Bonjour,
Suite à lenteur de mon PC, également lenteur des fenêtres à s'ouvrir et connection internet très longues, vous trouverez ci-joints un rapport Hitjacthis et Combofix. Car je ne sais pas d'où viennent ces lenteurs.
ComboFix 09-10-08.04 - _ 12/10/2009 9:42.1.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1022.566 [GMT 2:00]
Lancé depuis: c:\documents and settings\_\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning enabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: Bitdefender Antivirus *On-access scanning enabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
* Un antivirus résident est actif
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\Downloaded Program Files\bdcore.dll
c:\windows\Downloaded Program Files\libfn.dll
c:\windows\Installer\103be84.msi
c:\windows\Installer\11f2b32.msp
c:\windows\Installer\136742.msi
c:\windows\Installer\14e1a0a.msi
c:\windows\Installer\1614a6.msp
c:\windows\Installer\161ac0.msp
c:\windows\Installer\1623503.msi
c:\windows\Installer\184dfc.msi
c:\windows\Installer\192ca90.msp
c:\windows\Installer\1a4d951.msi
c:\windows\Installer\1aa7fa7.msi
c:\windows\Installer\1aa7fb6.msi
c:\windows\Installer\1c9c85a.msi
c:\windows\Installer\1c9c864.msi
c:\windows\Installer\1c9c86a.msi
c:\windows\Installer\1c9c874.msi
c:\windows\Installer\1c9c914.msi
c:\windows\Installer\1c9c91c.msi
c:\windows\Installer\1c9c922.msi
c:\windows\Installer\1c9c929.msi
c:\windows\Installer\1c9c930.msi
c:\windows\Installer\1c9c936.msi
c:\windows\Installer\1c9c93c.msi
c:\windows\Installer\1c9c943.msi
c:\windows\Installer\1c9c9b6.msi
c:\windows\Installer\1f10d1.msp
c:\windows\Installer\1f2053.msp
c:\windows\Installer\1f2054.msp
c:\windows\Installer\1f2055.msp
c:\windows\Installer\1f2056.msp
c:\windows\Installer\1f2057.msp
c:\windows\Installer\1f2058.msp
c:\windows\Installer\1f2059.msp
c:\windows\Installer\1f205a.msp
c:\windows\Installer\1f205b.msp
c:\windows\Installer\1f8323.msp
c:\windows\Installer\20a10a.msp
c:\windows\Installer\21eff24.msp
c:\windows\Installer\21f0b8.msp
c:\windows\Installer\22e9af.msp
c:\windows\Installer\22e9b0.msp
c:\windows\Installer\22e9b1.msp
c:\windows\Installer\22e9b2.msp
c:\windows\Installer\22e9b3.msp
c:\windows\Installer\22e9b4.msp
c:\windows\Installer\22e9b5.msp
c:\windows\Installer\22e9b6.msp
c:\windows\Installer\22e9b7.msp
c:\windows\Installer\2518a3a.msp
c:\windows\Installer\25fece.msp
c:\windows\Installer\28ef223.msp
c:\windows\Installer\29262.msp
c:\windows\Installer\29d4f.msp
c:\windows\Installer\2aad9e0.msp
c:\windows\Installer\2adba.msp
c:\windows\Installer\2be99d8.msp
c:\windows\Installer\2c365.msp
c:\windows\Installer\2dc6c.msp
c:\windows\Installer\34b5b.msi
c:\windows\Installer\34e0ed.msp
c:\windows\Installer\354350.msp
c:\windows\Installer\36bf42.msp
c:\windows\Installer\3844b9.msi
c:\windows\Installer\3db8c.msp
c:\windows\Installer\3f2d77.msp
c:\windows\Installer\3f2d78.msp
c:\windows\Installer\3f2d79.msp
c:\windows\Installer\3f2d7a.msp
c:\windows\Installer\3f2d7b.msp
c:\windows\Installer\3f2d7c.msp
c:\windows\Installer\3f2d7d.msp
c:\windows\Installer\3f2d7e.msp
