bonjour,
voila les rapports, j'espère que je me suis pas planté.
par contre en faisant combofix l'ordi a failli planté, me marque sur une page bleue "invalid_Kernel_Handle
et puis pleins d'autre chose comme votre système a connu une erreur etc.....
j'ai pu le rallumer sans soucis en espèrant que ça n'a pas endommagé mon système.
a bientot et bon courage.
ComboFix 08-10-19.04 - HP_Propriétaire 2008-10-20 17:13:27.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.117 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\HP_Propriétaire\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\HP_Propriétaire\Application Data\MessengerSkinner
C:\Documents and Settings\HP_Propriétaire\Application Data\MessengerSkinner\Userdata\defaultPack.cab
C:\Documents and Settings\HP_Propriétaire\Application Data\MessengerSkinner\Userdata\languages.xml
C:\Documents and Settings\HP_Propriétaire\Application Data\MessengerSkinner\Userdata\pack1.cab
C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\MessengerSkinner
C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk
C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\MessengerSkinner\Website.lnk
C:\Documents and Settings\HP_Propriétaire\Mes documents\My Documents.url
C:\Program Files\autorun.inf
C:\Program Files\MyWebSearch
C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
C:\Program Files\SAV
C:\Program Files\SAV\sav.ooo
C:\Program Files\SAV\sav0.dat
C:\Program Files\SAV\sav1.dat
C:\WINDOWS\hosts
C:\WINDOWS\msnimport.exe
C:\WINDOWS\system32\Lkmmonpo.ini
C:\WINDOWS\system32\Lkmmonpo.ini2
C:\WINDOWS\system32\nvs2.inf
C:\WINDOWS\system32\urlmsnlink.dat
C:\WINDOWS\tmlpcert2007
D:\Autorun.inf
.
((((((((((((((((((((((((((((( Fichiers créés du 2008-09-20 au 2008-10-20 ))))))))))))))))))))))))))))))))))))
.
2008-10-18 15:15 . 2008-10-20 17:03 3,156 --a------ C:\Documents and Settings\Orph.egd
2008-10-18 15:13 . 2008-10-20 17:04 <REP> d-------- C:\ToolBar SD
2008-10-15 17:26 . 2008-09-08 12:41 333,824 -----c--- C:\WINDOWS\system32\dllcache\srv.sys
2008-10-15 17:24 . 2008-09-15 17:26 1,846,528 -----c--- C:\WINDOWS\system32\dllcache\win32k.sys
2008-10-15 08:31 . 2008-08-14 15:23 2,191,232 -----c--- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-10-15 08:31 . 2008-08-14 15:23 2,147,328 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-10-15 08:31 . 2008-08-14 15:23 2,068,096 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-10-15 08:31 . 2008-08-14 15:23 2,025,984 -----c--- C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-10-07 14:10 . 2008-10-07 14:10 <REP> d-------- C:\WINDOWS\system32\bits
2008-10-07 14:10 . 2008-10-07 14:10 <REP> d-------- C:\WINDOWS\l2schemas
2008-10-07 14:06 . 2008-10-07 14:10 <REP> d-------- C:\WINDOWS\ServicePackFiles
2008-10-07 13:14 . 2008-10-07 13:57 <REP> d-------- C:\WINDOWS\EHome
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-20 15:23 98,304 ----a-w C:\WINDOWS\DUMP974e.tmp
2008-10-20 15:19 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\Azureus
2008-10-20 15:01 --------- d-----w C:\Program Files\MSN Messenger
2008-10-20 11:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-10-20 07:17 --------- d-----w C:\Documents and Settings\LocalService\Application Data\AVG7
2008-10-19 11:45 --------- d--h--w C:\Program Files\eMule
2008-10-16 11:00 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\AVG7
2008-10-16 10:35 98,304 ----a-w C:\WINDOWS\DUMP6c94.tmp
2008-10-12 00:45 --------- d-----w C:\Program Files\Azureus
2008-09-15 10:49 --------- d-----w C:\Program Files\Hewlett-Packard
2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-09-03 15:21 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\Samsung
2008-09-03 15:19 5,632 ----a-w C:\WINDOWS\system32\drivers\StarOpen.sys
