Bravix et autres grosses lenteur IE

Fermé
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008 - 10 oct. 2008 à 13:24
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008 - 17 oct. 2008 à 16:59
Bonjour,

depuis quelques jours j ai d énormes problemes pour naviguer, la plupart des pages ne s affichent pas et ça rame un max.

j ai identifier Bravix dans un patch, et apparemment d autres enquiquineurs.

voila le rapport combofix


ComboFix 08-10-08.05 - Propriétaire 2008-10-09 18:15:46.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.603 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\Propriétaire\Bureau\Pascal\ComboFix.exe
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WebMediaPlayer
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WebMediaPlayer\Conditions générales.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WebMediaPlayer\Confidentialité.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WebMediaPlayer\WebMediaPlayer.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WebMediaPlayer\Website.lnk
D:\Autorun.inf

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_TDSSSERV
-------\Service_tdssserv


((((((((((((((((((((((((((((( Fichiers créés du 2008-09-09 au 2008-10-09 ))))))))))))))))))))))))))))))))))))
.

2008-10-08 20:48 . 2008-10-08 20:48 81,432 --a------ C:\Documents and Settings\Propriétaire\Application Data\GDIPFONTCACHEV1.DAT
2008-10-06 17:32 . 2008-10-06 17:32 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\MAGIX
2008-10-06 17:29 . 2008-10-06 17:31 <REP> d-------- C:\Program Files\MAGIX
2008-10-06 17:29 . 2008-10-06 17:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MAGIX
2008-10-06 17:29 . 2007-04-27 10:43 120,200 --a------ C:\WINDOWS\system32\DLLDEV32i.dll
2008-10-06 17:28 . 2008-10-06 17:31 <REP> d-------- C:\WINDOWS\system32\MAGIX
2008-10-06 17:28 . 2008-04-15 16:14 700,416 --a------ C:\WINDOWS\system32\mgxoschk.dll
2008-10-06 17:28 . 2008-10-06 17:31 6,651 --a------ C:\WINDOWS\mgxoschk.ini
2008-10-05 21:19 . 2008-10-05 21:19 1,610 --a------ C:\WINDOWS\system32\ealregsnapshot1.reg
2008-10-05 20:51 . 2008-03-05 15:56 3,786,760 --a------ C:\WINDOWS\system32\D3DX9_37.dll
2008-10-03 19:02 . 2008-10-03 19:02 <REP> d-------- C:\Program Files\Clever Age
2008-10-03 19:01 . 2008-10-03 19:01 <REP> d-------- C:\Program Files\MSECache
2008-10-01 20:15 . 2003-06-19 01:31 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2008-10-01 20:14 . 2008-10-01 20:24 <REP> d-------- C:\WINDOWS\SHELLNEW
2008-10-01 20:13 . 2008-10-01 20:13 <REP> d-------- C:\Program Files\Microsoft.NET
2008-10-01 20:07 . 2008-10-01 20:07 <REP> dr-h----- C:\MSOCache
2008-09-24 20:20 . 2008-09-24 20:56 <REP> d-------- C:\WINDOWS\system32\CatRoot_bak

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-09 15:08 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\uTorrent
2008-10-09 10:56 --------- d-----w C:\Program Files\Panda Security
2008-10-08 10:47 --------- d-----w C:\Program Files\Microsoft Money
2008-10-05 19:33 --------- d-----w C:\Program Files\EA SPORTS
2008-10-05 19:30 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2008-10-02 11:12 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-09-08 18:24 --------- d-----w C:\Program Files\Sunbelt Software
2008-09-08 09:04 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-09-07 22:11 38,528 ----a-w C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-09-07 22:11 17,200 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
2008-09-06 17:03 --------- d-----w C:\Program Files\Ripp-it_AM
2008-09-06 16:11 --------- d-----w C:\Program Files\TeaTimer (Spybot - Search & Destroy)
2008-09-06 15:49 10,856 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
2008-09-05 12:32 --------- d-----w C:\Program Files\AviSynth 2.5
2008-09-03 21:50 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-09-03 19:47 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2008-08-27 11:09 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes
2008-08-27 11:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-27 09:55 --------- d-----w C:\Program Files\DAEMON Tools Pro
2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-06-20 10:28 20 -c-h--w C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT
2006-11-04 15:43 4,096 ----a-w C:\Documents and Settings\Propriétaire\log.dat
2006-11-04 15:43 4,096 ----a-w C:\Documents and Settings\Propriétaire\log.dat
2005-04-27 13:02 60,619 -csh--w C:\WINDOWS\security\logs\pxepi.bak1
2005-05-29 08:09 508,157 -csh--w C:\WINDOWS\security\logs\pxepi.bak2
2004-11-01 13:41 0 -csha-w C:\WINDOWS\SMINST\HPCD.sys
2006-04-22 16:53 56 --sh--r C:\WINDOWS\system32\1F13058341.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-20 68856]
"Update Service"="C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe" [2008-02-23 19456]
"DAEMON Tools Pro Agent"="C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" [2007-06-22 133576]
"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\HOMERunner.exe" [2008-09-22 206184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736]
"KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 61440]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-01-28 229376]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 233472]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2003-09-12 98304]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-04-21 335872]
"UpdateManager"="c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-08-19 110592]
"OpwareSE2"="C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2004-08-22 81920]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-04-26 180269]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-20 155648]
"AGRSMMSG"="AGRSMMSG.exe" [2005-03-04 C:\WINDOWS\AGRSMMSG.exe]
"SoundMan"="SOUNDMAN.EXE" [2004-05-03 C:\WINDOWS\SOUNDMAN.EXE]
"AlcWzrd"="ALCWZRD.EXE" [2004-05-03 C:\WINDOWS\ALCWZRD.EXE]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-07-24 113664]
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2007-06-20 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.yv12"= yv12vfw.dll
"vidc.X264"= x264vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Propriétaire^Menu Démarrer^Programmes^Démarrage^Raccourci vers Microsoft Outlook.lnk]
path=C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\Raccourci vers Microsoft Outlook.lnk
backup=C:\WINDOWS\pss\Raccourci vers Microsoft Outlook.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\WINDOWS
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\WINDOWS\System32
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinDSNX

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2007-01-19 13:55 5674352 C:\Program Files\MSN Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-06-20 11:07 155648 C:\Program Files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2004-01-01 10:28 32881 C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Update Service]
--a-s---- 2008-02-23 19:58 19456 C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\InstantTouch\\bin\\CmCenterV2.exe"=
"C:\\Program Files\\Sony\\Station\\Launchpad\\LaunchPad.exe"=
"C:\\Program Files\\Fichiers communs\\Synacast\\SynaLive\\PE.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Documents and Settings\\Propriétaire\\Bureau\\utorrent.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5651:TCP"= 5651:TCP:ppLive
"6485:UDP"= 6485:UDP:ppLive
"6346:TCP"= 6346:TCP:shareaza
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 SbFw;SbFw;C:\WINDOWS\system32\drivers\SbFw.sys [2008-07-16 269736]
R1 sbhips;Sunbelt HIPS Driver;C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 SbPF.Launcher;SbPF.Launcher;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-07-30 95528]
R2 SPF4;Sunbelt Personal Firewall 4;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-07-30 1361192]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 adxapie;adxapie;C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\adxapie.sys [ ]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2673b6f8-5007-11dd-8514-00112f4f6541}]
\Shell\AutoRun\command - K:\EmDesk.exe
\Shell\EmDesk\command - K:\EmDesk.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{898d4d0c-5117-11da-b409-00112f4f6541}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cd6e3543-475f-11dd-84f6-00112f4f6541}]
\Shell\AutoRun\command - K:\InstallTomTomHOME.exe
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-WOOKIT - C:\PROGRA~1\Wanadoo\GestMaj.exe
HKLM-Run-VTTimer - VTTimer.exe
MSConfigStartUp-ope10 - C:\WINDOWS\System32\ope10.exe
MSConfigStartUp-ope7 - C:\WINDOWS\System32\ope7.exe
MSConfigStartUp-CloneCDTray - C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
MSConfigStartUp-TrojanScanner - C:\Program Files\Trojan Remover\Trjscan.exe
MSConfigStartUp-dxset - (no file)


