Attaque virale services NOD32 et AVG bloquésRésolu/Fermé

Question

Bonjour, Je pense être à nouveau victime d'une attaque virale, Mon antivirus NOD32 refuse de démarrer : echec de démarrage service, vérifiez que vous avez les droits nécessaires. J'ai tenté la désinstallation et la réinstallation mais impossible de réinstaller. J'ai aussi désinstallé et réinstallé AVG antispyware pour la même raison, mais le service refuse de démarrer avec Windows. "Echec de la connexion au service, Veuillez réinstaller AVG antispyware 7.5 j'ai lancé un scan avec Combofix, ensuite j'ai installé AVG AntiRootkit et lancé un scan, celui ci ne me trouve aucun Rootkit. Je suis actuellement en cours de scan en ligne avec Bitdefender On line scanner. Voici le rapport de Combofix : ComboFix 08-08-14.03 - Nicolas 2008-08-15 15:26:22.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.118 [GMT 2:00] . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . F:\Documents and Settings\Nicolas\Application Data\m F:\Documents and Settings\Nicolas\Application Data\m\data.oct F:\Documents and Settings\Nicolas\Application Data\m\flec006.exe F:\Documents and Settings\Nicolas\Application Data\m\list.oct F:\Documents and Settings\Nicolas\Application Data\m\shared F:\Documents and Settings\Nicolas\Application Data\m\shared\[HGame_XP][AVG][jpn_jpn][スクールデイズ][004].zip F:\Documents and Settings\Nicolas\Application Data\m\shared\3D_Live_Snooker_2.59.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\4S_Lock_1.09.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\50-676_-_Upgrading_to_Netware_6_Practice_Test_Questions_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Active_Delivery_3.00.01_(KeyGen).zip F:\Documents and Settings\Nicolas\Application Data\m\shared\AddFlow_ActiveX_Control_5.4.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\AddressBook_7.01_Serial.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\AL_Screensaver_&_Slideshow_Builder_1.9.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Album_List_2.06.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\AlbumWeb_Pro_2.9.2.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Alien_Trilogy_version_2.0_patch.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Amond_3GP_Video_Converter_2.1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\AMS_Photo_Studio_2.17.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\AnalyzerXL_6.1.2.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Axosoft_OnTime_2006_Web_Edition_6.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\BBB_Bar_0.3.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\BeInSync_2.0.37.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Black_Dahlia_demo.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Block_Attribute_Modifier_2.2_(Serial).zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Browse_Me_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Brute_Force_Uninstaller_(BFU)_1.00.9.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Candlechart_.NET_1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Canton_Mah_Jong_For_Windows_1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\CaterpillarSSA_3.3.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\CatFish_1.9.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Christmas_Theme_1.7.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Classic_Menu_for_Word_2007_3.00.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\ClikView_2.1_[Serial].zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Collage_Maker_2.05.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Combat_Pillows_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Contour_Cats_Screensaver_2.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Cool_MP3_Splitter_2.02_[With_Crack].zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Cover_Me_2.3.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Customize_Google_for_IE_0.11.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Digital_DBA_1.1.3_Cracked.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Downfall_2.6.2.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\DreamCoder_for_Oracle_Enterprise_Edition_2.1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Escape_Velocity_Override_1.0.2.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Etymonix_MPEG-2_Video_Codec_1.10.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Eurodict_Bulgarian_Italian_Dictionary_3.01_(KeyGen).zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Exeba-ATS_4.0.8.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\EZ_FireFox_Backup_Pro_4.0_[Key+Serial].zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Ezy_Invoice_7_Build_4.6.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Fine_Arts_Business_Cards_3.0_(Serial).zip F:\Documents and Settings\Nicolas\Application Data\m\shared\FireBurner_2.2.1_Cracked.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Framy_Bone_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Free_Whois_Anywhere_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\GMiF_4.1.1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Home_Loan_Interest_Manager_Pro_3.1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Hot_Screen_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\HTMLtoRTF_Converter_Pro_2.07.03.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Humvee_Assault.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\I+_Installer_Lite_1.10.0.3.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Icebreaker_demo.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Image_Editor_&_Screen_Capture_6.01_(Serial).zip F:\Documents and Settings\Nicolas\Application Data\m\shared\ImageSorter_1.01.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\ImTOO_DVD_to_Apple_TV_Converter_4.0.75.0511.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\InstantCashBook_3.04.4.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Internet_Explorer_Toolbar_Maker_3.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\IP_Overtime_Tracker_1.02.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\John's_Bingo_1.88.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Kaspersky.Antivirus.Pro.5.Fr.-.Key.Anti.Blacklist.Explications.-.By.Dav'.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Math_ActivityMaker_Fractions_1.61.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\MID_Converter_4.2_[KeyGen].zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Miraplacid_Text_Driver_5.