[Résolu] Restaurer panneau de configuration après suppression virus

[bozos]

j ai eu un indésirable dont je me suis débarassé et c est suite a cela que j ai perdu le controle des droits administrateurs et j ai fait disparaitre l indesirable (confirmé a priori par les antivirus et autres antiispyware)

 

et pour le 4 j attends votre réponse sur les 3 premiers?

 

 

Merciiiiii

[bozos]

Bonne nouvelle, j ai lancé combo fix et j ai tout récupéré

 

Merciiiiii

 

Voici le rapport a tout hasard

 

ComboFix 08-01-07.5 - test 2008-01-08 20:30:35.1 - NTFSx86 MINIMAL

Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.368 [GMT 1:00]

Running from: C:\Documents and Settings\test\Bureau\Combofix\ComboFix.exe

.

 

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-12-08 to 2008-01-08 ))))))))))))))))))))))))))))))))))))

.

 

2008-01-08 20:29 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe

2008-01-07 22:23 . 2008-01-07 22:23 <REP> d-------- C:\Program Files\DivX

2008-01-06 21:31 . 2008-01-06 21:31 <REP> d-------- C:\Program Files\Avira

2008-01-06 20:14 . 2008-01-06 20:14 <REP> d--hs---- C:\found.000

2008-01-06 13:04 . 2008-01-06 21:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira

2008-01-05 11:56 . 2004-09-17 18:45 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau

2008-01-05 11:56 . 2004-09-17 18:45 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression

2008-01-05 11:56 . 2004-09-17 18:45 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles

2008-01-05 11:56 . 2004-09-17 18:59 <REP> dr------- C:\Documents and Settings\Administrateur\Mes documents

2008-01-05 11:56 . 2004-09-17 18:45 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer

2008-01-05 11:56 . 2004-09-17 18:59 <REP> dr------- C:\Documents and Settings\Administrateur\Favoris

2008-01-05 11:56 . 2004-09-17 18:45 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau

2008-01-05 11:56 . 2005-11-12 17:49 <REP> d-------- C:\Documents and Settings\Administrateur\Bluetooth Software

2008-01-05 11:56 . 2005-11-12 18:06 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Symantec

2008-01-05 11:56 . 2005-11-12 18:03 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Sonic

2008-01-05 11:56 . 2005-11-12 18:02 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\IBM

2008-01-05 00:32 . 2008-01-05 00:32 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab

2008-01-05 00:17 . 2008-01-06 23:04 <REP> d-------- C:\Program Files\Navilog1

2008-01-03 13:57 . 2008-01-03 13:57 54,156 --ah----- C:\WINDOWS\QTFont.qfn

2008-01-03 13:57 . 2008-01-03 13:57 1,409 --a------ C:\WINDOWS\QTFont.for

2007-12-15 21:50 . 2007-12-15 21:50 268 --ah----- C:\sqmdata19.sqm

2007-12-15 21:50 . 2007-12-15 21:50 244 --ah----- C:\sqmnoopt19.sqm

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-01-06 20:16 --------- d-----w C:\Program Files\RogueRemover FREE

2007-12-09 18:43 --------- d-----w C:\Program Files\eChanblard

2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys

2007-10-18 20:03 1,035,316 ----a-w C:\SmitfraudFix.exe

.

 

((((((((((((((((((((((((((((((((((((((((((((( AWF ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

REGEDIT4

*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 05:00 15360]

"PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-06-27 15:21 1449984]

"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55 5674352]

"Neuf Giga Drive"="C:/Program Files/neuf/neuf Giga drive/neufGiga.exe" [2006-11-02 15:46 50864 C:\Program Files\Neuf\neuf Giga drive\neufGiga.exe]

"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 09:59 204288]

"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-26 20:13 68856]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2006-02-14 13:17 110592]

"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-02-14 13:16 512000]

"TPKMAPHELPER"="C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe" [2005-10-28 18:04 864256]

"TpShocks"="TpShocks.exe" [2005-11-07 10:14 106496 C:\WINDOWS\system32\TpShocks.exe]

"TPHOTKEY"="C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe" [2006-07-05 16:15 94208]

"EZEJMNAP"="C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2006-02-24 01:22 237568]

"SoundMAXPnP"="C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-10-14 09:11 1388544]

"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2004-08-06 07:27 860160]

"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2006-01-21 20:00 344064]

"UpdateManager"="C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" [2003-08-19 01:01 110592]

"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2005-03-07 01:05 122939]

"IBMPRC"="C:\IBMTOOLS\UTILS\ibmprc.exe" [2005-04-27 09:53 90112]