c:\windows\Installer\3f2d7f.msp
c:\windows\Installer\4031f5.msp
c:\windows\Installer\442011.msp
c:\windows\Installer\442012.msp
c:\windows\Installer\442013.msp
c:\windows\Installer\442014.msp
c:\windows\Installer\442015.msp
c:\windows\Installer\442016.msp
c:\windows\Installer\442017.msp
c:\windows\Installer\442018.msp
c:\windows\Installer\442019.msp
c:\windows\Installer\44a09a.msp
c:\windows\Installer\496fc.msp
c:\windows\Installer\4bb20d.msp
c:\windows\Installer\4c38b.msp
c:\windows\Installer\4f9058.msp
c:\windows\Installer\500181.msi
c:\windows\Installer\53d5f.msp
c:\windows\Installer\53d60.msp
c:\windows\Installer\53d61.msp
c:\windows\Installer\53d62.msp
c:\windows\Installer\53d63.msp
c:\windows\Installer\53d64.msp
c:\windows\Installer\53d65.msp
c:\windows\Installer\53d66.msp
c:\windows\Installer\53d67.msp
c:\windows\Installer\547af.msp
c:\windows\Installer\57c54.msi
c:\windows\Installer\5ab0bc.msp
c:\windows\Installer\5d3275.msp
c:\windows\Installer\5d3276.msp
c:\windows\Installer\66f25e.msp
c:\windows\Installer\67c37.msp
c:\windows\Installer\70f581.msi
c:\windows\Installer\70f595.msp
c:\windows\Installer\70f5ab.msp
c:\windows\Installer\70f5c1.msp
c:\windows\Installer\70f5c3.msp
c:\windows\Installer\74ddf.msi
c:\windows\Installer\74de9.msi
c:\windows\Installer\76b930.msp
c:\windows\Installer\773094.msi
c:\windows\Installer\77309d.msi
c:\windows\Installer\7730a5.msi
c:\windows\Installer\7bc7fd.msp
c:\windows\Installer\7be479.msi
c:\windows\Installer\7be47a.msp
c:\windows\Installer\7be47b.msp
c:\windows\Installer\7be47c.msp
c:\windows\Installer\7be47d.msp
c:\windows\Installer\7be47e.msp
c:\windows\Installer\7be47f.msp
c:\windows\Installer\7be480.msp
c:\windows\Installer\7be481.msp
c:\windows\Installer\7be482.msp
c:\windows\Installer\7c002.msp
c:\windows\Installer\7c01a.msi
c:\windows\Installer\7d3e8.msi
c:\windows\Installer\82563.msi
c:\windows\Installer\82564.msp
c:\windows\Installer\82565.msp
c:\windows\Installer\82566.msp
c:\windows\Installer\82567.msp
c:\windows\Installer\82568.msp
c:\windows\Installer\82569.msp
c:\windows\Installer\8256a.msp
c:\windows\Installer\8256b.msp
c:\windows\Installer\8256c.msp
c:\windows\Installer\891c2.msi
c:\windows\Installer\8a6e11.msi
c:\windows\Installer\8bd5d.msi
c:\windows\Installer\92639.msi
c:\windows\Installer\9539cc.msi
c:\windows\Installer\9d260.msi
c:\windows\Installer\a02d6.msi
c:\windows\Installer\a49f8.msp
c:\windows\Installer\acea9.msp
c:\windows\Installer\b3581.msi
c:\windows\Installer\b6cec4.msp
c:\windows\Installer\bc1d68.msp
c:\windows\Installer\be5404.msi
c:\windows\Installer\c0b10a.msp
c:\windows\Installer\c4e54.msi
c:\windows\Installer\ccc37.msi
c:\windows\Installer\e5232.msp
c:\windows\Installer\ebb4d.msp
c:\windows\Installer\f143a.msp
c:\windows\Installer\f5fbae.msp
c:\windows\system\oeminfo.ini
c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\AVSredirect.dll
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\Ijl11.dll
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe
.
((((((((((((((((((((((((((((( Fichiers créés du 2009-09-12 au 2009-10-12 ))))))))))))))))))))))))))))))))))))
.