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\myFMbutler_SHoebox_3.0_SDK_for_Lasso_(Key+Serial).zip F:\Documents and Settings\Nicolas\Application Data\m\shared\MyMusicMachine_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Nature_in_Motion_1.1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Network_Management_Suite_6.1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\NOPAsp_Server_1.00b4_KeyGen.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Omni_Page_Professional_15.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Omniquad_Messenger_Chat_Recorder_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Open_Range_Trailer.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Opera_Customizer_&_Profile_Maker_3.12.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\OrangeCD_Record_Catalog_6.1.4_build_11304.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Orb_1.01.0693.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Panda.platinum.2006.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Panda.Titanium.Antivirus.20054.00.00.Multilingual.Retail.WinALL-F4CG.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Panda_Antivirus_Platinum_Titanium_2005_serials_cracks.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Pandora_Recovery_1.1.20.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\PasswordSpy_2.2.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\PC_Live_Player_3.2.3.6244_Patch.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\PDF417-ActiveX_1.9.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\PhotoBackPack_Portable_1.3.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\PictureStories_1.4.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Pop_PSP_Jukebox_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Print_Screen_3.0b_KeyGen.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Production_Mix_Model_Excel_20_(Key+Serial).zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Protector_Plus_2007_8.0.A03_[Cracked].zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Pseudo_Random_Number_Generator_1.0.0.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Queuing_Model_Excel_2.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Recorder.xhead_4.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Recovery_Toolbox_for_Outlook_Express_Password_1.0.0.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\RenderDotC_3.4.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Right_Autorun_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\ScrambleIt_1.2.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Sinistar_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\SkyCar_3D_Desktop_Toy_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\SOC_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\SoftCopy_3.0.3_Serial.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Sothink_iPod_Video_Converter_3.1_build_70315.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\SoundWheel_1.2.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Space_Emoticons_Pro_3.01.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Spring_Fancies_Screensaver_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Squidsearch_build_02.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Surfer_8.06.39.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Symantec.Winfax.Pro.v10.Español.sin.errores.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\System101_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\The_Date_You_Were_Born_2006.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\The_Inspiring_10_Commandments_Screensaver_1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\The_Onion_Peeler_1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\TimeKeeper_1.5.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\TqcRunas_2004.3.2.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\TrayInfo_1.03_(Serial).zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Ultra_Calendar_Reminder_2.4_build_185.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Ultralingua_French_Dictionary_of_Definitions_5.0.3.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Unreal_Tournament_2003_-_Asbestos_v1.01_map.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Warcraft_III_-_Wise_-_First_Shot_map.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\WebEQ_XP_1.0.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\WebWatchBot_Website_Monitoring_Software_5.0.7_Build_16838_(With_Crack).zip F:\Documents and Settings\Nicolas\Application Data\m\shared\WinAgents_RouterTweak_1.0_build_2.0.1.1526.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\WinASO_EasyTweak_2.1.3.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\WinDiff_5.1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Windows_XP_Pro_Startup_Disk_310994.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\WindowShade_1.2.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\Winm8_4.001.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\WordShuffle_1.2.1.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\World_of_Warcraft_v1.5_Korean_patch.zip F:\Documents and Settings\Nicolas\Application Data\m\shared\YouTube_Widget_1.0.4.0.zip F:\Documents and Settings\Nicolas\Application Data\m\srvlist.oct F:\WINDOWS\system32\ban_list.txt F:\WINDOWS\system32\drivers\downld F:\WINDOWS\system32\drivers\downld\107584.exe F:\WINDOWS\system32\drivers\downld\108906.exe F:\WINDOWS\system32\drivers\downld\109086.exe F:\WINDOWS\system32\drivers\downld\114955.exe F:\WINDOWS\system32\drivers\downld\116938.exe F:\WINDOWS\system32\drivers\downld\121995.exe F:\WINDOWS\system32\drivers\downld\123928.exe F:\WINDOWS\system32\drivers\downld\129185.exe F:\WINDOWS\system32\drivers\downld\131489.exe F:\WINDOWS\system32\drivers\downld\135074.exe F:\WINDOWS\system32\drivers\downld\137037.exe F:\WINDOWS\system32\drivers\downld\143486.exe F:\WINDOWS\system32\drivers\downld\146610.exe F:\WINDOWS\system32\drivers\downld\190974.exe F:\WINDOWS\system32\drivers\downld\199907.exe F:\WINDOWS\system32\drivers\downld\208549.exe F:\WINDOWS\system32\drivers\downld\217312.exe F:\WINDOWS\system32\drivers\downld\97840.exe F:\WINDOWS\system32\drivers\hldrrr.exe F:\WINDOWS\system32\drivers\mdelk.exe F:\WINDOWS\system32\drivers\srosa.sys F:\WINDOWS\system32\mdelk.exe F:\WINDOWS\system32\wintems.exe . ((((((((((((((((((((((((( Files Created from 2008-07-15 to 2008-08-15 ))))))))))))))))))))))))))))))) . 