-
Compteur de contenus
259 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par toutclic
-
Bonsoir Je viens de reformaté mon PC aujourd'hui est depuis il me dit qu'il manque NTLDR au demarrge et de faire la commnde "CTRL + ALT + DEL". Pour qu'il demarre normalement je suis obligé d'inserer le CD d'installation et aprés il demarre normalemant. Qu'est ce que ce fichier NTLDR et comment le reparer merci de vos reponses
-
ça fonctionne merci pour votre aide Salut
-
Salut je ne trouve dans le registre installation sources j'ai suivie la manip mais je ne le trouve pas
-
boujour Depuis aujourd'hui tous ce que je branche au port USB n'est reconnu que si je reformate le peripherique brancher lorsque je branche mon dique dur je suis obligé de le reformater pour qu'il le reconnaissent se que je n'ai pas envie de faire biensur merci de vos reponse
-
[résolu]analyse antivir
toutclic a répondu à un(e) sujet de toutclic dans Analyses et éradication malwares
^^ merci pour vos reponse je croyait que c'etait autre chose Salut -
quelqu'un pourrait m'analyser se rapport de antivir je n'y comprend rien Report file date: jeudi 30 août 2007 17:51 Jobname: 'Windows System Directory' Scanning for 284303 virus strains and unwanted programs. Licensed to: AntiVir PersonalEdition Classic Serialnumber: 0000149996-WURGE-0001 Platform: Windows XP Windowsversion: (Service Pack 2) [5.1.2600] Username: Herwan BOUDRA Computername: HERWAN Versioninformations: AVSCAN.EXE : 7.0.0.19 385064 23/01/2006 14:35:36 AVSCAN.DLL : 7.0.0.19 42536 23/01/2006 14:35:34 LUKE.DLL : 7.0.0.19 110632 23/01/2006 14:35:36 LUKERES.DLL : 7.0.0.19 27688 23/01/2006 14:35:36 ANTIVIR0.VDF : 6.32.0.60 4323840 06/12/2005 09:47:34 ANTIVIR1.VDF : 6.33.0.97 675328 18/01/2006 13:31:52 ANTIVIR2.VDF : 6.33.0.131 122880 18/01/2006 13:31:52 ANTIVIR3.VDF : 6.33.0.139 28160 18/01/2006 13:31:52 AVEWIN32.DLL : 6.33.0.30 1016320 20/01/2006 10:42:50 AVPREF.DLL : 6.34.0.0 33320 18/01/2006 11:05:46 AVREP.DLL : 6.33.0.100 1617960 06/01/2006 16:08:28 AVPACK32.DLL : 6.33.0.6 331816 09/01/2006 08:03:38 AVREG.DLL : 6.31.0.90 25128 28/07/2005 09:06:12 NETNT.DLL : 6.32.0.0 6696 27/09/2005 06:56:46 NETNW.DLL : 6.32.0.0 9768 27/09/2005 06:56:46 Start of the scan: jeudi 30 août 2007 17:51 Start scanning boot sectors: Boot sector 'C:' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( 77 files ). Starting the file scan: C:\WINDOWS\system32\config\default [WARNING] The file could not be opened! C:\WINDOWS\system32\config\default.LOG [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SAM [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SAM.LOG [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SECURITY [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SECURITY.LOG [WARNING] The file could not be opened! C:\WINDOWS\system32\config\software [WARNING] The file could not be opened! C:\WINDOWS\system32\config\software.LOG [WARNING] The file could not be opened! C:\WINDOWS\system32\config\system [WARNING] The file could not be opened! C:\WINDOWS\system32\config\system.LOG [WARNING] The file could not be opened! C:\WINDOWS\system32\drivers\atapi.sys [WARNING] The file could not be opened! C:\WINDOWS\system32\drivers\sptd.sys [WARNING] The file could not be opened! End of the scan: jeudi 30 août 2007 17:54 Used time: 02:34 min The scan has been done completely. 238 Scanning directories 5019 Files were scanned 0 viruses and/or unwanted programs was found 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 4 Archives were scanned 24 Warnings 0 Notes
-
en fait c'est juste la meilleur protection que je recherche et pour moi avast me semble le meilleur mais bon... j'ai antivir et pour l'instant aucun probleme merci pour ta reponse Salut
-
oui mais tout le monde dans ma famille l'utilise et... enfin si c'est l'avis des experts je ne vais pas le contester une petite question si la version de antivir expire est ce que l'antivirus fonctionne toujours ou je dois telecharger un autre antivir??
