 18:07 88 -r-hs---- C:\Documents and Settings\All Users\Application Data\C54C28AAD0.sys 2008-08-09 17:02 . 2008-08-09 17:02 d-------- C:\Program Files\Fichiers communs\Protexis 2008-08-09 17:02 . 2008-08-09 17:03 d-------- C:\Documents and Settings\All Users\Application Data\Corel 2008-08-09 16:57 . 2008-08-09 16:57 d-------- C:\Program Files\Fichiers communs\Corel 2008-08-08 12:19 . 2008-08-08 12:19 d-------- C:\Program Files\Avira 2008-08-08 12:06 . 2008-08-08 12:06 d-------- C:\Documents and Settings\Tourolle Michaël\Application Data\ESET 2008-08-08 12:06 . 2008-03-03 14:25 5,702 --ah----- C:\WINDOWS od32restoretemdono.reg 2008-08-07 09:34 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-08-06 19:07 . 2008-08-06 19:07 d-------- C:\Documents and Settings\Tourolle Michaël\Application Data\Xara 2008-08-06 19:04 . 2008-08-06 19:04 d-------- C:\WINDOWS\system32\Xara 2008-08-06 19:04 . 2002-08-23 13:37 880,694 --a------ C:\WINDOWS\system32\XaraDocG.dll 2008-08-06 19:04 . 2002-06-28 09:24 253,952 --a------ C:\WINDOWS\system32\TemplOp.dll 2008-08-06 19:04 . 2002-06-28 09:24 139,264 --a------ C:\WINDOWS\system32\BmpImporter.dll 2008-08-06 19:04 . 2002-08-22 16:56 126,976 --a------ C:\WINDOWS\system32\TemplMan.dll 2008-08-06 19:04 . 2002-01-10 03:01 110,592 --a------ C:\WINDOWS\system32 sccvid.dll 2008-08-06 19:04 . 2002-06-28 09:24 23,552 --a------ C:\WINDOWS\system32\XFontMan.dll 2008-08-06 18:43 . 2008-08-14 22:35 d-------- C:\Program Files\Anti Trojan Elite 2008-07-27 11:15 . 2008-08-16 13:24 d-------- C:\Program Files\Rapidown 2008-07-27 11:08 . 2008-07-27 11:08 d-------- C:\Program Files\CBS Software 2008-07-27 10:42 . 2008-07-30 21:20 d-------- C:\Program Files\McDonaldsFairies . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-24 12:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-08-24 12:07 --------- d-----w C:\Program Files\Wanadoo 2008-08-24 12:04 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-08-23 12:54 10,646 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys 2008-08-23 09:33 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-08-23 09:33 --------- d-----w C:\Program Files\Ulead Systems 2008-08-18 08:19 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware 2008-08-18 07:42 --------- d-----w C:\Program Files\Internet Download Manager 2008-08-18 07:42 --------- d-----w C:\Documents and Settings\Tourolle Michaël\Application Data\IDM 2008-08-18 07:40 --------- d-----w C:\Documents and Settings\Tourolle Michaël\Application Data\DMCache 2008-08-17 13:01 17,144 ----a-w C:\WINDOWS\system32\drivers\mbam.sys 2008-08-16 09:24 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2008-08-15 04:21 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-08-14 09:58 --------- d-----w C:\Documents and Settings\Tourolle Michaël\Application Data\gtk-2.0 2008-08-12 15:29 --------- d-----w C:\Documents and Settings\Tourolle Michaël\Application Data\GigaTribe 2008-08-10 09:22 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-08-09 14:54 --------- d-----w C:\Program Files\Corel 2008-08-08 10:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avira 2008-08-08 10:02 --------- d-----w C:\Program Files\ESET 2008-08-08 09:51 --------- d-----w C:\Documents and Settings\All Users\Application Data\ESET 2008-08-07 08:33 --------- d-----w C:\Program Files\eChanblard 2.0 2008-08-06 17:04 --------- d-----w C:\Program Files\Xara 2008-07-30 19:39 --------- d-----w C:\Program Files\Nufsoft 2008-07-30 19:38 --------- d-----w C:\Program Files\AAALOGO 2008-07-30 19:35 --------- d-----w C:\Program Files\Windows Live Toolbar 2008-07-30 19:35 --------- d-----w C:\Program Files\KaraFun 2008-07-30 19:32 --------- d-----w C:\Program Files\Ri-li 2008-07-30 19:32 --------- d-----w C:\Program Files\Micro Application 2008-07-30 19:27 --------- d-----w C:\Program Files\LphantBar 2008-07-30 19:27 --------- d-----w C:\Program Files\Conduit 2008-07-30 19:25 --------- d-----w C:\Program Files\Canon 2008-07-30 19:24 --------- d-----w C:\Program