Se connecter avec
S'enregistrer | Connectez-vous

Your privacy is in danger

Dernière réponse : dans Sécurité

Hello!

Voila y a peu de temps j'ai telecharger un executable , je l'ai analyser anti virus , il n'a rien trouver , une fois lancer la fenetre cmd de windows c'est ouverte et a commencer a mettre le boxon dans mon PC ...

J'ai exactement le meme probleme que dans ce sujet >http://www.infos-du-net.com/forum/271656-11-your-privac...

J'ai commencer a faire ce qui etait demander de faire mais je n'arrive pas au meme resultats ...

Je n'ai toujours pas recuperer ce que j'avais avant , je ne peut pas allez dans le poste de travail etc , meme si j'ai supprimer le fond d'ecran Biohazard et les messages intepestive qui me dit que je suis infecter .

Merci d'avance de votre aide :( 

Autres pages sur : your privacy danger

Lassé par la pub ? Créez un compte

Bonjour

Voila le rapport

  1. SmitFraudFix v2.346
  2.  
  3. Rapport fait à 17:27:00,03, 08/09/2008
  4. Executé à partir de C:\Documents and Settings\Tony67\Bureau\SmitfraudFix
  5. OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
  6. Le type du système de fichiers est NTFS
  7. Fix executé en mode normal
  8.  
  9. »»»»»»»»»»»»»»»»»»»»»»»» Process
  10.  
  11. C:\WINDOWS\System32\smss.exe
  12. C:\WINDOWS\system32\winlogon.exe
  13. C:\WINDOWS\system32\services.exe
  14. C:\WINDOWS\system32\lsass.exe
  15. C:\WINDOWS\system32\svchost.exe
  16. C:\WINDOWS\System32\svchost.exe
  17. C:\WINDOWS\system32\svchost.exe
  18. C:\WINDOWS\system32\spoolsv.exe
  19. C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
  20. C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  21. C:\Program Files\G DATA AntiVirus\AVK\AVKService.exe
  22. C:\Program Files\G DATA AntiVirus\AVK\AVKWCtl.exe
  23. C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
  24. C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
  25. C:\WINDOWS\system32\nvsvc32.exe
  26. C:\WINDOWS\system32\PnkBstrA.exe
  27. C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
  28. C:\WINDOWS\system32\svchost.exe
  29. C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe
  30. C:\WINDOWS\system32\wscntfy.exe
  31. C:\WINDOWS\Explorer.EXE
  32. C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
  33. C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe
  34. C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
  35. C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
  36. C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
  37. C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
  38. C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
  39. C:\Program Files\Logitech\QuickCam\Quickcam.exe
  40. C:\Program Files\Analog Devices\Core\smax4pnp.exe
  41. C:\Program Files\G DATA AntiVirus\AVKTray\AVKTray.exe
  42. C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
  43. C:\Program Files\iTunes\iTunesHelper.exe
  44. C:\WINDOWS\system32\RUNDLL32.EXE
  45. C:\Program Files\Echovoice\Gamer Statistics\G15 Echovoice Gamer Statistics.exe
  46. C:\WINDOWS\system32\ctfmon.exe
  47. C:\program files\steam\steam.exe
  48. C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
  49. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
  50. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
  51. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
  52. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
  53. C:\Program Files\iPod\bin\iPodService.exe
  54. C:\Program Files\Mozilla Firefox\firefox.exe
  55. C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
  56. C:\WINDOWS\system32\rundll32.exe
  57. C:\WINDOWS\system32\cmd.exe
  58.  
  59. »»»»»»»»»»»»»»»»»»»»»»»» hosts
  60.  
  61.  
  62. »»»»»»»»»»»»»»»»»»»»»»»» C:\
  63.  
  64.  
  65. »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
  66.  
  67.  
  68. »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
  69.  
  70.  
  71. »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
  72.  
  73.  
  74. »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
  75.  
  76.  
  77. »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles
  78.  
  79.  
  80. »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Tony67
  81.  
  82.  
  83. »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Tony67\Application Data
  84.  
  85.  
  86. »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer
  87.  
  88.  
  89. »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Tony67\Favoris
  90.  
  91.  
  92. »»»»»»»»»»»»»»»»»»»»»»»» Bureau
  93.  
  94.  
  95. »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
  96.  
  97.  
  98. »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues
  99.  
  100.  
  101. »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
  102.  
  103.  
  104.  
  105. »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
  106. !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
  107.  
  108. IEDFix
  109. Credits: Malware Analysis & Diagnostic
  110. Code: S!Ri
  111.  
  112.  
  113.  
  114. »»»»»»»»»»»»»»»»»»»»»»»» VACFix
  115. !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
  116.  
  117. VACFix
  118. Credits: Malware Analysis & Diagnostic
  119. Code: S!Ri
  120.  
  121.  
  122. »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
  123. !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
  124.  
  125. 404Fix
  126. Credits: Malware Analysis & Diagnostic
  127. Code: S!Ri
  128.  
  129.  
  130. »»»»»»»»»»»»»»»»»»»»»»»» AntiXPVSTFix
  131. !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
  132.  
  133. AntiXPVSTFix
  134. Credits: Malware Analysis & Diagnostic
  135. Code: S!Ri
  136.  
  137.  
  138.  
  139. »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
  140. !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
  141.  
  142. SrchSTS.exe by S!Ri
  143. Search SharedTaskScheduler's .dll
  144.  
  145.  
  146. »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
  147. !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
  148.  
  149. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
  150. "AppInit_DLLs"="vonhhn.dll"
  151.  
  152.  
  153. »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
  154. !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
  155.  
  156. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
  157. "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
  158. "System"=""
  159.  
  160.  
  161. »»»»»»»»»»»»»»»»»»»»»»»» RK
  162.  
  163.  
  164.  
  165. »»»»»»»»»»»»»»»»»»»»»»»» DNS
  166.  
  167. Description: D-Link DWA-140 RangeBooster N USB Adapter - Miniport d'ordonnancement de paquets
  168. DNS Server Search Order: 192.168.1.1
  169.  
  170. HKLM\SYSTEM\CCS\Services\Tcpip\..\{E513B405-6CD0-4548-853B-973BCB7E723A}: DhcpNameServer=192.168.1.1
  171. HKLM\SYSTEM\CS1\Services\Tcpip\..\{E513B405-6CD0-4548-853B-973BCB7E723A}: DhcpNameServer=192.168.1.1
  172. HKLM\SYSTEM\CS2\Services\Tcpip\..\{E513B405-6CD0-4548-853B-973BCB7E723A}: DhcpNameServer=192.168.1.1
  173. HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
  174. HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
  175. HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
  176.  
  177.  
  178. »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll
  179.  
  180.  
  181. »»»»»»»»»»»»»»»»»»»»»»»» Fin

