Le scanner trouvé et mis en quarantaine 56 items mais cela ne permet pas de résoudre aucun des problèmes...Je l'ai fait il ya un moment et qu'il nécessite une actualisation donc je n'ai pas le journal, et s'il est enregistré nulle part, qu'il ya probablement dans le dossier C: / / lecteur que je ne peux pas ouvrir.
Im going to try combo fixer dès maintenant...
ComboFix fixe ces problèmes mais...merci gif "alt =": D "title =" très heureux ">
Voici le fichier journal car il...
ComboFix 09-10-04.01 - Jeff 10/04/2009 22:55.1.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1523 [GMT -5:00]
Running From: C: \ Documents and Settings \ Jeff \ Mes documents \ Downloads \ ComboFix.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))) ))))))))))))))))))))))))))))))))))))))))
.
C: \ Autorun. inf
c: \ windows \ system32 \ amvo.exe
c: \ windows \ system32 \ Data
c: \ windows \ system32 \ kav320.dll
D: \ Autorun.inf
E: \ Autorun.inf
L: \ autorun.inf
.
((((((((((((((((((((((((( Files Created from 2009-09-05 au 2009-10-05 ))))))))))) ))))))))))))))))))))
.
2009-10-04 19:50. 2009-10-04 19:50 -------- d ----- w C: \ Program Files \ Combined Community Codec Pack
2009-10-04 19:49. 2008-11-13 00:37 99504 - sh - r-C: \ ogcikeq.com
2009-10-04 18:55. 2009-09-10 19:54 38224 ---- aw-c: \ windows \ system32 \ drivers \ mbamswissarmy.sys
2009-10-04 18:55. 2009-10-04 18:55 -------- d ----- w C: \ Program Files \ Malwarebytes Anti-Malware
2009-10-04 18:55. 2009-09-10 19:53 19160 ---- aw-c: \ windows \ system32 \ drivers \ mbam.sys
2009-10-03 20:30. 2009-10-03 20:32 -------- d ------w C: \ tmp
2009-09-25 05:59. 2009-09-25 05:59 -------- d ----- w-c: \ windows \ system32 \ XPSViewer
2009-09-25 05:59. 2009-09-25 05:59 -------- d ----- w-c: \ program files \ assemblées de référence
2009-09-25 05:59. 2008-07-06 12:06 89088-c ---- w-c: \ windows \ system32 \ dllcache \ filterpipelineprintproc.dll
2009-09-25 05:59. 2008-07-06 12:06 575488-c ---- w-c: \ windows \ system32 \ dllcache \ xpsshhdr.dll
2009-09-25 05:59. 2008-07-06 12:06 575488 ------ w-c: \ windows \ system32 \ xpsshhdr.dll
2009-09-25 05:59. 2008-07-06 12:06 1676288-c ---- w-c: \ windows \ system32 \ dllcache \ xpssvcs.dll
2009-09-25 05:59. 2008-07-06 12:06 1676288 ------ w-c: \ windows \ system32 \ xpssvcs.dll
2009-09-25 05:59. 2008-07-06 12:06 117760 ------ w-c: \ windows \ system32 \ prntvpt.dll
2009-09-25 05:59. 2008-07-06 10:50 597504-c ---- w-c: \ windows \ system32 \ dllcache \ printfilterpipelinesvc.exe
2009-09-24 04:13. 2009-09-24 04:13 -------- d ----- w-c: \ Documents and Settings \ Jeff \ Application Data \ Webshots
2009-09-24 04:13. 2009-09-24 04:13 -------- d ----- w-c: \ Documents and Settings \ Jeff \ Application Data \ Temp
2009-09-24 04:13. 2009-09-24 04:13 -------- d ----- w C: \ Program Files \ Webshots
2009-09-24 04:13. 2009-09-24 04:13 -------- d ----- w-c: \ Documents and Settings \ Jeff \ Application Data \ AGI
2009-09-24 04:13. 2009-09-24 04:13 -------- d ----- w C: \ Program Files \ AGI
2009-09-24 04:06. 2009-09-24 04:13 -------- d ----- w-c: \ Documents and Settings \ All Users \ Application Data \ AGI
2009-09-21 04:56. 2009-09-21 04:57 -------- d ------w C: \ Python26
