|
|
|
|
Configuration: Windows XP Firefox 2.0.0.15
Et bien, si ton CPU est à 100 %, c'est que le PC est à son maximum d'utilisation, ce qui pourrait expliquer les ralentissements.
Essaye de nettoyer ton PC, par exemple faire un scan avec ton antivirus pour voir s'il n'y a pas un virus, faire un scan avec Spybot si tu l'as, désinstaller des logiciels que tu n'utilises plus, et aussi regarder dans les Processus ceux qui prennent beaucoup de CPU. Est-ce que tu pourrais nous donner ta configuration système s'il te plaît ?
|
Une musique qui s'ouvre comme ça ? Oo Un trojan ? =X Et est-ce que tu as Spybot ? Ce serait mieux je pense.
Sinon pour les rapport Hijathis, je m'y connais pas du tout =X Mais en tout cas, essaye avec Spybot ;) "La vie, c'est comme une goutte d'eau : soit ça brille, soit ça éclate !", <= créé par moi =D |
Merci quand meme pour vos réponses ! ^^ j'ai scan avec combofix et ca a marché !
Par contre on ma di de mettre quand meme le resulstat de mon scan, ici les log : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:29:05, on 12/07/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe D:\Program Files\Alwil Software\Avast4\ashServ.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe D:\Program Files\Bonjour\mDNSResponder.exe D:\WINDOWS\system32\CTsvcCDA.exe D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe D:\WINDOWS\system32\nvsvc32.exe D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe D:\Program Files\Alwil Software\Avast4\ashWebSv.exe D:\WINDOWS\system32\WgaTray.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\MtdAcqu.exe D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe D:\Program Files\MSN Messenger\msnmsgr.exe D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe D:\Program Files\Internet Explorer\IEXPLORE.EXE D:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe D:\WINDOWS\system32\rundll32.exe D:\WINDOWS\system32\rundll32.exe D:\Documents and Settings\jean-baptiste reyt\Desktop\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lo.st R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [c8f5592c] rundll32.exe "D:\WINDOWS\system32\xoesjrjp.dll",b O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MtdAcqu] "C:\PROGRA~1\MtdAcqu.exe" /s O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Windows Live Search - res://D:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://D:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?5993e9ea261b46fb93ab697fb617c5e8 O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://D:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?5993e9ea261b46fb93ab697fb617c5e8 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://www.touslesdrivers.com/... O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su2/ocx/15035/CTPID.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O21 - SSODL: CDVolume - {594e76e0-9bfd-437e-b563-024f7214a613} - D:\WINDOWS\Resources\CDVolume.dll O21 - SSODL: RunOnceRunOnce - {15f5395f-050e-4c79-8e10-7267073ea8fd} - D:\WINDOWS\Resources\RunOnceRunOnce.dll O21 - SSODL: PrxVolume - {ee569faa-876a-49fd-b1d8-406b78516179} - D:\WINDOWS\Resources\PrxVolume.dll O23 - Service: Apple Mobile Device - Apple, Inc. - D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - D:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - D:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - D:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - D:\WINDOWS\System32\TuneUpDefragService.exe End of file - 7625 bytes Dites moi 'il ya des prob plz |