-
Bonsoir Non j'ai sunbelt personnal firewall car zone alarm provoque des bug sur mon ordi comme des coupures de son des gels ...
-
petite rectification en faite il n'y que le bouclier web qui bloque la connection
-
Salut je navigue avec firefox et le petit tuto de malekal ne repond pas a ma question
-
Bonjour depuis aujourd'hui les trois bouclier de avast (bouclier web, bouclier standard et bouclier reseau) bloque ma connection au navigateur et je ne pe me connecter au navigateur que en les desactivant comment regler se pb? merci de vos reponse
-
Bonsoir qqu pourrait repondre c'est vraiment genant tout mes curseur animé ne fonctionne pas
-
Bonsoir tout et dans le titre je ne sais pas quoi dire de plus j'ai installer un patch qui est censé regler se probleme (windows .ani zero-day Patch) merci d'avance pour vos reponse
-
analyse de rapport hijackthis
toutclic a répondu à un(e) sujet de toutclic dans Analyses et éradication malwares
je l'ai deja celui la et je l'ai deja fait plusieurs fois meme mais je fais ce que tu me dit voici le rapport ComboFix 07-06-18.2 - C:\Documents and Settings\Herwan BOUDRA\Bureau\ComboFix.exe "Herwan BOUDRA" - 2007-06-20 22:31:27 - Service Pack 2 NTFS ((((((((((((((((((((((((( Files Created from 2007-05-20 to 2007-06-20 ))))))))))))))))))))))))))))))) 2007-06-20 22:30 26,112 --a------ C:\WINDOWS\system32\nircmd.exe 2007-06-20 22:29 2,829 --a------ C:\WINDOWS\War3Unin.pif 2007-06-20 22:29 18,031 --a------ C:\WINDOWS\War3Unin.dat 2007-06-20 22:29 126,976 --a------ C:\WINDOWS\War3Unin.exe 2007-06-20 22:23 <REP> d-------- C:\Program Files\Warcraft III 2007-06-20 13:30 49,152 --a------ C:\WINDOWS\nircmd.exe 2007-06-19 20:50 2,404,352 --a------ C:\Program Files\haloce.exe 2007-06-19 20:42 <REP> d-------- C:\Program Files\Fichiers communs\logishrd 2007-06-19 12:47 36,864 --a------ C:\WINDOWS\system32\EGameEncrypt.dll 2007-06-18 21:17 <REP> d-------- C:\DOCUME~1\HERWAN~1\APPLIC~1\Dev-Cpp 2007-06-18 21:16 <REP> d-------- C:\Dev-Cpp 2007-06-18 20:55 <REP> d-------- C:\Program Files\Fichiers communs\Agnitum Shared 2007-06-18 20:33 <REP> d-------- C:\DOCUME~1\LOCALS~1\Bureau 2007-06-18 20:32 <REP> d---s---- C:\DOCUME~1\LOCALS~1\Favoris 2007-06-18 20:25 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat 2007-06-18 20:24 <REP> d-------- C:\WINDOWS\Internet Logs 2007-06-18 19:18 <REP> d-------- C:\Program Files\Microsoft Games 2007-06-18 19:15 <REP> d-------- C:\Program Files\Windows Live 2007-06-18 18:03 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google 2007-06-18 17:57 <REP> d-------- C:\Program Files\Mu~Intensity 2007-06-13 09:34 <REP> drahs---- C:\autorun.inf 2007-05-29 16:52 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll 2007-05-29 16:52 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll 2007-05-29 16:52 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2007-05-29 16:36 <REP> d-------- C:\DOCUME~1\HERWAN~1\APPLIC~1\Hamachi 2007-05-29 16:35 25,544 --a------ C:\WINDOWS\system32\drivers\hamachi.sys 2007-05-29 16:35 <REP> d-------- C:\Program Files\Hamachi 2007-05-29 13:47 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy 2007-05-28 11:06 <REP> d-------- C:\DOCUME~1\HERWAN~1\APPLIC~1\dvdcss 2007-05-26 18:13 <REP> d-------- C:\Program Files\DAEMON Tools 2007-05-24 13:22 796,672 --a------ C:\WINDOWS\GPInstall.exe (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-06-19 10:44:04 -------- d--h--w C:\Program Files\InstallShield Installation Information 2007-06-19 06:16:44 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\BitTorrent 2007-06-18 17:15:38 -------- d-----w C:\Program Files\Messenger Plus! Live 2007-06-18 17:15:37 -------- d-----w C:\Program Files\MSN Messenger 2007-06-18 16:07:37 -------- d-----w C:\Program Files\Google 2007-06-18 15:57:32 -------- d-----w C:\Program Files\Mu~Intensity_S2 2007-06-17 19:33:21 -------- d-----w C:\Program