.
------- Examen supplémentaire -------
.
FireFox -: Profile - C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\nqgo4f0j.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\Panda Security\TotalScan\npwrapper.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-09 18:24:21
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Heure de fin: 2008-10-09 18:31:15 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-10-09 16:31:06

Avant-CF: 20 790 120 448 octets libres
Après-CF: 20,847,071,232 octets libres

215 --- E O F --- 2008-09-24 18:56:57



le rapport mbam

Malwarebytes' Anti-Malware 1.27
Database version: 1128
Windows 5.1.2600 Service Pack 2

10/10/2008 08:02:24
mbam-log-2008-10-10 (08-02-24).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 169523
Time elapsed: 3 hour(s), 7 minute(s), 28 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)





et le hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 13:23:40, on 10/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Documents and Settings\Propriétaire\Bureau\Pascal\bureau non utilisé\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q304&bd=presario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.slysoft.com/purchase.html?prod=CloneDVD
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la Liste à Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - https://www.pixum.fr/?p_ref=crm_umleitung_photoreflex_1113
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.2.0.6.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe


merci infiniment pour votre aide, ce probleme est tres facheux vu qu il rend internet quasi inaccessible pour moi.

Apres ca Antivir remplace Avast j ai déja tout ce qui faut pour faire la manip.
A voir également:

36 réponses

manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008
13 oct. 2008 à 13:23
impossible de télécharger ton 1er truc, mauvais lien je pense.
-1
jlpjlp Messages postés 51574 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 042
13 oct. 2008 à 13:29
-1
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008
13 oct. 2008 à 13:36
--------------------\\ Lop S&D 4.2.4-5 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 07/05/04 14:10:38 Ver: 08.00.10
USER : Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.27 (Activated)
Firewall : Sunbelt Personal Firewall 4.6.1845 T (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 145 Go Free : 27 Go
D:\ (Local Disk) - FAT32 - Total : 3 Go Free : 0 Go
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (CD or DVD) - UDF - Total : 5 Go Free : 0 Go
H:\ (CD or DVD)
I:\ (CD or DVD)
J:\ (CD or DVD)
P:\ (CD or DVD) - CDFS - Total : 0 Go Free : 0 Go

"C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
Option : [1] ( 13/10/2008|13:24 )

--------------------\\ Listing des dossiers dans APPLIC~1

[01/01/2004|09:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/01/2004|11:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intervideo
[10/10/2008|08:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
[03/09/2008|21:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[10/10/2008|08:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[01/01/2004|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\SampleView
[01/01/2004|10:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[01/01/2004|16:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
[10/10/2008|08:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Template

[15/05/2008|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[20/06/2007|11:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[10/10/2008|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[08/09/2007|13:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[22/02/2008|16:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Pro
[29/12/2006|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[20/06/2007|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EnterNHelp
[27/10/2006|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[01/01/2004|11:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[24/07/2005|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[06/10/2008|17:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
[27/08/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[01/10/2008|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/01/2004|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[30/10/2004|19:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[20/06/2007|11:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nikon
[20/10/2004|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[01/01/2004|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[22/12/2004|16:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[23/11/2005|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[12/10/2008|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[22/12/2004|16:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[22/12/2004|16:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[19/02/2005|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[20/06/2007|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ultima_T15
[23/08/2006|11:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[01/01/2004|09:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/01/2004|11:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[01/01/2004|10:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/01/2004|12:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[01/01/2004|10:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[01/01/2004|16:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[01/01/2004|09:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[11/07/2007|08:58] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[03/09/2008|18:19] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
[04/03/2008|11:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\AdobeUM
[20/06/2007|13:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer
[20/06/2007|12:25] C:\DOCUME~1\PROPRI~1\APPLIC~1\ArcSoft
[20/12/2004|21:24] C:\DOCUME~1\PROPRI~1\APPLIC~1\Canon
[22/02/2008|16:06] C:\DOCUME~1\PROPRI~1\APPLIC~1\DAEMON Tools Pro
[12/10/2005|11:05] C:\DOCUME~1\PROPRI~1\APPLIC~1\Google
[20/11/2004|17:03] C:\DOCUME~1\PROPRI~1\APPLIC~1\Help
[27/10/2004|00:05] C:\DOCUME~1\PROPRI~1\APPLIC~1\Hewlett-Packard
[01/01/2004|09:47] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
[08/09/2007|13:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\InstallShield
[17/10/2004|17:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\Intervideo
[15/11/2004|12:34] C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft
[19/10/2004|13:05] C:\DOCUME~1\PROPRI~1\APPLIC~1\Leadertech
[23/11/2007|12:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
[06/10/2008|17:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\MAGIX
[27/08/2008|13:09] C:\DOCUME~1\PROPRI~1\APPLIC~1\Malwarebytes
[03/10/2008|19:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
[17/10/2004|20:09] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft Web Folders
[01/07/2008|15:13] C:\DOCUME~1\PROPRI~1\APPLIC~1\Mozilla
[30/10/2004|19:19] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSN6
[20/06/2007|12:29] C:\DOCUME~1\PROPRI~1\APPLIC~1\Nikon
[07/01/2008|22:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\ppStream
[14/03/2005|00:10] C:\DOCUME~1\PROPRI~1\APPLIC~1\Publish Providers
[18/04/2008|17:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Real
[01/01/2004|12:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\SampleView
[22/12/2004|16:49] C:\DOCUME~1\PROPRI~1\APPLIC~1\ScanSoft
[04/09/2007|12:25] C:\DOCUME~1\PROPRI~1\APPLIC~1\SecuROM
[14/06/2008|11:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Skype
[21/07/2006|19:38] C:\DOCUME~1\PROPRI~1\APPLIC~1\SlySoft
[19/10/2004|13:06] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sonic
[14/03/2005|00:02] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sony
[20/10/2007|14:17] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sports Interactive
[01/01/2004|10:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
[01/01/2004|16:21] C:\DOCUME~1\PROPRI~1\APPLIC~1\Symantec
[17/12/2006|21:59] C:\DOCUME~1\PROPRI~1\APPLIC~1\teamspeak2
[17/10/2004|15:49] C:\DOCUME~1\PROPRI~1\APPLIC~1\Template
[01/07/2008|15:13] C:\DOCUME~1\PROPRI~1\APPLIC~1\TomTom
[09/10/2008|22:48] C:\DOCUME~1\PROPRI~1\APPLIC~1\uTorrent


