A voir également:
- Infecté sur msn
- Msn - Télécharger - Messagerie
- Msn actualités - Télécharger - Médias et Actualité
- Msn hotmail ✓ - Forum Hotmail / Outlook.com
- Google infecté huawei ✓ - Forum Virus
- Caractere speciaux msn ✓ - Forum MSN / WLM
2 réponses
theyellow29
Messages postés
538
Date d'inscription
vendredi 17 août 2007
Statut
Membre
Dernière intervention
16 août 2009
51
8 avril 2008 à 20:49
8 avril 2008 à 20:49
salut
essai SDFix
https://www.malekal.com/slenfbot-still-an-other-irc-bot/
essai SDFix
https://www.malekal.com/slenfbot-still-an-other-irc-bot/
theyellow29
Messages postés
538
Date d'inscription
vendredi 17 août 2007
Statut
Membre
Dernière intervention
16 août 2009
51
8 avril 2008 à 21:11
8 avril 2008 à 21:11
si ta bien tout suivi le tuto
renvois un log
renvois un log
voici le resultat :
[b]SDFix: Version 1.167 [/b]
Run by Administrateur on 08/04/2008 at 22:49
Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix
[b]Checking Services [/b]:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting
[b]Checking Files [/b]:
Trojan Files Found:
C:\WINDOWS\system32\%%%.exe - Deleted
Removing Temp Files
[b]ADS Check [/b]:
[b]Final Check [/b]:
catchme 0.3.1351.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-08 22:56:00
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile"=str(2):"C:\WINDOWS\system32\esent.dll"
"CategoryMessageFile"=str(2):"C:\WINDOWS\system32\esent.dll"
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 2
[b]Remaining Services [/b]:
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"="C:\\Program Files\\Freeplayer\\vlc\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\HomePlayer1.5.4\\HomePlayer.exe"="C:\\Program Files\\HomePlayer1.5.4\\HomePlayer.exe:*:Enabled:HomePlayer"
"C:\\Program Files\\adslTV\\adsltv.exe"="C:\\Program Files\\adslTV\\adsltv.exe:*:Enabled:adslTV"
"C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe"="C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe:*:Enabled:FreeEasyZap"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\adslTV\\vlc.exe"="C:\\Program Files\\adslTV\\vlc.exe:*:Enabled:VLC media player"
"C:\\WINDOWS\\system32\\%%%.exe"="C:\\WINDOWS\\system32\\%%%.exe:*:Enabled:Flash Media"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
[b]Remaining Files [/b]:
File Backups: - C:\SDFix\backups\backups.zip
[b]Files with Hidden Attributes [/b]:
Mon 27 Jun 2005 616,448 A.SHR --- "C:\Program Files\Replay Converter\cygwin1.dll"
Wed 22 Jun 2005 45,568 A.SHR --- "C:\Program Files\Replay Converter\cygz.dll"
Tue 10 Dec 2002 102,437 A..HR --- "C:\Program Files\Replay Converter\drv13260.dll"
Tue 10 Dec 2002 176,165 A..HR --- "C:\Program Files\Replay Converter\drv23260.dll"
Tue 10 Dec 2002 208,935 A..HR --- "C:\Program Files\Replay Converter\drv33260.dll"
Tue 10 Dec 2002 217,127 A..HR --- "C:\Program Files\Replay Converter\drv43260.dll"
Sun 9 Jun 2002 40,448 A..HR --- "C:\Program Files\Replay Converter\dspr3260.dll"
Sun 4 Nov 2001 225,280 A..HR --- "C:\Program Files\Replay Converter\ivvideo.dll"
Tue 10 Apr 2001 225,280 A..HR --- "C:\Program Files\Replay Converter\qtmlClient.dll"
Fri 20 Feb 2004 232,960 A..HR --- "C:\Program Files\Replay Converter\raac.dll"
Sun 9 Jun 2002 525,824 A..HR --- "C:\Program Files\Replay Converter\rnco3260.dll"
Tue 10 Dec 2002 245,805 A..HR --- "C:\Program Files\Replay Converter\rnlt3260.dll"
Tue 10 Dec 2002 45,093 A..HR --- "C:\Program Files\Replay Converter\rv103260.dll"
Tue 10 Dec 2002 98,341 A..HR --- "C:\Program Files\Replay Converter\rv203260.dll"
Tue 10 Dec 2002 94,247 A..HR --- "C:\Program Files\Replay Converter\rv303260.dll"
Tue 10 Dec 2002 90,151 A..HR --- "C:\Program Files\Replay Converter\rv403260.dll"
Sun 9 Jun 2002 49,152 A..HR --- "C:\Program Files\Replay Converter\tokr3260.dll"
Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 28 Jan 2008 2,097,488 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Fri 9 Mar 2007 27,648 A.SH. --- "C:\WINDOWS\system32\AVSredirect.dll"
Mon 26 Mar 2007 5 A.SH. --- "C:\WINDOWS\system32\eacdbda5_s.dll"
Mon 26 Mar 2007 5 A.SH. --- "C:\WINDOWS\system32\eacdbda5_d.dll"