2009-09-21 04:54. 2009-09-21 04:54 -------- d ----- w-c: \ Documents and Settings \ Jeff \ Application Data \ Blender Foundation
2009-09-21 04:54. 2009-09-21 04:54 -------- d ----- w C: \ Program Files \ Blender Foundation
2009-09-21 03:54. 2009-09-27 21:04 -------- d ----- w-c: \ Documents and Settings \ Jeff \ Application Data \ FileZilla
2009-09-21 03:54. 2009-09-21 03:54 -------- d ----- w C: \ Program Files \ FileZilla FTP Client
2009-09-20 02:21. 2009-09-23 04:35 45 ---- aw-c: \ Documents and Settings \ Jeff \ jagex_runescape_preferences2.dat
2009-09-11 22:27. 2009-09-13 20:22 -------- d ----- w-c: \ program files \ BrowserSeal
2009-09-08 20:28. 2009-06-21 21:44 153088-c ---- w-c: \ windows \ system32 \ dllcache \ triedit.dll
2009-09-07 15:40. 2009-08-07 00:23 274288 ---- aw-c: \ windows \ system32 \ mucltui.dll
2009-09-07 15:40. 2009-08-07 00:23 215920 ---- aw-c: \ windows \ system32 \ muweb. dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))) ))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-04 19:46. 2009-08-24 03:42 -------- d ----- w-c: \ program files \ Lx_cats
2009-09-29 01:11. 2009-02-02 23:14 69232 ---- aw-c: \ Documents and Settings \ Jeff \ Local Settings \ Application Data \ GDIPFONTCACHEV1.DAT
2009-09-25 01:19. 2009-02-04 15:07 -------- d ----- w-c: \ Documents and Settings \ All Users \ Application Data \ Microsoft Aide
2009-09-23 05:31. 2009-08-22 05:16 37 ---- aw-c: \ Documents and Settings \ Jeff \ jagex_runescape_preferences.dat
2009-09-21 23:24. 2009-04-30 23:56 15688 ---- aw-c: \ windows \ system32 \ lsdelete.exe
2009-09-20 18:46. 2009-08-30 15:20 -------- d - h - w-c: \ Program Files \ eMule
2009-09-02 03:58. 2009-09-02 03:58 -------- d ----- w C: \ Program Files \ Microsoft Silverlight
2009-08-30 04:02. 2009-08-30 04:02 -------- d ----- w C: \ Program Files \ iTunes
2009-08-30 04:02. 2009-08-30 04:02 -------- d ----- w-c: \ Documents and Settings \ All Users \ Application Data \ (8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906)
2009-08-30 04:02. 2009-08-30 04:02 -------- d ----- w C: \ Program Files \ iPod
2009-08-30 04:02. 2009-02-03 20:57 -------- d ----- w C: \ Program Files \ Fichiers communs \ Apple
2009-08-30 04:01. 2009-02-03 20:57 -------- d ----- w C: \ Program Files \ QuickTime
2009-08-30 03:51. 2009-02-03 20:58 -------- d ----- w C: \ Program Files \ Bonjour
2009-08-29 15:52. 2009-08-29 15:52 -------- d ----- w-c: \ Documents and Settings \ All Users \ Application Data \ FLEXnet
2009-08-29 15:41. 2009-04-30 02:35 -------- d ----- w C: \ Program Files \ Fichiers communs \ Adobe
2009-08-29 15:35. 2009-08-29 15:35 -------- d ----- w C: \ Program Files \ Fichiers communs \ Macrovision Shared
2009-08-26 05:01. 2009-08-25 04:31 -------- d ----- w-c: \ program files \ BitComet
2009-08-25 20:53. 2009-08-25 04:30 -------- d ----- w-c: \ Documents and Settings \ Jeff \ Application Data \ Notepad + +
2009-08-25 12:44. 2009-08-25 04:29 -------- d ----- w-c: \ program files \ RegWatcher
2009-08-25 04:46. 2009-08-25 04:46 -------- d ----- w C: \ Program Files \ PowerISO
2009-08-25 04:34. 2009-08-25 04:34 -------- d ----- w C: \ Program Files \ CCleaner