2009-10-09 16:38 . 2009-10-09 16:38 -------- d-----w- c:\documents and settings\All Users\Application Data\TuneUp Software
2009-10-09 09:50 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-10-09 09:50 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-10-09 09:50 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-10-08 10:55 . 2009-10-09 06:34 -------- d-----w- c:\windows\SxsCaPendDel
2009-10-08 09:19 . 2009-10-08 09:21 -------- d-----w- c:\documents and settings\_\Application Data\FILEminimizer
2009-10-08 09:19 . 2009-10-08 09:19 -------- d-----w- c:\program files\FILEminimizer Office
2009-10-08 07:26 . 2009-10-08 07:26 -------- d-----w- c:\documents and settings\Default User\Local Settings\Application Data\ScreenCapture
2009-10-07 17:55 . 2004-01-24 22:00 70656 ----a-w- c:\windows\system32\i420vfw.dll
2009-10-07 17:52 . 2008-03-16 12:30 216064 --sh--r- c:\windows\system32\nbDX.dll
2009-10-07 17:52 . 2007-02-21 10:47 31232 --sh--r- c:\windows\system32\msfDX.dll
2009-10-07 17:52 . 2006-05-03 09:06 163328 --sh--r- c:\windows\system32\flvDX.dll
2009-10-07 17:07 . 2009-10-07 17:08 -------- d-----w- c:\program files\Fichiers communs\AVSMedia
2009-10-07 11:53 . 2009-10-09 09:09 -------- d-----w- c:\documents and settings\_\Application Data\vlc
2009-10-07 11:51 . 2009-10-07 11:51 -------- d-----w- c:\program files\VideoLAN
2009-10-06 17:33 . 2009-10-06 17:33 -------- d-----w- c:\program files\Xi
2009-10-06 11:11 . 2009-10-06 11:11 107104 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2009-10-06 11:11 . 2009-10-06 11:11 124 ----a-w- c:\documents and settings\_\Local Settings\Application Data\fusioncache.dat
2009-10-02 14:27 . 2009-10-02 14:27 -------- d-----w- c:\documents and settings\_\Application Data\Todae
2009-10-02 09:18 . 2009-10-02 09:18 -------- d-----w- c:\program files\Real Alternative
2009-10-02 08:46 . 2009-10-02 08:46 -------- d-----w- c:\program files\Fichiers communs\Yahoo!
2009-10-02 08:43 . 2009-10-02 08:43 -------- d-----w- c:\documents and settings\_\Local Settings\Application Data\Downloaded Installations
2009-10-01 08:22 . 2009-10-08 17:03 -------- d-----w- c:\program files\MediaCoder
2009-09-28 12:20 . 2009-10-09 10:20 -------- d-----w- c:\documents and settings\_\Application Data\dvdcss
2009-09-23 17:13 . 2009-09-23 17:13 -------- d-----w- c:\documents and settings\_\Application Data\GlarySoft
2009-09-23 17:10 . 2009-09-23 17:10 -------- d-----w- c:\program files\Glary Utilities
2009-09-23 07:09 . 2009-09-23 07:09 -------- d-----w- c:\documents and settings\_\Local Settings\Application Data\MAGIX
2009-09-22 16:24 . 2009-09-22 16:24 -------- d-----w- c:\documents and settings\_\Application Data\Canneverbe_Limited
2009-09-22 16:24 . 2009-09-22 16:24 -------- d-----w- c:\documents and settings\All Users\Application Data\Canneverbe Limited
2009-09-22 16:24 . 2008-11-28 13:13 7168 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2009-09-22 16:24 . 2009-09-22 16:24 -------- d-----w- c:\program files\CDBurnerXP
2009-09-16 08:49 . 2009-09-16 08:49 -------- d-----w- c:\program files\VirtualDub
2009-09-16 08:45 . 2009-09-16 08:45 -------- d-----w- c:\program files\VirtualDubMOD
2009-09-16 07:01 . 2009-09-16 07:02 -------- d-----w- c:\documents and settings\All Users\Application Data\MAGIX
2009-09-16 07:01 . 2009-09-16 07:01 -------- d-----w- c:\program files\ALDI
2009-09-16 06:57 . 2007-04-27 08:43 120200 ----a-w- c:\windows\system32\DLLDEV32i.dll
2009-09-16 06:57 . 2009-09-16 07:01 -------- d-----w- c:\windows\system32\MAGIX
2009-09-16 06:57 . 2007-07-11 09:53 697560 ----a-w- c:\windows\system32\mgxoschk.dll
2009-09-15 16:30 . 2009-10-08 18:47 -------- d-----w- c:\program files\Free Video Converter
2009-09-15 15:45 . 2009-09-15 15:45 -------- d-----w- c:\documents and settings\_\Application Data\Bitdefender
2009-09-15 15:45 . 2009-09-15 15:45 -------- d-----w- c:\documents and settings\All Users\Application Data\BitDefender
2009-09-15 15:45 . 2009-09-15 15:45 -------- d-----w- c:\program files\BitDefender
2009-09-15 15:42 . 2009-09-15 15:45 -------- d-----w- c:\program files\Fichiers communs\BitDefender