2008-08-31 18:50 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ubisoft
2008-08-31 18:32 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-31 18:32 --------- d-----w C:\Program Files\Ubisoft
2008-08-31 17:56 --------- d-----w C:\Program Files\DAEMON Tools Lite
2008-08-31 17:50 717,296 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-08-31 10:19 --------- d-----w C:\Documents and Settings\HP_Propriétaire\Application Data\DAEMON Tools
2007-03-22 00:32 94,080 ----a-w C:\Documents and Settings\HP_Propriétaire\Application Data\ezplay.sys
2007-03-22 00:32 87,608 ----a-w C:\Documents and Settings\HP_Propriétaire\Application Data\ezpinst.exe
2007-03-22 00:32 47,360 ----a-w C:\Documents and Settings\HP_Propriétaire\Application Data\pcouffin.sys
2003-12-19 14:48 52,127,651 ----a-w C:\Program Files\data1.cab
2003-12-19 14:48 49 ----a-w C:\Program Files\setup.lid
2003-12-19 14:48 416 ----a-w C:\Program Files\layout.bin
2003-12-19 14:47 67,990 ----a-w C:\Program Files\setup.ins
2003-12-19 14:47 66 ----a-w C:\Program Files\SETUP.INI
2003-12-19 14:47 415,676 ----a-w C:\Program Files\_sys1.cab
2003-12-19 14:47 163,491 ----a-w C:\Program Files\_user1.cab
2003-12-19 14:47 110 ----a-w C:\Program Files\DATA.TAG
2003-12-18 17:58 55,278 ----a-w C:\Program Files\Setup.bmp
2003-12-11 14:37 397 ----a-w C:\Program Files\Lisezmoi.txt
2003-10-14 14:51 4,544 ----a-w C:\Program Files\Licence.txt
2001-04-13 11:09 96 ----a-w C:\Program Files\vssver.scc
2000-02-18 10:23 2,238 ----a-w C:\Program Files\ICON.ico
1998-01-27 14:07 8,704 ----a-w C:\Program Files\_ISDEL.EXE
1998-01-22 22:08 60,416 ----a-w C:\Program Files\SETUP.EXE
1998-01-22 21:55 285,324 ----a-w C:\Program Files\_INST16.EX_
1998-01-22 21:54 290,733 ----a-w C:\Program Files\_INST32I.EX_
1998-01-22 19:06 11,264 ----a-w C:\Program Files\_setup.dll
1997-10-20 11:20 4,525 ----a-w C:\Program Files\lang.dat
2007-03-17 13:18 14 --sh--w C:\WINDOWS\mswtpdxp.dll
2007-03-17 13:32 21 --sh--w C:\WINDOWS\prwttrxp.dll
2007-03-17 13:18 21 --sh--w C:\WINDOWS\system32\dpwttaxp.dll
2007-03-17 13:18 14 --sh--w C:\WINDOWS\system32\mswtpaxp.dll
2007-03-17 13:32 2 --sh--w C:\WINDOWS\system32\verwttxp.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-03-30 68856]
"MessengerPlus3"="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" [2007-01-04 190024]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2007-01-15 147456]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]
"ccleaner"="C:\Program Files\CCleaner\ccleaner.exe" [2007-05-10 598920]
"L'Assistant DartyBox"="C:\Program Files\Assistant Dartybox\Upgrade_Manager.exe" [2007-06-05 151552]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-08 52736]
"HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-08 49152]
"HPHmon06"="C:\WINDOWS\system32\hphmon06.exe" [2004-06-08 659456]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-15 233472]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2004-07-02 4112384]
"SiS Windows KeyHook"="C:\WINDOWS\system32\keyhook.exe" [2004-05-20 249856]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2002-10-17 81920]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2004-07-02 81920]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" [2008-10-17 590848]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-05-27 413696]
"AGRSMMSG"="AGRSMMSG.exe" [2004-06-30 C:\WINDOWS\AGRSMMSG.exe]
"nwiz"="nwiz.exe" [2004-07-02 C:\WINDOWS\system32\nwiz.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe" [2007-11-02 219136]
C:\Documents and Settings\HP_Propri‚taire\Menu D‚marrer\Programmes\D‚marrage\
Stardock ObjectDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe [2005-02-21 1826885]
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
BTTray.lnk - C:\Program Files\Belkin\Logiciel Bluetooth\BTTray.exe [2005-08-24 577597]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-05-29 241664]