Voila le rapport Hijack

  1. Logfile of Trend Micro HijackThis v2.0.2
  2. Scan saved at 19:51: VIRUS ALERT!, on 08/09/2008
  3. Platform: Windows XP SP2 (WinNT 5.01.2600)
  4. MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  5. Boot mode: Normal
  6.  
  7. Running processes:
  8. C:\WINDOWS\System32\smss.exe
  9. C:\WINDOWS\system32\winlogon.exe
  10. C:\WINDOWS\system32\services.exe
  11. C:\WINDOWS\system32\lsass.exe
  12. C:\WINDOWS\system32\svchost.exe
  13. C:\WINDOWS\System32\svchost.exe
  14. C:\WINDOWS\system32\svchost.exe
  15. C:\WINDOWS\system32\spoolsv.exe
  16. C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
  17. C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  18. C:\Program Files\G DATA AntiVirus\AVK\AVKService.exe
  19. C:\Program Files\G DATA AntiVirus\AVK\AVKWCtl.exe
  20. C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
  21. C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
  22. C:\WINDOWS\system32\nvsvc32.exe
  23. C:\WINDOWS\system32\PnkBstrA.exe
  24. C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
  25. C:\WINDOWS\system32\svchost.exe
  26. C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe
  27. C:\WINDOWS\system32\wscntfy.exe
  28. C:\WINDOWS\Explorer.EXE
  29. C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
  30. C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe
  31. C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
  32. C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
  33. C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
  34. C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
  35. C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
  36. C:\Program Files\Logitech\QuickCam\Quickcam.exe
  37. C:\Program Files\Analog Devices\Core\smax4pnp.exe
  38. C:\Program Files\G DATA AntiVirus\AVKTray\AVKTray.exe
  39. C:\Program Files\iTunes\iTunesHelper.exe
  40. C:\WINDOWS\system32\RUNDLL32.EXE
  41. C:\Program Files\Echovoice\Gamer Statistics\G15 Echovoice Gamer Statistics.exe
  42. C:\WINDOWS\system32\ctfmon.exe
  43. C:\program files\steam\steam.exe
  44. C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
  45. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
  46. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
  47. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
  48. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
  49. C:\Program Files\iPod\bin\iPodService.exe
  50. C:\Program Files\Mozilla Firefox\firefox.exe
  51. C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
  52. C:\WINDOWS\system32\rundll32.exe
  53. C:\Program Files\Windows Media Player\wmplayer.exe
  54. C:\Documents and Settings\Tony67\Bureau\HiJackThis.exe
  55.  
  56. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
  57. O3 - Toolbar: (no name) - {0124123D-61B4-456f-AF86-78C53A0790C5} - (no file)
  58. O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
  59. O4 - HKLM\..\Run: [D-Link D-Link Wireless N DWA-140] C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe
  60. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
  61. O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  62. O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
  63. O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
  64. O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
  65. O4 - HKLM\..\Run: [SoundMax] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
  66. O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
  67. O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
  68. O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
  69. O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
  70. O4 - HKLM\..\Run: [AVKTray] "C:\Program Files\G DATA AntiVirus\AVKTray\AVKTray.exe"
  71. O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
  72. O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  73. O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  74. O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
  75. O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
  76. O4 - HKLM\..\Run: [Echovoice Gamer Statistics] C:\Program Files\Echovoice\Gamer Statistics\G15 Echovoice Gamer Statistics.exe
  77. O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
  78. O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
  79. O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
  80. O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
  81. O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
  82. O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
  83. O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
  84. O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
  85. O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
  86. O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
  87. O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
  88. O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  89. O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
  90. O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
  91. O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
  92. O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
  93. O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
  94. O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  95. O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  96. O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
  97. O20 - AppInit_DLLs: vonhhn.dll
  98. O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
  99. O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
  100. O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  101. O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe
  102. O23 - Service: AVK Service (AVKService) - G DATA Software AG - C:\Program Files\G DATA AntiVirus\AVK\AVKService.exe
  103. O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA AntiVirus\AVK\AVKWCtl.exe
  104. O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
  105. O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  106. O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
  107. O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
  108. O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
  109. O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
  110. O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  111. O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
  112. O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
  113. O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
  114. O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm
  115.  
  116. --
  117. End of file - 8804 bytes

