M A

Bonjour, je n'y connais absolument rien en informatique et je reçois une fenêtre intempestive depuis trois jours message : Exception Processing Message c0000013 Parameters 75 afbf7c 4 75 afbf7c 75 afbf7c Pouvez-vous m'aider s'il-vous-plait? J'ai fait un scan (je crois) avec ComboFix et voici son rapport : Merci par avance pour vos réponses ComboFix 08-10-08.05 - emma 2008-10-09 17:28:07.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.487 [GMT 2:00] Lancé depuis: C:\Program Files\ComboFix.exe * Un nouveau point de restauration a été créé AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\emma\Application Data\setup_fr[1].exe . ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-09 au 2008-10-09 )))))))))))))))))))))))))))))))))))) . 2008-10-09 17:23 . 2008-10-09 17:26 2,939,457 -ra------ C:\Program Files\ComboFix.exe 2008-10-09 17:13 . 2008-10-09 17:13 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion 2008-10-09 16:48 . 2008-10-09 16:48 <REP> d-------- C:\Program Files\Avira 2008-10-09 16:48 . 2008-10-09 16:48 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-10-09 16:43 . 2008-10-09 16:46 25,085,704 --a------ C:\Program Files\antivir_workstation_winu_en_h.exe 2008-10-09 11:31 . 2008-10-09 11:31 <REP> d-------- C:\Program Files\CCleaner 2008-10-09 11:29 . 2008-10-09 11:29 2,934,168 --a------ C:\Program Files\ccsetup212.exe 2008-10-09 10:24 . 2008-10-09 10:24 <REP> d-------- C:\WINDOWS\system32\fr 2008-10-09 10:24 . 2008-10-09 10:24 <REP> d-------- C:\WINDOWS\system32\bits 2008-10-09 10:24 . 2008-10-09 10:24 <REP> d-------- C:\WINDOWS\l2schemas 2008-10-09 10:20 . 2008-10-09 10:24 <REP> d-------- C:\WINDOWS\ServicePackFiles 2008-10-09 10:14 . 2008-10-09 10:14 <REP> d-------- C:\WINDOWS\EHome 2008-10-02 17:29 . 2008-06-11 20:25 1,743,360 -r-hs---- C:\WINDOWS\game.exe 2008-09-23 15:39 . 2008-09-23 15:39 <REP> d--h----- C:\Documents and Settings\All Users\Application Data\CanonBJ 2008-09-16 23:27 . 2008-09-16 23:37 <REP> d-------- C:\Documents and Settings\daniel\Application Data\Babylon 2008-09-16 16:31 . 2004-07-17 22:55 129,045 --------- C:\WINDOWS\system32\drivers\cxthsfs2.cty . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-09 09:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-09 09:31 --------- d-----w C:\Program Files\Yahoo! 2008-09-18 22:55 --------- d-----w C:\Documents and Settings\emma\Application Data\FileZilla 2008-09-16 19:17 --------- d-----w C:\Documents and Settings\LocalService\Application Data\Sony Corporation 2008-09-12 08:03 --------- d-----w C:\Documents and Settings\emma\Application Data\Roxio 2008-09-05 10:59 7,730,856 ----a-w C:\Program Files\Google_Earth_CZXD.exe 2008-08-29 08:24 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll 2008-07-17 13:33 7,730,856 ----a-w C:\Google_Earth_CZXV.exe 2008-07-17 13:32 7,730,856 ----a-w C:\Google_Earth_CZXD.exe 2008-07-15 10:24 5,170,176 -c--a-w C:\Program Files\WindowsDefender.msi 2008-03-03 09:27 134 -c--a-w C:\Documents and Settings\emma\Application Data\wklnhst.dat 2007-03-04 17:14 418 -c--a-w C:\Documents and Settings\daniel\Application Data\wklnhst.dat 2006-02-17 21:11 11,817,800 -c--a-w C:\Program Files\GoogleEarth.exe 1999-04-16 09:28 151,552 -c--a-w C:\WINDOWS\inf\Agfa\message.exe 2008-06-11 18:25 1,743,360 --sh--r C:\WINDOWS\game.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2008-04-14 1695232] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-06 68856] "googletalk"="C:\Program Files\Google\Google Talk\googletalk.exe" [2007-04-19 3297280] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 2097488] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Hcontrol"="C:\WINDOWS\ATK0100\Hcontrol.exe" [2004-07-19 61440] "Apoint"="C:\Program Files\Apoint\Apoint.exe" [2003-11-07 114688] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 344064] "AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2005-02-14 53248] "SonyPowerCfg"="C:\Program Files\Sony\VAIO Power Management\SPMgr.exe" [2005-05-15 184320] "ISBMgr.exe"="C:\Program Files\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 32768] "Switcher.exe"="C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe" [2005-01-20 167936] "VAIO Update 2"="C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" [2005-01-14 151552] "PDService.exe"="C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe" [2004-07-06 40960] "RoxioEngineUtility"="C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe" [2003-05-01 65536] "RoxioDragToDisc"="C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe" [2004-01-09 868352] "StatusClient 2.5"="C:\Program Files\Hewlett-Packard\Toolbox\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe" [2003-10-01 61440] "TomcatStartup 2.5"="C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe" [2003-06-10 155648] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 286720] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-09-14 267064] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497] "Mouse Suite 98 Daemon"="ICO.EXE" [2002-03-14 C:\WINDOWS\system32\ico.