HPAiODevice(hp psc 700 series) - 1.lnk - C:\Program Files\Hewlett-Packard\AiO\hp psc 700 series\Bin\hpobrt07.exe [2002-04-30 487484]
Rappels du Calendrier Microsoft Works.lnk - C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe [1999-08-06 53317]
Utilitaire r‚seau pour SAGEM Wi-Fi 11g USB adapter.lnk - C:\Program Files\DartyBox Wifi\SAGEM WiFi manager\WLANUTL.exe [2008-04-03 950272]
[HKLM\~\startupfolder\C:^Documents and Settings^HP_Propriétaire^Menu Démarrer^Programmes^Démarrage^Y'z ToolBar.lnk]
path=C:\Documents and Settings\HP_Propriétaire\Menu Démarrer\Programmes\Démarrage\Y'z ToolBar.lnk
backup=C:\WINDOWS\pss\Y'z ToolBar.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KBD]
--a------ 2003-02-12 04:02 61440 C:\hp\KBD\kbd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\Grisoft\\AVG Free\\avginet.exe"=
"C:\\Program Files\\Grisoft\\AVG Free\\avgemc.exe"=
"C:\\Program Files\\Azureus\\Azureus.exe"=
"C:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"C:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"C:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"40662:TCP"= 40662:TCP:emule
"40672:UDP"= 40672:UDP:emule
R3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;C:\WINDOWS\system32\DRIVERS\WlanBZXP.sys [2007-01-16 450560]
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 CnxEtP;ZTE ZXDSL852 Adapter Filter Driver;C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [ ]
S3 CnxEtU;ZTE ZXDSL852 Interface Device Driver;C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [ ]
S3 CnxTgNW;ZTE ZXDSL852 WAN PPPoA Adapter Driver;C:\WINDOWS\system32\DRIVERS\CnxTgNW.sys [ ]
S3 ovt530;Webcam Classic;C:\WINDOWS\system32\Drivers\ov530vid.sys [ ]
S3 ZDCndis5;ZDCndis5 Protocol Driver;C:\WINDOWS\system32\ZDCndis5.SYS [ ]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8eb54201-d7ff-11db-9865-00d0d08d2d5a}]
\Shell\AutoRun\command - L:\launcher.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bf831cb9-d80a-11db-9866-00d0d08d2d5a}]
\Shell\AutoRun\command - K:\launcher.exe
.
Contenu du dossier 'Tâches planifiées'
2008-10-15 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]
2008-10-17 C:\WINDOWS\Tasks\Maintenance en 1 clic.job
- C:\Program Files\TuneUp Utilities 2004\SystemOptimizer.exe [2004-12-07 17:05]
.
- - - - ORPHELINS SUPPRIMES - - - -
BHO-{349E7586-DE19-491E-AFDC-203EE682E5D3} - C:\WINDOWS\system32\opnommkL.dll
WebBrowser-{F3DF2532-A2CC-48D8-8643-A033AE4FC313} - (no file)
HKCU-Run-WOOKIT - C:\PROGRA~1\Wanadoo\GestMaj.exe
HKCU-Run-Sonic RecordNow! - (no file)
HKLM-Run-VTTimer - VTTimer.exe
HKLM-Explorer_Run-jcEXrkb00f - C:\Documents and Settings\All Users\Application Data\byrqxade\robktetu.exe
Notify-awtrSJCr - awtrSJCr.dll
MSConfigStartUp-Cld2000 - C:\Program Files\Calendrier\Cld2000.exe
MSConfigStartUp-DAEMON Tools - C:\Program Files\DAEMON Tools\daemon.exe
.
------- Examen supplémentaire -------
.
FireFox -: Profile - C:\Documents and Settings\HP_Propriétaire\Application Data\Mozilla\Firefox\Profiles\aakzv76t.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://fr.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-20 17:25:48
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Belkin\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\PROGRA~1\Belkin\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\WINDOWS\system32\hpoipm07.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\Bin\hposts07.exe
.
**************************************************************************
.
Heure de fin: 2008-10-20 17:38:12 - La machine a redémarré
ComboFix-quarantined-files.txt 2008-10-20 15:37:15
Avant-CF: 54 571 794 432 octets libres
Après-CF: 54,511,177,728 octets libres
236 --- E O F --- 2008-10-16 01:05:13