Files\ElcomSoft 2007-06-17 19:32:54 -------- d-----w C:\Program Files\TrackMania Nations ESWC 2007-06-16 15:25:23 -------- d-----w C:\Program Files\JkDefrag 2007-06-14 11:53:31 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\ArcSoft 2007-06-13 15:57:36 -------- d-----w C:\Program Files\Valve Lan 2007-06-13 15:57:17 74,630 ----a-w C:\WINDOWS\system32\perfc00C.dat 2007-06-13 15:57:17 466,974 ----a-w C:\WINDOWS\system32\perfh00C.dat 2007-06-13 07:25:33 -------- d-----w C:\Program Files\TrackMania United 2007-05-27 16:15:48 976 ----a-w C:\WINDOWS\eReg.dat 2007-05-27 16:11:56 -------- d-----w C:\Program Files\EA Games 2007-05-26 16:18:23 -------- d-----w C:\Program Files\TrackMania Sunrise 2007-05-26 15:47:40 -------- d-----w C:\Program Files\Fichiers communs\Ahead 2007-05-09 13:29:11 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\Google 2007-05-09 13:28:13 -------- d-----w C:\Program Files\Fichiers communs\ArcSoft 2007-05-09 13:28:11 -------- d-----w C:\Program Files\My Book 2007-05-09 13:27:47 339,968 ----a-w C:\WINDOWS\system32\WDBtnMgr.exe 2007-05-08 17:20:20 -------- d-----w C:\Program Files\DivX 2007-05-08 16:21:36 -------- d-----w C:\Program Files\TrackMania 2007-05-06 14:03:19 682,232 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-04-30 18:10:42 -------- d-----w C:\Program Files\Sony Corporation 2007-04-30 17:16:04 284 ----a-w C:\DOCUME~1\HERWAN~1\APPLIC~1\ViewerApp.dat 2007-04-30 17:00:45 50 --sha-w C:\AUTOEXEC.BAT 2007-04-30 15:46:10 745,600 ----a-w C:\WINDOWS\system32\aswBoot.exe 2007-04-30 15:41:55 85,952 -c--a-w C:\WINDOWS\system32\drivers\aswmon.sys 2007-04-30 15:41:42 94,552 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2007-04-30 15:39:41 23,416 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2007-04-30 15:38:51 43,176 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2007-04-30 15:37:23 26,888 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2007-04-30 15:35:28 95,872 ----a-w C:\WINDOWS\system32\AVASTSS.scr 2007-04-28 09:53:28 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\teamspeak2 2007-04-27 11:50:00 -------- d-----w C:\Program Files\HardwareDetection 2007-04-26 08:21:34 72,624 ----a-w C:\WINDOWS\system32\drivers\khips.sys 2007-04-26 08:21:30 302,000 ----a-w C:\WINDOWS\system32\drivers\fwdrv.sys 2007-04-24 09:15:09 -------- d-----w C:\Program Files\eEye Digital Security 2007-04-24 09:14:51 -------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2007-04-22 09:56:43 -------- d-----w C:\Program Files\Microsoft FrontPage Express 2007-04-21 14:30:28 -------- d-----w C:\Program Files\Wolfenstein - Enemy Territory 2007-04-20 23:58:10 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\BitDownload 2007-04-03 11:57:32 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-04-01 21:11:15 71,744 ----a-w C:\DOCUME~1\HERWAN~1\APPLIC~1\GDIPFONTCACHEV1.DAT 2007-03-30 06:48:10 50,808 ----a-w C:\WINDOWS\system32\anifix1.dll 2005-05-13 16:12:00 217,073 --sha-r C:\WINDOWS\meta4.exe 2005-10-24 10:13:58 66,560 --sha-r C:\WINDOWS\MOTA113.exe 2005-10-13 20:27:00 422,400 --sha-r C:\WINDOWS\x2.64.exe 2005-10-07 18:14:52 308,224 --sha-r C:\WINDOWS\system32\avisynth.dll 2005-07-14 11:31:20 27,648 --sha-r C:\WINDOWS\system32\AVSredirect.dll 2005-06-26 14:32:28 616,448 --sha-r C:\WINDOWS\system32\cygwin1.dll 2005-06-21 21:37:42 45,568 --sha-r C:\WINDOWS\system32\cygz.dll 2004-01-24 23:00:00 70,656 --sha-r C:\WINDOWS\system32\i420vfw.dll 2006-04-27 09:24:24 2,945,024 --sha-r C:\WINDOWS\system32\Smab.dll 2005-02-28 12:16:22 240,128 --sha-r C:\WINDOWS\system32\x.264.exe 2004-01-24 23:00:00 70,656 --sha-r C:\WINDOWS\system32\yv12vfw.dll ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 02:56] {53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04] {9030D464-4C02-4ABF-8ECC-5164760863C6}=C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-07-07 