Re,

[#ff0000]Désactive tes protections résidentes (antivirus, Spybot-S&D, etc.) ![/#f]

  • Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.
  • Double clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
  • Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\combofix.txt*) dans ta prochaine réponse.

    AIDE : Un guide et un tutoriel sur l'utilisation de ComboFix
    * le nom de la partition peut changer

    Tous a l'air d'etre redevenue normalement :)  mes disques durs sont revenus , le virus alert en bas a droite a disparue et mes raccourcis sont tous revenus :) 

    Le rapport :

    1. ComboFix 08-09-05.09 - Tony67 2008-09-08 23:21:47.1 - NTFSx86
    2. Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.764 [GMT 2:00]
    3. Endroit: C:\Documents and Settings\Tony67\Bureau\ComboFix.exe
    4. * Création d'un nouveau point de restauration
    5. * Resident AV is active
    6.  
    7.  
    8. [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
    9. .
    10.  
    11. (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    12. .
    13.  
    14. C:\WINDOWS\edfk.exe
    15. C:\WINDOWS\system32\ddcBUnmJ.dll
    16. C:\WINDOWS\system32\ffgttx.dll
    17. C:\WINDOWS\system32\iSBbdJlm.ini
    18. C:\WINDOWS\system32\iSBbdJlm.ini2
    19. C:\WINDOWS\system32\jkkKebYP.dll
    20. C:\WINDOWS\system32\mlJdbBSi.dll
    21. C:\WINDOWS\system32\nghlrhrh.dll
    22. C:\WINDOWS\system32\njqlvdty.dll
    23. C:\WINDOWS\system32\novcmweq.dll
    24. C:\WINDOWS\system32\oruoikne.dll
    25. C:\WINDOWS\system32\qewmcvon.ini
    26. C:\WINDOWS\system32\vonhhn.dll
    27. C:\WINDOWS\system32\ytdvlqjn.ini
    28.  
    29. .
    30. ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-08-08 to 2008-09-08 ))))))))))))))))))))))))))))))))))))
    31. .
    32.  
    33. 2008-09-07 21:43 . 2008-09-08 17:27 4,776 --a------ C:\WINDOWS\system32\tmp.reg
    34. 2008-09-07 20:39 . 2008-09-07 20:43 <REP> d-------- C:\WINDOWS\privacy_danger(2)
    35. 2008-09-07 20:12 . 2008-09-07 16:12 139,264 --a------ C:\WINDOWS\mqgldfvo.exe
    36. 2008-09-07 03:50 . 2008-09-07 03:51 <REP> d-------- C:\Program Files\PMFC
    37. 2008-09-07 03:50 . 2008-09-07 03:50 <REP> d-------- C:\Documents and Settings\Tony67\Application Data\Mc & RENOX
    38. 2008-09-04 19:48 . 2008-09-04 20:04 <REP> d-------- C:\WINDOWS\system32\CatRoot_bak
    39. 2008-08-31 15:28 . 2008-08-31 15:28 268 --ah----- C:\sqmdata02.sqm
    40. 2008-08-31 15:28 . 2008-08-31 15:28 244 --ah----- C:\sqmnoopt02.sqm
    41. 2008-08-20 14:42 . 2008-08-20 14:42 <REP> d-------- C:\WINDOWS\system32\URTTEMP
    42. 2008-08-20 14:40 . 2008-08-20 14:40 669,184 --a------ C:\WINDOWS\system32\pbsvc.exe
    43. 2008-08-20 14:02 . 2008-08-20 14:04 <REP> d-------- C:\Program Files\DAEMON Tools Lite
    44. 2008-08-20 13:56 . 2008-08-20 13:56 <REP> d-------- C:\Documents and Settings\Tony67\Application Data\DAEMON Tools
    45. 2008-08-20 12:22 . 2008-08-20 14:13 <REP> d-------- C:\Program Files\Alcohol Soft
    46. 2008-08-20 12:16 . 2008-08-20 13:56 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys
    47. 2008-08-16 14:27 . 2008-08-16 14:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Trymedia
    48. 2008-08-16 13:38 . 2007-10-12 15:14 3,734,536 --a------ C:\WINDOWS\system32\d3dx9_36.dll
    49. 2008-08-16 13:38 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
    50. 2008-08-16 13:38 . 2007-10-12 15:14 1,374,232 --a------ C:\WINDOWS\system32\D3DCompiler_36.dll
    51. 2008-08-16 13:38 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
    52. 2008-08-16 13:38 . 2007-10-02 09:56 444,776 --a------ C:\WINDOWS\system32\d3dx10_36.dll
    53. 2008-08-16 13:38 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
    54. 2008-08-16 13:38 . 2007-10-22 03:39 267,272 --a------ C:\WINDOWS\system32\xactengine2_10.dll
    55. 2008-08-16 13:38 . 2007-07-20 00:57 267,112 --a------ C:\WINDOWS\system32\xactengine2_9.dll
    56. 2008-08-16 13:30 . 2008-08-16 13:30 <REP> d-------- C:\Program Files\Ubisoft
    57. 2008-08-16 01:08 . 2008-08-16 01:08 <REP> d-------- C:\Program Files\BestGameEver
    58. 2008-08-15 20:09 . 2008-08-31 02:05 <REP> d-------- C:\Documents and Settings\Tony67\Application Data\Azureus
    59. 2008-08-15 20:09 . 2008-08-15 20:09 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
    60. 2008-08-15 20:07 . 2008-08-15 20:08 <REP> d-------- C:\Program Files\Vuze
    61. 2008-08-08 01:18 . 2008-08-08 01:18 <REP> d-------- C:\Documents and Settings\Tony67\data
    62.  
    63. .
    64. (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    65. .
    66. 2008-09-08 21:36 --------- d-----w C:\Program Files\Steam
