ComboFix 08-01-23.1B - home 2008-01-24 20:34:04.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.69 [GMT 1:00]
Endroit: C:\Documents and Settings\home\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration
[color=red]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/color]
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\system32\lryyiwuv.ini
.
((((((((((((((((((((((((((((( Fichiers créés 2007-12-24 to 2008-01-24 ))))))))))))))))))))))))))))))))))))
.
2008-01-24 20:21 . 2008-01-24 20:21 525 --a------ C:\hpfr3420.xml
2008-01-24 18:16 . 2008-01-24 18:25 <REP> d-------- C:\Program Files\Navilog1
2008-01-24 18:14 . 2008-01-24 18:14 <REP> d-------- C:\Program Files\Trend Micro
2008-01-21 11:50 . 2008-01-21 11:50 <REP> d-------- C:\WINDOWS\twain_32
2008-01-17 18:45 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2008-01-17 18:45 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2008-01-17 18:45 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2008-01-17 18:45 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2008-01-17 18:45 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2008-01-17 18:45 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2008-01-17 18:44 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2008-01-17 18:44 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2008-01-05 18:23 . 2008-01-05 18:23 <REP> d-------- C:\Program Files\Xi
2008-01-03 11:33 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-02 21:59 . 2008-01-02 21:59 <REP> d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard
2007-12-31 21:41 . 2007-12-31 21:41 <REP> d-------- C:\Program Files\SystemRequirementsLab
2007-12-30 11:33 . 2008-01-03 11:18 15,360 --a------ C:\WINDOWS\system32\ctfmon .exe
2007-12-30 11:32 . 2007-12-31 12:28 155,648 --a------ C:\WINDOWS\system32\NeroCheck .exe
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-24 11:53 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-22 11:22 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-01-22 11:22 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-01-18 09:28 --------- d-----w C:\Program Files\WarRock
2008-01-17 17:16 --------- d-----w C:\Program Files\Wanadoo
2008-01-17 17:16 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-01-17 14:40 --------- d-----w C:\Program Files\Windows Media Connect 2
2008-01-17 14:37 --------- d-----w C:\Program Files\LCPA Lite
2008-01-04 14:05 2,779,007 ----a-w C:\WINDOWS\Internet Logs\tvDebug.zip
2007-12-27 15:10 21,840 ----atw C:\WINDOWS\system32\SIntfNT.dll
2007-12-27 15:10 17,212 ----atw C:\WINDOWS\system32\SIntf32.dll
2007-12-27 15:10 12,067 ----atw C:\WINDOWS\system32\SIntf16.dll
2007-12-21 18:21 --------- d-----w C:\Program Files\Fichiers communs\Blizzard Entertainment
2007-12-20 17:23 --------- d-----w C:\Program Files\Microsoft Works
2007-12-20 17:18 --------- d-----w C:\Program Files\Mindscape
2007-12-20 12:00 --------- d-----w C:\Program Files\Fichiers communs\BOONTY Shared
2007-12-15 12:40 --------- d-----w C:\Program Files\Java
2007-11-07 09:28 728,576 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
2007-10-24 00:47 96,760 ----a-w C:\WINDOWS\system32\dfshim.dll
2007-10-24 00:47 84,480 ----a-w C:\WINDOWS\system32\mscories.dll
2007-10-24 00:47 282,112 ----a-w C:\WINDOWS\system32\mscoree.dll
2007-10-24 00:47 158,720 ----a-w C:\WINDOWS\system32\mscorier.dll
2007-03-03 13:51 278,528 -c--a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
.
Code: 
- <pre>
- ----a-w 39,792 2007-12-31 11:28:48 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl .exe
- ----a-w 295,936 2007-12-31 11:28:44 C:\Program Files\Goto Software\Vade Retro\Vaderetro_oe .exe
- ----a-w 132,496 2007-12-31 11:28:44 C:\Program Files\Java\jre1.6.0_03\bin\jusched .exe
- ----a-w 1,694,208 2007-12-31 11:28:50 C:\Program Files\Messenger\msmsgs .exe
- ----a-w 15,360 2008-01-03 10:18:02 C:\WINDOWS\system32\ctfmon .exe
- ----a-w 155,648 2007-12-31 11:28:35 C:\WINDOWS\system32\NeroCheck .exe
- ----a-w 188,416 2007-12-31 11:28:44 C:\WINDOWS\system32\spool\drivers\w32x86\hpztsb07 .exe
- </pre>
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 13:00 15360]
"Shareaza"="D:\Program Files\Shareaza\Shareaza.exe" [2008-01-01 17:49 4739072]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 12:22 7700480]
"nwiz"="nwiz.exe" [2006-10-22 12:22 1622016 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 12:22 86016]
"SkyTel"="SkyTel.EXE" [2007-02-28 14:44 2879488 C:\WINDOWS\SkyTel.exe]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-28 14:44 16248320 C:\WINDOWS\RTHDCPL.exe]
"Vaderetro Outlook"="C:\PROGRA~1\GOTOSO~1\VADERE~1\VrMoRegister.exe" [2006-07-22 11:59 44544]
"ZoneAlarm Client"="D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-03-09 00:02 919280]
"!AVG Anti-Spyware"="D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]
"avast!"="D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
C:\Documents and Settings\home\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 2.2.lnk - C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe [2007-02-02 15:54:56 393216]
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
hp psc 1000 series.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2002-12-02 20:08:34 147456]
hpoddt01.exe.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2002-12-02 19:56:10 40960]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 09:01:04 83360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LcpaLite]
--a--c--- 2006-03-03 12:27 4009984 C:\Program Files\LCPA Lite\Lcpa Lite.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOKIT]
C:\PROGRA~1\Wanadoo\Shell.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON]
C:\PROGRA~1\Wanadoo\GestMaj.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH]
C:\PROGRA~1\Wanadoo\Watch.exe
S3 ADM8511;Convertisseur USB vers Fast Ethernet ADMtek ADM8511/AN986;C:\WINDOWS\system32\DRIVERS\ADM8511.SYS [2001-08-17 20:11]
S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [2007-12-20 13:00]
S3 cel90xbe;cel90xbe;C:\DOCUME~1\home\LOCALS~1\Temp\cel90xbe.sys []
*Newly Created Service* - CATCHME
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2007-07-07 15:52:14 C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1175260929.job"
- C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe4-I
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-24 20:36:04
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
Temps d'accomplissement: 2008-01-24 20:37:04
ComboFix-quarantined-files.txt 2008-01-24 19:37:01
.
2008-01-23 13:45:30 --- E O F ---
14 ans.