2009-08-25 04:30. 2009-08-25 04:30 -------- d ----- w C: \ Program Files \ Notepad + +
2009-08-24 03:47. 2009-08-24 03:41 -------- d ----- w C: \ Program Files \ Lexmark Toolbar
2009-08-24 03:43. 2009-08-24 03:43 -------- d ----- w-c: \ Documents and Settings \ Jeff \ Application Data \ 5400 Series
2009-08-24 03:43. 2009-08-24 03:40 -------- d ----- w C: \ Program Files \ Lexmark 5400 Series
2009-08-24 03:41. 2009-08-24 03:41 -------- d ----- w-c: \ Documents and Settings \ All Users \ Application Data \ 5400 Series
2009-08-24 03:41. 2009-08-24 03:40 -------- d ----- w C: \ Program Files \ Abbyy FineReader 6. 0 Sprint
2009-08-22 05:15. 2009-08-22 05:15 411368 ---- aw-c: \ windows \ system32 \ deploytk.dll
2009-08-22 05:15. 2009-08-22 05:15 -------- d ----- w C: \ Program Files \ Java
2009-08-12 22:42. 2009-02-02 21:49 -------- d - h - w-c: \ Program Files \ InstallShield Installation Information
2009-08-11 01:48. 2009-02-02 21:48 -------- d ----- w C: \ Program Files \ VIA
2009-08-07 00:24. 2009-02-02 22:41 327896 ---- aw-c: \ windows \ system32 \ wucltui.dll
2009-08-07 00:24. 2008-10-16 20:12 209632 ---- aw-c: \ windows \ system32 \ wuweb.dll
2009-08-07 00:24. 2009-02-02 22:41 44768 ---- aw-c: \ windows \ system32 \ wups2.dll
2009-08-07 00:24. 2009-02-02 22:41 35552 ---- aw-c: \ windows \ system32 \ wups.dll
2009-08-07 00:24. 2009-02-02 16:38 53472 ---- aw-c: \ windows \ system32 \ wuauclt.exe
2009-08-07 00:24. 2003-03-31 12:00 96480 ---- aw-c: \ windows \ system32 \ cdm.dll
2009-08-07 00:23. 2009-02-02 22:41 575704 ---- aw-c: \ windows \ system32 \ Wuapi. dll
2009-08-07 00:23. 2009-02-02 16:38 1929952 ---- aw-c: \ windows \ system32 \ wuaueng.dll
2009-08-05 09:01. 2009-02-02 22:46 204800 ---- aw-c: \ windows \ system32 \ mswebdvd.dll
2009-07-27 02:43. 2009-07-27 02:43 58908 ---- aw-c: \ windows \ system32 \ drivers \ scdemu.sys
2009-07-17 19:01. 2003-03-31 12:00 58880 ---- aw-c: \ windows \ system32 \ atl.dll
2009-07-14 04:43. 2004-08-04 07:56 286208 ------ w-c: \ windows \ system32 \ wmpdxm. dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))) ))))))))))))))))))))))))))))))))))))))))
.
.
* Note * les éléments vides & les éléments initiaux légitimes ne sont pas affichés
REGEDIT4
[HKEY_LOCAL_MACHINE \ ~ \ Browser Helper Objects \ (0bc6e3fa-78ef-4886-842c-5a1258c4455a)]
2008-07-25 16:16 282112 ---- aw-c: \ windows \ system32 \ mscoree. dll
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run]
"Winamp Agent" = "C: \ Program Files \ Creative \ SBAudigy \ Surround Mixer \ CTSysVol.exe" [2005-10-31 57344]
"Cpqset" = "c: \ windows \ NeroCheck.exe" [2000-05-11 90112]
"Launcher" = "C: \ Program Files \ Microsoft Office \ Office12 \ msnmsgr.exe" [2006-10-27 31016]
"Ad-Watch" = "C: \ Program Files \ Lavasoft \ Ad-Aware \ ctfmon.exe. exe "[2009-09-21 520024]
"Adobe Reader Speed Launcher" = "C: \ Program Files \ Adobe \ Acrobat 9.0 \ Reader \ Reader_sl.exe" [2009-02-27 35696]
"UMonit" = "c: \ windows \ system32 \ UMonit.exe" [2007-06-18 200704]
"SunJavaUpdateSched" = "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe" [2009-08-22 149280]
"lxctmon.exe" = "c: \ program files \ Lexmark 5400 Series \ lxctmon. exe "[2006-06-20 286720]