2008-10-08 18:24 . 2008-10-08 18:24 d-------- F:\Program Files\dscdisk 2008-10-04 22:53 . 2008-10-04 23:06 d-------- F:\Documents and Settings\Nicolas\Application Data\DeepBurner 2008-10-04 22:52 . 2008-10-04 22:52 d-------- F:\Program Files\Astonsoft 2008-10-04 22:46 . 2008-10-04 22:46 d-------- F:\WINDOWS\Sun 2008-10-04 22:39 . 2008-06-10 02:32 73,728 --a------ F:\WINDOWS\system32\javacpl.cpl 2008-10-04 22:38 . 2008-10-04 22:39 d-------- F:\Program Files\Java 2008-10-04 22:34 . 2008-10-04 22:34 d-------- F:\Program Files\Fichiers communs\Java 2008-10-04 21:59 . 2008-10-04 21:59 d-------- F:\Documents and Settings\Nicolas\Application Data\vlc 2008-10-04 21:56 . 2008-10-04 21:56 d-------- F:\Program Files\VideoLAN 2008-10-04 18:40 . 2008-10-04 18:40 159,922 --a------ F:\WINDOWS\Marsu-Fix 2.3 Uninstaller.exe 2008-10-04 18:37 . 2008-10-04 18:37 d-------- F:\Documents and Settings\Nicolas\Application Data\ESET 2008-10-04 18:34 . 2008-10-04 18:34 d-------- F:\Program Files\ESET 2008-10-04 16:37 . 2008-08-15 15:33 d-------- F:\Documents and Settings\Nicolas\Application Data\OpenOffice.org2 2008-10-04 16:27 . 2008-04-13 09:45 32,128 --a------ F:\WINDOWS\system32\drivers\usbccgp.sys 2008-10-04 16:27 . 2008-04-13 17:33 21,504 --a------ F:\WINDOWS\system32\hidserv.dll 2008-10-04 16:27 . 2008-04-13 17:05 14,720 --a------ F:\WINDOWS\system32\drivers\kbdhid.sys 2008-10-04 16:27 . 2008-04-13 09:45 10,368 --a------ F:\WINDOWS\system32\drivers\hidusb.sys 2008-10-04 07:24 . 2007-07-30 19:19 271,224 --a------ F:\WINDOWS\system32\mucltui.dll 2008-10-04 07:24 . 2007-07-30 19:19 207,736 --a------ F:\WINDOWS\system32\muweb.dll 2008-10-04 07:24 . 2007-07-30 19:18 30,072 --a------ F:\WINDOWS\system32\mucltui.dll.mui 2008-10-03 22:29 . 2008-10-03 22:33 d-------- F:\Program Files\Fichiers communs\Adobe 2008-10-03 22:18 . 2008-10-03 22:19 d-------- F:\Program Files\Picasa2 2008-10-03 22:14 . 2008-10-03 22:14 d-------- F:\Program Files\Google 2008-10-03 22:14 . 2008-08-14 22:31 d-------- F:\Documents and Settings\All Users\Application Data\Google Updater 2008-10-03 19:54 . 2008-10-03 19:55 d-------- F:\Program Files\OpenOffice.org 2.4 2008-10-03 18:56 . 2008-10-03 18:57 d-------- F:\Documents and Settings\Nicolas\Application Data\Media Player Classic 2008-10-03 18:02 . 2008-08-14 18:21 d-------- F:\Documents and Settings\Nicolas\Application Data\FileZilla 2008-10-03 17:50 . 2008-10-03 17:50 d-------- F:\Program Files\FileZilla FTP Client 2008-10-03 15:58 . 2008-10-03 15:58 d-------- F:\Program Files\RocketDock 2008-10-03 15:45 . 2008-07-04 08:34 860,160 --a------ F:\WINDOWS\system32\lameACM.acm 2008-10-03 15:45 . 2008-01-10 14:15 755,027 --a------ F:\WINDOWS\system32\xvidcore.dll 2008-10-03 15:45 . 2004-01-25 18:18 217,088 --a------ F:\WINDOWS\system32\yv12vfw.dll 2008-10-03 15:45 . 2007-09-04 18:56 164,352 --a------ F:\WINDOWS\system32\unrar.dll 2008-10-03 15:45 . 2008-01-10 14:16 159,839 --a------ F:\WINDOWS\system32\xvidvfw.dll 2008-10-03 15:45 . 2007-09-21 02:52 118,784 --a------ F:\WINDOWS\system32\ac3acm.acm 2008-10-03 15:45 . 2007-10-03 17:03 414 --a------ F:\WINDOWS\system32\lame_acm.xml 2008-10-03 15:44 . 2008-10-03 15:45 d-------- F:\Program Files\K-Lite Codec Pack 2008-10-03 15:44 . 2008-05-23 00:22 3,596,288 --a------ F:\WINDOWS\system32\qt-dx331.dll 2008-10-03 15:44 . 2008-05-31 01:22 683,520 --a------ F:\WINDOWS\system32\divx.dll 2008-10-03 15:44 . 2008-05-23 00:19 81,920 --a------ F:\WINDOWS\system32\dpl100.dll 2008-10-03 15:44 . 2008-06-12 20:36 7,680 --a------ F:\WINDOWS\system32\ff_vfw.dll 2008-10-03 15:44 . 2007-07-10 18:10 547 --a------ F:\WINDOWS\system32\ff_vfw.dll.manifest 2008-10-03 14:41 . 2008-10-03 15:37 d-------- F:\Program Files\Winamp 2008-10-03 14:41 . 2008-10-03 15:01 d-------- F:\Documents and Settings\Nicolas\Application Data\Winamp 2008-10-03 13:08 . 2008-10-03 13:08 d-------- F:\Program Files\eMule 2008-10-03 13:08 . 2008-10-03 13:08 d-------- F:\Documents and Settings\Nicolas\Application Data\eMule 2008-10-03 12:42 . 2008-10-03 12:43 d-------- F:\Documents and Settings\Nicolas\Contacts 2008-10-03 12:41 . 2008-10-03 12:41 d----c--- F:\WINDOWS\system32\DRVSTORE 2008-10-03 10:25 . 2008-10-03 10:25 d-------- F:\Documents and Settings\All Users\Application Data\Grisoft 2008-10-03 10:25 . 2007-05-30 14:10 10,872 --a------ F:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-10-03 10:24 . 2003-03-18 22:20 1,060,864 --a------ F:\WINDOWS\system32\MFC71.dll 2008-10-03 10:24 . 2003-03-18 21:14 499,712 --a------ F:\WINDOWS\system32\MSVCP71.dll 2008-10-03 10:24 . 2003-02-21 05:42 348,160 --a------ F:\WINDOWS\system32\MSVCR71.dll 2008-10-03 10:17 . 2008-10-03 10:17 d---s---- F:\WINDOWS\system32\Microsoft 2008-10-03 10:17 . 2008-10-03 10:17 8,192 --a------ F:\WINDOWS\REGLOCS.OLD 2008-08-15 15:32 . 2008-08-15 15:32 d-------- F:\WINDOWS\system32\xircom 2008-08-15 15:32 . 2008-08-15 15:32 d-------- F:\WINDOWS\srchasst 2008-08-15 15:32 . 2008-08-15 15:32 d-------- F:\Program Files\microsoft frontpage 2008-08-15 10:12 . 2008-08-15 13:29 d-------- F:\Documents and Settings\Nicolas\Application Data\EBookSys 2008-08-15 03:01 . 2008-04-14 01:33 221,184 --a------ F:\WINDOWS\system32\wmpns.dll 2008-08-14 22:18 . 2008-08-14 22:21 d-------- F:\Documents and Settings\Nicolas\Application Data\gtk-2.0 2008-08-14 22:18 . 2008-08-14 22:18 d-------- F:\Documents and Settings\Nicolas\.thumbnails 2008-08-14 22:12 . 2008-05-01 16:36 331,776 --------- F:\WINDOWS\system32\dllcache\msadce.dll 2008-08-14 22:09 . 2008-04-11 21:05 691,712 --------- F:\WINDOWS\system32\dllcache\inetcomm.dll 2008-08-14 21:36 . 2008-08-14 21:47 d-------- F:\Program Files\E-Book Systems 2008-08-14 21:21 . 2008-08-14 22:28 d-------- F:\Documents and Settings\Nicolas\.gimp-2.4 2008-08-14 19:50 . 2008-08-14 19:50 d-------- F:\Program Files\GIMP-2.0 2008-08-14 19:25 . 2008-08-14 19:27 d-------- F:\Program Files\QuickTime 2008-08-14 19:25 . 2008-08-14 19:25 d-------- F:\Documents and Settings\All Users\Application Data\Apple Computer 2008-08-14 19:23 . 2008-08-14 19:23 d-------- F:\Program Files\Apple Software Update 2008-08-14 19:23 . 2008-08-14 19:23 d-------- F:\Documents and Settings\All Users\Application Data\Apple 2008-08-14 18:54 . 2008-08-15 13:44 d-------- F:\Documents and Settings\Nicolas\Application Data\CoreFTP 2008-08-14 18:53 . 