[Resolu]Des virus pour noel :s - Sécurité - Virus
Ceci répond-il à votre question ? Oui | Non
 

Ajouter une réponse



 Mot :   Pseudo :  
 
Bas de page
Auteur
 Sujet : [Resolu]Des virus pour noel :s
 
Steam de merde
Profil : IDNaute
Plus d'informations

Yo :)
je me suis rendu compte que j'avais quelque virus car mon jeux counter strike freeze a la barre de chargement et j'ai des pub anti-spyware et autre qui s'affiche :-'(;alors j'ai fais une analyse avec spyware doctor version google pack et il m'a trouve des gros spyware et autre conneries :);je l'ai ai mis en quarentaine mais le probleme persiste toujours des pub et mon jeux ne marche pas :[  
voici mon raport hijack :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:05:00, on 23/12/2007
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal
 
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Windows\sttray.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Users\FRANCK~1\AppData\Local\Temp\Rar$EX00.729\HijackThis.exe
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr [...] bd=5070306
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =  
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =  
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =  
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "c:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Snapfire Plus\PhotoDownloader.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O13 - Gopher Prefix:  
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/bina [...] b56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7EF66EB8-79DE-4A96-9236-D9FF8D7819A6}: NameServer = 81.253.149.9 80.10.246.132
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
 
--
End of file - 9251 bytes
Merci :D


Message édité par franckou le 27-12-2007 à 00:13:09
Liens

Steam de merde
Profil : IDNaute
Plus d'informations

Un petit up pour que vous ne m'oubliez pas :)
UP

Steam de merde
Profil : IDNaute
Plus d'informations

Desolé de faire le mec hyper chiant mais j'ai l'impression que personne va me repondre :S
S'il vous plait ne m'oubliez pas !
je suis le seul a qui vous n'avez pas repondu -_- !
S'il vous plait !


Message édité par franckou le 23-12-2007 à 20:31:26
Profil : Helper
Plus d'informations

Bonjour,
 
Télécharge Smitfraudfix (de S!ri).
Enregistre-le sur ton bureau.
Lance SmitfraudFix.exe (le .exe peut ne pas apparaitre).
Choisis l'Option 1 (Recherche)
Poste le premier rapport ici.
 
**Si le lien ne fonctionne pas, clique ici**


---------------
Prévention & Protection|Les logiciels gratuits|L'homme  du FLCCF
Steam de merde
Profil : IDNaute
Plus d'informations

Merci de m'avoir repondu :D
voici le raport chef :
SmitFraudFix v2.274
 
Scan done at 21:02:14,66, 23/12/2007
Run from C:\Program Files\Mozilla Firefox\SmitfraudFix
OS: Microsoft Windows [version 6.0.6000] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode
 
»»»»»»»»»»»»»»»»»»»»»»»» Process
 
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Windows\sttray.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\FranckOsef\AppData\Local\ecdzrifhdv.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
 
»»»»»»»»»»»»»»»»»»»»»»»» hosts
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\FranckOsef
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\FranckOsef\Application Data
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Start Menu
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\FRANCK~1\FAVORI~1
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Desktop
 
 
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files  
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components
 
 
 
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!
 
IEDFix.exe by S!Ri
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!
 
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
 
 
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~1\\Google\\GOOGLE~1\\GOEC62~1.DLL"
"LoadAppInit_DLLs"=dword:00000001
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Rustock
 
 
 
»»»»»»»»»»»»»»»»»»»»»»»» DNS
 
Description: Connexion LAN Intel(R) 82566DC Gigabit Platform
DNS Server Search Order: 10.0.0.138
 
HKLM\SYSTEM\CCS\Services\Tcpip\..\{493FF656-6419-4426-AC15-B685D539CAA8}: DhcpNameServer=10.0.0.138
HKLM\SYSTEM\CCS\Services\Tcpip\..\{7EF66EB8-79DE-4A96-9236-D9FF8D7819A6}: NameServer=81.253.149.9 80.10.246.132
HKLM\SYSTEM\CS1\Services\Tcpip\..\{493FF656-6419-4426-AC15-B685D539CAA8}: DhcpNameServer=10.0.0.138
HKLM\SYSTEM\CS1\Services\Tcpip\..\{7EF66EB8-79DE-4A96-9236-D9FF8D7819A6}: NameServer=81.253.149.9 80.10.246.132
HKLM\SYSTEM\CS3\Services\Tcpip\..\{493FF656-6419-4426-AC15-B685D539CAA8}: DhcpNameServer=10.0.0.138
HKLM\SYSTEM\CS3\Services\Tcpip\..\{7EF66EB8-79DE-4A96-9236-D9FF8D7819A6}: NameServer=81.253.149.9 80.10.246.132
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=10.0.0.138
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=10.0.0.138
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=10.0.0.138
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection
 