    67. 2008-09-07 22:24 --------- d-----w C:\Documents and Settings\Tony67\Application Data\LimeWire
    68. 2008-09-07 20:20 --------- d-----w C:\Documents and Settings\Tony67\Application Data\teamspeak2
    69. 2008-09-04 20:32 --------- d-----w C:\Program Files\Messenger Plus! Live
    70. 2008-08-31 22:08 --------- d-----w C:\Program Files\DkZ Studio
    71. 2008-08-30 12:31 --------- d-----w C:\Program Files\Warcraft III
    72. 2008-08-29 11:15 --------- d-----w C:\Program Files\World of Warcraft
    73. 2008-08-22 14:34 2,829 ----a-w C:\WINDOWS\War3Unin.pif
    74. 2008-08-22 14:34 139,264 ----a-w C:\WINDOWS\War3Unin.exe
    75. 2008-08-20 12:55 --------- d-----w C:\Program Files\eMule
    76. 2008-08-20 12:41 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
    77. 2008-08-20 12:41 22,328 ----a-w C:\Documents and Settings\Tony67\Application Data\PnkBstrK.sys
    78. 2008-08-20 12:40 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
    79. 2008-08-20 12:40 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
    80. 2008-08-20 12:32 --------- d-----w C:\Program Files\Electronic Arts
    81. 2008-08-17 11:17 --------- d--h--w C:\Program Files\InstallShield Installation Information
    82. 2008-08-14 12:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sony Ericsson
    83. 2008-08-14 12:14 --------- d-----w C:\Program Files\Sony Ericsson
    84. 2008-08-06 17:10 --------- d-----w C:\Documents and Settings\Tony67\Application Data\SEGA
    85. 2008-08-06 17:00 --------- d-----w C:\Program Files\SEGA
    86. 2008-08-06 11:40 271,360 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys
    87. 2008-08-06 11:40 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys
    88. 2008-08-06 11:27 --------- d-----w C:\Program Files\PENDULO Studios
    89. 2008-08-05 22:02 --------- d-----w C:\Program Files\PokerStars
    90. 2008-08-05 20:00 --------- d-----w C:\Program Files\Echovoice
    91. 2008-08-04 23:40 --------- d-----w C:\Program Files\WowCartographe
    92. 2008-08-02 23:57 --------- d-----w C:\Program Files\SopCast
    93. 2008-08-02 20:12 --------- d-----w C:\Program Files\Sun
    94. 2008-08-02 20:12 --------- d-----w C:\Program Files\Java
    95. 2008-07-18 21:40 --------- d-----w C:\Program Files\Avanquest update
    96. 2008-07-18 21:40 --------- d-----w C:\Documents and Settings\Tony67\Application Data\Sony
    97. 2008-07-18 21:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sony
    98. 2008-07-18 21:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\BVRP Software
    99. 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
    100. 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
    101. 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
    102. 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
    103. 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
    104. 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
    105. 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
    106. 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
    107. 2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll
    108. 2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll
    109. 2008-07-18 14:49 --------- d-----w C:\Program Files\Fichiers communs\Adobe
    110. 2008-07-18 14:49 --------- d-----w C:\Documents and Settings\Tony67\Application Data\InterTrust
    111. 2008-07-18 14:48 --------- d-----w C:\Program Files\Fichiers communs\LightScribe
    112. 2008-07-18 14:47 --------- d-----w C:\Program Files\Ahead
    113. 2008-07-18 14:46 --------- d-----w C:\Program Files\Fichiers communs\Ahead
    114. 2008-07-18 14:45 --------- d-----w C:\Program Files\CyberLink DVD Solution
    115. 2008-07-17 23:47 --------- d-----w C:\Documents and Settings\Tony67\Application Data\Command & Conquer 3 Les guerres du Tiberium
    116. 2008-07-17 07:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\nView_Profiles
    117. 2008-07-17 07:12 --------- d-----w C:\Program Files\ma-config.com
    118. 2008-07-17 07:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\ma-config.com
    119. 2008-07-16 01:07 --------- d-----w C:\Program Files\Peter
    120. 2008-07-15 23:17 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
    121. 2008-07-15 20:54 --------- d--h--r C:\Documents and Settings\Tony67\Application Data\SecuROM
    122. 2008-07-15 12:28 --------- d-----w C:\Program Files\VirtualDJ
    123. 2008-07-14 12:49 --------- d-----w C:\Program Files\SystemRequirementsLab
    124. 2008-07-14 12:49 --------- d-----w C:\Documents and Settings\Tony67\Application Data\SystemRequirementsLab
    125. 2008-07-14 10:21 --------- d-----w C:\Program Files\Activision
