Bonjour,
lorsque j'ai utilisé Combo-fix, on me dit d'envoyer le rapport à un forum. Le voici donc. Je suis un réel dinosaure en informatique, je n'y connais pas grand chose. Alors voici donc le rapport. Je ne sais pas quoi faire par la suite.
ComboFix 08-08-03.05 - client 2008-08-04 9:27:53.2 - FAT32x86
Microsoft Windows 2000 Professionnel 5.0.2195.4.1252.33.1036.18.51 [GMT -4:00]
Endroit: C:\Documents and Settings\client\Bureau\ComboFix.exe
AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\License Agreement.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\Register Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Antivirus XP 2008\Uninstall.lnk
C:\Documents and Settings\client\Application Data\rhcvonj0e91a
C:\Program Files\rhcvonj0e91a
C:\WINNT\system32\blphcronj0e91a.scr
C:\WINNT\system32\lphcronj0e91a.exe
C:\WINNT\system32\phcronj0e91a.bmp
C:\WINNT\system32\pphcronj0e91a.exe
C:\WINNT\t.exe
.
---- Previous Run -------
.
C:\WINNT\Downloaded Program Files\setup.inf
C:\WINNT\Web\default.htt
.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-07-04 to 2008-08-04 ))))))))))))))))))))))))))))))))))))
.
2008-08-04 09:31 . 08-08-04 09:31 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_c4.dat
2008-08-04 08:59 . 08-08-04 08:59 <DIR> d-------- C:\Program Files\Trend Micro
2008-07-09 12:54 . 08-07-09 12:54 <DIR> d-------- C:\Documents and Settings\client\Application Data\LANCITE
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-22 18:52 447 ----a-w C:\Program Files\INSTALL.LOG
2008-07-02 13:04 269,280 ----a-w C:\Program Files\training_FR.zip
2008-07-02 13:03 1,741,983 ----a-w C:\Program Files\wf_553.zip
2008-06-25 09:42 67,344 ----a-w C:\WINNT\system32\mswsock.dll
2008-06-25 09:42 67,344 ------w C:\WINNT\system32\dllcache\mswsock.dll
2008-06-25 09:42 137,488 ----a-w C:\WINNT\system32\dllcache\dnsapi.dll
2008-06-25 09:42 105,744 ----a-w C:\WINNT\system32\msafd.dll
2008-06-25 09:42 105,744 ------w C:\WINNT\system32\dllcache\msafd.dll
2008-06-18 10:05 320,528 ----a-w C:\WINNT\system32\drivers\tcpip.sys
2008-06-18 10:05 320,528 ------w C:\WINNT\system32\dllcache\tcpip.sys
2008-06-13 13:22 119,000 ----a-w C:\WINNT\system32\internat.dll
2008-05-08 08:38 119,152 ------w C:\WINNT\system32\dllcache\afd.sys
2008-05-05 17:48 448,702,592 ----a-w C:\Program Files\X12-30194.exe
2008-05-05 17:48 266,896,720 ----a-w C:\Program Files\X12-69908.exe
2008-04-29 20:59 26,533,888 ----a-w C:\Program Files\qtUpdate_18Apr2008.exe
2008-04-11 19:37 263,192 ----a-w C:\Program Files\setup_fr.exe
2008-02-13 15:00 258,960 ----a-w C:\Program Files\Emoticons.exe
2007-09-11 17:31 18,810,320 ----a-w C:\Program Files\AdbeRdr60_fra_full.exe
2007-08-01 01:37 2,893,200 ----a-w C:\Program Files\Emoticones.exe
2007-07-02 17:38 2,288 ----a-w C:\Program Files\SDK Analyseur Microsoft XML 4.0.lnk
2007-05-30 14:09 154,821,141 ----a-w C:\Program Files\SA_2007ACP1.exe
2007-05-24 14:01 43,055,466 ----a-w C:\Program Files\install-vsps2007-demo.exe
2007-03-12 12:16 1,431,811 ----a-w C:\Program Files\Uninst.isu
2007-03-11 22:57 67,259,232 ----a-w C:\Program Files\PM701Tryout.exe
2007-01-22 14:41 0 ----a-w C:\Program Files\QBInstanceFinder.log
2006-09-20 18:45 540,440 ----a-w C:\Program Files\OWAAdmin.EXE
2006-09-15 18:14 14,405,024 ----a-w C:\Program Files\GoogleEarthWin.exe
2006-09-06 01:22 22,083,376 ----a-w C:\Program Files\QuickTimeInstaller.exe
2006-05-23 14:18 24,278,048 ----a-w C:\Program Files\dotnetfx(2).exe
2006-05-23 14:17 24,278,048 ----a-w C:\Program Files\dotnetfx.exe
2006-05-01 14:30 1,087 ----a-w C:\Program Files\CAVAWNRP.cmd
2006-03-16 16:26 3,906,560 ----a-w C:\Program Files\epson10828.exe
2006-03-16 16:12 5,111,296 ----a-w C:\Program Files\epson10827.exe
2006-01-21 19:03 271 ---h--w C:\Program Files\desktop.ini