Wed 9 May 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\DRMv1.bak"
Wed 9 May 2007 0 A.SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\Cache\Indiv01.tmp"
[b]Finished![/b]
merci
[b]SDFix: Version 1.167 [/b]
Run by Administrateur on 08/04/2008 at 22:49
Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix
[b]Checking Services [/b]:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting
[b]Checking Files [/b]:
Trojan Files Found:
C:\WINDOWS\system32\%%%.exe - Deleted
Removing Temp Files
[b]ADS Check [/b]:
[b]Final Check [/b]:
catchme 0.3.1351.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-08 22:56:00
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile"=str(2):"C:\WINDOWS\system32\esent.dll"
"CategoryMessageFile"=str(2):"C:\WINDOWS\system32\esent.dll"
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 2
[b]Remaining Services [/b]:
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"="C:\\Program Files\\Freeplayer\\vlc\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\HomePlayer1.5.4\\HomePlayer.exe"="C:\\Program Files\\HomePlayer1.5.4\\HomePlayer.exe:*:Enabled:HomePlayer"
"C:\\Program Files\\adslTV\\adsltv.exe"="C:\\Program Files\\adslTV\\adsltv.exe:*:Enabled:adslTV"
"C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe"="C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe:*:Enabled:FreeEasyZap"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\adslTV\\vlc.exe"="C:\\Program Files\\adslTV\\vlc.exe:*:Enabled:VLC media player"
"C:\\WINDOWS\\system32\\%%%.exe"="C:\\WINDOWS\\system32\\%%%.exe:*:Enabled:Flash Media"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
[b]Remaining Files [/b]:
File Backups: - C:\SDFix\backups\backups.zip
[b]Files with Hidden Attributes [/b]:
Mon 27 Jun 2005 616,448 A.SHR --- "C:\Program Files\Replay Converter\cygwin1.dll"
Wed 22 Jun 2005 45,568 A.SHR --- "C:\Program Files\Replay Converter\cygz.dll"
Tue 10 Dec 2002 102,437 A..HR --- "C:\Program Files\Replay Converter\drv13260.dll"
Tue 10 Dec 2002 176,165 A..HR --- "C:\Program Files\Replay Converter\drv23260.dll"
Tue 10 Dec 2002 208,935 A..HR --- "C:\Program Files\Replay Converter\drv33260.dll"
Tue 10 Dec 2002 217,127 A..HR --- "C:\Program Files\Replay Converter\drv43260.dll"
Sun 9 Jun 2002 40,448 A..HR --- "C:\Program Files\Replay Converter\dspr3260.dll"
Sun 4 Nov 2001 225,280 A..HR --- "C:\Program Files\Replay Converter\ivvideo.dll"
Tue 10 Apr 2001 225,280 A..HR --- "C:\Program Files\Replay Converter\qtmlClient.dll"
Fri 20 Feb 2004 232,960 A..HR --- "C:\Program Files\Replay Converter\raac.dll"
Sun 9 Jun 2002 525,824 A..HR --- "C:\Program Files\Replay Converter\rnco3260.dll"
Tue 10 Dec 2002 245,805 A..HR --- "C:\Program Files\Replay Converter\rnlt3260.dll"
Tue 10 Dec 2002 45,093 A..HR --- "C:\Program Files\Replay Converter\rv103260.dll"
Tue 10 Dec 2002 98,341 A..HR --- "C:\Program Files\Replay Converter\rv203260.dll"
Tue 10 Dec 2002 94,247 A..HR --- "C:\Program Files\Replay Converter\rv303260.dll"
Tue 10 Dec 2002 90,151 A..HR --- "C:\Program Files\Replay Converter\rv403260.dll"
Sun 9 Jun 2002 49,152 A..HR --- "C:\Program Files\Replay Converter\tokr3260.dll"
Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 28 Jan 2008 2,097,488 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Fri 9 Mar 2007 27,648 A.SH. --- "C:\WINDOWS\system32\AVSredirect.dll"
Mon 26 Mar 2007 5 A.SH. --- "C:\WINDOWS\system32\eacdbda5_s.dll"
Mon 26 Mar 2007 5 A.SH. --- "C:\WINDOWS\system32\eacdbda5_d.dll"
Wed 9 May 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\DRMv1.bak"
Wed 9 May 2007 0 A.SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\Cache\Indiv01.tmp"
[b]Finished![/b]
merci
finalement,pour ceux contaminés par"elle pas mal ta tof"
j'avais sur mon bureau un spybot résident qui bloquait firefox
j'ai désinstallé spybot(faire aussi une recherche pour bien tout éliminer)
maintenant,ca refonctionne
j'ai fait un scann combofix:
ComboFix 08-04-09.9 - Propriétaire 2008-04-10 16:47:55.1 - NTFSx86
Endroit: C:\Documents and Settings\Propriétaire.SERGE.001\Bureau\ComboFix.exe
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Propriétaire.SERGE.001\real.txt
.