Jai aussi ici le log file de combofix:
ComboFix 08-07-11.1 - jean-baptiste reyt 2008-07-12 9:06:54.4 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1674 [GMT -7:00] Running from: F:\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . D:\WINDOWS\system32\AaJRuBeg.ini D:\WINDOWS\system32\AaJRuBeg.ini2 D:\WINDOWS\system32\mcrh.tmp D:\WINDOWS\system32\pjrjseox.ini D:\WINDOWS\system32\xoesjrjp.dll . ((((((((((((((((((((((((( Files Created from 2008-06-12 to 2008-07-12 ))))))))))))))))))))))))))))))) . 2008-07-12 08:24 . 2008-07-12 08:24 116,864 --a------ D:\WINDOWS\system32\spawct.dll 2008-07-12 08:24 . 2008-07-12 08:24 116,864 --a------ D:\WINDOWS\system32\ausdoqsc.dll 2008-07-12 07:28 . 2008-07-12 07:28 664 --a------ D:\WINDOWS\system32\d3d9caps.dat 2008-07-11 16:57 . 2008-07-11 16:57 <DIR> d-------- D:\Program Files\Spybot - Search & Destroy 2008-07-11 16:57 . 2008-07-11 17:29 <DIR> d-------- D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-07-11 09:59 . 2008-07-11 14:28 <DIR> d-------- D:\Program Files\Spyware Doctor 2008-07-11 09:59 . 2008-07-11 09:59 <DIR> d-------- D:\Documents and Settings\jean-baptiste reyt\Application Data\PC Tools 2008-07-11 09:59 . 2007-12-10 13:53 81,288 --a------ D:\WINDOWS\system32\drivers\iksyssec.sys 2008-07-11 09:59 . 2007-12-10 13:53 66,952 --a------ D:\WINDOWS\system32\drivers\iksysflt.sys 2008-07-11 09:59 . 2008-02-01 11:55 42,376 --a------ D:\WINDOWS\system32\drivers\ikfilesec.sys 2008-07-11 09:59 . 2007-12-10 13:53 29,576 --a------ D:\WINDOWS\system32\drivers\kcom.sys 2008-07-11 09:26 . 2008-07-11 09:26 <DIR> d-------- D:\Program Files\Voissa 2008-07-11 09:13 . 2008-07-11 09:13 112,256 --a------ D:\WINDOWS\system32\pbwoey.dll 2008-07-11 09:13 . 2008-07-11 09:13 112,256 --a------ D:\WINDOWS\system32\mhiiljes.dll 2008-07-10 05:28 . 2008-07-10 05:28 112,256 --a------ D:\WINDOWS\system32\hytycmpa.dll 2008-07-10 05:28 . 2008-07-10 05:28 112,256 --a------ D:\WINDOWS\system32\alynpe.dll 2008-07-10 05:19 . 2008-07-10 05:19 <DIR> d-------- D:\WINDOWS\5888428E699C4E71BF7194EE06B497DA.TMP 2008-07-10 04:59 . 2008-07-10 05:18 <DIR> d-------- D:\jb bureau 2008-07-09 13:16 . 2008-07-09 13:16 <DIR> d-------- D:\Documents and Settings\jean-baptiste reyt\Application Data\ItsLabel 2008-07-09 08:12 . 2008-07-09 08:13 <DIR> d-------- D:\Program Files\OpenOffice.org 2.4 2008-07-09 07:57 . 2008-07-10 09:57 <DIR> d-------- D:\Documents and Settings\All Users\Application Data\Google Updater 2008-07-09 07:55 . 2008-07-09 08:02 <DIR> d-------- D:\Program Files\EoRezo 2008-07-09 07:55 . 2008-07-10 05:28 <DIR> d-------- D:\Documents and Settings\jean-baptiste reyt\Application Data\EoRezo 2008-07-09 07:00 . 2008-07-09 07:01 318,208 --a------ D:\WINDOWS\system32\geBuRJaA.dll 2008-07-09 06:55 . 2008-07-09 06:55 29,568 --a------ D:\WINDOWS\system32\urqOHARK.dll 2008-07-09 06:55 . 2008-07-09 06:55 29,568 --a------ D:\WINDOWS\system32\mlJDvWMf.dll 2008-07-09 06:54 . 