2006-01-21 19:03 22,115 ---h--w C:\Program Files\folder.htt
2002-08-02 04:00 32,528 ----a-w C:\WINNT\inf\wbfirdma.sys
2002-05-14 19:09 36,352 ----a-w C:\Program Files\Readme.doc
2002-05-14 18:40 152,125 ----a-w C:\Program Files\Readme.pdf
2002-05-06 17:44 995,383 ----a-w C:\Program Files\mfc42.dll
2002-05-06 17:44 73,728 ----a-w C:\Program Files\InitPM7Bravo.dll
2002-05-06 17:44 69,632 ----a-w C:\Program Files\PM7OPP.dll
2002-05-06 17:44 49,152 ----a-w C:\Program Files\Uninst.dll
2002-05-06 17:44 434,176 ----a-w C:\Program Files\PM7ACE.dll
2002-05-06 17:44 401,462 ----a-w C:\Program Files\MSVCP60.DLL
2002-05-06 17:44 32,768 ----a-w C:\Program Files\PLUGIN.DLL
2002-05-06 17:44 29,772 ----a-w C:\Program Files\©Adobe.txt
2002-05-06 17:44 188,529 ----a-w C:\Program Files\PM7BIB.dll
2002-05-06 17:44 1,781,760 ----a-w C:\Program Files\PM7AGM.dll
2002-05-06 17:44 1,581,056 ----a-w C:\Program Files\PM7PDFL40i.dll
2002-05-06 17:44 1,347,584 ----a-w C:\Program Files\PM7CoolType.dll
1999-04-30 20:00 98,304 ------w C:\Program Files\internet explorer\plugins\UPjpeg.dll
2003-01-13 14:55 282,624 ------w C:\Program Files\internet explorer\plugins\PanoViewer.dll
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.Exe" [07-09-04 23:40 6856704]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [07-09-04 16:43 68856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [08-02-22 04:25 144784]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [06-01-23 10:41 155648]
"Motive SmartBridge"="C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe" [04-10-22 15:44 393216]
"OpwareSE2"="C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [03-05-08 11:00 49152]
"OPSE reminder"="C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" [03-07-07 09:30 729088]
"EPSON Stylus C44 Series"="C:\WINNT\system32\spool\DRIVERS\W32X86\3\E_S09IC1.EXE" [02-12-25 03:00 75776]
"Ink Monitor"="C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe" [02-08-04 22:37 258116]
"Synchronization Manager"="mobsync.exe" [03-06-19 12:05 111888 C:\WINNT\system32\mobsync.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"^SetupICWDesktop"="C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe" [03-06-19 12:05 189712]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"= mmdrv.dll
"msacm.dvacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\Vio\Dvacm.acm
"msacm.MPEGacm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\MPEGacm.acm
"msacm.ulmp3acm"= C:\PROGRA~1\FICHIE~1\ULEADS~1\MPEG\ulmp3acm.acm
"VIDC.JPEG"= JpegCode.dll
"VIDC.MJPG"= JpegCode.dll
R3 ati2mtaa;ati2mtaa;C:\WINNT\system32\DRIVERS\ati2mtaa.sys [01-07-06 13:29 ]
S3 EL90BC;Pilote de carte 3Com EtherLink XL B/C;C:\WINNT\system32\DRIVERS\el90xbc5.sys [02-08-13 21:27 ]
*Newly Created Service* - IPNAT
*Newly Created Service* - RASAUTO
*Newly Created Service* - SHAREDACCESS
.
- - - - ORPHANS REMOVED - - - -
HKLM-Run-lphcronj0e91a - C:\WINNT\system32\lphcronj0e91a.exe
HKLM-Run-SMrhcvonj0e91a - C:\Program Files\rhcvonj0e91a\rhcvonj0e91a.exe
HKLM-Run-StandardInstall - (no file)
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\client\Application Data\Mozilla\Firefox\Profiles\cpfrq7n9.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://sympatico.msn.ca/?mkt=fr-CA
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-04 09:31:35
Windows 5.0.2195 Service Pack 4 FAT NTAPI
Balayage processus cach‚s ...
Balayage cach‚ autostart entries ...
Balayage des fichiers cach‚s ...
Scan termin‚ avec succŠs
Les fichiers cach‚s: 0
**************************************************************************
.
Temps d'accomplissement: 2008-08-04 9:33:38 - machine was rebooted [client]
ComboFix-quarantined-files.txt 2008-08-04 13:33:34
Pre-Run: 8,154,234,880 octets libres
Post-Run: 8,553,267,200 octets libres
143 --- E O F --- 2008-07-09 12:49:08