 
»»»»»»»»»»»»»»»»»»»»»»»» End
 

<@_@>
Profil : Helper
Plus d'informations

bonsoir
je ne suis pas le seul à avoir eu un mp je pense  :D  
 
grande promo: 2 helpers pour le prix d'un  


---------------
Prévention et protection
/!\Marre de la pub: Firefox sécurisé/!\
Steam de merde
Profil : IDNaute
Plus d'informations

xD je suis desolé :D

Profil : Helper
Plus d'informations
<@_@>
Profil : Helper
Plus d'informations

les règles sont les règles.
à toi de prendre ce sujet
 

Spoiler :

en plus Vista...  :whistle:


---------------
Prévention et protection
/!\Marre de la pub: Firefox sécurisé/!\
Profil : Helper
Plus d'informations

:'(
 
Désactive tes protections résidentes (antivirus...) !
 

  • Télécharge combofix.exe (par sUBs) sur ton Bureau.
  • Double clique combofix.exe.
  • Tape sur la touche 1 (Yes) pour démarrer le scan.
  • Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.


NOTE : Le rapport se trouve également ici : C:\Combofix.txt


---------------
Prévention & Protection|Les logiciels gratuits|L'homme  du FLCCF
Steam de merde
Profil : IDNaute
Plus d'informations

pour l'instant ca me fait access violation at adress etc :-( !?

Steam de merde
Profil : IDNaute
Plus d'informations

ton logiciel ne marche pas chez moi :x
maintenant ca me met out of memory :q

Steam de merde
Profil : IDNaute
Plus d'informations

Me revoila avec un nouveau log :)
ComboFix 07-12-21.4 - FranckOsef 2007-12-23 21:44:01.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Basique   6.0.6000.0.1252.1.1036.18.856 [GMT 1:00]
Running from: C:\Users\FranckOsef\Desktop\ComboFix.exe
.
 
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
 
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Conditions générales.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Confidentialité.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Website.lnk
c:\Users\FranckOsef\AppData\Local\ecdzrifhdv.dat
c:\users\franckosef\appdata\local\ecdzrifhdv.exe
c:\Users\FranckOsef\AppData\Local\ecdzrifhdv_nav.dat
c:\Users\FranckOsef\AppData\Local\ecdzrifhdv_navps.dat
C:\Users\Kelly\Desktop\internetgamebox.lnk
C:\Windows\system32\nvs2.inf
 
.
(((((((((((((((((((((((((((((   Fichiers créés 2007-11-23 to 2007-12-23  ))))))))))))))))))))))))))))))))))))
.
 