13:29] {AA58ED58-01DD-4d91-8333-CF10577473F7}=c:\program files\google\googletoolbar2.dll [2007-01-19 23:56] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="C:\Program Files\Apoint\Apoint.exe" [2003-11-07 10:21] "RTHDCPL"="RTHDCPL.EXE" [2005-06-29 06:25 C:\WINDOWS\RTHDCPL.EXE] "AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2005-04-29 07:56] "Mouse Suite 98 Daemon"="ICO.EXE" [2002-03-14 17:46 C:\WINDOWS\system32\ico.exe] "ISBMgr.exe"="C:\Program Files\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 15:12] "CloneCDTray"="C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" [2006-09-28 21:21] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 17:42] "WD Button Manager"="WDBtnMgr.exe" [2007-05-09 15:27 C:\WINDOWS\system32\WDBtnMgr.exe] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SuperCopier2.exe"="C:\Program Files\SuperCopier2\SuperCopier2.exe" [2006-07-07 18:45] "ccleaner"="C:\Program Files\CCleaner\ccleaner.exe" [2007-01-29 18:34] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 10:59] "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55] "eMuleAutoStart"="D:\eMule\eMule.exe" [2006-09-14 16:15] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon] VESWinlogon.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "appinit_dlls"=anifix1.dll [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" /background "eMuleAutoStart"=D:\eMule\eMule.exe -AutoStart [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "SonyPowerCfg"=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe "WD Button Manager"=WDBtnMgr.exe "NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 "Acrobat Assistant 7.0"="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - netsvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\S] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{14daba8c-d3be-11db-a1bc-0016ce137a70}] Auto\command- G:\tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{16c3b3ea-0856-11dc-a208-0016ce137a70}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{176b66e3-1741-11dc-a225-ef002c6e84d0}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{36baa6ab-1974-11dc-a22b-c764f33e74d2}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{36de3fa5-e29a-11db-a1d2-b3a9519f44d3}] Auto\command- G:\tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3a120065-d936-11db-a1c3-c3810f7589dc}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{69502562-d9fd-11db-a1c5-e8abc5b275d1}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6f26a533-db84-11db-a1c7-001060d12b93}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6f33e219-d487-11db-a1bf-0016ce137a70}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{77b3091e-d3fe-11db-a1bd-001060d12b93}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{78493500-df7d-11db-a1cb-af74580586d3}] Auto\command- G:\tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8d06f086-0f49-11dc-a217-0016ce137a70}] Auto\command- H:\tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9089d99d-e033-11db-a1cc-fc4a053b29d2}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9089d9b1-e033-11db-a1cc-fc4a053b29d2}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a1e84cde-c426-11db-a187-0016ce137a70}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2ef1dfc-e0e0-11db-a1cd-901196d4a3dd}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aaeec51b-091c-11dc-a20a-0016ce137a70}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aaeec51d-091c-11dc-a20a-0016ce137a70}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c66fb02c-180b-11dc-a227-83f6cdef18dc}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da6e1dd8-d15d-11db-a1b7-0016ce137a70}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f836734f-1d0a-11dc-a234-0016ce137a70}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe Contents of the 'Scheduled Tasks' folder 2007-06-15 15:15:00 C:\WINDOWS\tasks\Maintenance en 1 clic.job ************************************************************************** catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-06-20 22:36:02 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\(VFILT)] Completion time: 2007-06-20 22:38:16 C:\ComboFix2.txt ... 2007-06-20 13:39 --- E O F --- -
