Rapport HijackThis

fredorp59 · le 14 mai 2009

Il ne s'agit que d'un reste, pas de soucis

Télécharge le fichier del.reg sur ton Bureau.

Le fichier doit avoir cette icône :

Double-clique pour l'exécuter, accepte la fusion.

Supprime ensuite le fichier.

Voilà, c'est fait mais cet outil a déjà été utilisé et il était revenu.

Modifié le 14 mai 2009 par garrapotaloto

Gof · le 14 mai 2009

Ce n'est pas un outil, mais du sur-mesure par rapport à ce que tu me dis, de sorte de supprimer l'entrée registre.

A présent, confirme que le ZHP Diag ne révèle plus rien. Puis surveille, et reviens d'ici quelques temps m'indiquer ce qu'il en est.

fredorp59 · le 15 mai 2009

bonjour, à présent plus rien mais je vais faire une analyse avec Antivir et poster le rapport.

Cordialement,

garrapotaloto.

fredorp59 · le 15 mai 2009

Voici le rapport antivir :

Avira AntiVir Personal

Report file date: vendredi 15 mai 2009 09:29

Scanning for 1394607 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus

Serial number : 0000149996-ADJIE-0000001

Platform : Windows XP

Windows version : (Service Pack 3) [5.1.2600]

Boot mode : Normally booted

Username : SYSTEM

Computer name : FRED

Version information:

BUILD.DAT : 9.0.0.394 17962 Bytes 17/04/2009 11:20:00

AVSCAN.EXE : 9.0.3.5 466689 Bytes 27/04/2009 09:34:59

AVSCAN.DLL : 9.0.3.0 40705 Bytes 27/02/2009 09:58:24

LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:49

LUKERES.DLL : 9.0.2.0 12033 Bytes 27/02/2009 09:58:52

ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36

ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 19:33:26

ANTIVIR2.VDF : 7.1.3.185 2010112 Bytes 12/05/2009 20:28:50

ANTIVIR3.VDF : 7.1.3.207 98304 Bytes 14/05/2009 20:28:06

Engineversion : 8.2.0.166

AEVDF.DLL : 8.1.1.1 106868 Bytes 01/05/2009 20:27:16

AESCRIPT.DLL : 8.1.1.81 385401 Bytes 08/05/2009 20:28:14

AESCN.DLL : 8.1.1.10 127348 Bytes 03/04/2009 19:46:34

AERDL.DLL : 8.1.1.3 438645 Bytes 29/10/2008 17:24:41

AEPACK.DLL : 8.1.3.16 397686 Bytes 08/05/2009 20:28:13

AEOFFICE.DLL : 8.1.0.36 196987 Bytes 26/02/2009 19:01:56

AEHEUR.DLL : 8.1.0.128 1757559 Bytes 08/05/2009 20:28:11

AEHELP.DLL : 8.1.2.2 119158 Bytes 26/02/2009 19:01:56

AEGEN.DLL : 8.1.1.42 348531 Bytes 08/05/2009 20:28:07

AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 13:32:40

AECORE.DLL : 8.1.6.9 176500 Bytes 14/04/2009 19:46:32

AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 13:32:40

AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:59

AVPREF.DLL : 9.0.0.1 43777 Bytes 05/12/2008 09:32:15

AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28

AVREG.DLL : 9.0.0.0 36609 Bytes 05/12/2008 09:32:09

AVARKT.DLL : 9.0.0.3 292609 Bytes 27/04/2009 09:34:59

AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:37:08

SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49

SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:21:33

NETNT.DLL : 9.0.0.0 11521 Bytes 05/12/2008 09:32:10

RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 09/02/2009 10:45:45

RCTEXT.DLL : 9.0.37.0 86785 Bytes 27/04/2009 09:34:59

Configuration settings for the scan:

Jobname.............................: Complete system scan

Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp

Logging.............................: low

Primary action......................: quarantine

Secondary action....................: ignore

Scan master boot sector.............: on

Scan boot sector....................: on

Boot sectors........................: C:, E:, F:, G:, H:,

Process scan........................: on

Scan registry.......................: on

Search for rootkits.................: on

Integrity checking of system files..: off

Scan all files......................: All files

Scan archives.......................: on

Recursion depth.....................: 20

Smart extensions....................: on

Macro heuristic.....................: on

File heuristic......................: medium

Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Start of the scan: vendredi 15 mai 2009 09:29

Starting search for hidden objects.

'67421' objects were checked, '0' hidden objects were found.

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'WindowsSearch.exe' - '1' Module(s) have been scanned

Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned

Scan process 'msmsgs.exe' - '1' Module(s) have been scanned

Scan process 'ctfmon.exe' - '1' Module(s) have been scanned

Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned

Scan process 'jusched.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'SSMMgr.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'GrooveMonitor.exe' - '1' Module(s) have been scanned

Scan process 'MSASCui.exe' - '1' Module(s) have been scanned

Scan process 'alg.exe' - '1' Module(s) have been scanned

Scan process 'VTTimer.exe' - '1' Module(s) have been scanned

Scan process 'TeamViewer.exe' - '1' Module(s) have been scanned

Scan process 'searchindexer.exe' - '1' Module(s) have been scanned

Scan process 'TeamViewer_Service.exe' - '1' Module(s) have been scanned

Scan process 'sqlwriter.exe' - '1' Module(s) have been scanned

Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned

Scan process 'msvsmon.exe' - '1' Module(s) have been scanned

Scan process 'sqlservr.exe' - '1' Module(s) have been scanned

Scan process 'MDM.EXE' - '1' Module(s) have been scanned

Scan process 'jqs.exe' - '1' Module(s) have been scanned

Scan process 'inetinfo.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'BRSS01A.EXE' - '1' Module(s) have been scanned

Scan process 'BRSVC01A.EXE' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

44 processes with 44 modules were scanned

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

Master boot sector HD1

[iNFO] No virus was found!

Master boot sector HD2

[iNFO] No virus was found!

Master boot sector HD3

[iNFO] No virus was found!

Master boot sector HD4

[iNFO] No virus was found!

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'E:\'

[iNFO] No virus was found!

Boot sector 'F:\'

[iNFO] No virus was found!

Boot sector 'G:\'

[iNFO] No virus was found!

Boot sector 'H:\'

[iNFO] No virus was found!

Starting to scan executable files (registry).

The registry was scanned ( '67' files ).

Starting the file scan:

Begin scan in 'C:\' <Frédéric01>

C:\pagefile.sys

[WARNING] The file could not be opened!

[NOTE] This file is a Windows system file.

[NOTE] This file cannot be opened for scanning.

C:\WINDOWS\system32\drivers\sptd.sys

[WARNING] The file could not be opened!

Begin scan in 'E:\' <Frédéric02>

E:\System Volume Information\_restore{63F4616A-61A5-4015-8AE6-51665C28F1DC}\RP374\A0104772.exe

[0] Archive type: ACE SFX (self extracting)

--> SaveGame\Player0\SaveGame0000.sav