((((((((((((((((((((((((((((( Fichiers créés 2008-03-10 to 2008-04-10 ))))))))))))))))))))))))))))))))))))
.
2008-04-09 18:02 . 2008-04-09 18:02 <REP> d-------- C:\backups
2008-04-09 18:01 . 2008-04-09 18:01 <REP> d-------- C:\backupreg
2008-04-08 22:47 . 2008-04-08 22:47 <REP> d-------- C:\WINDOWS\ERUNT
2008-04-08 20:43 . 2008-04-08 20:43 <REP> d-------- C:\Program Files\Trend Micro
2008-04-08 15:26 . 2008-04-08 15:26 244 --ah----- C:\sqmnoopt02.sqm
2008-04-08 15:26 . 2008-04-08 15:26 232 --ah----- C:\sqmdata02.sqm
2008-04-06 20:30 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
2008-04-06 20:30 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
2008-03-10 18:34 . 2008-03-10 18:35 <REP> d-------- C:\Program Files\HomePlayer1.5.4
2008-03-10 18:32 . 2008-03-10 18:33 <REP> d-------- C:\Program Files\Freeplayer
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-09 19:08 --------- d-----w C:\Program Files\eMule
2008-04-09 19:02 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2008-04-09 18:58 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-04-07 20:19 --------- d-----w C:\Program Files\adslTV
2008-04-02 15:32 --------- d-----w C:\Documents and Settings\Propriétaire.SERGE.001\Application Data\OpenOffice.org2
2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr
2008-03-23 17:47 --------- d-----w C:\Program Files\Google
2008-03-22 21:50 --------- d-----w C:\Program Files\Java
2008-03-22 11:30 --------- d-----w C:\Program Files\FreeEasyZap
2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-16 14:09 --------- d-----w C:\Documents and Settings\Propriétaire.SERGE.001\Application Data\dvdcss
2008-03-10 10:06 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-10 10:06 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller
2008-03-09 15:10 --------- d-----w C:\Documents and Settings\Propriétaire.SERGE.001\Application Data\MSN6
2008-03-09 15:06 --------- d-----w C:\Program Files\Free.fr
2008-03-09 05:50 --------- d-----w C:\Program Files\Easyscreen Screen Capture Trial
2008-03-09 05:49 --------- d-----w C:\Program Files\HomePlayer1.5.3.1
2008-03-05 18:12 --------- d-----w C:\Documents and Settings\Propriétaire.SERGE.001\Application Data\escreen
2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-02-27 13:25 --------- d-----w C:\Program Files\Windows Live
2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
2008-02-12 18:05 --------- d-----w C:\Program Files\Mozilla Thunderbird
2008-02-01 10:17 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR
2008-01-26 12:00 253,952 ------w C:\WINDOWS\Setup1.exe
2008-01-26 11:59 74,752 ----a-w C:\WINDOWS\ST6UNST.EXE
2007-10-10 15:55 2,293,712 -c--a-w C:\Program Files\FLV PlayerFCSetup.exe
2007-10-10 15:52 411,248 -c--a-w C:\Program Files\FLV PlayerRCSetup.exe
2007-10-10 15:52 3,655,488 -c--a-w C:\Program Files\FLV PlayerRCATSetup.exe
2004-03-11 16:35 26,621 -c--a-w C:\Program Files\sp698vbo.inf
2004-03-11 16:35 10,010,624 -c--a-w C:\Program Files\VS6sp6B2.cab
2004-03-11 16:35 1,835,758 -c--a-w C:\Program Files\VS6sp6B3.cab
2004-03-11 16:34 9,011,712 -c--a-w C:\Program Files\VS6sp6B1.cab
2004-03-11 16:32 57,880 -c--a-w C:\Program Files\sp698vbo.stf
2004-03-11 16:32 1,714 -c--a-w C:\Program Files\setupsp6.lst
2004-03-11 14:23 112,128 -c--a-w C:\Program Files\sp698vbo.dll
2004-03-11 13:01 989,512 -c--a-w C:\Program Files\vbrun60.cab
2004-03-10 20:39 60,699 -c--a-w C:\Program Files\msstdfmt.cab
2004-03-10 20:39 37,721 -c--a-w C:\Program Files\MSBind.CAB