"PWRMGRTR"="C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2006-05-26 00:13 151552]

"BLOG"="C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2006-05-26 00:13 208896]

"TPKBDLED"="C:\WINDOWS\system32\TpScrLk.exe" [2002-10-08 22:28 40960]

"PCSuiteTrayApplication"="C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.exe" [2006-06-15 11:36 229376]

"ACWLIcon"="C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe" [2006-04-17 11:59 98304]

"PSQLLauncher"="C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" [2006-04-25 18:03 31232]

"TVT Scheduler Proxy"="C:\Program Files\Fichiers communs\Lenovo\Scheduler\scheduler_proxy.exe" [2006-03-28 03:01 503808]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00 132496]

"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]

"Autoconfigurateur WiFi Neuf"="C:\Program Files\Neuf\Kit\WiFi\9wifi.exe" [2007-06-28 17:27 181488]

"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-01-06 23:53 249896]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]

"DisableRegistryTools"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]

psqlpwd.dll 2006-04-25 18:20 40448 C:\WINDOWS\system32\psqlpwd.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]

notifyf2.dll 2005-07-05 23:45 28672 C:\WINDOWS\system32\notifyf2.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]

tphklock.dll 2005-11-30 19:16 24576 C:\WINDOWS\system32\tphklock.dll

 

R0 Shockprf;Shockprf;C:\WINDOWS\system32\drivers\Shockprf.sys [2005-11-30 14:58]

R0 TPDiskPM;TPDiskPM;C:\WINDOWS\system32\drivers\TPDiskPM.sys [2006-04-27 15:45]

R1 ANC;ANC;C:\WINDOWS\system32\drivers\ANC.SYS [2005-11-08 08:27]

R1 IBMTPCHK;IBMTPCHK;C:\WINDOWS\system32\Drivers\IBMBLDID.sys [2006-01-12 23:33]

R1 ShockMgr;ShockMgr;C:\WINDOWS\system32\drivers\ShockMgr.sys [2005-06-20 11:18]

R1 TPPWRIF;TPPWRIF;C:\WINDOWS\system32\drivers\Tppwrif.sys [2006-05-26 00:13]

R2 ibmfilter;ibmfilter;C:\WINDOWS\system32\drivers\ibmfilter.sys [2005-04-27 10:27]

R2 SmiHlp;SMI helper driver;C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [2006-04-25 18:00]

R3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2005-11-19 02:13]

R3 TcUsb;TC USB Kernel Driver;C:\WINDOWS\system32\Drivers\tcusb.sys [2006-04-25 18:13]

R3 TPInput;TPInput;C:\WINDOWS\system32\DRIVERS\TPInput.sys [2006-03-30 14:03]

R3 TPM11;NSC Integrated Trusted Platform Module 1.1;C:\WINDOWS\system32\DRIVERS\nsctpm11.sys [2005-04-21 16:44]

S3 PALLADIA;Palladia 300/400 Usb Adsl Modem;C:\WINDOWS\system32\DRIVERS\usbiad.sys [2005-06-13 07:57]

S3 SG760_XP;SAGEM 802.11g XG760 1211 Driver;C:\WINDOWS\system32\DRIVERS\WlanUZXP.sys [2005-07-13 16:37]

 

.

Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'

"2007-12-16 16:04:58 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"

- C:\Program Files\Apple Software Update\SoftwareUpdate.exe

"2008-01-04 19:00:00 C:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - test.job"

- C:\PROGRA~1\NORTON~1\Navw32.exeh/task:

"2008-01-08 19:36:47 C:\WINDOWS\Tasks\PMTask.job"

- C:\PROGRA~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE

.

**************************************************************************

 

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-01-08 20:36:58

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

scan completed successfully

hidden files: 0

 

**************************************************************************

.

--------------------- DLLs Loaded Under Running Processes ---------------------

 

PROCESS: C:\WINDOWS\system32\winlogon.exe

-> C:\WINDOWS\system32\tphklock.dll

 

PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.3156]

-> C:\PROGRA~1\ThinkPad\UTILIT~1\FR\PWRMGRRT.DLL

-> C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL

.

Completion time: 2008-01-08 20:40:46 - machine was rebooted

ComboFix-quarantined-files.txt 2008-01-08 19:40:40

.

2007-12-12 22:24:37 --- E O F ---

[pear]

Eh bien, à ce qu'il me semble , vous n'avez plus de problème.

 

Vous m'en voyez ravi.

 

Editez votre premier message pour y indiquer "Resolu"