    126. 2008-07-14 00:39 --------- d-----w C:\Program Files\Sleepy
    127. 2008-07-10 00:26 --------- d-----w C:\Program Files\Realtek
    128. 2008-07-10 00:19 --------- d-----w C:\Program Files\Intel
    129. 2008-07-08 18:12 --------- d-----w C:\Program Files\Fichiers communs\logishrd
    130. 2008-07-08 11:53 --------- d-----w C:\Program Files\Trend Micro
    131. 2008-07-07 20:31 253,952 ----a-w C:\WINDOWS\system32\es.dll
    132. 2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
    133. 2008-06-23 15:40 663,552 ----a-w C:\WINDOWS\system32\wininet.dll
    134. 2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
    135. 2008-06-18 15:52 354,560 ----a-w C:\WINDOWS\system32\TuneUpDefragService.exe
    136. 2004-10-01 13:00 40,960 ----a-w C:\Program Files\Uninstall_CDS.exe
    137. .
    138.  
    139. ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    140. .
    141. .
    142. *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
    143. REGEDIT4
    144.  
    145. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    146. "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 15360]
    147. "Steam"="c:\program files\steam\steam.exe" [2008-07-02 1271032]
    148. "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 360448]
    149. "AlcoholAutomount"="C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" [2007-12-22 222080]
    150.  
    151. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    152. "ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2007-01-19 49152]
    153. "D-Link D-Link Wireless N DWA-140"="C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe" [2007-03-14 1388544]
    154. "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
    155. "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-05-16 13529088]
    156. "Launch LCDMon"="C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2007-07-18 1687824]
    157. "Launch LGDCore"="C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2007-07-18 2094352]
    158. "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 563984]
    159. "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 2178832]
    160. "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696]
    161. "AVKTray"="C:\Program Files\G DATA AntiVirus\AVKTray\AVKTray.exe" [2008-02-21 607816]
    162. "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
    163. "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 413696]
    164. "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-06-02 267048]
    165. "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-05-16 86016]
    166. "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
    167. "Echovoice Gamer Statistics"="C:\Program Files\Echovoice\Gamer Statistics\G15 Echovoice Gamer Statistics.exe" [2006-11-28 53248]
    168. "nwiz"="nwiz.exe" [2008-05-16 C:\WINDOWS\system32\nwiz.exe]
    169. "High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 C:\WINDOWS\system32\HdAShCut.exe]
    170.  
    171. [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    172. "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 15360]
    173.  
    174. [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    175. "AppInit_DLLs"=vonhhn.dll
    176.  
    177. [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    178. "vidc.yv12"= yv12vfw.dll
    179.  
    180. [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    181. "%windir%\\system32\\sessmgr.exe"=
    182. "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    183. "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    184. "C:\\Program Files\\iTunes\\iTunes.exe"=
    185. "C:\\Program Files\\eMule\\emule.exe"=
    186. "C:\\Program Files\\World of Warcraft\\Repair.exe"=
    187. "C:\\Program Files\\Steam\\SteamApps\\uboys9\\counter-strike source\\hl2.exe"=
    188. "C:\\Program Files\\LimeWire\\LimeWire.exe"=
    189. "C:\\Program Files\\Warcraft III\\Warcraft III.exe"=
    190. "C:\\WINDOWS\\system32\\PnkBstrA.exe"=
    191. "C:\\WINDOWS\\system32\\PnkBstrB.exe"=
    192. "C:\\Program Files\\Electronic Arts\\Command & Conquer 3\\RetailExe\\1.0\\cnc3game.dat"=
    193. "C:\\Program Files\\Electronic Arts\\Command & Conquer 3\\RetailExe\\1.9\\cnc3game.dat"=
    194. "C:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager 1.0\\MediaManager.exe"=
    195. "C:\\WINDOWS\\system32\\dpvsetup.exe"=
    196. "C:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
    197. "C:\\Program Files\\SopCast\\SopCast.exe"=
    198. "C:\\Program Files\\KONAMI\\Pro Evolution Soccer 6\\PES6.exe"=
    199. "C:\\Program Files\\Steam\\Steam.exe"=