2008-08-14 18:53 d-------- F:\Program Files\CoreFTP 2008-08-13 21:28 . 2008-08-13 21:28 d--hs---- F:\WINDOWS\ftpcache 2008-08-13 21:28 . 2008-08-13 22:26 d-------- F:\Program Files\Didapages 2008-08-13 21:24 . 2008-08-13 21:24 361,600 --a------ F:\WINDOWS\system32\drivers\TCPIP.SYS.ORIGINAL 2008-08-09 22:15 . 2008-04-13 17:34 16,384 --a------ F:\WINDOWS\system32\ipsink.ax 2008-08-09 22:15 . 2008-04-13 09:46 15,232 --a------ F:\WINDOWS\system32\drivers\StreamIP.sys 2008-08-09 22:15 . 2008-04-13 09:46 10,880 --a------ F:\WINDOWS\system32\drivers\NdisIP.sys 2008-08-09 22:15 . 2008-04-13 09:39 5,504 --a------ F:\WINDOWS\system32\drivers\MSTEE.sys 2008-08-09 22:14 . 2008-04-13 09:46 85,248 --a------ F:\WINDOWS\system32\drivers\NABTSFEC.sys 2008-08-09 22:14 . 2008-04-13 09:46 19,200 --a------ F:\WINDOWS\system32\drivers\WSTCODEC.SYS 2008-08-09 22:14 . 2008-04-13 09:46 17,024 --a------ F:\WINDOWS\system32\drivers\CCDECODE.sys 2008-08-09 22:14 . 2008-04-13 09:46 11,136 --a------ F:\WINDOWS\system32\drivers\SLIP.sys 2008-08-09 22:13 . 2008-08-09 22:13 d-------- F:\Program Files\Webcam 1200 2008-08-09 22:12 . 2008-08-09 22:12 d--h----- F:\Program Files\InstallShield Installation Information 2008-08-09 22:04 . 2008-08-09 22:04 d-------- F:\Documents and Settings\Nicolas\Application Data\InstallShield . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-03 10:41 --------- d-----w F:\Program Files\Windows Live 2008-10-03 10:40 --------- d-----w F:\Documents and Settings\All Users\Application Data\WLInstaller 2008-10-03 10:25 --------- dcsh--w F:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-10-03 09:46 --------- d-----w F:\Program Files\uTorrent 2008-10-03 08:25 --------- d-----w F:\Documents and Settings\Administrateur\Application Data\Grisoft 2008-10-03 07:50 --------- d-----w F:\Program Files\Windows Media Connect 2 2008-08-15 13:24 --------- d-----w F:\Documents and Settings\Nicolas\Application Data\uTorrent 2008-08-13 19:24 361,600 ----a-w F:\WINDOWS\system32\drivers\TCPIP.SYS 2008-06-20 11:40 138,496 ----a-w F:\WINDOWS\system32\drivers\afd.sys 2008-06-20 11:08 225,856 ----a-w F:\WINDOWS\system32\drivers\tcpip6.sys 2008-06-04 21:18 979,968 ----a-w F:\WINDOWS\explorer.exe 2008-06-04 21:18 156,672 ----a-w F:\WINDOWS\NOTEPAD.EXE . ------- Sigcheck ------- 2008-06-20 13:59 361600 ad978a1b783b5719720cff204b666c8e F:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys 2008-04-29 06:12 361344 030dc4d48cc2b894fee2f390d8e66ad5 F:\WINDOWS\$NtUninstallKB951748$\tcpip.sys 2008-06-20 13:51 361600 9aefa14bd6b182d61e3119fa5f436d3d F:\WINDOWS\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\sp3gdr\tcpip.sys 2008-06-20 13:59 361600 ad978a1b783b5719720cff204b666c8e F:\WINDOWS\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\sp3qfe\tcpip.sys 2008-08-13 21:24 361600 d24ea301e2b36c4e975fd216ca85d8e7 F:\WINDOWS\system32\dllcache\TCPIP.SYS 2008-08-13 21:24 361600 d24ea301e2b36c4e975fd216ca85d8e7 F:\WINDOWS\system32\drivers\TCPIP.SYS 2008-06-15 23:20 2207872 6a5f236cd5a33faa882592834056dca0 F:\WINDOWS\system32\ntkrnlpa.exe 2008-06-04 21:57 2331008 3ebd4417ca19355c7e095e915ef7c432 F:\WINDOWS\system32\ntoskrnl.exe 2008-06-04 23:18 979968 d1ea0a366973eca3e03f1acbefda8f43 F:\WINDOWS\explorer.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="F:\WINDOWS\system32\ctfmon.exe" [2008-04-14 01:34 15360] "MsnMsgr"="F:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184] "uTorrent"="F:\Program Files\uTorrent\uTorrent.exe" [2008-10-03 11:46 219952] "RocketDock"="F:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 13:58 495616] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WinampAgent"="F:\Program Files\Winamp\winampa.exe" [2008-07-09 23:33 36352] "Adobe Reader Speed Launcher"="F:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792] "TrialReset"="F:\WINDOWS\fix.exe" [2008-04-28 20:57 208353] "SunJavaUpdateSched"="F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784] "Monitor"="F:\WINDOWS\PixArt\PAC207\Monitor.exe" [2008-08-15 14:38 319488] "QuickTime Task"="F:\Program Files\QuickTime\qttask.exe" [2008-05-27 10:50 413696] "FlipViewer Library"="F:\Program Files\E-Book Systems\FlipViewer\FlipViewerLibrary.exe" [2008-08-15 11:06 390936] "!AVG Anti-Spyware"="F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="F:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 01:34 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_2"="shell32" [X] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "ForceClassicControlPanel"= 1 (0x1) "NoSMBalloonTip"= 0 (0x0) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.YV12"= yv12vfw.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe"= "%windir%\system32\sessmgr.exe"= "F:\Program Files\uTorrent\uTorrent.exe"= "F:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "F:\Program Files\Windows Live\Messenger\livecall.exe"= "F:\Program Files\eMule\emule.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1023:UDP"= 1023:UDP:utorrent UDP "1023:TCP"= 1023:TCP:uTorrent TCP "1234:TCP"= 1234:TCP:emule TCP 1234 "3333:UDP"= 3333:UDP:emule UDP 3333 S3 PAC207;Webcam 1200;F:\WINDOWS\system32\DRIVERS\PFC027.SYS [2007-06-29 16:32] *Newly Created Service* - HELPSVC . Contents of the 'Scheduled Tasks' folder 2008-08-14 F:\WINDOWS\Tasks\AppleSoftwareUpdate.job - F:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57] . - - - - ORPHANS REMOVED - - - - HKCU-Run-LClock - C:\Windows\LSD\LClock\lclock.exe . ------- Supplementary Scan ------- . FireFox -: Profile - F:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fr/ FF -: plugin - F:\Program Files\Google\Google Updater\2.2.1273.1045\npCIDetect12.dll ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-15 15:33:39 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: F:\WINDOWS\explorer.exe -> F:\Program Files\RocketDock\RocketDock.dll . ------------------------ Other Running Processes ------------------------ . F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe F:\Program Files\E-Book Systems\FlipViewer\FlipViewerLibrary.exe F:\Program Files\OpenOffice.org 2.4\program\soffice.exe F:\Program Files\OpenOffice.org 2.4\program\soffice.bin . ************************************************************************** . Completion time: 2008-08-15 15:37:15 - machine was rebooted ComboFix-quarantined-files.txt 2008-08-15 13:37:07 Pre-Run: 5,035,343,872 octets libres Post-Run: 5,045,911,552 octets libres 372 --- E O F --- 2008-08-15 01:07:12