2004-03-09 15:45 397,072 -c--a-w C:\Program Files\mswless.ocx
2004-03-09 15:45 107,008 -c--a-w C:\Program Files\msscript.ocx
2004-02-23 19:35 3,027,068 -c--a-w C:\Program Files\msvbvm60.dbg
2004-02-19 17:11 2,579 -c--a-w C:\Program Files\eula.txt
2004-01-30 02:01 6,990 -c--a-w C:\Program Files\readme.htm
2003-01-14 13:58 487,481 -c--a-w C:\Program Files\jscript.dll
2003-01-14 13:58 438,330 -c--a-w C:\Program Files\vbscript.dll
2002-05-08 06:14 4,248 -c--a-w C:\Program Files\toc.htm
2001-09-16 18:44 33,085 -c--a-w C:\Documents and Settings\langue\maj.bat
2001-03-30 10:54 149 -c--a-w C:\Program Files\setup.ini
2000-07-15 13:43 84 -c--a-w C:\Program Files\setup.tdf
2000-07-15 13:10 26,896 -c--a-w C:\Program Files\dispex.dll
2000-06-13 11:47 2,718 -c--a-w C:\Program Files\redist.txt
2000-06-13 09:33 2,482 -c--a-w C:\Program Files\mswless.dep
2000-06-13 09:29 74,931 -c--a-w C:\Program Files\setupsp6.exe
2000-06-13 09:29 381,440 -c--a-w C:\Program Files\acmsetup.exe
2000-06-13 09:29 32,256 -c--a-w C:\Program Files\selfreg.dll
2000-06-13 09:29 286,720 -c--a-w C:\Program Files\mssetup.dll
2000-06-13 09:29 19,542 -c--a-w C:\Program Files\acmsetup.hlp
2000-05-31 14:39 62,411 -c--a-w C:\Program Files\MSDERUN.CAB
2000-05-31 14:39 22,815 -c--a-w C:\Program Files\mscdrun.cab
2000-05-23 12:43 86,666 -c--a-w C:\Program Files\MSMask32.CAB
2000-05-23 12:43 86,616 -c--a-w C:\Program Files\Msrdc20.cab
2000-05-23 12:43 47,533 -c--a-w C:\Program Files\PicClp32.CAB
2000-05-23 12:43 447,654 -c--a-w C:\Program Files\MSChrt20.CAB
2000-05-23 12:43 428,304 -c--a-w C:\Program Files\Oleaut.cab
2000-05-23 12:43 239,354 -c--a-w C:\Program Files\comctl32.cab
2000-05-23 12:43 204,656 -c--a-w C:\Program Files\MSHFlxGd.CAB
2000-05-23 12:43 114,278 -c--a-w C:\Program Files\MSDatLst.CAB
2000-04-12 12:00 485,280 -c--a-w C:\Program Files\oleaut32.dbg
2000-03-22 09:27 188,416 -c--a-w C:\Documents and Settings\langue\dict.exe
2007-03-09 07:12 27,648 --sha-w C:\WINDOWS\system32\AVSredirect.dll
2007-03-26 19:10 5 --sha-w C:\WINDOWS\system32\eacdbda5_d.dll
2007-03-26 18:35 5 --sha-w C:\WINDOWS\system32\eacdbda5_s.dll
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 17:09 15360]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-26 20:29 68856]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-04-08 19:12 185896]
"PinnacleDriverCheck"="C:\WINDOWS\system32\PSDrvCheck.exe" [2003-03-06 17:01 393728]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 18:20 866584]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-07-29 15:43 1836544]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"LXSUPMON"="C:\WINDOWS\system32\LXSUPMON.exe" [2001-04-12 03:43 841728]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-10 16:27 385024]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-01-15 04:22 267048]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [2005-06-23 21:33 57344]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 17:09 15360]
C:\Documents and Settings\All Users.WINDOWS\Menu D‚marrer\Programmes\D‚marrage\
Windows Desktop Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe [2007-02-05 15:40:46 118784]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 15:39 294400]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\HomePlayer1.5.4\\HomePlayer.exe"=
"C:\\Program Files\\adslTV\\adsltv.exe"=
"C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe"=