2009-09-15 13:43 . 2009-09-15 13:43 180344 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-09-15 13:42 . 2009-09-15 13:42 -------- d-----w- c:\program files\Reference Assemblies
2009-09-14 16:42 . 2009-10-02 13:32 -------- d-----w- c:\program files\AviSynth 2.5
2009-09-14 16:18 . 2009-09-14 16:18 -------- d-----w- c:\documents and settings\_\Application Data\Broad Intelligence
2009-09-14 16:05 . 2009-09-14 16:05 -------- d-----w- c:\program files\Fichiers communs\SWF Studio
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-12 07:51 . 2008-09-06 13:27 81984 ----a-w- c:\windows\system32\bdod.bin
2009-10-09 09:44 . 2009-06-10 05:47 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-09 09:43 . 2009-09-05 11:02 -------- d-----w- c:\program files\BitComet
2009-10-08 11:48 . 2009-06-10 12:01 -------- d-----w- c:\documents and settings\All Users\Application Data\TechSmith
2009-10-07 16:53 . 2009-04-04 08:59 -------- d-----w- c:\program files\Fichiers communs\DivX Shared
2009-10-06 11:57 . 2009-05-05 12:48 -------- d-----w- c:\documents and settings\_\Application Data\Azureus
2009-10-06 11:11 . 2008-09-08 15:17 8224 ----a-w- c:\documents and settings\_\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-09-28 10:06 . 2009-08-02 19:09 -------- d-----w- c:\program files\Lavalys
2009-09-16 11:48 . 2008-12-24 08:19 -------- d-----w- c:\program files\Java
2009-09-16 07:04 . 2008-09-09 08:13 -------- d-----w- c:\documents and settings\_\Application Data\XnView
2009-09-15 17:04 . 2007-07-20 13:54 77824 ----a-w- c:\windows\system32\xcomm.dll
2009-09-15 16:27 . 2009-07-04 07:15 -------- d-----w- c:\program files\DVDVIDEOSOFT
2009-09-15 13:21 . 2008-10-27 10:30 -------- d-----w- c:\program files\Fichiers communs\DVDVideoSoft
2009-09-11 16:36 . 2009-09-11 16:36 33533 ----a-w- c:\windows\system32\CoreVorbis-uninstall.exe
2009-09-11 16:35 . 2009-02-23 12:10 -------- d-----w- c:\program files\AC3Filter
2009-09-11 16:34 . 2009-09-11 16:34 56 --sh--r- c:\windows\system32\BD9F9C1399.sys
2009-09-11 16:34 . 2009-09-11 16:34 1890 --sha-w- c:\windows\system32\KGyGaAvL.sys
2009-09-11 16:30 . 2009-02-22 19:01 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-09-11 08:01 . 2009-04-02 07:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-10 12:54 . 2009-04-02 07:17 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 12:53 . 2009-04-02 07:17 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-02 16:25 . 2009-05-05 12:47 -------- d-----w- c:\program files\Vuze
2009-09-01 06:43 . 2009-08-25 12:45 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-08-30 07:36 . 2009-08-29 13:12 -------- d-----w- c:\program files\AskBarDis
2009-08-28 10:44 . 2009-08-28 10:44 265797 ----a-w- c:\windows\system32\pdvcodec.dll
2009-08-26 11:44 . 2009-08-26 11:44 -------- d-----w- c:\program files\VirtualDJ
2009-08-25 15:17 . 2008-09-05 13:14 569784 ----a-w- c:\windows\system32\perfh00C.dat
2009-08-25 15:17 . 2008-09-05 13:14 110180 ----a-w- c:\windows\system32\perfc00C.dat
2009-08-25 14:21 . 2009-08-25 12:47 603904 ----a-w- c:\windows\system32\TUProgSt.exe
2009-08-25 14:21 . 2009-08-25 12:47 360192 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-08-21 18:45 . 2009-01-16 14:47 -------- d-----w- c:\program files\MyHeritage
2009-08-21 18:38 . 2009-08-21 18:38 -------- d-----w- c:\program files\Family Toolbar
2009-08-21 13:45 . 2009-08-21 13:44 -------- d-----w- c:\documents and settings\_\Application Data\Ahead
2009-08-21 13:37 . 2009-08-21 13:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Ahead
2009-08-21 13:36 . 2009-08-21 13:34 -------- d-----w- c:\program files\Fichiers communs\Ahead
2009-08-21 13:34 . 2009-08-21 13:34 -------- d-----w- c:\program files\Nero
2009-08-21 13:34 . 2009-08-21 13:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero
2009-08-20 13:30 . 2009-08-20 13:30 -------- d-----w- c:\program files\Belarc
2009-08-19 14:48 . 2009-08-19 14:48 351248 ----a-w- c:\windows\system32\FTBSaver.scr
2009-08-17 19:34 . 2009-08-17 18:00 -------- d-----w- c:\program files\Fichiers communs\Nero
2009-08-14 19:26 . 2008-10-13 12:01 -------- d-----w- c:\program files\IEPro
2009-08-14 13:15 . 2008-09-05 10:26 23756 ----a-w- c:\windows\system32\emptyregdb.dat
