Infection XP security tool (eh oui !) Au secours ! :) RESOLU

[tony00]

Bonjour, j'ai eu le meme probleme sur mon Pc étant novice j'ai essayer de me débrouiller j'ai suivi les informations sur se forum:

http://www.commentcamarche.net/faq/24055-security-tool

 

Et maintenent voici le rapport de Combo Fix qui en résulte, pour moi c'est du chinois quelqun pourrait-il me donner un coup de main ou me traduir se rapport . Merci d'avance

 

ComboFix 10-03-23.03 - Anthony 23/03/2010 21:58:18.1.2 - x86

Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.560 [GMT 1:00]

Lancé depuis: c:\documents and settings\Anthony\Bureau\CCM.exe

AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

.

 

((((((((((((((((((((((((((((( Fichiers créés du 2010-02-23 au 2010-03-23 ))))))))))))))))))))))))))))))))))))

.

 

2010-03-23 18:11 . 2010-03-23 18:11 -------- d-----w- c:\documents and settings\Anthony\Application Data\Malwarebytes

2010-03-23 18:11 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-03-23 18:11 . 2010-03-23 18:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2010-03-23 18:11 . 2010-03-23 18:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-03-23 18:11 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-03-23 14:38 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll

2010-03-22 17:49 . 2010-03-22 17:49 -------- d-----w- c:\program files\LimeWire

2010-03-22 16:11 . 2010-03-22 16:11 -------- d-----w- c:\windows\system32\fr

2010-03-22 16:11 . 2010-03-22 16:11 -------- d-----w- c:\windows\l2schemas

2010-03-22 16:11 . 2010-03-22 16:11 -------- d-----w- c:\windows\system32\bits

2010-03-22 16:05 . 2010-03-22 16:11 -------- d-----w- c:\windows\ServicePackFiles

2010-03-22 15:53 . 2010-03-22 15:53 -------- d-----w- c:\windows\EHome

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-03-23 20:35 . 2009-10-18 14:29 -------- d-----w- c:\program files\Steam

2010-03-23 20:34 . 2010-03-22 17:50 -------- d-----w- c:\documents and settings\Anthony\Application Data\LimeWire

2010-03-23 17:41 . 2009-08-30 17:12 -------- d-----w- c:\documents and settings\Anthony\Application Data\Azureus

2010-03-23 14:39 . 2004-08-05 12:00 512628 ----a-w- c:\windows\system32\perfh00C.dat

2010-03-23 14:39 . 2004-08-05 12:00 85834 ----a-w- c:\windows\system32\perfc00C.dat

2010-03-22 17:06 . 2009-08-30 17:11 -------- d-----w- c:\program files\Vuze

2010-03-22 16:22 . 2009-08-04 21:55 74656 ----a-w- c:\documents and settings\Anthony\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2010-03-22 16:14 . 2009-08-04 21:16 76507 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat

2010-02-03 21:19 . 2010-02-03 21:19 -------- d-----w- c:\program files\Fichiers communs\logishrd

.

 

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]

2009-04-02 10:47 333192 -c--a-w- c:\program files\AskBarDis\bar\bin\askBar.dll

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2009-04-02 333192]

 

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]

[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]

"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2009-04-02 333192]

 

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]

[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2009-08-16 955392]

"Steam"="c:\program files\steam\steam.exe" [2010-02-28 1217872]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"Shockwave Updater"="c:\windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe" [2009-07-21 468408]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-25 61440]

"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]

"RTHDCPL"="RTHDCPL.EXE" [2009-08-24 18702336]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-05 417792]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-10-28 141600]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]

"HomePlayer"="c:\program files\HomePlayer\HomePlayer.exe" [2007-11-06 294912]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"WUAppSetup"="c:\program files\Fichiers communs\logishrd\WUApp32.exe" [2007-02-03 430080]

 

c:\documents and settings\Anthony\Menu D‚marrer\Programmes\D‚marrage\

LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [2010-3-16 503808]

OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-4-16 384000]

 

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\

Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

PyGrenouille.lnk - c:\program files\PyGrenouille\pygrenouille.exe [2009-8-18 91648]

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"c:\\WINDOWS\\system32\\sessmgr.exe"=

"c:\\Program Files\\Vuze\\Azureus.exe"=

"c:\\Program Files\\Steam\\Steam.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\Steam\\steamapps\\montetanthony\\counter-strike source\\hl2.exe"=

"c:\\Program Files\\HomePlayer\\HomePlayer.exe"=

"c:\\Program Files\\HomePlayer\\VLC\\vlc.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\LimeWire\\LimeWire.exe"=

"%windir%\\system32\\sessmgr.exe"=

 

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [04/08/2009 23:19 108289]

R2 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe [30/08/2009 18:11 464264]

R2 ASKUpgrade;ASKUpgrade;c:\program files\AskBarDis\bar\bin\ASKUpgrade.exe [30/08/2009 18:11 234888]

R3 SG760_XP;SAGEM 802.11g XG760 1211 Driver;c:\windows\system32\drivers\WlanUZXP.sys [08/09/2009 18:59 260608]

S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [09/09/2009 00:36 1684736]

.

Contenu du dossier 'Tâches planifiées'

 

2009-10-24 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

 

2010-01-03 c:\windows\Tasks\Norton Security Scan for Anthony.job

- c:\program files\Norton Security Scan\Engine\2.3.0.44\Nss.exe [2009-08-20 15:45]

 

2010-03-23 c:\windows\Tasks\User_Feed_Synchronization-{52173315-1334-432F-9171-250ACDBE1DDF}.job

- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.google.fr/webhp?hl=fr

uInternet Settings,ProxyOverride = *.local

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

TCP: {06E5EC13-5606-48F8-B972-85B673C5ADD7} = 212.27.53.252,212.27.54.252

TCP: {1E6050A5-8C48-4B34-BFDB-A9A7B437862B} = 212.27.53.252,212.27.54.252

TCP: {8E55DB6B-EBF8-4B65-8F5A-10FC7C478DA4} = 212.27.53.252,212.27.54.252

FF - ProfilePath - c:\documents and settings\Anthony\Application Data\Mozilla\Firefox\Profiles\odhrnnm3.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr

.

- - - - ORPHELINS SUPPRIMES - - - -

 

MSConfigStartUp-10174215 - c:\docume~1\ALLUSE~1\APPLIC~1\10174215\10174215.exe

MSConfigStartUp-22042818 - c:\documents and settings\All Users\Application Data\22042818\22042818.exe

 

 

 

**************************************************************************

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

Scan terminé avec succès

Fichiers cachés:

 

**************************************************************************

.

--------------------- DLLs chargées dans les processus actifs ---------------------

 

- - - - - - - > 'winlogon.exe'(1032)

c:\windows\system32\Ati2evxx.dll

 

- - - - - - - > 'explorer.exe'(3572)

c:\windows\system32\eappprxy.dll

c:\windows\system32\webcheck.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

Heure de fin: 2010-03-23 22:04:09

ComboFix-quarantined-files.txt 2010-03-23 21:04

 

Avant-CF: 49 349 931 008 octets libres

Après-CF: 49 518 092 288 octets libres

 

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect

 

- - End Of File - - F29AC347916AEBC8375FC703E0F368FF

[Apollo]

Bonsoir,

 

Je te suggère de créer ton propre topic stp.

 

Clique sur le bouton "Nouveau" au-dessus des forums pour avoir un sujet bien personnel; tu seras pris en charge.

 

Bonne nuit.