2007-12-23 21:02 . 2007-12-23 21:02 3,330 --a------ C:\Windows\System32\tmp.reg
2007-12-23 21:01 . 2007-09-05 23:22 289,144 --a------ C:\Windows\System32\VCCLSID.exe
2007-12-23 21:01 . 2006-04-27 16:49 288,417 --a------ C:\Windows\System32\SrchSTS.exe
2007-12-23 21:01 . 2007-12-20 23:11 81,920 --a------ C:\Windows\System32\IEDFix.exe
2007-12-23 21:01 . 2003-06-05 20:13 53,248 --a------ C:\Windows\System32\Process.exe
2007-12-23 21:01 . 2004-07-31 17:50 51,200 --a------ C:\Windows\System32\dumphive.exe
2007-12-23 21:01 . 2007-10-03 23:36 25,600 --a------ C:\Windows\System32\WS2Fix.exe
2007-12-23 19:41 . 2007-12-23 19:41 <REP> d-------- C:\Users\All Users\Avira
2007-12-23 19:41 . 2007-12-23 19:41 <REP> d-------- C:\ProgramData\Avira
2007-12-23 19:41 . 2007-12-23 19:41 <REP> d-------- C:\Program Files\Avira
2007-12-23 17:22 . 2007-12-23 17:32 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\Nokia Multimedia Player
2007-12-23 16:24 . 2007-12-23 16:24 <REP> d-------- C:\Program Files\DIFX
2007-12-23 16:23 . 2007-12-23 16:36 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\Nokia
2007-12-23 16:23 . 2007-12-23 16:24 <REP> d-------- C:\Users\All Users\PC Suite
2007-12-23 16:23 . 2007-12-23 16:24 <REP> d-------- C:\ProgramData\PC Suite
2007-12-23 16:22 . 2007-12-23 16:22 <REP> d-------- C:\Program Files\Common Files\PCSuite
2007-12-23 16:22 . 2007-12-23 16:22 <REP> d-------- C:\Program Files\Common Files\Nokia
2007-12-23 16:21 . 2007-12-23 16:32 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\PC Suite
2007-12-23 16:21 . 2007-12-23 16:21 <REP> d-------- C:\Program Files\PC Connectivity Solution
2007-12-23 16:19 . 2007-12-23 16:22 <REP> d-------- C:\Program Files\Nokia
2007-12-23 16:18 . 2007-12-23 16:18 <REP> d-------- C:\Users\All Users\Installations
2007-12-23 16:18 . 2007-12-23 16:18 <REP> d-------- C:\ProgramData\Installations
2007-12-23 01:59 . 2007-12-23 02:00 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\Ventrilo
2007-12-23 01:49 . 2007-12-23 01:49 <REP> d-------- C:\Program Files\Ventrilo
2007-12-23 01:48 . 2007-12-23 01:48 <REP> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-20 15:42 . 2007-12-20 15:42 <REP> d-------- C:\Program Files\mIRC
2007-12-19 19:09 . 2007-12-19 19:09 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\AdobeUM
2007-12-17 22:28 . 2007-12-17 22:28 <REP> d-------- C:\Program Files\TeamSpeak 3
2007-12-14 18:37 . 2007-12-14 18:37 165,514,731 --a------ C:\Windows\MEMORY.DMP
2007-12-14 18:32 . 2007-12-14 18:32 0 --a------ C:\Windows\ativpsrm.bin
2007-12-14 18:29 . 2007-12-14 18:29 <REP> d-------- C:\Program Files\ATI
2007-12-14 18:10 . 2007-12-14 18:10 <REP> d-------- C:\ATI
2007-12-13 11:29 . 2007-12-13 11:29 1,327,104 --a------ C:\Windows\System32\quartz.dll