"Lexmark 5400 Series Fax Server" = "C: \ Program Files \ Lexmark 5400 Series \ fm3032.exe" [2006-07-10 294912]
"NeroFilterCheck" = "c: \ program files \ Lexmark 5400 Series \ ezprint.exe" [2006-06-07 98304]
"LXCTCATS" = "c: \ windows \ system32 \ spool \ drivers \ W32X86 \ 3 \ LXCTtime.dll" [2006-06-07 106496]
"SoundMan" = "C: \ Program Files \ PowerISO \ PWRISOVM. EXE "[2009-07-27 180224]
"QuickTime Task" = "C: \ Program Files \ QuickTime \ qttask.exe" [2009-05-26 413696]
"SunJavaUpdateSched" = "C: \ Program Files \ iTunes \ iTunesHelper.exe" [2009-07-13 292128]
"Malwarebytes Anti-Malware (reboot)" = "C: \ Program Files \ Malwarebytes Anti-Malware \ mbam.exe" [2009-09-10 1312080]
"P17Helper" = "P17.dll" - c: \ windows \ system32 \ P17. dll [2005-05-03 64512]
"ftutil2" = "ftutil2.dll" - c: \ windows \ system32 \ ftutil2.dll [2009-02-08 106496]
C: \ Documents and Settings \ Jeff \ Start Menu \ Programs \ Startup \
Adobe Gamma.lnk - C: \ Program Files \ Fichiers communs \ Adobe \ Calibration \ Adobe Gamma Loader.exe [2005-3-16 113664]
OneNote 2007 Screen Clipper et Launcher.lnk - C: \ Program Files \ Microsoft Office \ Office12 \ CTFMON.EXE [2006-10-26 98632]
Webshots.lnk - C: \ Program Files \ Webshots \ 3.1.5.7613 \ Launcher. exe [2009-9-23 157000]
[HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ SafeBoot \ Minimal \ Lavasoft Ad-Aware Service]
@ = "Service"
[HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Security Center]
"AntiVirusOverride" = dword: 00000001
[HKLM \ ~ \ services \ Parameters SharedAccess \ \ FirewallPolicy \ StandardProfile \ AuthorizedApplications \ List]
"% windir% \ \ system32 \ \ sessmgr.exe" =
"% windir% \ \ Network Diagnostic \ \ xpnetdiag. exe "=
"c: \ \ Program Files \ \ Microsoft Office \ \ Office12 \ \ OUTLOOK.EXE" =
"c: \ \ Program Files \ \ Microsoft Office \ Office12 \ \ \ Groove.exe" =
"c: \ \ Program Files \ \ Microsoft Office \ Office12 \ \ \ Onenote.exe" =
"c: \ \ WINDOWS \ system32 \ \ lxctcoms.exe" =
"c: \ \ Program Files \ \ BitComet \ \ BitComet.exe" =
"c: \ \ Program Files \ Bonjour \ \ mDNSResponder.exe" =
"c: \ \ Program Files \ iTunes \ \ iTunes. exe "=
"c: \ \ Program Files \ \ eMule \ \ emule.exe" =
"c: \ \ Program Files \ Java \ \ jre6 \ \ bin \ \ javaw.exe" =
[HKLM \ ~ \ services \ Parameters SharedAccess \ \ FirewallPolicy \ StandardProfile \ GloballyOpenPorts \ List]
"23737: TCP" = 23737: TCP: BitComet 23737 TCP
"23737: UDP" = 23737: UDP: BitComet 23737 UDP
R0 LBD, LBD, c: \ windows \ system32 \ drivers \ Lbd.sys [4/30/2009 6:23 PM 64160]
R2 AGCoreService, AG Core Services, C: \ Program Files \ AGI \ Core \ 3. 1 \ AGCoreService.exe [9/23/2009 11:13 PM 20480]
S3 Lavasoft Ad-Aware Service; Lavasoft Ad-Aware Service; C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe [3/9/2009 2:06 PM 1028432]
.
Contenu du dossier Tâches planifiées
2009-10-01 C: \ Windows \ Tasks \ Ad-Aware Update (hebdomadaire). Emploi
- C: \ Program Files \ Lavasoft \ Ad-Aware \ Ad-AwareAdmin.exe [2009-03-09 23:24]
2009-09-26 C: \ Windows \ Tasks \ AppleSoftwareUpdate.job
- C: \ Program Files \ Apple Software Update \ softwareupdate. exe [2008-07-30 18:34]
.
.