2008-07-09 06:54 29,568 --a------ D:\WINDOWS\system32\urqOFVPj.dll 2008-07-09 06:54 . 2008-07-09 06:54 29,568 --a------ D:\WINDOWS\system32\rqRJCVlj.dll 2008-07-09 06:54 . 2008-07-09 06:54 29,568 --a------ D:\WINDOWS\system32\geBuRKde.dll 2008-07-09 06:54 . 2008-07-09 06:54 29,568 --a------ D:\WINDOWS\system32\ddcBTKBs.dll 2008-07-04 10:33 . 2008-07-04 10:34 <DIR> d-------- D:\Program Files\Teamspeak2_RC2 2008-07-02 03:46 . 2008-07-09 13:16 <DIR> d-------- D:\Documents and Settings\jean-baptiste reyt\Application Data\skypePM 2008-07-02 03:46 . 2008-07-02 03:46 56 --ah----- D:\WINDOWS\system32\ezsidmv.dat 2008-07-02 03:44 . 2008-07-09 13:52 <DIR> d-------- D:\Documents and Settings\jean-baptiste reyt\Application Data\Skype 2008-07-02 03:43 . 2008-07-02 03:44 <DIR> d-------- D:\Program Files\Skype 2008-07-02 03:43 . 2008-07-02 03:43 <DIR> d-------- D:\Program Files\Common Files\Skype 2008-07-02 03:42 . 2008-07-02 03:43 <DIR> d-------- D:\Documents and Settings\All Users\Application Data\Skype 2008-06-26 13:20 . 2008-06-30 11:32 <DIR> d-------- D:\Documents and Settings\jean-baptiste reyt\Application Data\gtk-2.0 2008-06-26 13:20 . 2008-06-26 13:20 <DIR> d-------- D:\Documents and Settings\jean-baptiste reyt\.thumbnails 2008-06-26 13:18 . 2008-06-30 11:46 <DIR> d-------- D:\Documents and Settings\jean-baptiste reyt\.gimp-2.4 2008-06-26 13:17 . 2008-06-26 13:17 <DIR> d-------- D:\Program Files\GIMP-2.0 2008-06-26 12:14 . 2008-06-26 12:14 <DIR> d-------- D:\Program Files\Bonjour 2008-06-26 11:50 . 2008-06-26 11:50 <DIR> d-------- D:\Program Files\Common Files\Macrovision Shared 2008-06-26 10:49 . 2008-06-26 10:49 355,584 --a------ D:\WINDOWS\system32\TuneUpDefragService.exe 2008-06-26 10:49 . 2008-05-29 09:28 28,416 --a------ D:\WINDOWS\system32\uxtuneup.dll 2008-06-26 10:48 . 2008-06-26 10:49 <DIR> d-------- D:\Program Files\TuneUp Utilities 2008 2008-06-26 10:48 . 2008-06-26 10:48 <DIR> d-------- D:\Program Files\Common Files\Wise Installation Wizard 2008-06-24 09:51 . 2008-06-24 09:51 <DIR> d-------- D:\Program Files\BreakPoint Software 2008-06-24 02:52 . 2008-06-24 02:52 <DIR> d-------- D:\Program Files\InnerSpace 2008-06-20 15:11 . 2008-06-20 15:11 87,040 --a------ D:\rs.DLL 2008-06-20 15:11 . 2008-06-20 15:11 52,736 --a------ D:\ISXRhabotGlobal.DLL 2008-06-20 15:11 . 2008-06-20 15:11 17,408 --a------ D:\ISXCombat.DLL . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-12 14:43 --------- d---a-w D:\Documents and Settings\All Users\Application Data\TEMP 2008-07-10 12:46 2,320,000 ----a-w D:\WINDOWS\system32\TUKernel.exe 2008-07-10 12:25 --------- d-----w D:\Program Files\BrowsingAdvisor 2008-07-10 12:10 --------- d-----w D:\Documents and Settings\jean-baptiste reyt\Application Data\OpenOffice.org2 2008-07-10 11:59 --------- d-----w D:\Program Files\Google 2008-07-09 14:04 230 ----a-w D:\WINDOWS\Fonts\error.exe 2008-07-04 22:36 --------- d-----w D:\Documents and Settings\jean-baptiste reyt\Application Data\uTorrent 2008-06-26 19:48 --------- d-----w D:\Documents and Settings\jean-baptiste reyt\Application Data\LimeWire 2008-06-26 19:13 --------- d-----w D:\Program Files\Common Files\Adobe 2008-06-26 17:56 --------- d-----w D:\Program Files\LimeWire 2008-06-24 17:42 --------- d-----w