2007-12-13 11:29 . 2007-12-13 11:29 223,232 --a------ C:\Windows\System32\WMASF.DLL
2007-12-13 11:29 . 2007-12-13 11:29 9,728 --a------ C:\Windows\System32\LAPRXY.DLL
2007-12-13 11:29 . 2007-12-13 11:29 2,048 --a------ C:\Windows\System32\asferror.dll
2007-12-13 11:27 . 2007-12-13 11:27 3,504,824 --a------ C:\Windows\System32\ntkrnlpa.exe
2007-12-13 11:27 . 2007-12-13 11:27 3,470,520 --a------ C:\Windows\System32\ntoskrnl.exe
2007-12-13 11:27 . 2007-12-13 11:27 2,048 --a------ C:\Windows\System32\tzres.dll
2007-12-12 16:16 . 2007-12-12 16:17 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\Media Player Classic
2007-12-12 16:15 . 2007-12-12 16:15 <REP> d-------- C:\Program Files\ffdshow
2007-12-12 12:57 . 2007-12-12 12:57 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\vlc
2007-12-12 12:56 . 2007-12-12 16:06 <REP> d-------- C:\Program Files\VideoLAN
2007-12-09 13:35 . 2007-12-09 13:38 <REP> d-------- C:\DEM
2007-12-09 02:17 . 1999-12-17 09:13 86,016 --a------ C:\Windows\unvise32.exe
2007-12-08 00:21 . 2007-12-08 00:21 <REP> d-------- C:\Program Files\Audacity
2007-12-05 19:25 . 2007-12-05 19:25 <REP> d-------- C:\Program Files\GoldWave
2007-12-04 12:44 . 2007-12-04 12:44 <REP> d-------- C:\Users\All Users\Messenger Plus!
2007-12-04 12:44 . 2007-12-04 12:44 <REP> d-------- C:\ProgramData\Messenger Plus!
2007-12-04 12:40 . 2007-12-04 12:40 <REP> d-------- C:\Program Files\Messenger Plus! Live
2007-12-04 09:29 . 2007-12-04 09:29 <REP> d-------- C:\Users\Kelly\AppData\Roaming\AdobeUM
2007-12-01 13:27 . 2007-12-01 13:27 <REP> d-------- C:\Users\All Users\eMule
2007-12-01 13:27 . 2007-12-01 13:27 <REP> d-------- C:\ProgramData\eMule
2007-12-01 13:26 . 2007-12-01 13:26 <REP> d-------- C:\Program Files\eMule
2007-11-30 23:48 . 2007-11-30 23:48 <REP> d-------- C:\telechargement
2007-11-30 23:21 . 2007-11-30 23:21 <REP> d-------- C:\Users\All Users\Apple Computer
2007-11-30 23:21 . 2007-11-30 23:21 <REP> d-------- C:\ProgramData\Apple Computer
2007-11-30 23:21 . 2007-11-30 23:22 <REP> d-------- C:\Program Files\QuickTime
2007-11-30 23:19 . 2007-11-30 23:19 <REP> d-------- C:\Users\All Users\Apple
2007-11-30 23:19 . 2007-11-30 23:19 <REP> d-------- C:\ProgramData\Apple
2007-11-30 23:19 . 2007-11-30 23:19 <REP> d-------- C:\Program Files\Apple Software Update
2007-11-29 22:11 . 2007-11-29 22:11 <REP> d-------- C:\Program Files\Wolfenstein - Enemy Territory
2007-11-27 14:49 . 2007-12-19 10:24 <REP> d-------- C:\Users\Kelly\AppData\Roaming\Corel
2007-11-26 22:22 . 2007-11-26 22:22 <REP> d-------- C:\Frag movie
2007-11-25 19:43 . 2007-11-25 19:44 <REP> d-------- C:\sound for startmovie
2007-11-25 19:20 . 2007-12-20 18:08 <REP> d-------- C:\startmovie
2007-11-25 19:18 . 2007-11-25 19:18 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\DivX