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[12/02/2004 06:27][-rah-----] C:\WINDOWS\tasks\desktop.ini
[13/10/2008 09:21][--ah-----] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[04/03/2008|11:37] C:\Program Files\Adobe
[17/03/2005|11:39] C:\Program Files\Ahead
[01/10/2005|11:06] C:\Program Files\Alcohol Soft
[09/11/2005|20:57] C:\Program Files\Alwil Software
[24/07/2006|11:33] C:\Program Files\Ant Movie Catalog
[20/06/2007|11:06] C:\Program Files\ArcSoft
[28/09/2004|16:24] C:\Program Files\ATI Technologies
[10/07/2008|18:39] C:\Program Files\Avanquest update
[10/10/2008|19:40] C:\Program Files\Avira
[05/09/2008|14:32] C:\Program Files\AviSynth 2.5
[24/10/2006|22:58] C:\Program Files\BSPlayer_WhenUSave_Installer
[20/12/2004|20:48] C:\Program Files\Canon
[13/10/2005|18:52] C:\Program Files\CCleaner
[03/10/2008|19:02] C:\Program Files\Clever Age
[20/02/2008|14:59] C:\Program Files\ClicClasse
[23/02/2008|19:48] C:\Program Files\Common Files
[01/01/2004|09:44] C:\Program Files\ComPlus Applications
[18/10/2004|19:52] C:\Program Files\Creative
[03/09/2007|00:43] C:\Program Files\CyberQix
[27/08/2008|11:55] C:\Program Files\DAEMON Tools Pro
[11/01/2005|00:48] C:\Program Files\directx
[22/04/2006|18:53] C:\Program Files\DivX
[09/11/2005|14:36] C:\Program Files\D-Tools
[19/10/2004|18:50] C:\Program Files\DVD Shrink
[29/12/2006|14:57] C:\Program Files\DVDFab Decrypter 3
[11/10/2008|00:36] C:\Program Files\EA SPORTS
[17/11/2004|09:15] C:\Program Files\Easy Internet signup
[22/03/2008|12:15] C:\Program Files\Eidos Interactive
[04/11/2006|19:48] C:\Program Files\Elaborate Bytes
[09/10/2008|18:19] C:\Program Files\Fichiers communs
[29/10/2007|15:20] C:\Program Files\Gabest
[01/02/2007|14:39] C:\Program Files\Google
[24/09/2007|12:44] C:\Program Files\GRISOFT
[22/10/2004|14:49] C:\Program Files\HandyBits
[10/10/2008|16:02] C:\Program Files\Hattrick Forever
[27/10/2004|00:03] C:\Program Files\Hewlett-Packard
[10/10/2008|16:02] C:\Program Files\InstallShield Installation Information
[16/06/2005|19:32] C:\Program Files\InstantTouch
[30/01/2005|12:50] C:\Program Files\InterActual
[25/08/2008|00:47] C:\Program Files\Internet Explorer
[28/09/2004|16:25] C:\Program Files\InterVideo
[08/09/2007|13:09] C:\Program Files\Inventel
[01/01/2004|11:35] C:\Program Files\iPod
[12/10/2005|13:52] C:\Program Files\iTunes
[25/04/2008|23:43] C:\Program Files\Java
[22/06/2005|23:26] C:\Program Files\Lavalys
[15/11/2004|12:32] C:\Program Files\Lavasoft
[06/10/2008|17:31] C:\Program Files\MAGIX
[08/09/2008|11:04] C:\Program Files\Malwarebytes' Anti-Malware
[16/07/2007|10:40] C:\Program Files\Managed DirectX (0900)
[12/10/2005|18:13] C:\Program Files\Media Access
[25/08/2008|00:49] C:\Program Files\Messenger
[05/05/2006|21:14] C:\Program Files\microsoft frontpage
[08/10/2008|12:47] C:\Program Files\Microsoft Money
[03/10/2008|19:01] C:\Program Files\Microsoft Office
[17/10/2004|15:35] C:\Program Files\Microsoft Works
[01/10/2008|20:13] C:\Program Files\Microsoft.NET
[17/10/2004|15:38] C:\Program Files\ML4
[08/05/2006|11:23] C:\Program Files\Morgan
[29/07/2008|22:12] C:\Program Files\Motorola Phone Tools
[19/02/2005|15:27] C:\Program Files\Movie Maker
[12/10/2008|19:27] C:\Program Files\Mozilla Firefox
[03/10/2008|19:01] C:\Program Files\MSECache
[01/01/2004|09:43] C:\Program Files\MSN
[01/01/2004|09:43] C:\Program Files\MSN Gaming Zone
[13/12/2007|19:26] C:\Program Files\MSN Messenger
[20/06/2007|11:10] C:\Program Files\MSXML 4.0
[12/10/2008|16:25] C:\Program Files\Navilog1
[08/05/2006|11:24] C:\Program Files\neodivx2006
[19/02/2005|15:26] C:\Program Files\NetMeeting
[20/06/2007|11:09] C:\Program Files\Nikon
[08/09/2007|16:51] C:\Program Files\Outlook Express
[09/10/2008|12:56] C:\Program Files\Panda Security
[24/03/2008|13:19] C:\Program Files\Pixiphot
[01/01/2004|11:58] C:\Program Files\Presario PC Help
[09/10/2007|18:05] C:\Program Files\PsQREdit FR
[20/06/2007|11:07] C:\Program Files\QuickTime
[23/02/2005|00:02] C:\Program Files\Real
[28/09/2004|16:24] C:\Program Files\RecordNow!
[22/04/2006|18:50] C:\Program Files\Ripp-It Codec Pack
[06/09/2008|19:03] C:\Program Files\Ripp-it_AM
[22/12/2004|16:49] C:\Program Files\ScanSoft
[12/10/2008|19:30] C:\Program Files\SDHelper (Spybot - Search & Destroy)
[08/09/2007|13:09] C:\Program Files\Securitoo
[05/09/2007|15:58] C:\Program Files\Sega
[01/01/2004|12:03] C:\Program Files\Services en ligne
[12/05/2008|13:13] C:\Program Files\Shareaza
[10/03/2005|14:24] C:\Program Files\Skype
[22/07/2006|13:12] C:\Program Files\SlySoft
[28/09/2004|16:24] C:\Program Files\Sonic
[06/10/2005|13:51] C:\Program Files\Sony
[13/03/2005|23:52] C:\Program Files\Sony Setup
[07/04/2008|17:36] C:\Program Files\Sports Interactive
[21/09/2007|17:20] C:\Program Files\Spybot - Search & Destroy
[08/09/2008|20:24] C:\Program Files\Sunbelt Software
[13/06/2005|14:44] C:\Program Files\Teamspeak2_RC2
[12/10/2008|19:30] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[01/07/2008|15:13] C:\Program Files\TomTom HOME 2
[15/11/2004|12:38] C:\Program Files\ToniArts
[21/02/2005|19:44] C:\Program Files\Trojan Remover
[01/01/2004|11:18] C:\Program Files\Uninstall Information
[16/07/2007|10:41] C:\Program Files\ValuSoft
[08/09/2007|16:52] C:\Program Files\Wanadoo
[19/02/2005|16:16] C:\Program Files\Wanadoo Messager
[15/10/2006|15:21] C:\Program Files\Webteh
[08/05/2006|11:24] C:\Program Files\WinASPI
[18/02/2006|21:34] C:\Program Files\Windows Media Player
[19/02/2005|15:26] C:\Program Files\Windows NT
[19/02/2005|16:22] C:\Program Files\WindowsUpdate
[21/11/2007|21:40] C:\Program Files\WinRAR
[08/05/2006|11:23] C:\Program Files\x264
[01/01/2004|09:47] C:\Program Files\xerox
[08/05/2006|11:23] C:\Program Files\XviD
[20/10/2007|14:13] C:\Program Files\Zero G Registry

