Bonjour jlpjlp,
voilà le rapport
ComboFix 08-04-13.3 - Michel 2008-04-14 12:52:19.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.0.1252.1.1036.18.169 [GMT 2:00]
Endroit: C:\Documents and Settings\Michel\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color
.
((((((((((((((((((((((((((((( Fichiers créés 2008-03-14 to 2008-04-14 ))))))))))))))))))))))))))))))))))))
.
2008-04-14 12:05 . 2008-04-14 12:05 <REP> d-------- C:\Program Files\Trend Micro
2008-04-14 11:50 . 2008-04-14 11:50 <REP> d-------- C:\Program Files\PrevxCSI
2008-04-14 11:50 . 2008-04-14 12:16 <REP> d-------- C:\Documents and Settings\All Users\Application Data\PrevxCSI
2008-04-14 11:50 . 2008-04-14 11:50 10,880 --a------ C:\WINDOWS\system32\drivers\pxark.sys
2008-04-12 17:14 . 2008-04-12 17:14 766 --a------ C:\WINDOWS\system32\msblk.ico
2008-04-06 14:52 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
2008-03-27 12:34 . 2008-04-08 15:50 <REP> d-------- C:\Program Files\Microsoft Money
2008-03-22 19:18 . 2008-03-22 19:18 <REP> d-------- C:\Documents and Settings\Michel\Banque
2008-03-15 20:31 . 2008-04-11 16:39 635 --a------ C:\WINDOWS\cdplayer.ini
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-14 10:56 --------- d-----w C:\Documents and Settings\Michel\Application Data\Skype
2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
2008-03-22 17:32 22,016 --sha-w C:\Program Files\Thumbs.db
2008-03-06 14:45 --------- d-----w C:\Program Files\Skype
2008-03-05 23:11 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2007-12-12 12:28 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
2007-09-03 15:40 55,320 ----a-w C:\WINDOWS\Fonts\tempus_sans_itc.zip
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2001-08-28 14:00 13312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]
"LVCOMSX"="C:\WINDOWS\System32\LVCOMSX.EXE" [2005-12-09 16:32 225280]
"LogitechCameraAssistant"="C:\Program Files\Logitech\Video\CameraAssistant.exe" [2005-12-07 11:26 489472]
"LogitechVideo[inspector]"="C:\Program Files\Logitech\Video\InstallHelper.exe" [2005-12-07 11:33 73728]
"LogitechCameraService(E)"="C:\WINDOWS\System32\ElkCtrl.exe" [2004-11-01 18:22 262144]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2001-08-28 14:00 13312]
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 22:05:56 65588]
R0 pxark;pxark;C:\WINDOWS\System32\drivers\pxark.sys [2008-04-14 11:50]
R1 aswSP;avast! Self Protection;C:\WINDOWS\System32\drivers\aswSP.sys [2008-03-29 19:31]
R2 CSIScanner;CSIScanner;"C:\Program Files\PrevxCSI\\PrevxCSI.exe" /service []
R3 ati2mpaa;ati2mpaa;C:\WINDOWS\System32\DRIVERS\ati2mpaa.sys [2001-08-23 17:59]
R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 16:37]
*Newly Created Service* - CATCHME
*Newly Created Service* - CSISCANNER
*Newly Created Service* - PXARK
.
**************************************************************************
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-14 12:56:14
Windows 5.1.2600 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
Temps d'accomplissement: 2008-04-14 13:00:19
ComboFix-quarantined-files.txt 2008-04-14 11:00:05
Pre-Run: 9,335,246,848 octets libres
Post-Run: 9,326,350,336 octets libres
.
2008-03-22 11:41:07 --- E O F ---
Merci