    200. "C:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
    201. "C:\\Program Files\\Vuze\\Azureus.exe"=
    202. "C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
    203. "C:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
    204.  
    205. R2 AVKProxy;G DATA AntiVirus Proxy;C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe [2008-02-19 718408]
    206. R2 AVKService;AVK Service;C:\Program Files\G DATA AntiVirus\AVK\AVKService.exe [2008-02-07 427592]
    207. R2 AVKWCtl;Gardien d'AntiVirus;C:\Program Files\G DATA AntiVirus\AVK\AVKWCtl.exe [2008-02-05 1127816]
    208. R2 GDTdiInterceptor;GDTdiInterceptor;C:\WINDOWS\system32\drivers\GDTdiIcpt.sys [2008-06-18 41928]
    209. R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2006-03-02 14336]
    210. R3 GDMnIcpt;GDMnIcpt;C:\WINDOWS\system32\drivers\MiniIcpt.sys [2008-06-18 46536]
    211. R3 HookCentre;HookCentre;C:\WINDOWS\system32\drivers\HookCentre.sys [2008-06-18 32200]
    212. R3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver;C:\WINDOWS\system32\DRIVERS\rt2870.sys [2007-03-13 476416]
    213. S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-06-18 354560]
    214.  
    215. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
    216. UxTuneUp
    217. .
    218. Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
    219. .
    220. - - - - ORPHANS REMOVED - - - -
    221.  
    222. BHO-{84e55885-5a76-4aa0-b170-8548e355ee4e} - C:\WINDOWS\system32\vonhhn.dll
    223. BHO-{8E509EF7-6209-4A5C-A145-22F514F51C4F} - C:\WINDOWS\system32\jkkKebYP.dll
    224. BHO-{E99B22C0-B10E-4F7D-B844-49A69E98CB33} - C:\WINDOWS\system32\mlJdbBSi.dll
    225. HKLM-Run-88a7e1c5 - C:\WINDOWS\system32\novcmweq.dll
    226. ShellExecuteHooks-{8E509EF7-6209-4A5C-A145-22F514F51C4F} - C:\WINDOWS\system32\jkkKebYP.dll
    227.  
    228.  
    229. .
    230. ------- Supplementary Scan -------
    231. .
    232. FireFox -: Profile - C:\Documents and Settings\Tony67\Application Data\Mozilla\Firefox\Profiles\cx1i09jy.default\
    233. FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://<a href="http://www.google.fr/firefox?client=firefox-a&rls=org.mozilla:fr:official" target="_blank">www.google.fr/firefox?client=firefox-a&rls=org.mozilla:...</a>
    234. FF -: plugin - C:\Documents and Settings\Tony67\Application Data\Mozilla\Firefox\Profiles\cx1i09jy.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
    235. FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
    236. FF -: plugin - C:\Program Files\ma-config.com\nphardwaredetection.dll
    237. .
    238.  
    239. **************************************************************************
    240.  
    241. catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, <a href="http://www.gmer.net" target="_blank">http://www.gmer.net</a>
    242. Rootkit scan 2008-09-08 23:35:55
    243. Windows 5.1.2600 Service Pack 2 NTFS
    244.  
    245. Balayage processus cach‚s ...
    246.  
    247. Balayage cach‚ autostart entries ...
    248.  
    249. Balayage des fichiers cach‚s ...
    250.  
    251. Scan termin‚ avec succŠs
    252. Les fichiers cach‚s: 0
    253.  
    254. **************************************************************************
    255. .
    256. ------------------------ Other Running Processes ------------------------
    257. .
    258. C:\Program Files\Fichiers communs\logishrd\LVMVFM\LVPrcSrv.exe
    259. C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    260. C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    261. C:\Program Files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe
    262. C:\WINDOWS\system32\nvsvc32.exe
    263. C:\WINDOWS\system32\PnkBstrA.exe
    264. C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    265. C:\Program Files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe
    266. C:\WINDOWS\system32\rundll32.exe
    267. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
    268. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
    269. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
    270. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
    271. C:\Program Files\iPod\bin\iPodService.exe
    272. C:\Program Files\Fichiers communs\logishrd\LQCVFX\COCIManager.exe
    273. .
    274. **************************************************************************
    275. .
    276. Temps d'accomplissement: 2008-09-08 23:41:28 - machine was rebooted
    277. ComboFix-quarantined-files.txt 2008-09-08 21:41:20
    278.  
    279. Pre-Run: 7,599,235,072 octets libres
    280. Post-Run: 7,603,224,576 octets libres
    281.  
    282. 253 --- E O F --- 2008-08-22 01:01:58