geoffrey5 · Answer

Salut!!

roo !! La suppression de combofix !! il a fait du bon boulot là lol

Télécharge  hijackthis à cette adresse, tout est expliqué pour bien l installer et pour savoir s'en servir :

https://www.androidworld.fr/

geoffrey5 · Answer

et ca ne m étonne pas que tu sois infecté, NOD32 n est pas un tres bon virus  :s

Si tu veux t en procurer un bon, prends kaspersky ou G-data, ce sont les meilleurs !!

Polpot_2DRu · Answer

Je pensais que NOD était l'un des meilleurs.......l'arnaque! Je vais suivre ton conseil, rassure moi ce sont bien des gratuits? Après la désinfection de Combofix j'ai passé un coup de Bitdefender antivirus en ligne, il m'a supprimé quelques éléments mais pas les baggles... et toujours impossible de réinstaller NOD et AVG antispyware Alors j'ai utilsé elibagla que j'ai mis dans combofix j'ai lancé le scan et depuis les services pour NOD et AVG sont à nouveau accessibles. Je passe un coup de EjackThis et je poste le rapport voici le rapport de Combofix avec Elibaggle : ComboFix 08-08-14.03 - Nicolas 2008-08-15 16:08:28.2 - NTFSx86 Endroit: F:\Documents and Settings\Nicolas\Bureau\antiver.exe . ((((((((((((((((((((((((((((( Fichiers créés 2008-07-15 to 2008-08-15 )))))))))))))))))))))))))))))))))))) . 2008-10-08 18:24 . 2008-10-08 18:24 d-------- F:\Program Files\dscdisk 2008-10-04 22:53 . 2008-10-04 23:06 d-------- F:\Documents and Settings\Nicolas\Application Data\DeepBurner 2008-10-04 22:52 . 2008-10-04 22:52 d-------- F:\Program Files\Astonsoft 2008-10-04 22:46 . 2008-10-04 22:46 d-------- F:\WINDOWS\Sun 2008-10-04 22:39 . 2008-06-10 02:32 73,728 --a------ F:\WINDOWS\system32\javacpl.cpl 2008-10-04 22:38 . 2008-10-04 22:39 d-------- F:\Program Files\Java 2008-10-04 22:34 . 2008-10-04 22:34 d-------- F:\Program Files\Fichiers communs\Java 2008-10-04 21:59 . 2008-10-04 21:59 d-------- F:\Documents and Settings\Nicolas\Application Data\vlc 2008-10-04 21:56 . 2008-10-04 21:56 d-------- F:\Program Files\VideoLAN 2008-10-04 18:40 . 2008-10-04 18:40 159,922 --a------ F:\WINDOWS\Marsu-Fix 2.3 Uninstaller.exe 2008-10-04 18:37 . 2008-10-04 18:37 d-------- F:\Documents and Settings\Nicolas\Application Data\ESET 2008-10-04 18:34 . 2008-10-04 18:34 d-------- F:\Program Files\ESET 2008-10-04 16:37 . 2008-08-15 15:41 d-------- F:\Documents and Settings\Nicolas\Application Data\OpenOffice.org2 2008-10-04 16:27 . 2008-04-13 09:45 32,128 --a------ F:\WINDOWS\system32\drivers\usbccgp.sys 2008-10-04 16:27 . 2008-04-13 17:33 21,504 --a------ F:\WINDOWS\system32\hidserv.dll 2008-10-04 16:27 . 2008-04-13 17:05 14,720 --a------ F:\WINDOWS\system32\drivers\kbdhid.sys 2008-10-04 16:27 . 2008-04-13 09:45 10,368 --a------ F:\WINDOWS\system32\drivers\hidusb.sys 2008-10-04 07:24 . 2007-07-30 19:19 271,224 --a------ F:\WINDOWS\system32\mucltui.dll 2008-10-04 07:24 . 2007-07-30 19:19 207,736 --a------ F:\WINDOWS\system32\muweb.dll 2008-10-04 07:24 . 2007-07-30 19:18 30,072 --a------ F:\WINDOWS\system32\mucltui.dll.mui 2008-10-03 22:29 . 2008-10-03 22:33 d-------- F:\Program Files\Fichiers communs\Adobe 2008-10-03 22:18 . 2008-10-03 22:19 d-------- F:\Program Files\Picasa2 2008-10-03 22:14 . 2008-10-03 22:14 d-------- F:\Program Files\Google 2008-10-03 22:14 . 2008-08-14 22:31 d-------- F:\Documents and Settings\All Users\Application Data\Google Updater 2008-10-03 19:54 . 2008-10-03 19:55 d-------- F:\Program Files\OpenOffice.org 2.4 2008-10-03 18:56 . 2008-10-03 18:57 d-------- F:\Documents and Settings\Nicolas\Application Data\Media Player Classic 2008-10-03 18:02 . 2008-08-14 18:21 d-------- F:\Documents and Settings\Nicolas\Application Data\FileZilla 2008-10-03 17:50 . 2008-10-03 17:50 d-------- F:\Program Files\FileZilla FTP Client 2008-10-03 15:58 . 2008-10-03 15:58 d-------- F:\Program Files\RocketDock 2008-10-03 15:45 . 2008-07-04 08:34 860,160 --a------ F:\WINDOWS\system32\lameACM.acm 2008-10-03 15:45 . 2008-01-10 14:15 755,027 --a------ F:\WINDOWS\system32\xvidcore.dll 2008-10-03 15:45 . 2004-01-25 18:18 217,088 --a------ F:\WINDOWS\system32\yv12vfw.dll 2008-10-03 15:45 . 2007-09-04 18:56 164,352 --a------ F:\WINDOWS\system32\unrar.dll 2008-10-03 15:45 . 2008-01-10 14:16 159,839 --a------ F:\WINDOWS\system32\xvidvfw.dll 2008-10-03 15:45 . 2007-09-21 02:52 118,784 --a------ F:\WINDOWS\system32\ac3acm.acm 2008-10-03 15:45 . 2007-10-03 17:03 414 --a------ F:\WINDOWS\system32\lame_acm.xml 2008-10-03 15:44 . 2008-10-03 15:45 d-------- F:\Program Files\K-Lite Codec Pack 2008-10-03 15:44 . 2008-05-23 00:22 3,596,288 --a------ F:\WINDOWS\system32\qt-dx331.dll 2008-10-03 15:44 . 2008-05-31 01:22 683,520 --a------ F:\WINDOWS\system32\divx.dll 2008-10-03 15:44 . 2008-05-23 00:19 81,920 --a------ F:\WINDOWS\system32\dpl100.dll 2008-10-03 15:44 . 2008-06-12 20:36 7,680 --a------ F:\WINDOWS\system32\ff_vfw.dll 2008-10-03 15:44 . 2007-07-10 18:10 547 --a------ F:\WINDOWS\system32\ff_vfw.dll.manifest 2008-10-03 14:41 . 2008-10-03 15:37 d-------- F:\Program Files\Winamp 2008-10-03 14:41 . 2008-10-03 15:01 d-------- F:\Documents and Settings\Nicolas\Application Data\Winamp 2008-10-03 13:08 . 2008-10-03 13:08 d-------- F:\Program Files\eMule 2008-10-03 13:08 . 2008-10-03 13:08 d-------- F:\Documents and Settings\Nicolas\Application Data\eMule 2008-10-03 12:42 . 2008-10-03 12:43 d-------- F:\Documents and Settings\Nicolas\Contacts 2008-10-03 12:41 . 2008-10-03 12:41 d----c--- F:\WINDOWS\system32\DRVSTORE 2008-10-03 10:25 . 2008-10-03 10:25 d-------- F:\Documents and Settings\All Users\Application Data\Grisoft 2008-10-03 10:25 . 2007-05-30 14:10 10,872 --a------ F:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-10-03 10:24 . 2003-03-18 22:20 1,060,864 --a------ F:\WINDOWS\system32\MFC71.dll 2008-10-03 10:24 . 2003-03-18 21:14 499,712 --a------ F:\WINDOWS\system32\MSVCP71.dll 2008-10-03 10:24 . 