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[24/07/2005|20:02] C:\Program Files\Fichiers communs\Adobe
[24/07/2005|20:03] C:\Program Files\Fichiers communs\Adobe Systems Shared
[17/03/2005|11:39] C:\Program Files\Fichiers communs\Ahead
[01/10/2008|19:41] C:\Program Files\Fichiers communs\Designer
[16/07/2007|10:45] C:\Program Files\Fichiers communs\DirectX
[27/10/2004|00:01] C:\Program Files\Fichiers communs\Hewlett-Packard
[11/11/2006|13:06] C:\Program Files\Fichiers communs\InstallShield
[01/01/2004|10:28] C:\Program Files\Fichiers communs\Java
[03/10/2008|19:01] C:\Program Files\Fichiers communs\Microsoft Shared
[23/02/2008|19:48] C:\Program Files\Fichiers communs\Motorola Shared
[01/01/2004|09:44] C:\Program Files\Fichiers communs\MSSoap
[20/06/2007|11:10] C:\Program Files\Fichiers communs\muvee Technologies
[20/06/2007|12:29] C:\Program Files\Fichiers communs\Nikon
[01/01/2004|09:40] C:\Program Files\Fichiers communs\ODBC
[26/04/2006|09:40] C:\Program Files\Fichiers communs\Real
[22/12/2004|17:31] C:\Program Files\Fichiers communs\ScanSoft Shared
[24/08/2004|19:44] C:\Program Files\Fichiers communs\Services
[09/11/2005|20:48] C:\Program Files\Fichiers communs\Softwin
[28/09/2004|16:24] C:\Program Files\Fichiers communs\Sonic
[01/01/2004|09:40] C:\Program Files\Fichiers communs\SpeechEngines
[28/09/2004|16:24] C:\Program Files\Fichiers communs\SureThing Shared
[11/12/2005|21:34] C:\Program Files\Fichiers communs\Synacast
[13/06/2007|18:16] C:\Program Files\Fichiers communs\System
[23/02/2008|19:59] C:\Program Files\Fichiers communs\Teknum Systems
[26/04/2006|09:40] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 50 Processes )

iexplore.exe ~ [PID:1264]
iexplore.exe ~ [PID:3428]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\PROPRI~1\Cookies\propriétaire@adopt.euroclick[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-13 13:29:14
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ ROOTKIT !!

Rootkit Tibs ! .. [HKLM\..\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\CurrentControlSet\Services\tdssserv]
Rootkit Tibs ! .. [HKLM\..\CurrentControlSet\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet001\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet001\Services\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet001\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet002\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet002\Services\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet002\Enum\Root\tdssserv]

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\PROPRI~1\Bureau\Pascal\Perso\divers\NBA.Live.08.GENERIC_KEYGEN-FFF.zip
C:\DOCUME~1\PROPRI~1\Recent\FIFA.09.Crackfix-RELOADED.lnk


[F:3][D:4]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
[F:114][D:0]-> C:\DOCUME~1\PROPRI~1\Cookies
[F:7078][D:12]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 13/10/2008|13:32 - Option : [1]

--------------------\\ Fin du rapport a 13:32:46
-1
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008
13 oct. 2008 à 13:36
merci je scanne je te met le 2nd rapport ce soir.

-1

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
jlpjlp Messages postés 51574 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 042
13 oct. 2008 à 13:39
lance ceci:
http://www.commentcamarche.net/telecharger/telecharger 227 cwshredder

______________

vire ces cracks :

C:\DOCUME~1\PROPRI~1\Bureau\Pascal\Perso\divers\NBA.Live.08.GENERIC_KEYGEN-FFF.zip
C:\DOCUME~1\PROPRI~1\Recent\FIFA.09.Crackfix-RELOADED.lnk


_______________

ensuite il y a encore des rootkits que combofix aurais du viré

refais donc un combofix et colle le rapport


________________


lance ccleaner et nettoie les traces internet (dans les option decocher la case effacer les fichier de plus de 48h eures)

https://www.malekal.com/tutoriel-ccleaner/

puis remet un rapport lop sd option 1
-1
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008
13 oct. 2008 à 17:53
ComboFix 08-10-09.06 - Propriétaire 2008-10-13 17:35:39.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.655 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\Propriétaire\Bureau\Pascal\Perso\divers\ComboFix.exe

[COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_TDSSSERV
-------\Service_tdssserv


((((((((((((((((((((((((((((( Fichiers créés du 2008-09-13 au 2008-10-13 ))))))))))))))))))))))))))))))))))))
.

2008-10-13 13:24 . 2008-10-13 13:32 <REP> d-------- C:\Lop SD
2008-10-12 19:30 . 2008-10-12 19:30 <REP> d-------- C:\Program Files\SDHelper (Spybot - Search & Destroy)
2008-10-11 00:36 . 2008-03-05 15:56 3,786,760 --a------ C:\WINDOWS\system32\D3DX9_37.dll
2008-10-10 19:40 . 2008-10-10 19:40 <REP> d-------- C:\Program Files\Avira
2008-10-10 19:40 . 2008-10-10 19:40 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-10-10 16:07 . 2008-10-10 19:18 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-10-10 16:03 . 2008-10-10 16:03 <REP> d--hs---- C:\Documents and Settings\Propriétaire\UserData
2008-10-10 16:03 . 2008-10-10 16:03 <REP> d--hs---- C:\Documents and Settings\Propriétaire\UserData
2008-10-10 08:04 . 2008-10-10 08:04 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Lavasoft
2008-10-10 08:03 . 2008-10-10 08:03 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Template
2008-10-09 18:34 . 2008-10-09 22:26 <REP> d--hs---- C:\RECYCLER(2)
2008-10-08 20:48 . 2008-10-08 20:48 81,432 --a------ C:\Documents and Settings\Propriétaire\Application Data\GDIPFONTCACHEV1.DAT
2008-10-06 17:32 . 2008-10-06 17:32 <REP> d-------- C:\Documents and Settings\Propriétaire\Application Data\MAGIX
2008-10-06 17:31 . 2004-03-11 16:49 14,182 --a------ C:\WINDOWS\system32\DLLAV32.lib
2008-10-06 17:29 . 2008-10-06 17:31 <REP> d-------- C:\Program Files\MAGIX
2008-10-06 17:29 . 2008-10-06 17:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MAGIX
2008-10-06 17:28 . 2008-10-09 22:28 <REP> d-------- C:\WINDOWS\system32\MAGIX
2008-10-03 19:02 . 2008-10-03 19:02 <REP> d-------- C:\Program Files\Clever Age
2008-10-03 19:01 . 2008-10-03 19:01 <REP> d-------- C:\Program Files\MSECache
2008-10-01 20:15 . 2003-06-19 01:31 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2008-10-01 20:14 . 2008-10-01 20:24 <REP> d-------- C:\WINDOWS\SHELLNEW
2008-10-01 20:13 . 2008-10-01 20:13 <REP> d-------- C:\Program Files\Microsoft.NET
2008-10-01 20:07 . 2008-10-01 20:07 <REP> dr-h----- C:\MSOCache
2008-09-24 20:20 . 2008-09-24 20:56 <REP> d-------- C:\WINDOWS\system32\CatRoot_bak