analyse de rapport hijackthis
toutclic a répondu à un(e) sujet de toutclic dans Analyses et éradication malwares
tel.xls.exe remover -
analyse de rapport hijackthis
toutclic a répondu à un(e) sujet de toutclic dans Analyses et éradication malwares
j'ai telecharger un desinfectant et tout les effets de tel.xls.exe sont parti -
analyse de rapport hijackthis
toutclic a répondu à un(e) sujet de toutclic dans Analyses et éradication malwares
ya qqu pour me repondre sil vous plait merci -
analyse de rapport hijackthis
toutclic a répondu à un(e) sujet de toutclic dans Analyses et éradication malwares
ComboFix 07-06-18.2 - C:\Documents and Settings\Herwan BOUDRA\Bureau\ComboFix.exe "Herwan BOUDRA" - 2007-06-20 13:31:46 - Service Pack 2 NTFS ((((((((((((((((((((((((( Files Created from 2007-05-20 to 2007-06-20 ))))))))))))))))))))))))))))))) 2007-06-20 13:30 49,152 --a------ C:\WINDOWS\nircmd.exe 2007-06-19 20:50 2,404,352 --a------ C:\Program Files\haloce.exe 2007-06-19 20:42 <REP> d-------- C:\Program Files\Fichiers communs\logishrd 2007-06-19 12:47 36,864 --a------ C:\WINDOWS\system32\EGameEncrypt.dll 2007-06-19 10:19 <REP> d-------- C:\Program Files\AMPED 2007-06-18 21:17 <REP> d-------- C:\DOCUME~1\HERWAN~1\APPLIC~1\Dev-Cpp 2007-06-18 21:16 <REP> d-------- C:\Dev-Cpp 2007-06-18 20:55 <REP> d-------- C:\Program Files\Fichiers communs\Agnitum Shared 2007-06-18 20:33 <REP> d-------- C:\DOCUME~1\LOCALS~1\Bureau 2007-06-18 20:32 <REP> d---s---- C:\DOCUME~1\LOCALS~1\Favoris 2007-06-18 20:25 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat 2007-06-18 20:24 <REP> d-------- C:\WINDOWS\Internet Logs 2007-06-18 19:18 <REP> d-------- C:\Program Files\Microsoft Games 2007-06-18 19:15 <REP> d-------- C:\Program Files\Windows Live 2007-06-18 18:03 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google 2007-06-18 17:57 <REP> d-------- C:\Program Files\Mu~Intensity 2007-06-13 09:34 26,112 --a------ C:\WINDOWS\system32\nircmd.exe 2007-06-13 09:34 <REP> drahs---- C:\autorun.inf 2007-05-29 16:52 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll 2007-05-29 16:52 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll 2007-05-29 16:52 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2007-05-29 16:36 <REP> d-------- C:\DOCUME~1\HERWAN~1\APPLIC~1\Hamachi 2007-05-29 16:35 25,544 --a------ C:\WINDOWS\system32\drivers\hamachi.sys 2007-05-29 16:35 <REP> d-------- C:\Program Files\Hamachi 2007-05-29 13:47 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy 2007-05-28 11:06 <REP> d-------- C:\DOCUME~1\HERWAN~1\APPLIC~1\dvdcss 2007-05-26 18:13 <REP> d-------- C:\Program Files\DAEMON Tools 2007-05-24 13:22 796,672 --a------ C:\WINDOWS\GPInstall.exe (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-06-19 10:44:04 -------- d--h--w C:\Program Files\InstallShield Installation Information 2007-06-19 06:16:44 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\BitTorrent 2007-06-18 17:15:38 -------- d-----w C:\Program Files\Messenger Plus! Live 2007-06-18 17:15:37 -------- d-----w C:\Program Files\MSN Messenger 2007-06-18 16:07:37 -------- d-----w C:\Program Files\Google 2007-06-18 15:57:32 -------- d-----w C:\Program Files\Mu~Intensity_S2 2007-06-17 19:33:21 -------- d-----w C:\Program Files\ElcomSoft 2007-06-17 19:32:54 -------- d-----w C:\Program Files\TrackMania Nations ESWC 2007-06-16 15:25:23 -------- d-----w C:\Program Files\JkDefrag 2007-06-14 11:53:31 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\ArcSoft 2007-06-13 15:57:36 -------- d-----w C:\Program Files\Valve Lan 2007-06-13 