2009-08-06 17:24 . 2008-09-05 10:26 327896 ----a-w- c:\windows\system32\wucltui.dll
2009-08-06 17:24 . 2008-09-05 10:26 209632 ----a-w- c:\windows\system32\wuweb.dll
2009-08-06 17:24 . 2008-10-16 12:09 44768 ----a-w- c:\windows\system32\wups2.dll
2009-08-06 17:24 . 2008-09-05 10:26 35552 ----a-w- c:\windows\system32\wups.dll
2009-08-06 17:24 . 2008-09-05 10:26 53472 ----a-w- c:\windows\system32\wuauclt.exe
2009-08-06 17:24 . 2008-04-13 17:33 96480 ----a-w- c:\windows\system32\cdm.dll
2009-08-06 17:23 . 2008-09-05 10:26 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-08-06 17:23 . 2008-09-05 10:26 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-08-05 09:00 . 2008-04-13 17:33 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-31 13:23 . 2008-12-24 08:19 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-29 04:35 . 2008-04-13 17:33 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-29 04:35 . 2008-04-13 17:33 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-17 19:03 . 2008-04-13 17:33 58880 ----a-w- c:\windows\system32\atl.dll
2009-06-17 19:07 . 2009-06-17 19:07 23 ----a-w- c:\program files\hfkud16.sys
2007-02-16 09:31 . 2009-07-15 09:46 227328 ----a-w- c:\program files\mpTrim.exe
2004-03-11 12:27 . 2008-11-17 18:07 40960 ----a-w- c:\program files\Uninstall_CDS.exe
2009-01-22 16:16 . 2009-01-22 16:16 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2006-05-03 09:06 . 2009-10-07 17:52 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 10:47 . 2009-10-07 17:52 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 12:30 . 2009-10-07 17:52 216064 --sh--r- c:\windows\system32\nbDX.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48}"= "c:\program files\Family Toolbar\tbhelper.dll" [2009-05-07 355840]
[HKEY_CLASSES_ROOT\clsid\{1c4ab6a5-595f-4e86-b15f-f93cce2bbd48}]
[HKEY_CLASSES_ROOT\URLSearchHook.MHURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{1EA6B471-CAD2-419a-9539-0586EEFE2D09}]
[HKEY_CLASSES_ROOT\URLSearchHook.MHURLSearchHook]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
2009-05-07 21:46 2642432 ----a-w- c:\program files\Family Toolbar\tbcore3.dll
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}"= "c:\program files\Family Toolbar\tbcore3.dll" [2009-05-07 2642432]
[HKEY_CLASSES_ROOT\clsid\{fd2fd708-1f6f-4b68-b141-c5778f0c19bb}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BDAgent"="c:\program files\BitDefender\BitDefender 2008\bdagent.exe" [2009-09-15 368640]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SoundMan.exe [2006-07-21 86016]
"AlcWzrd"="ALCWZRD.EXE" - c:\windows\alcwzrd.exe [2006-05-04 2808832]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-05 44544]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Démarrage rapide du logiciel HP Image Zone.lnk]
backup=c:\windows\pss\Démarrage rapide du logiciel HP Image Zone.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Windows Search.lnk]
backup=c:\windows\pss\Windows Search.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^_^Menu Démarrer^Programmes^Démarrage^Notification de cadeaux MSN.lnk]
backup=c:\windows\pss\Notification de cadeaux MSN.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ALDI_FotoSuite_Download
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\IEPro\\MiniDM.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Fichiers communs\\Ahead\\Nero Web\\SetupX.exe"=
"c:\\Program Files\\BitComet\\BitComet.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Real Alternative\\Media Player Classic\\mplayerc.exe"=
"c:\\Program Files\\Media Player Classic\\mplayerc_fr.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9916:TCP"= 9916:TCP:BitComet 9916 TCP
"9916:UDP"= 9916:UDP:BitComet 9916 UDP
"26736:TCP"= 26736:TCP:BitComet 26736 TCP
"26736:UDP"= 26736:UDP:BitComet 26736 UDP
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [25/08/2009 14:47 603904]
R3 hcw88rc5;Hauppauge WinTV 88x IR Decoder;c:\windows\system32\drivers\hcw88rc5.sys [08/09/2008 18:53 10305]
R3 HCW88TUNE;Hauppauge WinTV 88x Tuner;c:\windows\system32\drivers\hcw88tun.sys [08/09/2008 18:53 116801]
R3 HCW88VID;Hauppauge WinTV 88x Video;c:\windows\system32\drivers\hcw88vid.sys [08/09/2008 18:53 569116]