D:\Program Files\World of Warcraft 2008-06-14 11:04 --------- d-----w D:\Documents and Settings\All Users\Application Data\FLEXnet 2008-06-13 13:10 272,128 ------w D:\WINDOWS\system32\drivers\bthport.sys 2008-06-09 17:17 --------- d-----w D:\Program Files\Vstplugins 2008-06-09 17:17 --------- d-----w D:\Documents and Settings\All Users\Application Data\Sony 2008-06-09 17:14 --------- d-----w D:\Program Files\uTorrent 2008-06-01 15:52 --------- d-----w D:\Documents and Settings\jean-baptiste reyt\Application Data\teamspeak2 2008-05-18 23:53 --------- d-----w D:\Program Files\Steam 2008-05-14 23:08 145,408 ----a-w D:\ISXWoW.NET.DLL 2008-05-07 05:18 1,287,680 ----a-w D:\WINDOWS\system32\quartz.dll 2008-04-23 04:16 826,368 ----a-w D:\WINDOWS\system32\wininet.dll 2008-04-22 18:36 23,552 ----a-w D:\ccode.dll 2008-04-12 18:42 824,320 ----a-w D:\StormLib.dll 2007-08-16 06:09 1,979,631 ----a-w D:\Documents and Settings\jean-baptiste reyt\WoW-2.1.0.6692-to-2.1.0.6729-frFR-patch.exe . ((((((((((((((((((((((((((((( snapshot@2008-07-12_ 8.09.31.95 ))))))))))))))))))))))))))))))))))))))))) . - 2008-07-12 14:57:01 2,048 --s-a-w D:\WINDOWS\bootstat.dat + 2008-07-12 15:57:17 2,048 --s-a-w D:\WINDOWS\bootstat.dat - 2008-07-12 14:57:07 16,384 ----atw D:\WINDOWS\TEMP\Perflib_Perfdata_514.dat + 2008-07-12 15:57:23 16,384 ----atw D:\WINDOWS\TEMP\Perflib_Perfdata_514.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{684BFE7F-F5B2-4AB3-A95E-EB5036A2D286}] 2008-07-09 06:54 29568 --a------ D:\WINDOWS\system32\geBuRKde.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{BA57EEFF-B43F-4CC7-B37B-BB3038F2F1A3}] 2008-07-09 07:01 318208 --a------ D:\WINDOWS\system32\geBuRJaA.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="D:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56 15360] "MtdAcqu"="C:\PROGRA~1\MtdAcqu.exe" [2006-03-08 09:56 278528] "swg"="D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-06 09:54 68856] "msnmsgr"="D:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:55 5674352] "SpybotSD TeaTimer"="D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 09:42 2156368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "QuickTime Task"="D:\Program Files\QuickTime\qttask.exe" [2008-03-28 23:37 413696] "NvCplDaemon"="D:\WINDOWS\system32\NvCpl.dll" [2004-10-29 16:50 4620288] "c8f5592c"="D:\WINDOWS\system32\xoesjrjp.dll" [BU] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="D:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:56 15360] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{684BFE7F-F5B2-4AB3-A95E-EB5036A2D286}"= "D:\WINDOWS\system32\geBuRKde.dll" [2008-07-09 06:54 29568] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] "CDVolume"= {594e76e0-9bfd-437e-b563-024f7214a613} - D:\WINDOWS\Resources\CDVolume.dll [2008-07-09 12:54 22566] "RunOnceRunOnce"= {15f5395f-050e-4c79-8e10-7267073ea8fd} - D:\WINDOWS\Resources\RunOnceRunOnce.dll [2008-07-09 12:54 22566] "PrxVolume"= {ee569faa-876a-49fd-b1d8-406b78516179} - D:\WINDOWS\Resources\PrxVolume.dll [2008-07-09 12:54 22566] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,32,\ [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\geBuRKde] 2008-07-09 06:54 29568 D:\WINDOWS\system32\geBuRKde.dll [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "MsnMsgr"="D:\Program Files\MSN Messenger\msnmsgr.exe" /background "CTFMON.EXE"=D:\WINDOWS\system32\ctfmon.exe "swg"=D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe "Skype"="D:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "iTunesHelper"="D:\Program Files\iTunes\iTunesHelper.exe" "QuickTime Task"="D:\Program Files\QuickTime\QTTask.exe" -atboottime "D-Link AirPlus G"=D:\Program Files\D-Link\AirPlus G\AirGCFG.exe "antiviirus"=D:\Program Files\antiviirus.exe "EoEngine"="D:\Program Files\EoRezo\EoEngine.exe" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "D:\\Program Files\\Messenger\\msmsgs.exe"= "D:\\Program Files\\World of Warcraft\\WoW-2.0.3-frFR-downloader.exe"= "D:\\Program Files\\World of Warcraft\\WoW-2.0.3.6299-to-2.0.10.6448-frFR-downloader.exe"= "D:\\WINDOWS\\system32\\dpvsetup.exe"= "D:\\Program Files\\World of Warcraft\\WoW-2.0.10.6448-to-2.0.12.6546-frFR-downloader.exe"= "D:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "D:\\Program Files\\MSN Messenger\\livecall.exe"= "D:\\Program Files\\World of Warcraft\\BackgroundDownloader.exe"= "D:\\Program Files\\D-Link\\AirPlus G\\AirGCFG.exe"= "D:\\Program Files\\World of Warcraft\\WoW-2.0.12.6546-to-2.1.0.6692-frFR-downloader.exe"= "D:\\Program Files\\uTorrent\\uTorrent.exe"= "D:\\Program Files\\LimeWire\\LimeWire.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "D:\\Program Files\\Mozilla Firefox\\firefox.exe"= "D:\\Program Files\\iTunes\\iTunes.exe"= "D:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3724:TCP"= 3724:TCP:Blizzard Downloader: 3724 "3274:TCP"= 3274:TCP:Blizzard Downloader "6112:TCP"= 6112:TCP:blizzard downloader R2 UxTuneUp;TuneUp Theme Extension;D:\WINDOWS\System32\svchost.exe [2004-08-04 00:56] S3 StreamSurge;StreamSurge Driver;D:\WINDOWS\system32\DRIVERS\ss.sys [] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;D:\WINDOWS\System32\TuneUpDefragService.exe [2008-06-26 10:49] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\C] \Shell\AutoRun\command - C:\setupSNK.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cd12eb1c-b00c-11dc-8020-00195b6f4e1e}] \Shell\AutoRun\command - F:\LaunchU3.exe . Contents of the 'Scheduled Tasks' folder "2008-07-09 14:14:06 D:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - D:\Program Files\Apple Software Update\SoftwareUpdate.exe "2008-07-12 16:00:42 D:\WINDOWS\Tasks\Maintenance en 1 clic.job" - D:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe "2008-07-12 15:39:10 D:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job" - D:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-12 09:09:27 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: D:\WINDOWS\system32\winlogon.exe -> D:\WINDOWS\system32\geBuRKde.dll . Completion time: 2008-07-12 9:12:32 ComboFix-quarantined-files.txt 2008-07-12 16:12:25 ComboFix2.txt 2008-07-12 15:10:52 Pre-Run: 15,461,654,528 bytes free Post-Run: 15,451,123,712 bytes free 206 --- E O F --- 2008-07-12 15:05:15 Voilu! |
Résultats pour Ralentissement système louche
Résultats pour Ralentissement système louche
Résultats pour Ralentissement système louche
Résultats pour Ralentissement système louche
Résultats pour Ralentissement système louche