15:57:17 74,630 ----a-w C:\WINDOWS\system32\perfc00C.dat 2007-06-13 15:57:17 466,974 ----a-w C:\WINDOWS\system32\perfh00C.dat 2007-06-13 07:25:33 -------- d-----w C:\Program Files\TrackMania United 2007-05-27 16:15:48 976 ----a-w C:\WINDOWS\eReg.dat 2007-05-27 16:11:56 -------- d-----w C:\Program Files\EA Games 2007-05-26 16:18:23 -------- d-----w C:\Program Files\TrackMania Sunrise 2007-05-26 15:47:40 -------- d-----w C:\Program Files\Fichiers communs\Ahead 2007-05-09 13:29:11 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\Google 2007-05-09 13:28:13 -------- d-----w C:\Program Files\Fichiers communs\ArcSoft 2007-05-09 13:28:11 -------- d-----w C:\Program Files\My Book 2007-05-09 13:27:47 339,968 ----a-w C:\WINDOWS\system32\WDBtnMgr.exe 2007-05-08 17:20:20 -------- d-----w C:\Program Files\DivX 2007-05-08 16:21:36 -------- d-----w C:\Program Files\TrackMania 2007-05-06 14:03:19 682,232 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-04-30 18:10:42 -------- d-----w C:\Program Files\Sony Corporation 2007-04-30 17:16:04 284 ----a-w C:\DOCUME~1\HERWAN~1\APPLIC~1\ViewerApp.dat 2007-04-30 17:00:45 50 --sha-w C:\AUTOEXEC.BAT 2007-04-30 15:46:10 745,600 ----a-w C:\WINDOWS\system32\aswBoot.exe 2007-04-30 15:41:55 85,952 -c--a-w C:\WINDOWS\system32\drivers\aswmon.sys 2007-04-30 15:41:42 94,552 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys 2007-04-30 15:39:41 23,416 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys 2007-04-30 15:38:51 43,176 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys 2007-04-30 15:37:23 26,888 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys 2007-04-30 15:35:28 95,872 ----a-w C:\WINDOWS\system32\AVASTSS.scr 2007-04-28 09:53:28 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\teamspeak2 2007-04-27 11:50:00 -------- d-----w C:\Program Files\HardwareDetection 2007-04-26 08:21:34 72,624 ----a-w C:\WINDOWS\system32\drivers\khips.sys 2007-04-26 08:21:30 302,000 ----a-w C:\WINDOWS\system32\drivers\fwdrv.sys 2007-04-24 09:15:09 -------- d-----w C:\Program Files\eEye Digital Security 2007-04-24 09:14:51 -------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2007-04-22 09:56:43 -------- d-----w C:\Program Files\Microsoft FrontPage Express 2007-04-21 14:30:28 -------- d-----w C:\Program Files\Wolfenstein - Enemy Territory 2007-04-20 23:58:10 -------- d-----w C:\DOCUME~1\HERWAN~1\APPLIC~1\BitDownload 2007-04-03 11:57:32 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-04-01 21:11:15 71,744 ----a-w C:\DOCUME~1\HERWAN~1\APPLIC~1\GDIPFONTCACHEV1.DAT 2007-03-30 06:48:10 50,808 ----a-w C:\WINDOWS\system32\anifix1.dll 2005-05-13 16:12:00 217,073 --sha-r C:\WINDOWS\meta4.exe 2005-10-24 10:13:58 66,560 --sha-r C:\WINDOWS\MOTA113.exe 2005-10-13 20:27:00 422,400 --sha-r C:\WINDOWS\x2.64.exe 2005-10-07 18:14:52 308,224 --sha-r C:\WINDOWS\system32\avisynth.dll 2005-07-14 11:31:20 27,648 --sha-r C:\WINDOWS\system32\AVSredirect.dll 2005-06-26 14:32:28 616,448 --sha-r C:\WINDOWS\system32\cygwin1.dll 2005-06-21 21:37:42 45,568 --sha-r C:\WINDOWS\system32\cygz.dll 2004-01-24 23:00:00 70,656 --sha-r C:\WINDOWS\system32\i420vfw.dll 2006-04-27 09:24:24 2,945,024 --sha-r C:\WINDOWS\system32\Smab.dll 2005-02-28 12:16:22 240,128 --sha-r C:\WINDOWS\system32\x.264.exe 2004-01-24 23:00:00 70,656 --sha-r C:\WINDOWS\system32\yv12vfw.dll ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 02:56] {53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04] {9030D464-4C02-4ABF-8ECC-5164760863C6}=C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-07-07 13:29] {AA58ED58-01DD-4d91-8333-CF10577473F7}=c:\program files\google\googletoolbar2.dll [2007-01-19 23:56] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="C:\Program Files\Apoint\Apoint.exe" [2003-11-07 10:21] "RTHDCPL"="RTHDCPL.EXE" [2005-06-29 06:25 C:\WINDOWS\RTHDCPL.EXE] "AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2005-04-29 