Supplementary Scan ------- -------
.
uStart Page =
hxxp://search.mywebsearch.com/mywebsear ... xLqyQ_WZwAConnection Assistant uInternet Search, SearchAssistant = iexplore
Paramètres uInternet, ProxyOverride = *. local
IE: & D & ownload & with BitComet - C: \ Program Files \ BitComet \ BitComet.exe / AddLink.htm
IE: & D & ownload tous les vidéo avec BitComet - C: \ Program Files \ BitComet \ BitComet.exe / AddVideo.htm
IE: & D & ownload toutes avec BitComet - C: \ Program Files \ Messenger \ BitComet. exe / AddAllLink.htm
IE: & Recherche
IE: E & xporter vers Microsoft Excel - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ EXCEL.EXE/3000
FF - profilePath - C: \ Documents and Settings \ Jeff \ Application Data \ Mozilla \ Firefox \ Profiles \ 7ny4xh6t.default \
Prefs.js FF -: browser.search.selectedEngine - Rechercher sur le Web
Prefs.js FF -: browser.startup.homepage --
hxxp://www.google.com/Prefs.js FF -: mot-clé. URL --
hxxp://ws.infospace.com/coolchaser/ws/r ... 61057&qkw=- FF composant: c: \ Documents and Settings \ Jeff \ Application Data \ Mozilla \ Firefox \ Profiles \ 7ny4xh6t.default \ Extensions \ (3b56bcc7-54e5-44a2-9b44-66c3ef58c13e) \ components \ nstidy.dll
- FF composant: c: \ Documents and Settings \ Jeff \ Application Data \ Mozilla \ Firefox \ Profiles \ 7ny4xh6t.default \ Extensions \ (a2880346-35bb-45bb-9190-eedb49c132c5) \ components \ Engine.dll
- FF composant: c: \ Documents and Settings \ Jeff \ Application Data \ Mozilla \ Firefox \ Profiles \ 7ny4xh6t. default \ extensions \ (B042753D-F57E-4e8e-A01B-7379A6D4CEFB) \ components \ IBitCometExtension.dll
FF - HiddenExtension: Microsoft. NET Framework adjoint: (20a82645-C095-46ed-80e3-08825760534b) - C: \ WINDOWS \ Microsoft.NET \ Framework \ v3.5 \ Windows Presentation Foundation \ DotNetAssistantExtension \
.
************************************************** ************************
catchme 0.3. 1398 W2K/XP/Vista - rootkit / détecteur de logiciels malveillants furtifs par Gmer,
http://www.gmer.netRootkit scan 2009-10-04 22:57
Windows 5.1. 2600 Service Pack 3 NTFS
Balayage processus cachés...
Balayage caché autostart entries...
Balayage des fichiers cachés...
Scan terminé avec succès
fichiers cachés: 0
************************************************** ************************
.
--------------------- --------------------- LOCKED Clés de registre
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Classes \ CLSID \ (BEB3C0C7-B648-4257-96D9-B5D024816E27) \ Version * Version]
"Version" = hex: e4, 87,57,8 d, 44,0 b, A9, B9, CE, 31,74, b2, 7a, 11, ad, 18, ed, 4d, 53,5 f, 05,
26, bd, ae, 9b, f2, 89, aa, 01,10,99,34,84,2 e, 0f, c6, 5c, a4, 80,92, a4, c6, 9f, 77, aa, 88, \
[HKEY_LOCAL_MACHINE \ Software \ Minnetonka Audio Software \ SurCode Dolby Digital Premiere \ Version * Version]
"Version" = hex: e4, 87,57,8 d, 44,0 b, A9, B9, CE, 31,74, b2, 7a, 11, ad, 18, ed, 4d, 53,5 f, 05,
26, bd, ae, 9b, f2, 89, aa, 01,10,99,34,84,2 e, 0f, c6, 5c, a4, 80,92, a4, c6, 9f, 77, aa, 88, \
.
--------------------- DLL chargées sous Running Processes ---------------------
- - - - - - -> Winlogon.exe (860)
c: \ windows \ system32 \ Ati2evxx.dll
.
Temps d'accomplissement: 2009-10-05 22:58
ComboFix-quarantined-files.txt 2009-10-05 03:58
Pre-Run: 149068210176 octets libres
Post-Run: 149144293376 octets libres
WindowsXP-KB310994-SP2-Home-Bootdisk-ENU. exe
[boot loader]
timeout = 2
default = multi (0) disk (0) rdisk (0) partition (1) \ WINDOWS
[operating systems]
c: \ cmdcons \ BOOTSECT.DAT = "Microsoft Windows Recovery Console" / cmdcons
multi (0) disk (0) rdisk (0) partition (1) \ WINDOWS = "Microsoft Windows XP Home Edition" / fastdetect / NoExecute = OptIn
206 --- EOF --- 2009-10-04 04:46
Merci beaucoup pour Don2007 gif "alt =": D "title =" très heureux "> Remercions de votre aide