    Re,

    Télécharge MalwareByte's Anti-Malware sur ton Bureau.
    Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

    Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
    AIDE : Redémarrer en mode sans échec

  • Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
  • Afin de lancer la recherche, clic sur"Rechercher".
  • Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :
    -- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
    -- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
    [#ff0000]REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.[/#f]

    AIDE : Tuto en images sur MBAM

    Hello,

    desoler du retard , voila le rapport

    1. Malwarebytes' Anti-Malware 1.27
    2. Version de la base de données: 1127
    3. Windows 5.1.2600 Service Pack 2
    4.  
    5. 09/09/2008 23:05:25
    6. mbam-log-2008-09-09 (23-05-25).txt
    7.  
    8. Type de recherche: Examen complet (C:\|D:\|)
    9. Eléments examinés: 195715
    10. Temps écoulé: 4 hour(s), 3 minute(s), 15 second(s)
    11.  
    12. Processus mémoire infecté(s): 0
    13. Module(s) mémoire infecté(s): 0
    14. Clé(s) du Registre infectée(s): 0
    15. Valeur(s) du Registre infectée(s): 0
    16. Elément(s) de données du Registre infecté(s): 0
    17. Dossier(s) infecté(s): 0
    18. Fichier(s) infecté(s): 23
    19.  
    20. Processus mémoire infecté(s):
    21. (Aucun élément nuisible détecté)
    22.  
    23. Module(s) mémoire infecté(s):
    24. (Aucun élément nuisible détecté)
    25.  
    26. Clé(s) du Registre infectée(s):
    27. (Aucun élément nuisible détecté)
    28.  
    29. Valeur(s) du Registre infectée(s):
    30. (Aucun élément nuisible détecté)
    31.  
    32. Elément(s) de données du Registre infecté(s):
    33. (Aucun élément nuisible détecté)
    34.  
    35. Dossier(s) infecté(s):
    36. (Aucun élément nuisible détecté)
    37.  
    38. Fichier(s) infecté(s):
    39. C:\Documents and Settings\Tony67\Mes documents\emule\Incoming\Win RAR 3.2 + Crack\CORE10k.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
    40. C:\QooBox\Quarantine\C\WINDOWS\system32\ddcBUnmJ.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
    41. C:\QooBox\Quarantine\C\WINDOWS\system32\ffgttx.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
    42. C:\QooBox\Quarantine\C\WINDOWS\system32\jkkKebYP.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
    43. C:\QooBox\Quarantine\C\WINDOWS\system32\mlJdbBSi.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
    44. C:\QooBox\Quarantine\C\WINDOWS\system32\nghlrhrh.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
    45. C:\QooBox\Quarantine\C\WINDOWS\system32\njqlvdty.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
    46. C:\QooBox\Quarantine\C\WINDOWS\system32\novcmweq.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
    47. C:\QooBox\Quarantine\C\WINDOWS\system32\oruoikne.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
    48. C:\QooBox\Quarantine\C\WINDOWS\system32\vonhhn.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
    49. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP102\A0023090.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    50. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP102\A0023092.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    51. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP102\A0023093.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    52. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP104\A0023185.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    53. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP104\A0023186.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    54. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP104\A0023187.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    55. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP104\A0023188.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    56. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP104\A0023189.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    57. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP104\A0023190.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    58. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP104\A0023191.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    59. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP104\A0023192.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    60. C:\System Volume Information\_restore{CF12ECA1-43FF-438A-BF08-CC29C2D6FCF7}\RP104\A0023193.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    61. C:\WINDOWS\mqgldfvo.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    Voilou