07:56] "Mouse Suite 98 Daemon"="ICO.EXE" [2002-03-14 17:46 C:\WINDOWS\system32\ico.exe] "ISBMgr.exe"="C:\Program Files\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 15:12] "CloneCDTray"="C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" [2006-09-28 21:21] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-04-30 17:42] "WD Button Manager"="WDBtnMgr.exe" [2007-05-09 15:27 C:\WINDOWS\system32\WDBtnMgr.exe] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SuperCopier2.exe"="C:\Program Files\SuperCopier2\SuperCopier2.exe" [2006-07-07 18:45] "ccleaner"="C:\Program Files\CCleaner\ccleaner.exe" [2007-01-29 18:34] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 10:59] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-06-18 18:03] "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55] "eMuleAutoStart"="D:\eMule\eMule.exe" [2006-09-14 16:15] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon] VESWinlogon.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "appinit_dlls"=anifix1.dll [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" /background "eMuleAutoStart"=D:\eMule\eMule.exe -AutoStart [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "SonyPowerCfg"=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe "WD Button Manager"=WDBtnMgr.exe "NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 "Acrobat Assistant 7.0"="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - netsvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\S] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{14daba8c-d3be-11db-a1bc-0016ce137a70}] Auto\command- G:\tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{16c3b3ea-0856-11dc-a208-0016ce137a70}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{176b66e3-1741-11dc-a225-ef002c6e84d0}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{36baa6ab-1974-11dc-a22b-c764f33e74d2}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{36de3fa5-e29a-11db-a1d2-b3a9519f44d3}] Auto\command- G:\tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3a120065-d936-11db-a1c3-c3810f7589dc}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{69502562-d9fd-11db-a1c5-e8abc5b275d1}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6f26a533-db84-11db-a1c7-001060d12b93}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6f33e219-d487-11db-a1bf-0016ce137a70}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{77b3091e-d3fe-11db-a1bd-001060d12b93}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{78493500-df7d-11db-a1cb-af74580586d3}] Auto\command- G:\tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8d06f086-0f49-11dc-a217-0016ce137a70}] Auto\command- H:\tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9089d99d-e033-11db-a1cc-fc4a053b29d2}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9089d9b1-e033-11db-a1cc-fc4a053b29d2}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2ef1dfc-e0e0-11db-a1cd-901196d4a3dd}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aaeec51b-091c-11dc-a20a-0016ce137a70}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aaeec51d-091c-11dc-a20a-0016ce137a70}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c66fb02c-180b-11dc-a227-83f6cdef18dc}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da6e1dd8-d15d-11db-a1b7-0016ce137a70}] AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f836734f-1d0a-11dc-a234-0016ce137a70}] Auto\command- tel.xls.exe AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL tel.xls.exe Contents of the 'Scheduled Tasks' folder 2007-06-15 15:15:00 C:\WINDOWS\tasks\Maintenance en 1 clic.job ************************************************************************** catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-06-20 13:36:52 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\(VFILT)] Completion time: 2007-06-20 13:39:22 --- E O F --- si vous voyez tel.xls.exe c'est un virus que j'ai supprimé il ya longtemps avec un patch pareil pour MS32DLL -