2003-02-21 05:42 348,160 --a------ F:\WINDOWS\system32\MSVCR71.dll 2008-10-03 10:17 . 2008-10-03 10:17 d---s---- F:\WINDOWS\system32\Microsoft 2008-10-03 10:17 . 2008-10-03 10:17 8,192 --a------ F:\WINDOWS\REGLOCS.OLD 2008-08-15 15:44 . 2008-08-15 15:44 d-------- F:\WINDOWS\LastGood 2008-08-15 15:44 . 2008-08-15 16:03 d-------- F:\WINDOWS\BDOSCAN8 2008-08-15 15:39 . 2007-01-18 14:00 3,968 --a------ F:\WINDOWS\system32\drivers\AvgArCln.sys 2008-08-15 15:32 . 2008-08-15 15:32 d-------- F:\WINDOWS\system32\xircom 2008-08-15 15:32 . 2008-08-15 15:32 d-------- F:\WINDOWS\srchasst 2008-08-15 15:32 . 2008-08-15 15:32 d-------- F:\Program Files\microsoft frontpage 2008-08-15 10:12 . 2008-08-15 13:29 d-------- F:\Documents and Settings\Nicolas\Application Data\EBookSys 2008-08-15 03:01 . 2008-04-14 01:33 221,184 --a------ F:\WINDOWS\system32\wmpns.dll 2008-08-14 22:18 . 2008-08-14 22:21 d-------- F:\Documents and Settings\Nicolas\Application Data\gtk-2.0 2008-08-14 22:18 . 2008-08-14 22:18 d-------- F:\Documents and Settings\Nicolas\.thumbnails 2008-08-14 22:12 . 2008-05-01 16:36 331,776 --------- F:\WINDOWS\system32\dllcache\msadce.dll 2008-08-14 22:09 . 2008-04-11 21:05 691,712 --------- F:\WINDOWS\system32\dllcache\inetcomm.dll 2008-08-14 21:36 . 2008-08-14 21:47 d-------- F:\Program Files\E-Book Systems 2008-08-14 21:21 . 2008-08-14 22:28 d-------- F:\Documents and Settings\Nicolas\.gimp-2.4 2008-08-14 19:50 . 2008-08-14 19:50 d-------- F:\Program Files\GIMP-2.0 2008-08-14 19:25 . 2008-08-14 19:27 d-------- F:\Program Files\QuickTime 2008-08-14 19:25 . 2008-08-14 19:25 d-------- F:\Documents and Settings\All Users\Application Data\Apple Computer 2008-08-14 19:23 . 2008-08-14 19:23 d-------- F:\Program Files\Apple Software Update 2008-08-14 19:23 . 2008-08-14 19:23 d-------- F:\Documents and Settings\All Users\Application Data\Apple 2008-08-14 18:54 . 2008-08-15 13:44 d-------- F:\Documents and Settings\Nicolas\Application Data\CoreFTP 2008-08-14 18:53 . 2008-08-14 18:53 d-------- F:\Program Files\CoreFTP 2008-08-13 21:28 . 2008-08-13 21:28 d--hs---- F:\WINDOWS\ftpcache 2008-08-13 21:28 . 2008-08-13 22:26 d-------- F:\Program Files\Didapages 2008-08-13 21:24 . 2008-08-13 21:24 361,600 --a------ F:\WINDOWS\system32\drivers\TCPIP.SYS.ORIGINAL 2008-08-09 22:15 . 2008-04-13 17:34 16,384 --a------ F:\WINDOWS\system32\ipsink.ax 2008-08-09 22:15 . 2008-04-13 09:46 15,232 --a------ F:\WINDOWS\system32\drivers\StreamIP.sys 2008-08-09 22:15 . 2008-04-13 09:46 10,880 --a------ F:\WINDOWS\system32\drivers\NdisIP.sys 2008-08-09 22:15 . 2008-04-13 09:39 5,504 --a------ F:\WINDOWS\system32\drivers\MSTEE.sys 2008-08-09 22:14 . 2008-04-13 09:46 85,248 --a------ F:\WINDOWS\system32\drivers\NABTSFEC.sys 2008-08-09 22:14 . 2008-04-13 09:46 19,200 --a------ F:\WINDOWS\system32\drivers\WSTCODEC.SYS 2008-08-09 22:14 . 2008-04-13 09:46 17,024 --a------ F:\WINDOWS\system32\drivers\CCDECODE.sys 2008-08-09 22:14 . 2008-04-13 09:46 11,136 --a------ F:\WINDOWS\system32\drivers\SLIP.sys 2008-08-09 22:13 . 2008-08-09 22:13 d-------- F:\Program Files\Webcam 1200 2008-08-09 22:12 . 2008-08-09 22:12 d--h----- F:\Program Files\InstallShield Installation Information 2008-08-09 22:04 . 2008-08-09 22:04 d-------- F:\Documents and Settings\Nicolas\Application Data\InstallShield . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-03 10:41 --------- d-----w F:\Program Files\Windows Live 2008-10-03 10:40 --------- d-----w F:\Documents and Settings\All Users\Application Data\WLInstaller 2008-10-03 10:25 --------- dcsh--w F:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-10-03 09:46 --------- d-----w F:\Program Files\uTorrent 2008-10-03 08:25 --------- d-----w F:\Documents and Settings\Administrateur\Application Data\Grisoft 2008-10-03 07:50 --------- d-----w F:\Program Files\Windows Media Connect 2 2008-08-15 14:01 --------- d-----w F:\Documents and Settings\Nicolas\Application Data\uTorrent 2008-08-13 19:24 361,600 ----a-w F:\WINDOWS\system32\drivers\TCPIP.SYS 2008-08-13 19:24 361,600 ----a-w F:\WINDOWS\system32\dllcache\TCPIP.SYS 2008-07-07 20:28 253,952 ----a-w F:\WINDOWS\system32\es.dll 2008-07-07 20:28 253,952 ------w F:\WINDOWS\system32\dllcache\es.dll 2008-06-24 16:44 74,240 ----a-w F:\WINDOWS\system32\mscms.dll 2008-06-24 16:44 74,240 ------w F:\WINDOWS\system32\dllcache\mscms.dll 2008-06-24 08:28 3,592,192 ------w F:\WINDOWS\system32\dllcache\mshtml.dll 2008-06-23 09:21 70,656 ------w F:\WINDOWS\system32\dllcache\ie4uinit.exe 2008-06-23 09:21 625,664 ------w F:\WINDOWS\system32\dllcache\iexplore.exe 2008-06-23 09:20 13,824 ------w F:\WINDOWS\system32\dllcache\ieudinit.exe 2008-06-21 05:23 161,792 ------w F:\WINDOWS\system32\dllcache\ieakui.dll 2008-06-20 17:47 247,808 ----a-w F:\WINDOWS\system32\mswsock.dll 2008-06-20 17:47 247,808 ------w F:\WINDOWS\system32\dllcache\mswsock.dll 2008-06-20 17:47 147,968 ------w F:\WINDOWS\system32\dllcache\dnsapi.dll 2008-06-20 11:40 138,496 ----a-w F:\WINDOWS\system32\drivers\afd.sys 2008-06-20 11:40 138,496 ------w F:\WINDOWS\system32\dllcache\afd.sys 2008-06-20 11:08 225,856 ----a-w F:\WINDOWS\system32\drivers cpip6.sys 2008-06-20 11:08 225,856 ------w F:\WINDOWS\system32\dllcache cpip6.sys 2008-06-14 17:33 272,768 ------w F:\WINDOWS\system32\dllcache\bthport.sys 2008-06-09 22:54 2,910,208 ----a-w F:\WINDOWS\system32\msgina.dll 2008-06-09 17:04 3,145 ----a-w F:\WINDOWS\system32\presetup.cmd 2008-06-09 15:31 28,672 ----a-w F:\WINDOWS\system32\setupold.exe 2008-06-04 21:17 70,144 ----a-w F:\WINDOWS\system32\console.dll 2008-06-04 21:17 458,752 ----a-w F:\WINDOWS\system32\cmdial32.dll 2008-06-04 21:17 409,600 ----a-w F:\WINDOWS\system32\keymgr.dll 2008-06-04 21:17 396,288 ----a-w F:\WINDOWS\system32\fontext.dll 2008-06-04 21:17 379,904 ----a-w F:\WINDOWS\system32\moricons.dll 