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360] "DWQueuedReporting"="C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 39264] C:\Documents and Settings\emma\Menu D‚marrer\Programmes\D‚marrage\ Outil de d‚tection de support de Cyber-shot Viewer.lnk - C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2006-09-21 155648] Programme de d‚marrage du Mode automatique Click to DVD.lnk - C:\Program Files\Sony\Click to DVD 2\ctdatsvr.exe [2005-12-06 86016] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2004-10-12 110592] Assistant d'Acrobat.lnk - C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe [2003-05-15 217193] Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2005-06-21 491520] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon] 2005-05-20 17:42 73728 C:\WINDOWS\system32\VESWinlogon.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.dvsd"= C:\PROGRA~1\FICHIE~1\SONYSH~1\VideoLib\sonydv.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Yahoo!\\Messenger\\YPager.exe"= "C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"= "C:\\Program Files\\Skype\\Phone\\Skype.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\Hewlett-Packard\\Toolbox\\jre\\bin\\javaw.exe"= "C:\\Program Files\\Google\\Google Talk\\googletalk.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= R1 PrivateDisk;PrivateDisk;C:\WINDOWS\system32\Drivers\PrivateDiskM.sys [2004-07-06 45627] R2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB;C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe [2002-12-17 7520337] R3 SPI;Sony Programmable I/O Control Device;C:\WINDOWS\system32\DRIVERS\SonyPI.sys [2002-08-20 71961] S3 Image Converter video recording monitor for VAIO Entertainment;Image Converter video recording monitor for VAIO Entertainment;C:\Program Files\Sony\Image Converter 2\IcVzMon.exe [2005-04-05 32768] S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 20096] S3 pelmouse;Mouse Suite Driver;C:\WINDOWS\system32\DRIVERS\pelmouse.sys [2002-06-28 17251] S3 pelusblf;USB Mouse Low Filter Driver;C:\WINDOWS\system32\DRIVERS\pelusblf.sys [2001-07-24 7520] S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB;C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE [2002-12-17 311872] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{347667da-7e28-11dc-9ecb-00014af97afd}] \Shell\AutoRun\command - wd_windows_tools\setup.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4c9c6165-1a6f-11dc-9e6a-00014af97afd}] \Shell\AutoRun\command - G:\LaunchU3.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{92e167f8-9ba9-11da-9ce5-00014af97afd}] \Shell\AutoRun\command - 3o.exe \Shell\explore\Command - 3o.exe \Shell\open\Command - 3o.exe *Newly Created Service* - ANTIVIRSCHEDULER *Newly Created Service* - ANTIVIRSERVICE *Newly Created Service* - AVGIO *Newly Created Service* - AVGNTFLT *Newly Created Service* - AVIPBB *Newly Created Service* - PROCEXP90 . Contenu du dossier 'Tâches planifiées' 2008-06-30 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57] 2008-10-09 C:\WINDOWS\Tasks\MP Scheduled Scan.job - C:\Program Files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20] 2008-10-09 C:\WINDOWS\Tasks\Symantec NetDetect.job - C:\Program Files\Symantec\LiveUpdate\NDetect.exe [] . - - - - ORPHELINS SUPPRIMES - - - - HKLM-Run-Device Detector - DevDetect.exe . ------- Examen supplémentaire ------- . FireFox -: Profile - C:\Documents and Settings\emma\Application Data\Mozilla\Firefox\Profiles\367g4j1j.default\ FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_03\bin\NPJava11.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_03\bin\NPJava12.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_03\bin\NPJava13.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_03\bin\NPJava14.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_03\bin\NPJava32.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_03\bin\NPJPI150_03.dll FF -: plugin - C:\Program Files\Java\jre1.5.0_03\bin\NPOJI610.dll FF -: plugin - C:\Program Files\Yahoo!\Common\npyaxmpb.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-09 17:32:23 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . Heure de fin: 2008-10-09 17:34:46 ComboFix-quarantined-files.txt 2008-10-09 15:34:09 Avant-CF: 9 300 713 472 octets libres Après-CF: 9,605,128,192 octets libres