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"C:\\Program Files\\adslTV\\vlc.exe"=
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
R2 Pctspk;PCTEL Speaker Phone;C:\WINDOWS\system32\pctspk.exe [2001-08-23 18:47]
R3 Ptserlp;PCTEL Serial Device Driver for PCI;C:\WINDOWS\system32\DRIVERS\ptserlp.sys [2001-08-17 22:28]
S2 kav4cpf1;Kaspersky Anti-Virus 5.5 for Check Point™ FireWall-1®;"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Check Point FireWall\Kav4cpf1.exe" []
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-04-02 21:38:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-03-07 20:52:11 C:\WINDOWS\Tasks\MP Scheduled Quick Scan.job"
- C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpCmdRun.exe%Scan -RestrictPrivileges -ScanType 1
"2008-04-10 13:49:25 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
"2008-04-10 12:57:32 C:\WINDOWS\Tasks\User_Feed_Synchronization-{17A0A84E-A413-4C42-8584-F31E0C8C8591}.job"
- C:\WINDOWS\system32\msfeedssync.exe
"2008-04-10 14:30:22 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************
catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-10 16:51:14
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
Temps d'accomplissement: 2008-04-10 16:52:08
ComboFix-quarantined-files.txt 2008-04-10 14:51:54
Pre-Run: 13,706,727,424 octets libres
Post-Run: 13,693,145,088 octets libres
.
2008-04-09 18:42:09 --- E O F ---
merci a Theyellow 29
j'avais sur mon bureau un spybot résident qui bloquait firefox
j'ai désinstallé spybot(faire aussi une recherche pour bien tout éliminer)
maintenant,ca refonctionne
j'ai fait un scann combofix:
ComboFix 08-04-09.9 - Propriétaire 2008-04-10 16:47:55.1 - NTFSx86
Endroit: C:\Documents and Settings\Propriétaire.SERGE.001\Bureau\ComboFix.exe
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Propriétaire.SERGE.001\real.txt
.
((((((((((((((((((((((((((((( Fichiers créés 2008-03-10 to 2008-04-10 ))))))))))))))))))))))))))))))))))))
.
2008-04-09 18:02 . 2008-04-09 18:02 <REP> d-------- C:\backups
2008-04-09 18:01 . 2008-04-09 18:01 <REP> d-------- C:\backupreg
2008-04-08 22:47 . 2008-04-08 22:47 <REP> d-------- C:\WINDOWS\ERUNT
2008-04-08 20:43 . 2008-04-08 20:43 <REP> d-------- C:\Program Files\Trend Micro
2008-04-08 15:26 . 2008-04-08 15:26 244 --ah----- C:\sqmnoopt02.sqm
2008-04-08 15:26 . 2008-04-08 15:26 232 --ah----- C:\sqmdata02.sqm
2008-04-06 20:30 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
2008-04-06 20:30 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
2008-03-10 18:34 . 2008-03-10 18:35 <REP> d-------- C:\Program Files\HomePlayer1.5.4
2008-03-10 18:32 . 2008-03-10 18:33 <REP> d-------- C:\Program Files\Freeplayer
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-09 19:08 --------- d-----w C:\Program Files\eMule
2008-04-09 19:02 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2008-04-09 18:58 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-04-07 20:19 --------- d-----w C:\Program Files\adslTV
2008-04-02 15:32 --------- d-----w C:\Documents and Settings\Propriétaire.SERGE.001\Application Data\OpenOffice.org2
2008-03-29 17:45 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe
2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
2008-03-29 17:23 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr
2008-03-23 17:47 --------- d-----w C:\Program Files\Google
2008-03-22 21:50 --------- d-----w C:\Program Files\Java
2008-03-22 11:30 --------- d-----w C:\Program Files\FreeEasyZap