2008-06-04 21:17 292,352 ----a-w F:\WINDOWS\system32\inetcplc.dll 2008-06-04 21:17 29,184 ----a-w F:\WINDOWS\system32\batmeter.dll 2008-06-04 21:17 190,976 ----a-w F:\WINDOWS\system32\credui.dll 2008-06-04 21:17 161,792 ----a-w F:\WINDOWS\system32\hotplug.dll 2008-06-04 19:57 2,331,008 ----a-w F:\WINDOWS\system32 toskrnl.exe 2008-06-01 20:09 8,192 ----a-w F:\WINDOWS\system32 sbyuv.dll 2008-06-01 20:09 8,192 ----a-w F:\WINDOWS\system32\streamci.dll 2008-06-01 20:09 72,192 ----a-w F:\WINDOWS\system32\sprio800.dll 2008-06-01 20:09 70,656 ----a-w F:\WINDOWS\system32\sprio600.dll 2008-06-01 20:09 69,632 ----a-w F:\WINDOWS\system32\spnike.dll 2008-06-01 20:09 59,392 ----a-w F:\WINDOWS\system32\dvdplay.exe 2008-06-01 20:09 157,696 ----a-w F:\WINDOWS\system32\paqsp.dll 2008-06-01 20:09 147,968 ----a-w F:\WINDOWS\system32\mdwmdmsp.dll 2008-05-26 17:38 393,728 ----a-w F:\WINDOWS\system32 hemeui.dll . ------- Sigcheck ------- 2008-06-20 13:59 361600 ad978a1b783b5719720cff204b666c8e F:\WINDOWS\$hf_mig$\KB951748\SP3QFE cpip.sys 2008-04-29 06:12 361344 030dc4d48cc2b894fee2f390d8e66ad5 F:\WINDOWS\$NtUninstallKB951748$ cpip.sys 2008-06-20 13:51 361600 9aefa14bd6b182d61e3119fa5f436d3d F:\WINDOWS\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\sp3gdr cpip.sys 2008-06-20 13:59 361600 ad978a1b783b5719720cff204b666c8e F:\WINDOWS\SoftwareDistribution\Download\7b6e084e897a416dad6204fec54d1e00\sp3qfe cpip.sys 2008-08-13 21:24 361600 d24ea301e2b36c4e975fd216ca85d8e7 F:\WINDOWS\system32\dllcache\TCPIP.SYS 2008-08-13 21:24 361600 d24ea301e2b36c4e975fd216ca85d8e7 F:\WINDOWS\system32\drivers\TCPIP.SYS 2008-06-15 23:20 2207872 6a5f236cd5a33faa882592834056dca0 F:\WINDOWS\system32 tkrnlpa.exe 2008-06-04 21:57 2331008 3ebd4417ca19355c7e095e915ef7c432 F:\WINDOWS\system32 toskrnl.exe 2008-06-04 23:18 979968 d1ea0a366973eca3e03f1acbefda8f43 F:\WINDOWS\explorer.exe . ((((((((((((((((((((((((((((( snapshot@2008-08-15_15.36.27.50 ))))))))))))))))))))))))))))))))))))))))) . + 2008-08-15 13:45:03 181,760 ----a-w F:\WINDOWS\BDOSCAN8\bdcore.dll + 2006-05-24 23:21:00 118,784 ----a-w F:\WINDOWS\BDOSCAN8\bdupd.dll + 2006-05-24 23:21:14 53,248 ----a-w F:\WINDOWS\BDOSCAN8\ipsupd.dll + 2008-08-15 13:45:04 142,848 ----a-w F:\WINDOWS\BDOSCAN8\libfn.dll + 2006-05-24 23:22:06 53,248 ----a-w F:\WINDOWS\bdoscandel.exe + 2006-05-24 23:21:00 118,784 ----a-w F:\WINDOWS\Downloaded Program Files\bdupd.dll + 2006-05-24 23:21:14 53,248 ----a-w F:\WINDOWS\Downloaded Program Files\ipsupd.dll + 2007-01-31 13:33:46 5,632 ----a-w F:\WINDOWS\system32\drivers\avgarkt.sys . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="F:\WINDOWS\system32\ctfmon.exe" [2008-04-14 01:34 15360] "MsnMsgr"="F:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184] "uTorrent"="F:\Program Files\uTorrent\uTorrent.exe" [2008-10-03 11:46 219952] "RocketDock"="F:\Program Files\RocketDock\RocketDock.exe" [2007-09-02 13:58 495616] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WinampAgent"="F:\Program Files\Winamp\winampa.exe" [2008-07-09 23:33 36352] "Adobe Reader Speed Launcher"="F:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792] "TrialReset"="F:\WINDOWS\fix.exe" [2008-04-28 20:57 208353] "SunJavaUpdateSched"="F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784] "Monitor"="F:\WINDOWS\PixArt\PAC207\Monitor.exe" [2008-08-15 14:38 319488] "QuickTime Task"="F:\Program Files\QuickTime\qttask.exe" [2008-05-27 10:50 413696] "FlipViewer Library"="F:\Program Files\E-Book Systems\FlipViewer\FlipViewerLibrary.exe" [2008-08-15 11:06 390936] "!AVG Anti-Spyware"="F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="F:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 01:34 15360] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_2"="shell32" [X] F:\Documents and Settings\Nicolas\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 2.4.lnk - F:\Program Files\OpenOffice.org 2.4\program\quickstart.exe [2008-01-21 16:41:28 393216] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) "ForceClassicControlPanel"= 1 (0x1) "NoSMBalloonTip"= 0 (0x0) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.YV12"= yv12vfw.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe"= "%windir%\system32\sessmgr.exe"= "F:\Program Files\uTorrent\uTorrent.exe"= "F:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "F:\Program Files\Windows Live\Messenger\livecall.exe"= "F:\Program Files\eMule\emule.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1023:UDP"= 1023:UDP:utorrent UDP "1023:TCP"= 1023:TCP:uTorrent TCP "1234:TCP"= 1234:TCP:emule TCP 1234 "3333:UDP"= 3333:UDP:emule UDP 3333 S3 PAC207;Webcam 1200;F:\WINDOWS\system32\DRIVERS\PFC027.SYS [2007-06-29 16:32] *Newly Created Service* - AVGARCLN *Newly Created Service* - AVG_ANTI-ROOTKIT *Newly Created Service* - CATCHME . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' 2008-08-14 F:\WINDOWS\Tasks\AppleSoftwareUpdate.job - F:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57] . . ------- Supplementary Scan ------- . FireFox -: Profile - F:\Documents and Settings\Nicolas\Application Data\Mozilla\Firefox\Profiles\jmzgulko.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fr/ FF -: plugin - F:\Program Files\Google\Google Updater\2.2.1273.1045 pCIDetect12.dll ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-15 16:10:50 Windows 5.1.2600 Service Pack 3 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . --------------------- DLLs a chargé sous des processus courants --------------------- PROCESS: F:\WINDOWS\explorer.exe -> F:\Program Files\RocketDock\RocketDock.dll . Temps d'accomplissement: 2008-08-15 16:12:44 ComboFix-quarantined-files.txt 2008-08-15 14:12:36 ComboFix2.txt 2008-08-15 13:37:17 Pre-Run: 5,028,253,696 octets libres Post-Run: 5,022,339,072 octets libres 253 --- E O F --- 2008-08-15 01:07:12