Files\Reallusion 2008-07-27 21:51 355,584 ----a-w C:\WINDOWS\system32\TuneUpDefragService.exe 2008-07-27 21:51 --------- d-----w C:\Program Files\TuneUp Utilities 2008 2008-07-23 19:50 --------- d-----w C:\Documents and Settings\Tourolle Michaël\Application Data\MyLogoMaker 2008-07-23 19:49 --------- d-----w C:\Program Files\MySoftware 2008-07-23 19:44 --------- d-----w C:\Documents and Settings\Tourolle Michaël\Application Data\Summitsoft 2008-07-20 07:33 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2008-07-20 07:28 --------- d-----w C:\Program Files\Sierra 2008-07-19 12:51 131,584 ----a-w C:\WINDOWS\system32\SpoonUninstall.exe 2008-07-12 10:40 --------- d-----w C:\Program Files\Stardock 2008-07-12 10:40 --------- d-----w C:\Program Files\Fichiers communs\stardock 2008-07-07 20:28 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-07-07 20:28 253,952 ------w C:\WINDOWS\system32\dllcache\es.dll 2008-07-07 16:31 --------- d-----w C:\Program Files\Zapu 2008-07-07 16:21 --------- d-----w C:\Program Files\eToro 2008-07-02 17:01 --------- d-----w C:\Program Files\P'titStock120 2008-06-30 19:34 --------- d-----w C:\Program Files\Safari 2008-06-24 16:44 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-24 16:44 74,240 ------w C:\WINDOWS\system32\dllcache\mscms.dll 2008-06-24 08:28 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll 2008-06-23 09:21 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe 2008-06-23 09:21 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe 2008-06-23 09:20 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-06-21 05:23 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll 2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll 2008-06-20 17:47 247,808 ------w C:\WINDOWS\system32\dllcache\mswsock.dll 2008-06-20 17:47 147,968 ------w C:\WINDOWS\system32\dllcache\dnsapi.dll 2008-06-20 11:51 361,600 ------w C:\WINDOWS\system32\dllcache cpip.sys 2008-06-20 11:40 138,496 ------w C:\WINDOWS\system32\dllcache\afd.sys 2008-06-20 11:08 225,856 ------w C:\WINDOWS\system32\dllcache cpip6.sys 2008-06-14 17:33 272,768 ------w C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-13 08:02 796,672 ----a-w C:\WINDOWS\GPInstall.exe 2008-05-29 07:28 28,416 ----a-w C:\WINDOWS\system32\uxtuneup.dll 2007-01-03 19:33 16,277,288 ----a-w C:\Program Files\Install_Messenger.exe 2007-01-03 18:06 1,135 ----a-w C:\Program Files\ReEnregDLL.bat 2006-12-25 18:37 16,101,720 ----a-w C:\Program Files\convertmovie.exe 2006-12-25 18:28 87,608 ----a-w C:\Documents and Settings\Tourolle Michaël\Application Data\ezpinst.exe 2006-12-25 18:28 47,360 -c--a-w C:\Documents and Settings\Tourolle Michaël\Application Data\pcouffin.sys 2006-12-25 18:19 23,163,952 ----a-w C:\Program Files\AVSDVDPlayer.exe 2006-12-24 18:40 13,069,416 ----a-w C:\Program Files\AliveVideoConverter.exe 2006-03-03 04:43 6,815,076 ----a-w C:\Program Files\install_neodivx2006.exe . ((((((((((((((((((((((((((((( snapshot@2008-08-24_14.12.56.92 ))))))))))))))))))))))))))))))))))))))))) . + 2008-08-24 12:20:18 884,736 ----a-w C:\WINDOWS\gmer.dll + 2008-04-17 19:13:02 811,008 ----a-w C:\WINDOWS\gmer.exe + 2008-08-24 12:20:18 85,969 ----a-w C:\WINDOWS\system32\drivers\gmer.sys . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 04:33 15360] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 20:04 139264] "WOOKIT"="C:\Program Files\Wanadoo\Shell.exe" [2004-08-23 15:50 122880] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-08-18 18:41 1832272] "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2008-06-14 09:25 6731312] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" [2008-05-08 22:49 185896] "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 07:00 33648] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 14:28 266497] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 06:24 286720] "TE_RegProtect"="C:\Program Files\Anti Trojan Elite\TERegPct.exe" [2005-10-01 02:09 708616] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 04:33 15360] "PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-11-09 18:15 1634304] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2008-08-09 17:33:28 110592] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\MCPClient] 2005-01-31 15:13 49152 C:\PROGRA~1\FICHIE~1\stardock\MCPStub.