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-12 17:30 --------- d-----w C:\Program Files\TeaTimer (Spybot - Search & Destroy)
2008-10-12 17:28 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-10-12 14:25 --------- d-----w C:\Program Files\Navilog1
2008-10-10 22:36 --------- d-----w C:\Program Files\EA SPORTS
2008-10-10 14:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-10-10 14:02 --------- d-----w C:\Program Files\Hattrick Forever
2008-10-09 20:48 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\uTorrent
2008-10-09 10:56 --------- d-----w C:\Program Files\Panda Security
2008-10-08 10:47 --------- d-----w C:\Program Files\Microsoft Money
2008-09-08 18:24 --------- d-----w C:\Program Files\Sunbelt Software
2008-09-08 09:04 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-09-07 22:11 38,528 ----a-w C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-09-07 22:11 17,200 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
2008-09-06 17:03 --------- d-----w C:\Program Files\Ripp-it_AM
2008-09-06 15:49 10,856 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
2008-09-05 12:32 --------- d-----w C:\Program Files\AviSynth 2.5
2008-09-03 19:47 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
2008-08-27 11:09 --------- d-----w C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes
2008-08-27 11:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-27 09:55 --------- d-----w C:\Program Files\DAEMON Tools Pro
2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-06-20 10:28 20 -c-h--w C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT
2006-11-04 15:43 4,096 ----a-w C:\Documents and Settings\Propriétaire\log.dat
2006-11-04 15:43 4,096 ----a-w C:\Documents and Settings\Propriétaire\log.dat
2005-04-27 13:02 60,619 -csh--w C:\WINDOWS\security\logs\pxepi.bak1
2005-05-29 08:09 508,157 -csh--w C:\WINDOWS\security\logs\pxepi.bak2
2004-11-01 13:41 0 -csha-w C:\WINDOWS\SMINST\HPCD.sys
2006-04-22 16:53 56 --sh--r C:\WINDOWS\system32\1F13058341.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WOOKIT"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [BU]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-20 68856]
"Update Service"="C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe" [2008-02-23 19456]
"DAEMON Tools Pro Agent"="C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" [2007-06-22 133576]
"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\HOMERunner.exe" [2008-09-22 206184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736]
"KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 61440]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-01-28 229376]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 233472]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2003-09-12 98304]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-04-21 335872]
"UpdateManager"="c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-08-19 110592]
"OpwareSE2"="C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
"DAEMON Tools-1033"="C:\Program Files\D-Tools\daemon.exe" [2004-08-22 81920]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-04-26 180269]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-20 155648]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"VTTimer"="VTTimer.exe" [BU]
"AGRSMMSG"="AGRSMMSG.exe" [2005-03-04 C:\WINDOWS\AGRSMMSG.exe]
"SoundMan"="SOUNDMAN.EXE" [2004-05-03 C:\WINDOWS\SOUNDMAN.EXE]
"AlcWzrd"="ALCWZRD.EXE" [2004-05-03 C:\WINDOWS\ALCWZRD.EXE]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-07-24 113664]
Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2007-06-20 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.yv12"= yv12vfw.dll
"vidc.X264"= x264vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Propriétaire^Menu Démarrer^Programmes^Démarrage^Raccourci vers Microsoft Outlook.lnk]
path=C:\Documents and Settings\Propriétaire\Menu Démarrer\Programmes\Démarrage\Raccourci vers Microsoft Outlook.lnk
backup=C:\WINDOWS\pss\Raccourci vers Microsoft Outlook.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\WINDOWS
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\WINDOWS\System32
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinDSNX

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2007-01-19 13:55 5674352 C:\Program Files\MSN Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2007-06-20 11:07 155648 C:\Program Files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2004-01-01 10:28 32881 C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner]
C:\Program Files\Trojan Remover\Trjscan.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Update Service]
--a-s---- 2008-02-23 19:58 19456 C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dxset.exe]
[BU]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\InstantTouch\\bin\\CmCenterV2.exe"=
"C:\\Program Files\\Sony\\Station\\Launchpad\\LaunchPad.exe"=
"C:\\Program Files\\Fichiers communs\\Synacast\\SynaLive\\PE.exe"=
"C:\\Program Files\\Shareaza\\Shareaza.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Documents and Settings\\Propriétaire\\Bureau\\utorrent.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5651:TCP"= 5651:TCP:ppLive
"6485:UDP"= 6485:UDP:ppLive
"6346:TCP"= 6346:TCP:shareaza
"3724:TCP"= 3724:TCP:Blizzard Downloader: 3724

R1 SbFw;SbFw;C:\WINDOWS\system32\drivers\SbFw.sys [2008-07-16 269736]
R1 sbhips;Sunbelt HIPS Driver;C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
R2 SbPF.Launcher;SbPF.Launcher;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-07-30 95528]
R2 SPF4;Sunbelt Personal Firewall 4;C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-07-30 1361192]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 adxapie;adxapie;C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\adxapie.sys [ ]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2673b6f8-5007-11dd-8514-00112f4f6541}]
\Shell\AutoRun\command - K:\EmDesk.exe
\Shell\EmDesk\command - K:\EmDesk.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{898d4d0c-5117-11da-b409-00112f4f6541}]
\Shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cd6e3543-475f-11dd-84f6-00112f4f6541}]
\Shell\AutoRun\command - K:\InstallTomTomHOME.exe
.
- - - - ORPHELINS SUPPRIMES - - - -

MSConfigStartUp-ope10 - C:\WINDOWS\System32\ope10.exe
MSConfigStartUp-ope7 - C:\WINDOWS\System32\ope7.exe


.
------- Examen supplémentaire -------
.
FireFox -: Profile - C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\nqgo4f0j.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\Panda Security\TotalScan\npwrapper.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-13 17:46:05
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
.
**************************************************************************
.
Heure de fin: 2008-10-13 17:52:55 - La machine a redémarré [Propriétaire]
ComboFix-quarantined-files.txt 2008-10-13 15:52:40
ComboFix2.txt 2008-10-09 16:31:19

Avant-CF: 31,223,758,848 octets libres
Après-CF: 31,294,341,120 octets libres

218 --- E O F --- 2008-10-12 19:27:03
-1
jlpjlp Messages postés 51574 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 042
13 oct. 2008 à 21:59
encore des soucis???
_____________
lance ccleaner et nettoie les traces internet (dans les option decocher la case effacer les fichier de plus de 48h eures)

https://www.malekal.com/tutoriel-ccleaner/

_____________
puis remet un rapport lop sd option 1
-1
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008
14 oct. 2008 à 13:35
--------------------\\ Lop S&D 4.2.4-5 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 07/05/04 14:10:38 Ver: 08.00.10
USER : Propriétaire ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.27 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total : 145 Go Free : 30 Go
D:\ (Local Disk) - FAT32 - Total : 3 Go Free : 0 Go
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (CD or DVD) - UDF - Total : 5 Go Free : 0 Go
H:\ (CD or DVD)
I:\ (CD or DVD)
J:\ (CD or DVD)
P:\ (CD or DVD) - CDFS - Total : 0 Go Free : 0 Go

"C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
Option : [1] ( 14/10/2008|13:31 )

--------------------\\ Listing des dossiers dans APPLIC~1

[01/01/2004|09:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/01/2004|11:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intervideo
[10/10/2008|08:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
[03/09/2008|21:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Malwarebytes
[10/10/2008|08:07] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[01/01/2004|12:26] C:\DOCUME~1\ADMINI~1\APPLIC~1\SampleView
[01/01/2004|10:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[01/01/2004|16:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
[10/10/2008|08:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Template

[15/05/2008|09:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[20/06/2007|11:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[10/10/2008|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[08/09/2007|13:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BVRP Software
[22/02/2008|16:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DAEMON Tools Pro
[29/12/2006|14:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\DVD Shrink
[20/06/2007|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EnterNHelp
[27/10/2006|12:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[01/01/2004|11:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
[24/07/2005|20:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Macrovision
[06/10/2008|17:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
[27/08/2008|13:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[01/10/2008|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/01/2004|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
[30/10/2004|19:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[20/06/2007|11:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nikon
[20/10/2004|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[01/01/2004|09:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[22/12/2004|16:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[23/11/2005|22:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[13/10/2008|18:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[22/12/2004|16:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[22/12/2004|16:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[19/02/2005|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[20/06/2007|12:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ultima_T15
[23/08/2006|11:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

[01/01/2004|09:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/01/2004|11:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
[01/01/2004|10:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/01/2004|12:26] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
[01/01/2004|10:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[01/01/2004|16:21] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

