Megguy

Bonjour, Ma machine est infectée. S'il vous plaît, qui peut m'interpréter ce rapport ? Merci d'avance. SmitFraudFix v2.424 Rapport fait à 23:33:10,76, 29/08/2011 Executé à partir de C:\Documents and Settings\Pc de Haman\Mes documents\Downloads\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Le type du système de fichiers est NTFS Fix executé en mode sans echec »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus »»»»»»»»»»»»»»»»»»»»»»»» hosts 127.0.0.1 localhost »»»»»»»»»»»»»»»»»»»»»»»» VACFix VACFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix S!Ri's WS2Fix: LSP not Found. »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix GenericRenosFix by S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés »»»»»»»»»»»»»»»»»»»»»»»» IEDFix IEDFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix Agent.OMZ.Fix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» 404Fix 404Fix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» RK »»»»»»»»»»»»»»»»»»»»»»»» DNS »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! "System"="" »»»»»»»»»»»»»»»»»»»»»»»» RK.2 »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre Nettoyage terminé. »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Fin

Bonjour, Voici le rapport que je viens d'avoir après l'analyse de mon PC par le logiciel Combofix. Quelqu'un peut-il m'aider? Merci. Le voici: ComboFix 09-07-02.03 - IBM 03/07/2009 20:01.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.503.288 [GMT 1:00] Lancé depuis: c:documents and settingsIBMBureauComboFix.exe AV: Norton AntiVirus *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8} FW: Norton AntiVirus *enabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E} . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:Autorun.inf c:documents and settingsIBMMes documentsCLIP ART NAPODesktop_.ini C:e2.cmd c:windowsInstaller21a7dd.msi c:windowssystem32_000012_.tmp.dll c:windowssystem32bgotrtu0.dll c:windowssystem32bgotrtu1.dll c:windowssystem32bycool1 c:windowssystem32bycool1windo.exe c:windowssystem32kva8wr.exe c:windowssystem32nmdfgds0.dll c:windowssystem32olhrwef.exe c:windowssystem32uweyiwe0.dll . ((((((((((((((((((((((((((((( Fichiers créés du 2009-06-03 au 2009-07-03 )))))))))))))))))))))))))))))))))))) . 2009-07-03 17:05 . 2009-07-03 18:40 -------- d-----w- c:windowsLastGood 2009-06-30 18:56 . 2009-06-30 18:56 -------- d-----w- c:documents and settingsHomeLocal SettingsApplication DataConduit 2009-06-30 18:56 . 2009-06-30 18:56 -------- d-----w- c:documents and settingsHomeLocal SettingsApplication DataMyPlayCity 2009-06-12 22:20 . 2009-06-13 05:35 -------- d-----w- C:Photo duvois . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-03 19:07 . 2009-04-02 10:02 -------- d-----w- c:documents and settingsIBMApplication DataFree Download Manager 2009-07-03 17:44 . 2009-04-02 10:01 -------- d-----w- c:program filesFree Download Manager 2009-07-03 11:39 . 2000-12-31 23:16 10 -c--a-w- c:windowspopcinfo.dat 2009-07-01 15:55 . 2009-04-17 07:28 -------- d-----w- c:program filesBible 2009-06-13 21:35 . 2001-01-01 00:47 -------- d-----w- c:program filesEphy 2009-06-13 21:19 . 2009-03-15 22:08 -------- d-----w- c:program filesNetExpress 2009-05-15 16:00 . 2009-05-15 16:00 0 ---ha-w- c:documents and settingsHomehpothb07.dat 2009-05-15 15:45 . 2009-05-15 15:45 -------- d-----w- c:documents and settingsHomeApplication DataHewlett-Packard 2009-05-13 23:12 . 2009-03-26 20:27 -------- d-----w- c:documents and settingsIBMApplication DataNokia Multimedia Player 2009-05-11 08:21 . 2009-04-25 22:38 99328 --sh--r- c:windowssystem32uweyiwe1.dll 2009-04-25 15:55 . 2009-02-25 10:24 841112 ----a-w- c:documents and settingsHomeLocal SettingsApplication DataGDIPFONTCACHEV1.DAT 2009-04-22 21:47 . 2009-04-22 21:47 82380 -c--a-w- c:windowssystem32driversAFS2K.SYS 2009-04-22 21:06 . 2009-04-22 21:06 126 -c--a-w- c:documents and settingsIBMLocal SettingsApplication Datafusioncache.dat 2009-04-21 21:53 . 2000-12-31 23:11 841112 ----a-w- c:documents and settingsIBMLocal SettingsApplication DataGDIPFONTCACHEV1.DAT 2009-04-06 21:26 . 2004-08-03 23:54 219648 ----a-w- c:windowssystem32uxtheme.