2007-11-25 19:17 . 2007-12-12 16:13 <REP> d-------- C:\Program Files\Xvid
2007-11-25 19:17 . 2005-12-30 20:10 761,856 --a------ C:\Windows\System32\xvidcore.dll
2007-11-25 19:17 . 2005-12-30 20:18 180,224 --a------ C:\Windows\System32\xvidvfw.dll
2007-11-25 19:17 . 2005-12-30 20:16 77,824 --a------ C:\Windows\System32\xvid.ax
2007-11-25 19:12 . 2007-12-23 20:45 <REP> d-------- C:\Program Files\DivX
2007-11-25 19:12 . 2007-11-25 19:12 <REP> d-------- C:\Program Files\Common Files\PX Storage Engine
2007-11-25 18:17 . 2007-11-25 18:17 <REP> d-------- C:\Windows\PCHEALTH
2007-11-25 14:38 . 2007-12-05 13:52 <REP> d-------- C:\Users\Kelly\AppData\Roaming\skypePM
2007-11-25 14:38 . 2007-12-05 13:53 <REP> d-------- C:\Users\Kelly\AppData\Roaming\Skype
2007-11-25 14:38 . 2007-11-25 14:38 32 --a------ C:\Users\All Users\ezsid.dat
2007-11-25 14:38 . 2007-11-25 14:38 32 --a------ C:\ProgramData\ezsid.dat
2007-11-25 14:37 . 2007-11-25 14:37 <REP> dr------- C:\Users\Kelly\Searches
2007-11-25 14:37 . 2007-11-25 14:37 <REP> d-------- C:\Users\Kelly\AppData\Roaming\Roxio
2007-11-25 14:37 . 2007-11-26 10:32 <REP> d-------- C:\Users\Kelly\AppData\Roaming\GTek
2007-11-25 14:37 . 2007-11-25 14:37 <REP> d-------- C:\Users\Kelly\AppData\Roaming\ATI
2007-11-25 14:36 . 2007-11-25 14:37 <REP> dr------- C:\Users\Kelly\Videos
2007-11-25 14:36 . 2007-11-25 14:37 <REP> dr------- C:\Users\Kelly\Saved Games
2007-11-25 14:36 . 2007-12-05 12:05 <REP> dr------- C:\Users\Kelly\Pictures
2007-11-25 14:36 . 2007-11-25 14:37 <REP> dr------- C:\Users\Kelly\Music
2007-11-25 14:36 . 2007-11-25 14:37 <REP> dr------- C:\Users\Kelly\Links
2007-11-25 14:36 . 2007-11-25 14:37 <REP> dr------- C:\Users\Kelly\Downloads
2007-11-25 14:36 . 2007-12-19 10:24 <REP> dr------- C:\Users\Kelly\Documents
2007-11-25 14:36 . 2007-12-13 17:38 <REP> dr------- C:\Users\Kelly\Contacts
2007-11-25 14:36 . 2007-11-25 14:37 <REP> d--h----- C:\Users\Kelly\AppData
2007-11-25 14:00 . 2007-11-25 14:05 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\Publish Providers
2007-11-25 13:57 . 2007-11-25 13:57 <REP> d-------- C:\Program Files\Microsoft SQL Server
2007-11-25 13:57 . 1998-10-29 16:45 306,688 --a------ C:\Windows\IsUninst.exe
2007-11-25 13:57 . 2002-12-17 17:23 33,340 --------- C:\Windows\System32\dbmsqlgc.dll
2007-11-25 13:57 . 2002-10-20 15:01 24,576 --------- C:\Windows\System32\dbmsgnet.dll
2007-11-25 13:57 . 2007-11-25 13:57 20,480 --a------ C:\Windows\System32\cliconfg.728
2007-11-25 13:56 . 2007-12-15 23:53 <REP> d-------- C:\Users\FranckOsef\AppData\Roaming\Sony
2007-11-25 13:55 . 2007-11-25 13:56 <REP> d-------- C:\Users\All Users\Sony
2007-11-25 13:55 . 2007-11-25 13:56 <REP> d-------- C:\ProgramData\Sony
 