[01/01/2004|09:49] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[11/07/2007|08:58] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[03/09/2008|18:19] C:\DOCUME~1\PROPRI~1\APPLIC~1\Adobe
[04/03/2008|11:39] C:\DOCUME~1\PROPRI~1\APPLIC~1\AdobeUM
[20/06/2007|13:27] C:\DOCUME~1\PROPRI~1\APPLIC~1\Apple Computer
[20/06/2007|12:25] C:\DOCUME~1\PROPRI~1\APPLIC~1\ArcSoft
[20/12/2004|21:24] C:\DOCUME~1\PROPRI~1\APPLIC~1\Canon
[22/02/2008|16:06] C:\DOCUME~1\PROPRI~1\APPLIC~1\DAEMON Tools Pro
[12/10/2005|11:05] C:\DOCUME~1\PROPRI~1\APPLIC~1\Google
[20/11/2004|17:03] C:\DOCUME~1\PROPRI~1\APPLIC~1\Help
[27/10/2004|00:05] C:\DOCUME~1\PROPRI~1\APPLIC~1\Hewlett-Packard
[01/01/2004|09:47] C:\DOCUME~1\PROPRI~1\APPLIC~1\Identities
[08/09/2007|13:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\InstallShield
[17/10/2004|17:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\Intervideo
[15/11/2004|12:34] C:\DOCUME~1\PROPRI~1\APPLIC~1\Lavasoft
[19/10/2004|13:05] C:\DOCUME~1\PROPRI~1\APPLIC~1\Leadertech
[23/11/2007|12:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Macromedia
[06/10/2008|17:32] C:\DOCUME~1\PROPRI~1\APPLIC~1\MAGIX
[27/08/2008|13:09] C:\DOCUME~1\PROPRI~1\APPLIC~1\Malwarebytes
[03/10/2008|19:04] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft
[17/10/2004|20:09] C:\DOCUME~1\PROPRI~1\APPLIC~1\Microsoft Web Folders
[01/07/2008|15:13] C:\DOCUME~1\PROPRI~1\APPLIC~1\Mozilla
[30/10/2004|19:19] C:\DOCUME~1\PROPRI~1\APPLIC~1\MSN6
[20/06/2007|12:29] C:\DOCUME~1\PROPRI~1\APPLIC~1\Nikon
[07/01/2008|22:50] C:\DOCUME~1\PROPRI~1\APPLIC~1\ppStream
[14/03/2005|00:10] C:\DOCUME~1\PROPRI~1\APPLIC~1\Publish Providers
[18/04/2008|17:43] C:\DOCUME~1\PROPRI~1\APPLIC~1\Real
[01/01/2004|12:26] C:\DOCUME~1\PROPRI~1\APPLIC~1\SampleView
[22/12/2004|16:49] C:\DOCUME~1\PROPRI~1\APPLIC~1\ScanSoft
[04/09/2007|12:25] C:\DOCUME~1\PROPRI~1\APPLIC~1\SecuROM
[14/06/2008|11:52] C:\DOCUME~1\PROPRI~1\APPLIC~1\Skype
[21/07/2006|19:38] C:\DOCUME~1\PROPRI~1\APPLIC~1\SlySoft
[19/10/2004|13:06] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sonic
[14/03/2005|00:02] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sony
[20/10/2007|14:17] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sports Interactive
[01/01/2004|10:28] C:\DOCUME~1\PROPRI~1\APPLIC~1\Sun
[01/01/2004|16:21] C:\DOCUME~1\PROPRI~1\APPLIC~1\Symantec
[17/12/2006|21:59] C:\DOCUME~1\PROPRI~1\APPLIC~1\teamspeak2
[17/10/2004|15:49] C:\DOCUME~1\PROPRI~1\APPLIC~1\Template
[01/07/2008|15:13] C:\DOCUME~1\PROPRI~1\APPLIC~1\TomTom
[09/10/2008|22:48] C:\DOCUME~1\PROPRI~1\APPLIC~1\uTorrent


--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[12/02/2004 06:27][-rah-----] C:\WINDOWS\tasks\desktop.ini
[14/10/2008 12:51][--ah-----] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[04/03/2008|11:37] C:\Program Files\Adobe
[17/03/2005|11:39] C:\Program Files\Ahead
[01/10/2005|11:06] C:\Program Files\Alcohol Soft
[09/11/2005|20:57] C:\Program Files\Alwil Software
[24/07/2006|11:33] C:\Program Files\Ant Movie Catalog
[20/06/2007|11:06] C:\Program Files\ArcSoft
[28/09/2004|16:24] C:\Program Files\ATI Technologies
[10/07/2008|18:39] C:\Program Files\Avanquest update
[10/10/2008|19:40] C:\Program Files\Avira
[05/09/2008|14:32] C:\Program Files\AviSynth 2.5
[24/10/2006|22:58] C:\Program Files\BSPlayer_WhenUSave_Installer
[20/12/2004|20:48] C:\Program Files\Canon
[13/10/2005|18:52] C:\Program Files\CCleaner
[03/10/2008|19:02] C:\Program Files\Clever Age
[20/02/2008|14:59] C:\Program Files\ClicClasse
[23/02/2008|19:48] C:\Program Files\Common Files
[01/01/2004|09:44] C:\Program Files\ComPlus Applications
[18/10/2004|19:52] C:\Program Files\Creative
[03/09/2007|00:43] C:\Program Files\CyberQix
[27/08/2008|11:55] C:\Program Files\DAEMON Tools Pro
[11/01/2005|00:48] C:\Program Files\directx
[22/04/2006|18:53] C:\Program Files\DivX
[09/11/2005|14:36] C:\Program Files\D-Tools
[19/10/2004|18:50] C:\Program Files\DVD Shrink
[29/12/2006|14:57] C:\Program Files\DVDFab Decrypter 3
[11/10/2008|00:36] C:\Program Files\EA SPORTS
[17/11/2004|09:15] C:\Program Files\Easy Internet signup
[22/03/2008|12:15] C:\Program Files\Eidos Interactive
[04/11/2006|19:48] C:\Program Files\Elaborate Bytes
[13/10/2008|17:39] C:\Program Files\Fichiers communs
[29/10/2007|15:20] C:\Program Files\Gabest
[01/02/2007|14:39] C:\Program Files\Google
[24/09/2007|12:44] C:\Program Files\GRISOFT
[22/10/2004|14:49] C:\Program Files\HandyBits
[10/10/2008|16:02] C:\Program Files\Hattrick Forever
[27/10/2004|00:03] C:\Program Files\Hewlett-Packard
[10/10/2008|16:02] C:\Program Files\InstallShield Installation Information
[16/06/2005|19:32] C:\Program Files\InstantTouch
[30/01/2005|12:50] C:\Program Files\InterActual
[25/08/2008|00:47] C:\Program Files\Internet Explorer
[28/09/2004|16:25] C:\Program Files\InterVideo
[08/09/2007|13:09] C:\Program Files\Inventel
[01/01/2004|11:35] C:\Program Files\iPod
[12/10/2005|13:52] C:\Program Files\iTunes
[25/04/2008|23:43] C:\Program Files\Java
[22/06/2005|23:26] C:\Program Files\Lavalys
[15/11/2004|12:32] C:\Program Files\Lavasoft
[06/10/2008|17:31] C:\Program Files\MAGIX
[08/09/2008|11:04] C:\Program Files\Malwarebytes' Anti-Malware
[16/07/2007|10:40] C:\Program Files\Managed DirectX (0900)
[12/10/2005|18:13] C:\Program Files\Media Access
[25/08/2008|00:49] C:\Program Files\Messenger
[05/05/2006|21:14] C:\Program Files\microsoft frontpage
[08/10/2008|12:47] C:\Program Files\Microsoft Money
[03/10/2008|19:01] C:\Program Files\Microsoft Office
[17/10/2004|15:35] C:\Program Files\Microsoft Works
[01/10/2008|20:13] C:\Program Files\Microsoft.NET
[17/10/2004|15:38] C:\Program Files\ML4
[08/05/2006|11:23] C:\Program Files\Morgan
[29/07/2008|22:12] C:\Program Files\Motorola Phone Tools
[19/02/2005|15:27] C:\Program Files\Movie Maker
[13/10/2008|20:03] C:\Program Files\Mozilla Firefox
[03/10/2008|19:01] C:\Program Files\MSECache
[01/01/2004|09:43] C:\Program Files\MSN
[01/01/2004|09:43] C:\Program Files\MSN Gaming Zone
[13/12/2007|19:26] C:\Program Files\MSN Messenger
[20/06/2007|11:10] C:\Program Files\MSXML 4.0
[12/10/2008|16:25] C:\Program Files\Navilog1
[08/05/2006|11:24] C:\Program Files\neodivx2006
[19/02/2005|15:26] C:\Program Files\NetMeeting
[20/06/2007|11:09] C:\Program Files\Nikon
[08/09/2007|16:51] C:\Program Files\Outlook Express
[09/10/2008|12:56] C:\Program Files\Panda Security
[24/03/2008|13:19] C:\Program Files\Pixiphot
[01/01/2004|11:58] C:\Program Files\Presario PC Help
[09/10/2007|18:05] C:\Program Files\PsQREdit FR
[20/06/2007|11:07] C:\Program Files\QuickTime
[23/02/2005|00:02] C:\Program Files\Real
[28/09/2004|16:24] C:\Program Files\RecordNow!
[22/04/2006|18:50] C:\Program Files\Ripp-It Codec Pack
[06/09/2008|19:03] C:\Program Files\Ripp-it_AM
[22/12/2004|16:49] C:\Program Files\ScanSoft
[12/10/2008|19:30] C:\Program Files\SDHelper (Spybot - Search & Destroy)
[08/09/2007|13:09] C:\Program Files\Securitoo
[05/09/2007|15:58] C:\Program Files\Sega
[01/01/2004|12:03] C:\Program Files\Services en ligne
[12/05/2008|13:13] C:\Program Files\Shareaza
[10/03/2005|14:24] C:\Program Files\Skype
[22/07/2006|13:12] C:\Program Files\SlySoft
[28/09/2004|16:24] C:\Program Files\Sonic
[06/10/2005|13:51] C:\Program Files\Sony
[13/03/2005|23:52] C:\Program Files\Sony Setup
[07/04/2008|17:36] C:\Program Files\Sports Interactive
[21/09/2007|17:20] C:\Program Files\Spybot - Search & Destroy
[08/09/2008|20:24] C:\Program Files\Sunbelt Software
[13/06/2005|14:44] C:\Program Files\Teamspeak2_RC2
[12/10/2008|19:30] C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[01/07/2008|15:13] C:\Program Files\TomTom HOME 2
[15/11/2004|12:38] C:\Program Files\ToniArts
[21/02/2005|19:44] C:\Program Files\Trojan Remover
[01/01/2004|11:18] C:\Program Files\Uninstall Information
[16/07/2007|10:41] C:\Program Files\ValuSoft
[08/09/2007|16:52] C:\Program Files\Wanadoo
[19/02/2005|16:16] C:\Program Files\Wanadoo Messager
[15/10/2006|15:21] C:\Program Files\Webteh
[08/05/2006|11:24] C:\Program Files\WinASPI
[18/02/2006|21:34] C:\Program Files\Windows Media Player
[19/02/2005|15:26] C:\Program Files\Windows NT
[19/02/2005|16:22] C:\Program Files\WindowsUpdate
[21/11/2007|21:40] C:\Program Files\WinRAR
[08/05/2006|11:23] C:\Program Files\x264
[01/01/2004|09:47] C:\Program Files\xerox
[08/05/2006|11:23] C:\Program Files\XviD
[20/10/2007|14:13] C:\Program Files\Zero G Registry