    1. Logfile of Trend Micro HijackThis v2.0.2
    2. Scan saved at 18:38, on 10/09/2008
    3. Platform: Windows XP SP3 (WinNT 5.01.2600)
    4. MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    5. Boot mode: Normal
    6.  
    7. Running processes:
    8. C:\WINDOWS\System32\smss.exe
    9. C:\WINDOWS\system32\winlogon.exe
    10. C:\WINDOWS\system32\services.exe
    11. C:\WINDOWS\system32\lsass.exe
    12. C:\WINDOWS\system32\svchost.exe
    13. C:\WINDOWS\System32\svchost.exe
    14. C:\WINDOWS\system32\svchost.exe
    15. C:\WINDOWS\system32\spoolsv.exe
    16. C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    17. C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    18. C:\Program Files\G DATA AntiVirus\AVK\AVKService.exe
    19. C:\Program Files\G DATA AntiVirus\AVK\AVKWCtl.exe
    20. C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    21. C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    22. C:\WINDOWS\system32\nvsvc32.exe
    23. C:\WINDOWS\system32\PnkBstrA.exe
    24. C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    25. C:\WINDOWS\system32\svchost.exe
    26. C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe
    27. C:\WINDOWS\Explorer.EXE
    28. C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
    29. C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe
    30. C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    31. C:\WINDOWS\system32\wuauclt.exe
    32. C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
    33. C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
    34. C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    35. C:\Program Files\Logitech\QuickCam\Quickcam.exe
    36. C:\Program Files\Analog Devices\Core\smax4pnp.exe
    37. C:\Program Files\G DATA AntiVirus\AVKTray\AVKTray.exe
    38. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
    39. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDCountdown.exe
    40. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDPop3.exe
    41. C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe
    42. C:\Program Files\iTunes\iTunesHelper.exe
    43. C:\WINDOWS\system32\RUNDLL32.EXE
    44. C:\Program Files\Echovoice\Gamer Statistics\G15 Echovoice Gamer Statistics.exe
    45. C:\WINDOWS\system32\ctfmon.exe
    46. C:\program files\steam\steam.exe
    47. C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
    48. C:\Program Files\iPod\bin\iPodService.exe
    49. C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    50. C:\Program Files\Mozilla Firefox\firefox.exe
    51. C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    52.  
    53. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>
    54. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    55. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    56. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    57. O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    58. O3 - Toolbar: (no name) - {0124123D-61B4-456f-AF86-78C53A0790C5} - (no file)
    59. O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
    60. O4 - HKLM\..\Run: [D-Link D-Link Wireless N DWA-140] C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe
    61. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    62. O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    63. O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    64. O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
    65. O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
    66. O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    67. O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    68. O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
    69. O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    70. O4 - HKLM\..\Run: [AVKTray] "C:\Program Files\G DATA AntiVirus\AVKTray\AVKTray.exe"
    71. O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    72. O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    73. O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    74. O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    75. O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    76. O4 - HKLM\..\Run: [Echovoice Gamer Statistics] C:\Program Files\Echovoice\Gamer Statistics\G15 Echovoice Gamer Statistics.exe
    77. O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    78. O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
    79. O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
    80. O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
    81. O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    82. O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    83. O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    84. O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    85. O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
    86. O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    87. O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    88. O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    89. O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    90. O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
    91. O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    92. O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    93. O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    94. O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    95. O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    96. O20 - AppInit_DLLs: vonhhn.dll
    97. O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    98. O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
    99. O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    100. O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe
    101. O23 - Service: AVK Service (AVKService) - G DATA Software AG - C:\Program Files\G DATA AntiVirus\AVK\AVKService.exe
    102. O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA AntiVirus\AVK\AVKWCtl.exe
    103. O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    104. O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    105. O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    106. O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    107. O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    108. O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
    109. O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    110. O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    111. O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    112. O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
    113.  
    114. --
    115. End of file - 8953 bytes
    Lassé par la pub ? Créez un compte
    Tom's guide dans le monde