2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-16 14:09 --------- d-----w C:\Documents and Settings\Propriétaire.SERGE.001\Application Data\dvdcss
2008-03-10 10:06 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-10 10:06 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller
2008-03-09 15:10 --------- d-----w C:\Documents and Settings\Propriétaire.SERGE.001\Application Data\MSN6
2008-03-09 15:06 --------- d-----w C:\Program Files\Free.fr
2008-03-09 05:50 --------- d-----w C:\Program Files\Easyscreen Screen Capture Trial
2008-03-09 05:49 --------- d-----w C:\Program Files\HomePlayer1.5.3.1
2008-03-05 18:12 --------- d-----w C:\Documents and Settings\Propriétaire.SERGE.001\Application Data\escreen
2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-02-27 13:25 --------- d-----w C:\Program Files\Windows Live
2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
2008-02-12 18:05 --------- d-----w C:\Program Files\Mozilla Thunderbird
2008-02-01 10:17 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR
2008-01-26 12:00 253,952 ------w C:\WINDOWS\Setup1.exe
2008-01-26 11:59 74,752 ----a-w C:\WINDOWS\ST6UNST.EXE
2007-10-10 15:55 2,293,712 -c--a-w C:\Program Files\FLV PlayerFCSetup.exe
2007-10-10 15:52 411,248 -c--a-w C:\Program Files\FLV PlayerRCSetup.exe
2007-10-10 15:52 3,655,488 -c--a-w C:\Program Files\FLV PlayerRCATSetup.exe
2004-03-11 16:35 26,621 -c--a-w C:\Program Files\sp698vbo.inf
2004-03-11 16:35 10,010,624 -c--a-w C:\Program Files\VS6sp6B2.cab
2004-03-11 16:35 1,835,758 -c--a-w C:\Program Files\VS6sp6B3.cab
2004-03-11 16:34 9,011,712 -c--a-w C:\Program Files\VS6sp6B1.cab
2004-03-11 16:32 57,880 -c--a-w C:\Program Files\sp698vbo.stf
2004-03-11 16:32 1,714 -c--a-w C:\Program Files\setupsp6.lst
2004-03-11 14:23 112,128 -c--a-w C:\Program Files\sp698vbo.dll
2004-03-11 13:01 989,512 -c--a-w C:\Program Files\vbrun60.cab
2004-03-10 20:39 60,699 -c--a-w C:\Program Files\msstdfmt.cab
2004-03-10 20:39 37,721 -c--a-w C:\Program Files\MSBind.CAB
2004-03-09 15:45 397,072 -c--a-w C:\Program Files\mswless.ocx
2004-03-09 15:45 107,008 -c--a-w C:\Program Files\msscript.ocx
2004-02-23 19:35 3,027,068 -c--a-w C:\Program Files\msvbvm60.dbg
2004-02-19 17:11 2,579 -c--a-w C:\Program Files\eula.txt
2004-01-30 02:01 6,990 -c--a-w C:\Program Files\readme.htm
2003-01-14 13:58 487,481 -c--a-w C:\Program Files\jscript.dll
2003-01-14 13:58 438,330 -c--a-w C:\Program Files\vbscript.dll
2002-05-08 06:14 4,248 -c--a-w C:\Program Files\toc.htm
2001-09-16 18:44 33,085 -c--a-w C:\Documents and Settings\langue\maj.bat
2001-03-30 10:54 149 -c--a-w C:\Program Files\setup.ini
2000-07-15 13:43 84 -c--a-w C:\Program Files\setup.tdf
2000-07-15 13:10 26,896 -c--a-w C:\Program Files\dispex.dll
2000-06-13 11:47 2,718 -c--a-w C:\Program Files\redist.txt
2000-06-13 09:33 2,482 -c--a-w C:\Program Files\mswless.dep
2000-06-13 09:29 74,931 -c--a-w C:\Program Files\setupsp6.exe
2000-06-13 09:29 381,440 -c--a-w C:\Program Files\acmsetup.exe
2000-06-13 09:29 32,256 -c--a-w C:\Program Files\selfreg.dll
2000-06-13 09:29 286,720 -c--a-w C:\Program Files\mssetup.dll
2000-06-13 09:29 19,542 -c--a-w C:\Program Files\acmsetup.hlp
2000-05-31 14:39 62,411 -c--a-w C:\Program Files\MSDERUN.CAB
2000-05-31 14:39 22,815 -c--a-w C:\Program Files\mscdrun.cab
2000-05-23 12:43 86,666 -c--a-w C:\Program Files\MSMask32.CAB
2000-05-23 12:43 86,616 -c--a-w C:\Program Files\Msrdc20.cab
2000-05-23 12:43 47,533 -c--a-w C:\Program Files\PicClp32.CAB