analyse de rapport hijackthis
toutclic a répondu à un(e) sujet de toutclic dans Analyses et éradication malwares
merci pour ta reponse voici les resultats Datei: anifix1.dll Auslastung: 0% 100% Status: OK Entdeckte Packprogramme: - Bit9 rapportiert: File not found A-Squared Keine Viren gefunden AntiVir Keine Viren gefunden ArcaVir Keine Viren gefunden Avast Keine Viren gefunden AVG Antivirus Keine Viren gefunden BitDefender Keine Viren gefunden ClamAV Keine Viren gefunden Dr.Web Keine Viren gefunden F-Prot Antivirus Keine Viren gefunden F-Secure Anti-Virus Keine Viren gefunden Fortinet Keine Viren gefunden Kaspersky Anti-Virus Keine Viren gefunden NOD32 Keine Viren gefunden Norman Virus Control Keine Viren gefunden Panda Antivirus Keine Viren gefunden Rising Antivirus Keine Viren gefunden VirusBuster Keine Viren gefunden VBA32 Keine Viren gefunden -
Bonjour petit embetement quotidien qui ralentissent le PC Logfile of HijackThis v1.99.1 Scan saved at 13:04:44, on 20/06/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Unable to get Internet Explorer version! Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Apoint\Apoint.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\ICO.EXE C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Sony\ISB Utility\ISBMgr.exe C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\WDBtnMgr.exe C:\Program Files\SuperCopier2\SuperCopier2.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe C:\Program Files\MSN Messenger\msnmsgr.exe D:\eMule\eMule.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe D:\telecharger\autre\tclocklight-040702-3\tclock.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Sony\VAIO Event Service\VESMgr.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe C:\WINDOWS\system32\igfxext.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\igfxsrvc.exe C:\Program Files\Windows Media Player\WMPNetwk.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe C:\Program Files\Hamachi\hamachi.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Herwan BOUDRA\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.club-vaio.com/fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com/fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [iSBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe O4 - HKCU\..\Run: [superCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [eMuleAutoStart] D:\eMule\eMule.exe -AutoStart O4 - Startup: Hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe O4 - Startup: Raccourci vers tclock.lnk = D:\telecharger\autre\tclocklight-040702-3\tclock.exe O4 - Global Startup: Bluetooth Manager.lnk = ? O4 - Global Startup: eEye Windows Animated Cursor Patch Checker.lnk = C:\Program Files\eEye Digital Security\Windows .ANI Zero-Day Patch\anipatchchecker.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/ O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{E7C8F215-869D-4BC1-8F36-C8CDBA2C975C}: NameServer = 192.168.1.1 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - AppInit_DLLs: anifix1.dll O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O20 - Winlogon Notify: VESWinlogon - C:\WINDOWS\SYSTEM32\VESWinlogon.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing) O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing)
-
je ne vois plus mes curseur animé help me plz Merci
-
je travail sur un plan plat et la ventillation ce fait par derriere en bas tout est bouchée a part quelque petite ouverture et non sa ne vient pas du rechauffement climatique :P Mais sinon le Bip c'est arrete sa veut dire que c'etait pour me prevenir que la temperature etait trop haute merci pour vos reponse @+
-
non la sa c'est c'est arreter depuis que la temperature est descendu
-
ben sa vient d'ou cet hausse soudaine de temperature