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=CLKERN.DLL [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.JPEG"= JPEGCODE.DLL "VIDC.MPEG"= JPEGCODE.DLL "vidc.yv12"= yv12vfw.dll "VIDC.AJPG"= AJPG.dll "vidc.mjpg"= pvmjpg30.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal ga.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wd.sys] @="Driver" [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^BlueSoleil.lnk] path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\BlueSoleil.lnk backup=C:\WINDOWS\pss\BlueSoleil.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Digimax Viewer 2.1.lnk] path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Digimax Viewer 2.1.lnk backup=C:\WINDOWS\pss\Digimax Viewer 2.1.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Tourolle Michaël^Menu Démarrer^Programmes^Démarrage^GigaTribe.lnk] path=C:\Documents and Settings\Tourolle Michaël\Menu Démarrer\Programmes\Démarrage\GigaTribe.lnk backup=C:\WINDOWS\pss\GigaTribe.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Tourolle Michaël^Menu Démarrer^Programmes^Démarrage^OneNote 2007 - Capture d'écran et lancement.lnk] path=C:\Documents and Settings\Tourolle Michaël\Menu Démarrer\Programmes\Démarrage\OneNote 2007 - Capture d'écran et lancement.lnk backup=C:\WINDOWS\pss\OneNote 2007 - Capture d'écran et lancement.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray] --a------ 2006-09-28 21:21 57344 C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] --a------ 2008-04-14 04:33 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] --a------ 2007-08-24 07:00 33648 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] --a------ 2007-10-18 12:34 5724184 C:\Program Files\Windows Live\Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray] --a------ 2007-06-28 23:01 2512128 C:\WINDOWS\system32\oodtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] --a------ 2006-11-08 14:27 222208 C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PeerGuardian] --a------ 2005-09-18 18:40 1421824 C:\Program Files\PeerGuardian2\pg2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2007-06-29 06:24 286720 C:\Program Files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOKIT] --a------ 2004-08-23 15:50 122880 C:\Program Files\Wanadoo\Shell.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON] --------- 2004-10-14 17:55 32768 C:\PROGRA~1\Wanadoo\GestMAJ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH] --------- 2004-08-23 15:49 20480 C:\PROGRA~1\Wanadoo\Watch.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion un-] "Espace Client"=C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe web [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un-] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe "WOOTASKBARICON"=C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe "WOOWATCH"=C:\PROGRA~1\Wanadoo\Watch.exe "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\Messenger\msmsgs.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "C:\Program Files\V-Gear BEE\VBService.exe"= "D:\programmes\LimeWire\LimeWire.exe"= "C:\StubInstaller.exe"= "C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"= "C:\Program Files\VideoLAN\VLC\vlc.exe"= "C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"= "C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"= "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"= "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"= "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"= "C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"= "C:\Program Files\eChanblard 2.0\emule.exe"= "C:\Program Files\eChanblard\emule.exe"= "C:\Program Files\TribalWeb\tribalweb.exe"= "C:\Program Files\2015\Men of Valor\VIETNAM\SYSTEM\UCC.exe"= "C:\Program Files\Zapu\Zapu\wDivi.exe"= "C:\Program Files\TVAnts\Tvants.