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-14 17:32 --------- d-----w C:\Program Files\ATI Technologies
2007-12-13 10:28 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2007-12-13 10:28 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2007-12-13 10:28 56,320 ----a-w C:\Windows\System32\iesetup.dll
2007-12-13 10:28 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2007-12-13 10:28 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2007-12-13 10:28 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2007-12-13 10:28 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2007-11-25 13:08 --------- d-----w C:\Program Files\Corel
2007-11-25 13:08 --------- d-----w C:\Program Files\Common Files\Corel
2007-11-25 10:08 --------- d-----w C:\Program Files\Google
2007-11-25 10:02 174 --sha-w C:\Program Files\desktop.ini
2007-11-25 00:51 --------- d-----w C:\Program Files\Windows Mail
2007-11-25 00:51 --------- d-----w C:\Program Files\Windows Defender
2007-11-25 00:51 --------- d-----w C:\Program Files\Windows Calendar
2007-11-24 14:30 8,192 ----a-w C:\Windows\System32\riched32.dll
2007-11-24 14:30 77,824 ----a-w C:\Windows\System32\rascfg.dll
2007-11-24 14:30 61,952 ----a-w C:\Windows\system32\drivers\wanarp.sys
2007-11-24 14:30 52,736 ----a-w C:\Windows\System32\rasdiag.dll
2007-11-24 14:30 48,640 ----a-w C:\Windows\system32\drivers\ndproxy.sys
2007-11-24 14:30 22,016 ----a-w C:\Windows\System32\rasser.dll
2007-11-24 14:30 20,480 ----a-w C:\Windows\system32\drivers\ndistapi.sys
2007-11-24 14:29 87,040 ----a-w C:\Windows\System32\msoert2.dll
2007-11-24 14:29 70,144 ----a-w C:\Windows\system32\drivers\pacer.sys
2007-11-24 14:29 619,008 ----a-w C:\Windows\system32\drivers\dxgkrnl.sys
2007-11-24 14:29 39,424 ----a-w C:\Windows\System32\ACCTRES.dll
2007-11-24 14:29 384,000 ----a-w C:\Windows\System32\netcfgx.dll
2007-11-24 14:29 36,864 ----a-w C:\Windows\System32\cdd.dll
2007-11-24 14:29 33,280 ----a-w C:\Windows\System32\traffic.dll
2007-11-24 14:29 32,768 ----a-w C:\Windows\System32\rasmxs.dll
2007-11-24 14:29 286,208 ----a-w C:\Windows\System32\ipnathlp.dll
2007-11-24 14:29 205,824 ----a-w C:\Windows\System32\msoeacct.dll
2007-11-24 14:29 15,360 ----a-w C:\Windows\System32\pacerprf.dll
2007-11-24 14:29 134,656 ----a-w C:\Windows\System32\dps.dll
2007-11-24 14:29 13,824 ----a-w C:\Windows\System32\wshqos.dll
2007-11-24 14:29 13,824 ----a-w C:\Windows\System32\icsunattend.exe
2007-11-24 14:28 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2007-11-24 14:28 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2007-11-24 14:28 542,720 ----a-w C:\Windows\System32\sysmain.dll
2007-11-24 14:28 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2007-11-24 14:28 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2007-11-24 14:28 297,984 ----a-w C:\Windows\System32\wlansec.dll
2007-11-24 14:28 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2007-11-24 14:28 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
2007-11-24 14:28 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2007-11-24 14:28 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2007-11-24 14:23 86,016 ----a-w C:\Windows\System32\icfupgd.dll
2007-11-24 14:23 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
2007-11-24 14:23 7,680 ----a-w C:\Windows\System32\spwmp.dll
2007-11-24 14:23 63,488 ----a-w C:\Windows\system32\drivers\mpsdrv.sys
2007-11-24 14:23 61,952 ----a-w C:\Windows\System32\cmifw.dll
2007-11-24 14:23 4,096 ----a-w C:\Windows\System32\dxmasf.dll
2007-11-24 14:23 396,800 ----a-w C:\Windows\System32\MPSSVC.dll
2007-11-24 14:23 392,192 ----a-w C:\Windows\System32\FirewallAPI.dll
2007-11-24 14:23 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
2007-11-24 14:23 23,040 ----a-w C:\Windows\system32\drivers\tunnel.sys
2007-11-24 14:23 178,688 ----a-w C:\Windows\System32\iphlpsvc.dll
2007-11-24 14:23 16,896 ----a-w C:\Windows\System32\wfapigp.dll
2007-11-24 14:23 15,360 ----a-w C:\Windows\system32\drivers\TUNMP.SYS
2007-11-24 14:21 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2007-11-24 14:21 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2007-11-24 14:21 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2007-11-24 14:21 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2007-11-24 14:19 57,856 ----a-w C:\Windows\System32\SLUINotify.dll
2007-11-24 14:19 566,784 ----a-w C:\Windows\System32\SLCommDlg.dll
2007-11-24 14:19 39,936 ----a-w C:\Windows\System32\slcinst.dll
2007-11-24 14:19 351,232 ----a-w C:\Windows\System32\SLUI.exe
2007-11-24 14:19 33,280 ----a-w C:\Windows\System32\slwmi.dll
2007-11-24 14:19 268,288 ----a-w C:\Windows\System32\mcbuilder.exe
2007-11-24 14:19 223,232 ----a-w C:\Windows\System32\SLC.dll
2007-11-24 14:19 2,605,568 ----a-w C:\Windows\System32\SLsvc.exe
2007-11-24 14:19 186,368 ----a-w C:\Windows\System32\SLLUA.exe
2007-11-24 14:19 1,335,296 ----a-w C:\Windows\System32\msxml6.dll
2007-11-24 14:18 974,336 ----a-w C:\Windows\System32\crypt32.dll
2007-11-24 14:18 88,576 ----a-w C:\Windows\System32\avifil32.dll
2007-11-24 14:18 84,480 ----a-w C:\Windows\System32\INETRES.dll
2007-11-24 14:18 82,944 ----a-w C:\Windows\System32\mciavi32.dll
2007-11-24 14:18 8,138,240 ----a-w C:\Windows\System32\ssBranded.scr
2007-11-24 14:18 788,992 ----a-w C:\Windows\System32\rpcrt4.dll
2007-11-24 14:18 737,792 ----a-w C:\Windows\System32\inetcomm.dll
2007-11-24 14:18 712,192 ----a-w C:\Windo