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_LOCAL_MACHINE~Browser Helper Objects{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}] 2009-05-12 13:01 2094104 ----a-w- c:program filesMyPlayCitytbMyPl.dll [HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun] "CTFMON.EXE"="c:windowssystem32ctfmon.exe" [2004-08-03 15360] "Creative Detector"="c:program filesCreativeMediaSourceDetectorCTDetect.exe" [2004-12-02 102400] "Free Download Manager"="c:program filesFree Download Managerfdm.exe" [2005-09-12 1642543] "MSMSGS"="c:program filesMessengermsmsgs.exe" [2004-08-04 1667584] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] "NeroFilterCheck"="c:windowssystem32NeroCheck.exe" [2001-07-09 155648] "IgfxTray"="c:windowssystem32igfxtray.exe" [2005-04-05 94208] "HotKeysCmds"="c:windowssystem32hkcmd.exe" [2005-04-05 77824] "Persistence"="c:windowssystem32igfxpers.exe" [2005-04-05 114688] "ISUSPM Startup"="c:program filesFichiers communsInstallShieldUpdateServiceisuspm.exe" [2005-08-11 249856] "ISUSScheduler"="c:program filesFichiers communsInstallShieldUpdateServiceissch.exe" [2005-08-11 81920] "ccApp"="c:program filesFichiers communsSymantec SharedccApp.exe" [2008-10-17 51048] "osCheck"="c:program filesNorton AntiVirusosCheck.exe" [2007-08-24 714608] "PCSuiteTrayApplication"="c:program filesNokiaNokia PC Suite 6LaunchApplication.exe" [2007-06-18 271360] "Adobe Photo Downloader"="c:program filesAdobePhotoshop Album Edition Découverte3.0Appsapdproxy.exe" [2005-06-23 57344] "Adobe Reader Speed Launcher"="c:program filesAdobeReader 8.0ReaderReader_sl.exe" [2007-05-11 40048] "Sony Ericsson PC Suite"="c:program filesSony EricssonMobile2Application LauncherApplication Launcher.exe" [2007-03-28 593920] "Share-to-Web Namespace Daemon"="c:program filesHewlett-PackardHP Share-to-Webhpgs2wnd.exe" [2002-04-17 69632] "BluetoothAuthenticationAgent"="bthprops.cpl" - c:windowssystem32bthprops.cpl [2004-08-03 110592] [HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun] "CTFMON.EXE"="c:windowssystem32CTFMON.EXE" [2004-08-03 15360] "Nokia.PCSync"="c:program filesNokiaNokia PC Suite 6PcSync2.exe" [2007-06-19 1241088] c:documents and settingsIBMMenu D‚marrerProgrammesD‚marrage Adobe Gamma.lnk - c:program filesFichiers communsAdobeCalibrationAdobe Gamma Loader.exe [2005-3-16 110592] Webshots.lnk - c:documents and settingsIBMBureauWebshotsLauncher.exe [2002-1-1 45056] c:documents and settingsAll UsersMenu D‚marrerProgrammesD‚marrage Acrobat Assistant.lnk - c:program filesAdobeAcrobat 5.0DistillrAcroTray.exe [2009-3-5 49254] Adobe Gamma Loader.lnk - c:program filesFichiers communsAdobeCalibrationAdobe Gamma Loader.exe [2005-3-16 110592] WinZip Quick Pick.lnk - c:program filesWinZipWZQKPICK.EXE [2007-8-3 394856] [HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringSymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINEsoftwaremicrosoftsecurity centerMonitoringSymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedAppli cationsList] "%windir%\system32\sessmgr.exe"= "c:\Program Files\Messenger\msmsgs.exe"= R2 LiveUpdate Notice;LiveUpdate Notice;c:program filesFichiers communsSymantec SharedCCSVCHST.EXE [24/08/2007 22:07 149352] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:program filesFichiers communsSymantec SharedEENGINEEraserUtilRebootDrv.sys [10/03/2009 09:12 101936] S3 COH_Mon;COH_Mon;c:windowssystem32driversCOH_Mon.sys [29/05/2007 13:55 23888] S3 td_cbus;CDMA-USB USB Device driver (WDM);c:windowssystem32driverstd_cbus.sys [11/03/2009 08:31 51040] S3 td_cmdfl;CDMA-USB CDMA MODEM Filter;c:windowssystem32driverstd_cmdfl.sys [11/03/2009 08:31 6032] S3 td_cmdm;CDMA-USB CDMA MODEM;c:windowssystem32driverstd_cmdm.sys [11/03/2009 08:31 82608] S3 td_cserd;CDMA-USB Serial PORT;c:windowssystem32driverstd_cserd.sys [11/03/2009 08:31 64064] . Contenu du dossier 'Tâches planifiées' 2009-06-29 c:windowsTasksNorton AntiVirus - Run Full System Scan - Administrateur.job - c:program filesNorton AntiVirusNavw32.exe [2007-08-26 17:19] . - - - - ORPHELINS SUPPRIMES - - - - HKCU-Run-kvasoft - c:windowssystem32kva8wr.exe HKLM-Run-DRIVESYS1 - c:windowsSystem32bycool1windo.exe . ------- Examen supplémentaire ------- . uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1392740 IE: &Google Search - c:program filesGooglegoogletoolbar.dll/cmsearch.html IE: Backward &Links - c:program filesGooglegoogletoolbar.dll/cmbacklinks.html IE: Cac&hed Snapshot of Page - c:program filesGooglegoogletoolbar.dll/cmcache.html IE: Download all by Free Download Manager - file://c:program filesFree Download Managerdlall.htm IE: Download by Free Download Manager - file://c:program filesFree Download Managerdllink.htm IE: Download selected by Free Download Manager - file://c:program filesFree Download Managerdlselected.htm IE: Download web site by Free Download Manager - file://c:program filesFree Download Managerdlpage.htm IE: E&xporter vers Microsoft Excel - c:progra~1MICROS~2OFFICE11EXCEL.EXE/3000 IE: Si&milar Pages - c:program filesGooglegoogletoolbar.dll/cmsimilar.html IE: Translate into English - c:program filesGooglegoogletoolbar.dll/cmtrans.html . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-07-03 20:07 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . Heure de fin: 2009-07-03 20:10 ComboFix-quarantined-files.txt 2009-07-03 19:09 Avant-CF: 3 933 462 528 octets libres Après-CF: 15 292 919 808 octets libres WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)WINDOWS [operating systems] c:cmdconsBOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect 145 --- E O F --- 2009-03-11 22:39