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\Lphant\eLePhantClient.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "47626:TCP"= 47626:TCP:azeurus "5665:TCP"= 5665:TCP:echanblard "5675:TCP"= 5675:TCP:echanblard udp "7890:TCP"= 7890:TCP:echanblardnext TCP "7891:TCP"= 7891:TCP:echanblardnext "3728:TCP"= 3728:TCP:tribal web "54282:TCP"= 54282:TCP:@xpsp2res.dll,-22005 "23473:TCP"= 23473:TCP:@xpsp2res.dll,-22005 "46172:TCP"= 46172:TCP:@xpsp2res.dll,-22005 "43355:TCP"= 43355:TCP:@xpsp2res.dll,-22005 "7561:TCP"= 7561:TCP:echanblard tcp "7571:UDP"= 7571:UDP:echanblard udp "16662:TCP"= 16662:TCP:lphant tcp "16672:UDP"= 16672:UDP:lphant udp "58851:TCP"= 58851:TCP:Pando P2P TCP Listening Port "58851:UDP"= 58851:UDP:Pando P2P UDP Listening Port "58811:TCP"= 58811:TCP:Pando P2P TCP Listening Port "58811:UDP"= 58811:UDP:Pando P2P UDP Listening Port R0 m5287;m5287;C:\WINDOWS\system32\drivers\m5287.sys [2005-02-05 07:00] R2 int15.sys;int15.sys;C:\Program Files\Acer\eRecovery\int15.sys [2005-01-13 14:46] R2 Machnm32;Machnm32 Driver;C:\WINDOWS\System32\Machnm32.sys [2003-08-13 00:27] R2 PSI_SVC_2;Protexis Licensing V2;c:\Program Files\Fichiers communs\Protexis\License Service\PsiService_2.exe [2007-07-24 11:15] R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2008-04-14 04:34] S3 AIT100AS;Zicplay TalkCam NoteBook MI_00 ¡@;C:\WINDOWS\system32\Drivers\AIT100S.sys [2003-12-10 04:57] S3 AIT100AV;Zicplay TalkCam NoteBook MI_01;C:\WINDOWS\system32\Drivers\AIT100V.sys [2004-11-01 10:18] S3 archbus;NEC WMC USB_BJ1 Composite Device driver (WDM);C:\WINDOWS\system32\DRIVERS\archbus.sys [2005-08-30 13:17] S3 archmdfl;NEC WMC USB_BJ1 Modem Filter;C:\WINDOWS\system32\DRIVERS\archmdfl.sys [2005-08-30 13:17] S3 archmdm;NEC WMC USB_BJ1 Modem Drivers;C:\WINDOWS\system32\DRIVERS\archmdm.sys [2005-08-30 13:17] S3 archobex;NEC WMC USB_BJ1 OBEX Interface Drivers (WDM);C:\WINDOWS\system32\DRIVERS\archobex.sys [2005-08-30 13:17] S3 se59bus;Sony Ericsson Device 089 driver (WDM);C:\WINDOWS\system32\DRIVERS\se59bus.sys [2006-09-05 21:07] S3 se59mdfl;Sony Ericsson Device 089 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\se59mdfl.sys [2006-09-05 21:07] S3 se59mdm;Sony Ericsson Device 089 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\se59mdm.sys [2006-09-05 21:07] S3 se59mgmt;Sony Ericsson Device 089 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\se59mgmt.sys [2006-09-05 21:08] S3 se59nd5;Sony Ericsson Device 089 USB Ethernet Emulation SEMC59 (NDIS);C:\WINDOWS\system32\DRIVERS\se59nd5.sys [2006-09-05 21:06] S3 se59obex;Sony Ericsson Device 089 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\se59obex.sys [2006-09-05 21:09] S3 se59unic;Sony Ericsson Device 089 USB Ethernet Emulation SEMC59 (WDM);C:\WINDOWS\system32\DRIVERS\se59unic.sys [2006-09-05 21:06] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-07-27 23:51] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp *Newly Created Service* - GMER . . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Documents and Settings\doro\Application Data\Mozilla\Firefox\Profiles\oh5a0pgn.default\ FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser ppdf32.dll FF -: plugin - C:\Program Files\DivX\DivX Content Uploader pUpload.dll FF -: plugin - C:\Program Files\Mozilla Firefox\plugins phardwaredetection.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-24 14:24:58 Windows 5.1.2600 Service Pack 3 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-08-24 14:26:07 ComboFix-quarantined-files.txt 2008-08-24 12:26:03 ComboFix2.txt 2008-08-24 12:13:23 Pre-Run: 37,687,488,512 octets libres Post-Run: 37,667,184,640 octets libres 338 --- E O F --- 2008-08-20 08:16:42

^^Marie^^ · Answer

Re,

QUI t'a dit de faire ComboFix ??

Bon de toutes les façons &#9658; http://www.commentcamarche.net/forum/affich 7901697 alertetrojan antivir?page=2#39

Trojan qui désactive antivir

10 réponses

Discussions similaires