2000-05-23 12:43 447,654 -c--a-w C:\Program Files\MSChrt20.CAB
2000-05-23 12:43 428,304 -c--a-w C:\Program Files\Oleaut.cab
2000-05-23 12:43 239,354 -c--a-w C:\Program Files\comctl32.cab
2000-05-23 12:43 204,656 -c--a-w C:\Program Files\MSHFlxGd.CAB
2000-05-23 12:43 114,278 -c--a-w C:\Program Files\MSDatLst.CAB
2000-04-12 12:00 485,280 -c--a-w C:\Program Files\oleaut32.dbg
2000-03-22 09:27 188,416 -c--a-w C:\Documents and Settings\langue\dict.exe
2007-03-09 07:12 27,648 --sha-w C:\WINDOWS\system32\AVSredirect.dll
2007-03-26 19:10 5 --sha-w C:\WINDOWS\system32\eacdbda5_d.dll
2007-03-26 18:35 5 --sha-w C:\WINDOWS\system32\eacdbda5_s.dll
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 17:09 15360]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 12:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-26 20:29 68856]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 19:37 79224]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-04-08 19:12 185896]
"PinnacleDriverCheck"="C:\WINDOWS\system32\PSDrvCheck.exe" [2003-03-06 17:01 393728]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 18:20 866584]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-07-29 15:43 1836544]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"LXSUPMON"="C:\WINDOWS\system32\LXSUPMON.exe" [2001-04-12 03:43 841728]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-10 16:27 385024]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-01-15 04:22 267048]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [2005-06-23 21:33 57344]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-19 17:09 15360]
C:\Documents and Settings\All Users.WINDOWS\Menu D‚marrer\Programmes\D‚marrage\
Windows Desktop Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe [2007-02-05 15:40:46 118784]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 15:39 294400]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\HomePlayer1.5.4\\HomePlayer.exe"=
"C:\\Program Files\\adslTV\\adsltv.exe"=
"C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe"=
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"C:\\Program Files\\adslTV\\vlc.exe"=
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
R2 Pctspk;PCTEL Speaker Phone;C:\WINDOWS\system32\pctspk.exe [2001-08-23 18:47]
R3 Ptserlp;PCTEL Serial Device Driver for PCI;C:\WINDOWS\system32\DRIVERS\ptserlp.sys [2001-08-17 22:28]
S2 kav4cpf1;Kaspersky Anti-Virus 5.5 for Check Point™ FireWall-1®;"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Check Point FireWall\Kav4cpf1.exe" []
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-04-02 21:38:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-03-07 20:52:11 C:\WINDOWS\Tasks\MP Scheduled Quick Scan.job"
- C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpCmdRun.exe%Scan -RestrictPrivileges -ScanType 1
"2008-04-10 13:49:25 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
"2008-04-10 12:57:32 C:\WINDOWS\Tasks\User_Feed_Synchronization-{17A0A84E-A413-4C42-8584-F31E0C8C8591}.job"
- C:\WINDOWS\system32\msfeedssync.exe
"2008-04-10 14:30:22 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************
catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-10 16:51:14
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
Temps d'accomplissement: 2008-04-10 16:52:08
ComboFix-quarantined-files.txt 2008-04-10 14:51:54
Pre-Run: 13,706,727,424 octets libres
Post-Run: 13,693,145,088 octets libres
.