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[24/07/2005|20:02] C:\Program Files\Fichiers communs\Adobe
[24/07/2005|20:03] C:\Program Files\Fichiers communs\Adobe Systems Shared
[17/03/2005|11:39] C:\Program Files\Fichiers communs\Ahead
[01/10/2008|19:41] C:\Program Files\Fichiers communs\Designer
[16/07/2007|10:45] C:\Program Files\Fichiers communs\DirectX
[27/10/2004|00:01] C:\Program Files\Fichiers communs\Hewlett-Packard
[11/11/2006|13:06] C:\Program Files\Fichiers communs\InstallShield
[01/01/2004|10:28] C:\Program Files\Fichiers communs\Java
[03/10/2008|19:01] C:\Program Files\Fichiers communs\Microsoft Shared
[23/02/2008|19:48] C:\Program Files\Fichiers communs\Motorola Shared
[01/01/2004|09:44] C:\Program Files\Fichiers communs\MSSoap
[20/06/2007|11:10] C:\Program Files\Fichiers communs\muvee Technologies
[20/06/2007|12:29] C:\Program Files\Fichiers communs\Nikon
[01/01/2004|09:40] C:\Program Files\Fichiers communs\ODBC
[26/04/2006|09:40] C:\Program Files\Fichiers communs\Real
[22/12/2004|17:31] C:\Program Files\Fichiers communs\ScanSoft Shared
[24/08/2004|19:44] C:\Program Files\Fichiers communs\Services
[09/11/2005|20:48] C:\Program Files\Fichiers communs\Softwin
[28/09/2004|16:24] C:\Program Files\Fichiers communs\Sonic
[01/01/2004|09:40] C:\Program Files\Fichiers communs\SpeechEngines
[28/09/2004|16:24] C:\Program Files\Fichiers communs\SureThing Shared
[11/12/2005|21:34] C:\Program Files\Fichiers communs\Synacast
[13/06/2007|18:16] C:\Program Files\Fichiers communs\System
[23/02/2008|19:59] C:\Program Files\Fichiers communs\Teknum Systems
[26/04/2006|09:40] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 48 Processes )

IEXPLORE.EXE ~ [PID:3028]
IEXPLORE.EXE ~ [PID:3584]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-14 13:32:35
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:3][D:1]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
[F:53][D:0]-> C:\DOCUME~1\PROPRI~1\Cookies
[F:1639][D:8]-> C:\DOCUME~1\PROPRI~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 13/10/2008|13:32 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 14/10/2008|13:34 - Option : [1]

--------------------\\ Fin du rapport a 13:34:11

toujours ce probleme de Internet Explorer ne peut pas afficher cette page Web
-1
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008
14 oct. 2008 à 14:53
https://www.ibm.com/fr-fr

par exemple ne s affiche pas

et l ouverture de vidéo daylimotion ou youtube, 1 fois sur 2 j ai un message probleme technique merci d actualiser.
-1
jlpjlp Messages postés 51574 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 042
14 oct. 2008 à 21:17
si tu veux utilser UsbFix il est dispo :


Telecharge UsbFix sur ton bureau (merci chiquitine)

http://sd-1.archive-host.com/membres/up/116615172019703188/UsbFix.exe

--> Lance l installation avec les parametres par default

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

--> Double clic sur le raccourci UsbFix sur ton bureau

--> Le pc va redémarer

-->Apres redémarrage post le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides
-1
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008
15 oct. 2008 à 13:21
-------------- UsbFix V1.095 ---------------

* User : Propri‚taire - NOM-D4VT2HUY1MA
* Outils mis a jours le 15/10/2008 par Chiquitine29
* Recherche effectuée à 12:36:05 le 15/10/2008
* Windows Xp - Internet Explorer 7.0.5730.11


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avwsc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\1.tmp\b2e.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE

--------------- [ Informations lecteurs ] ----------------

C: - Lecteur fixe

D: - Lecteur fixe

G: - Lecteur de CD-ROM

P: - Lecteur de CD-ROM

C:\Program Files\UsbFix\Clean.reg
C:\Program Files\UsbFix\Fdc.reg
C:\Program Files\UsbFix\Tools
C:\Program Files\UsbFix\Uninstal.exe
C:\Program Files\UsbFix\UsbFix.exe
C:\Program Files\UsbFix\Tools\Ico.ico
C:\Program Files\UsbFix\Tools\Ico2.ico
C:\Program Files\UsbFix\Tools\Kill.exe
C:\Program Files\UsbFix\Tools\Proc.exe
C:\Program Files\UsbFix\Clean.reg
C:\Program Files\UsbFix\Fdc.reg
C:\Program Files\UsbFix\Tools
C:\Program Files\UsbFix\Uninstal.exe
C:\Program Files\UsbFix\UsbFix.exe
C:\Program Files\UsbFix\Tools\Ico.ico
C:\Program Files\UsbFix\Tools\Ico2.ico
C:\Program Files\UsbFix\Tools\Kill.exe
C:\Program Files\UsbFix\Tools\Proc.exe
C:\Program Files\UsbFix\Clean.reg
C:\Program Files\UsbFix\Fdc.reg
C:\Program Files\UsbFix\Tools
C:\Program Files\UsbFix\Uninstal.exe
C:\Program Files\UsbFix\UsbFix.exe
C:\Program Files\UsbFix\Tools\Ico.ico
C:\Program Files\UsbFix\Tools\Ico2.ico
C:\Program Files\UsbFix\Tools\Kill.exe
C:\Program Files\UsbFix\Tools\Proc.exe
C:\Program Files\UsbFix\Clean.reg
C:\Program Files\UsbFix\Fdc.reg
C:\Program Files\UsbFix\Tools
C:\Program Files\UsbFix\Uninstal.exe
C:\Program Files\UsbFix\UsbFix.exe
C:\Program Files\UsbFix\Tools\Ico.ico
C:\Program Files\UsbFix\Tools\Ico2.ico
C:\Program Files\UsbFix\Tools\Kill.exe
C:\Program Files\UsbFix\Tools\Proc.exe

+- Contenu de l'autorun : C:\autorun.inf


+- Contenu de l'autorun : D:\autorun.inf


+- Contenu de l'autorun : P:\autorun.inf

[autorun]
OPEN=autorun.exe
--------------- [ Registre / Startup ] ----------------


! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
hpsysdrv REG_SZ c:\windows\system\hpsysdrv.exe
KBD REG_SZ C:\HP\KBD\KBD.EXE
iTunesHelper REG_SZ C:\Program Files\iTunes\iTunesHelper.exe
Recguard REG_SZ C:\WINDOWS\SMINST\RECGUARD.EXE
VTTimer REG_SZ VTTimer.exe
AGRSMMSG REG_SZ AGRSMMSG.exe
SoundMan REG_SZ SOUNDMAN.EXE
AlcWzrd REG_SZ ALCWZRD.EXE
PS2 REG_SZ C:\WINDOWS\system32\ps2.exe
ATIPTA REG_SZ C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
UpdateManager REG_SZ "c:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
OpwareSE2 REG_SZ "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
DAEMON Tools-1033 REG_SZ "C:\Program Files\D-Tools\daemon.exe" -lang 1033
TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime
avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
WOOKIT REG_SZ C:\PROGRA~1\Wanadoo\GestMaj.exe EspaceWanadoo.exe
ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
Update Service REG_SZ C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup
DAEMON Tools Pro Agent REG_SZ "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
TomTomHOME.exe REG_SZ "C:\Program Files\TomTom HOME 2\HOMERunner.exe"

--------------- [ Registre / Mountpoint2 ] ----------------

Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2673b6f8-5007-11dd-8514-00112f4f6541}\Shell\AutoRun\command
Supprimé ! - HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2673b6f8-5007-11dd-8514-00112f4f6541}\Shell\AutoRun\command
Supprimé ! - HKEY_USERS\S-1-5-21-2143815955-1516008082-153128329-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2673b6f8-5007-11dd-8514-00112f4f6541}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{898d4d0c-5117-11da-b409-00112f4f6541}\Shell\AutoRun\command
Supprimé ! - HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{898d4d0c-5117-11da-b409-00112f4f6541}\Shell\AutoRun\command
Supprimé ! - HKEY_USERS\S-1-5-21-2143815955-1516008082-153128329-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{898d4d0c-5117-11da-b409-00112f4f6541}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cd6e3543-475f-11dd-84f6-00112f4f6541}\Shell\AutoRun\command
Supprimé ! - HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cd6e3543-475f-11dd-84f6-00112f4f6541}\Shell\AutoRun\command
Supprimé ! - HKEY_USERS\S-1-5-21-2143815955-1516008082-153128329-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{cd6e3543-475f-11dd-84f6-00112f4f6541}\Shell\AutoRun\command

--------------- [ Nettoyage des disques ] ----------------

Echec de la supression !! - C:\autorun.inf
Supprimé ! - C:\autorun.inf
Echec de la supression !! - D:\autorun.inf
Supprimé ! - D:\autorun.inf
Supprimé ! - D:\info.exe
Echec de la supression !! - P:\autorun.inf
Echec de la supression !! - P:\autorun.exe
Echec de la supression !! - P:\autorun.inf
Echec de la supression !! - P:\setup.exe

--------------- ! Fin du rapport ! ----------------

l installation de usb fix a changé ma page d accueil orange en msn pff...
-1
jlpjlp Messages postés 51574 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 042
15 oct. 2008 à 13:56
pas grave tu peux remettre ta page d'accueil



puis

Télécharge RavAntivirus d'Evosla :
http://ww25.evosla.com/compteur.php?soft=rav_antivirus

# Si tu as une clé USB, disque dur externe, etc, branche-les sans les ouvrir avant de lancer ce FIX
# Fais un clic droit sur le fichier .ZIP > Extraire sur > le Bureau
# Doucle-clique sur >> RAV.exe << afin de lancer l'outil.
# Une fois RAV ANTIVIRUS lancé, laisse-le réagir , il scanne automatiquement tout les lecteurs (disques fixes et amovibles)
# Si infection > un log s'établira, sinon le soft affichera (très rapide) ==>Votre Ordinateur est sain .
# Retire tes disques amovibles et redémarrez votre ordinateur.
# Poste le rapport, si infection!

2/ Télécharge sur le bureau Flash Disinfector (de SUBS) à cette adresse : http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe

Double-clique sur l’icône.
Les icônes vont disparaître. C’est normal.
Si un rapport est généré en cas d'infection, sauvegarde-le sur le bureau, et poste le ensuite
Redémarre ensuite le PC.

3/ encore des soucis???
-1
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008
15 oct. 2008 à 14:00
nouveauté : quelques sites qui s affichent pas s affiche au 2eme ou 3eme rafraichissement par F5. Ca ne marche pas à tout les coups malheureuseument.

ces 2 trucs ne detectent rien.

-1
jlpjlp Messages postés 51574 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 042
15 oct. 2008 à 14:18
-1
manzanillo Messages postés 20 Date d'inscription vendredi 10 octobre 2008 Statut Membre Dernière intervention 17 octobre 2008
15 oct. 2008 à 15:42
pas de réparation à faire apparement. statut quo.

je cherche dans des problemes DNS ou de navigateur, réseau ou connexion, mais j ai du mal.

mediaplex et coolsearch continu de revenir apres chaque redémarrage, je sais pas si c est ce qui fout la merde, mais bon.

et easy cleaner ne parvient pas a supprimer certains fichiers dits inutlies.

cc cleaner lui me nettoie tout comme il faut.
-1
jlpjlp Messages postés 51574 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 042
15 oct. 2008 à 15:56
scan avec super antispyware et colle le rapport:

https://www.malekal.com/tutoriel-et-guide-superantispyware/
-1