geoffrey5 · Answer

fais un rapport hijackthis stp

Polpot_2DRu · Answer

Voici le rapport Ejackthis !

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:39, on 15/08/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Winamp\winampa.exe
F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
F:\Program Files\uTorrent\uTorrent.exe
F:\Program Files\RocketDock\RocketDock.exe
F:\Program Files\OpenOffice.org 2.4\program\soffice.exe
F:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
F:\Program Files\ESET\ESET Smart Security\ekrn.exe
F:\Program Files\ESET\ESET Smart Security\egui.exe
F:\Program Files\Windows Live\Messenger\usnsvc.exe
F:\Program Files\Mozilla Firefox\firefox.exe
F:\Documents and Settings\Nicolas\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.winamp.com/skins/download/221625
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - F:\Program Files\E-Book Systems\FlipPublisher\FpLaunch.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - F:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O4 - HKLM\..\Run: [WinampAgent] "F:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "F:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TrialReset] F:\WINDOWS\fix.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] F:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [egui] "F:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "F:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [uTorrent] "F:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "F:\Program Files\RocketDock\RocketDock.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = F:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - F:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - F:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F40C4394-198B-48CF-A360-536F50C9565E}: NameServer = 212.27.54.252,212.27.53.252
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - F:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - F:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

geoffrey5 · Answer

Télécharger sur le bureau malware bytes à cette adresse : 

https://www.androidworld.fr/
 
Voici un tuto pour bien l installer et bien l utiliser : 

https://www.androidworld.fr/
 

Après l analyse, redémarrer le pc et poste le rapport !!

Et refais un nouveau rapport hijackthis stp

je reviendrai plus tard pour vérifier tes rapports.

@+

Polpot_2DRu · Answer

pour ce qui est de antimalware, voici le rapport :

Il n'a rien trouvé de suspect :

Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1054
Windows 5.1.2600 Service Pack 3

18:16:12 15/08/2008
mbam-log-8-15-2008 (18-16-12).txt

Type de recherche: Examen complet (C:\|F:\|)
Eléments examinés: 58814
Temps écoulé: 1 hour(s), 1 minute(s), 11 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Polpot_2DRu · Answer

Voici le rapport Hijack This :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:20:20, on 15/08/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Winamp\winampa.exe
F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\uTorrent\uTorrent.exe
F:\Program Files\RocketDock\RocketDock.exe
F:\Program Files\OpenOffice.org 2.4\program\soffice.exe
F:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
F:\Program Files\Windows Live\Messenger\usnsvc.exe
F:\Program Files\eMule\eMule.exe
F:\WINDOWS\system32\SNDVOL32.EXE
F:\Documents and Settings\Nicolas\Bureau\kav8.0.0.454.fr.01NET.exe
F:\Program Files\Windows Media Player\wmplayer.exe
F:\Program Files\Mozilla Firefox\firefox.exe
F:\Documents and Settings\Nicolas\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.winamp.com/skins/download/221625
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: FlpLauncher Class - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - F:\Program Files\E-Book Systems\FlipPublisher\FpLaunch.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - F:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - F:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O4 - HKLM\..\Run: [WinampAgent] "F:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "F:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TrialReset] F:\WINDOWS\fix.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] F:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [AVP] "F:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "F:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [uTorrent] "F:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "F:\Program Files\RocketDock\RocketDock.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = F:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - F:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - F:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - F:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F40C4394-198B-48CF-A360-536F50C9565E}: NameServer = 212.27.54.252,212.27.53.252
O20 - AppInit_DLLs: F:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,F:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - F:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Google Updater Service (gusvc) - Google - F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

geoffrey5 · Answer

relance hijackthis en cliquant sur scan only et coches ces lignes stp :

O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - F:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll 
O4 - Startup: OpenOffice.org 2.4.lnk = F:\Program Files\OpenOffice.org 2.4\program\quickstart.exe     

puis tu cliques sur fix checked.

vas faire la mise à niveau d adobe reader à cette adresse :

https://get2.adobe.com/reader/otherversions/

et ensuite désinstalle la version antérieure.

as tu encore des problemes ??

Attaque virale services NOD32 et AVG bloqués

9 réponses

Discussions similaires

Newsletters