R3 HCW88XBAR;Hauppauge WinTV 88x Crossbar;c:\windows\system32\drivers\hcw88bar.sys [08/09/2008 18:53 26972]
R3 RTL2831UBDA;REALTEK 2831U BDA Driver;c:\windows\system32\drivers\RTL2831UBDA.sys [31/01/2008 06:08 94112]
R3 RTL2831UUSB;REALTEK 2831U USB Driver;c:\windows\system32\drivers\RTL2831UUSB.sys [31/01/2008 06:08 31776]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;"c:\program files\Avira\AntiVir Desktop\sched.exe" --> c:\program files\Avira\AntiVir Desktop\sched.exe [?]
S2 WinDefend;WinDefend; [x]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'
2009-10-12 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-09-23 17:27]
2009-10-12 c:\windows\Tasks\User_Feed_Synchronization-{87103949-CE65-4417-9E04-EBBB554BD286}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.itdsystem.com/
mWindow Title =
IE: &Télécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddLink.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Tout t&élécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddList.html
IE: Tout télécharger avec BitComet - c:\program files\BitComet\BitComet.exe/AddAllLink.htm
IE: Télécharger avec BitComet - c:\program files\BitComet\BitComet.exe/AddLink.htm
IE: Télécharger toutes les vidéos avec BitComet - c:\program files\BitComet\BitComet.exe/AddVideo.htm
Trusted Zone: secuser.com\www
DPF: {6218F7B5-0D3A-48BA-AE4C-49DCFA63D400} - hxxp://www.myheritage.fr/Genoogle/Components/ActiveX/SearchEngineQuery.dll
FF - ProfilePath - c:\documents and settings\_\Application Data\Mozilla\Firefox\Profiles\fn5yc8d8.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Live Search
FF - prefs.js: browser.startup.homepage - hxxp://www.itdsystem.com/
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=2&q=
FF - prefs.js: network.proxy.type - 4
FF - component: c:\documents and settings\_\Application Data\Mozilla\Firefox\Profiles\fn5yc8d8.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
---- PARAMETRES FIREFOX ----
.
- - - - ORPHELINS SUPPRIMES - - - -
URLSearchHooks-{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - (no file)
URLSearchHooks-{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-12 09:51
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\bdfsfltr]
"ImagePath"=hex:73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\bdfsfltr]
"ImagePath"=hex:73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
Heure de fin: 2009-10-12 9:54
ComboFix-quarantined-files.txt 2009-10-12 07:54
Avant-CF: 57 708 384 256 octets libres
Après-CF: 57 351 131 136 octets libres
WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Mode sans echec" /noexecute=optin /fastdetect >/sos /bootlog
447 --- E O F --- 2009-09-26 18:25
of Trend Micro HijackThis v2.0.2
Scan saved at 10:40:28, on 12/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\_\Mes documents\Hijackthis 2\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.itdsystem.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: MHURLSearchHook Class - {1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48} - C:\Program Files\Family Toolbar\tbhelper.dll
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: MHTBPos00 - {0C37B053-FD68-456a-82E1-D788EE342E6F} - C:\Program Files\Family Toolbar\tbcore3.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - (no file)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O2 - BHO: (no name) - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - (no file)
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Tout télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Télécharger toutes les vidéos avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6218F7B5-0D3A-48BA-AE4C-49DCFA63D400} (CSEQueryObject Object) - http://www.myheritage.fr/Genoogle/Componen...EngineQuery.dll
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
O18 - Protocol: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - (no file)
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Unknown owner - C:\Program Files\Avira\AntiVir Desktop\sched.exe (file missing)
O23 - Service: Avira AntiVir Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
--
End of file - 8429 byteslenteurs et qu'est-ce que je dois faire? Merci