2008-04-09 18:42:09 --- E O F ---
merci a Theyellow 29
bonjour
avast m'a prevenu d'une infection avec un rootkit
j'ai refait sdfix
MSNFix 1.701
C:\Documents and Settings\Propri‚taire.SERGE.001\Bureau\MSNFix
Fix exécuté le 11/04/2008 - 19:51:34,39 By Propri‚taire
mode normal
************************ Recherche les fichiers présents
... C:\WINDOWS\system32\%%%.exe
... C:\WINDOWS\system32\%%%.exe
... C:\??????.exe
... C:\WINDOWS\system32\real.txt
************************ Recherche les dossiers présents
... \TEMP\
************************ Suppression des fichiers
.. OK ... C:\WINDOWS\system32\%.exe
.. OK ... C:\WINDOWS\system32\%%%.exe
.. OK ... C:\WINDOWS\system32\%%%.exe
.. OK ... C:\WINDOWS\system32\%%%.exe
.. OK ... C:\WINDOWS\system32\%%%.exe
.. OK ... C:\??????.exe
.. OK ... C:\WINDOWS\system32\real.txt
************************ Suppression des dossiers
.. OK ... \TEMP\
************************ Nettoyage du registre
Les fichiers encore présents seront supprimés au prochain redémarrage
Aucun Fichier trouvé
************************ Fichiers suspects
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention
[C:\DOCUME~1\PROPRI~1.001\LOCALS~1\Temp\gmer.zip] 4613F4A7D9BA3759ED1FE467E86E2D87
[C:\AdbeRdr80_fr_FR.exe] 7DF8FF41F02A66EA0948114F9EAB2966
[C:\psa30se_fr_fr.exe] 0F0212C3DA107D8151A56E05B8B89C56
[C:\vbrun60sp6.exe] 899185DAA1572EC47DDAEFA1B9766136
[color=#FF0000][b]==>/b/color SVP merci d'envoyer le fichier [b] C:\DOCUME~1\PROPRI~1.001\Bureau\Upload_Me.zip /b sur http://upload.changelog.fr
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 11042008_19561590.zip
************************ HKLM\...\Winlogon\Userinit
Userinit = C:\WINDOWS\system32\userinit.exe,
------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------
--------------------------------------------- END ---------------------------------------------
merci d'avance pour interpreter ce rapport
avast m'a prevenu d'une infection avec un rootkit
j'ai refait sdfix
MSNFix 1.701
C:\Documents and Settings\Propri‚taire.SERGE.001\Bureau\MSNFix
Fix exécuté le 11/04/2008 - 19:51:34,39 By Propri‚taire
mode normal
************************ Recherche les fichiers présents
... C:\WINDOWS\system32\%%%.exe
... C:\WINDOWS\system32\%%%.exe
... C:\??????.exe
... C:\WINDOWS\system32\real.txt
************************ Recherche les dossiers présents
... \TEMP\
************************ Suppression des fichiers
.. OK ... C:\WINDOWS\system32\%.exe
.. OK ... C:\WINDOWS\system32\%%%.exe
.. OK ... C:\WINDOWS\system32\%%%.exe
.. OK ... C:\WINDOWS\system32\%%%.exe
.. OK ... C:\WINDOWS\system32\%%%.exe
.. OK ... C:\??????.exe
.. OK ... C:\WINDOWS\system32\real.txt
************************ Suppression des dossiers
.. OK ... \TEMP\
************************ Nettoyage du registre
Les fichiers encore présents seront supprimés au prochain redémarrage
Aucun Fichier trouvé
************************ Fichiers suspects
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention
[C:\DOCUME~1\PROPRI~1.001\LOCALS~1\Temp\gmer.zip] 4613F4A7D9BA3759ED1FE467E86E2D87
[C:\AdbeRdr80_fr_FR.exe] 7DF8FF41F02A66EA0948114F9EAB2966
[C:\psa30se_fr_fr.exe] 0F0212C3DA107D8151A56E05B8B89C56
[C:\vbrun60sp6.exe] 899185DAA1572EC47DDAEFA1B9766136
[color=#FF0000][b]==>/b/color SVP merci d'envoyer le fichier [b] C:\DOCUME~1\PROPRI~1.001\Bureau\Upload_Me.zip /b sur http://upload.changelog.fr
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 11042008_19561590.zip
************************ HKLM\...\Winlogon\Userinit
Userinit = C:\WINDOWS\system32\userinit.exe,
------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------
--------------------------------------------- END ---------------------------------------------
merci d'avance pour interpreter ce rapport
8 avril 2008 à 21:03
j'ai donc telechargé sdfix
je me suis remis sur firefox
comment savoir si ke suis toujours infecté?
8 avril 2008 à 21:15
je te remercie