Aller au contenu
View in the app

A better way to browse. Learn more.

Next

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

[LOGICIEL] [resolu] Tr/Agent.job, Impossible à supprimer

Featured Replies

Posté(e)

Bonjour, Antivir me detecte le virus Tr/Agent.job. Jai beau lui dire de le déplacer en quarantaine ou de le supprimer, il revient à chaque fois, j'ai également fait un scan avec MAM. Il m'a trouvé la même chose, j'ai demandé à ce qui le supprime mais c'est toujours là.

Pouvez-vous m'aidez à me débarasser de Tr/Agent.job ?

Merci.

Posté(e)

Salut,

effectivement, tu as chopé un truc pas très facile à désinfecter (un exemple: http://forum.malekal.com/viewtopic.php?f=3...;sk=t&sd=a).

Il va donc falloir t'en remettre à un spécialiste.

Ici, c'est Snooky :cartonrouge: : poste-lui pour commencer un rapport Hijackthis dans la centralisation du même nom (lien dans ma signature).

Prépare-toi à une désinfection compliquée.

Bon courage. (à toi et à Snooky ^^)

Posté(e)
  • Auteur

OK.

Voici le rapport de ComboFix :

ComboFix 09-02-06.02 - Mathias 2009-02-07 15:35:44.1 - NTFSx86

Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.3326.2368 [GMT 1:00]

Lancé depuis: c:\users\Mathias\Desktop\ComboFix.exe

* Un nouveau point de restauration a été créé

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\users\Mathias\AppData\Roaming\dllhst3g.exe

c:\users\Mathias\AppData\Roaming\esentutl.exe

c:\users\Mathias\AppData\Roaming\logman.exe

c:\users\Mathias\AppData\Roaming\Microsoft\ieudinit.exe

.

((((((((((((((((((((((((((((( Fichiers créés du 2009-01-07 au 2009-02-07 ))))))))))))))))))))))))))))))))))))

.

2009-02-07 15:28 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\sessmgr.exe

2009-02-06 17:52 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\mqtgsvc.exe

2009-02-06 17:30 . 2009-02-06 22:41 <REP> d-------- c:\users\All Users\Electronic Arts

2009-02-06 17:30 . 2009-02-06 22:41 <REP> d-------- c:\programdata\Electronic Arts

2009-02-06 17:30 . 2009-02-06 17:30 <REP> d-------- c:\program files\Electronic Arts

2009-02-06 17:30 . 2009-02-06 17:30 1,202 --a------ c:\windows\System32\ealregsnapshot1.reg

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Videos

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Searches

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Saved Games

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Pictures

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Music

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Links

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Downloads

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Documents

2009-02-06 17:17 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\cisvc.exe

2009-02-06 17:14 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\mstinit.exe

2009-02-06 17:12 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\rsvp.exe

2009-02-06 17:12 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\clipsrv.exe

2009-02-05 20:21 . 2009-02-06 22:23 <REP> d-------- c:\users\All Users\Google Updater

2009-02-05 20:21 . 2009-02-06 22:23 <REP> d-------- c:\programdata\Google Updater

2009-02-05 20:21 . 2009-02-05 20:27 <REP> d-------- c:\program files\Google

2009-02-05 18:16 . 2009-02-05 18:16 <REP> d-------- c:\users\Mathias\AppData\Roaming\Convivea

2009-02-05 18:16 . 2004-03-09 00:00 152,848 --a------ c:\windows\System32\comdlg32.OCX

2009-02-05 18:16 . 2004-03-09 00:00 124,688 --a------ c:\windows\System32\mswinsck.ocx

2009-02-05 13:20 . 2009-02-07 10:58 <REP> d-------- c:\users\Mathias\AppData\Roaming\uTorrent

2009-02-04 18:26 . 2009-02-04 18:26 <REP> d-------- c:\program files\PDFCreator

2009-02-04 18:26 . 2004-03-09 00:00 662,288 --a------ c:\windows\System32\MSCOMCT2.OCX

2009-02-04 18:26 . 1998-07-13 01:08 141,312 --a------ c:\windows\System32\MSCMCFR.DLL

2009-02-04 18:26 . 1998-06-24 00:00 137,000 --a------ c:\windows\System32\MSMAPI32.OCX

2009-02-04 18:26 . 1998-07-13 01:08 119,568 --a------ c:\windows\System32\VB6FR.DLL

2009-02-04 18:26 . 2001-10-28 16:42 116,224 --a------ c:\windows\System32\pdfcmnnt.dll

2009-02-04 18:26 . 1998-07-13 01:08 59,904 --a------ c:\windows\System32\MSCC2FR.DLL

2009-02-04 18:26 . 1998-07-06 00:00 23,552 --a------ c:\windows\System32\MSMPIDE.DLL

2009-02-03 12:49 . 2009-02-03 12:49 <REP> d-------- c:\program files\Java

2009-02-01 16:43 . 2009-02-01 16:43 0 --ah----- c:\windows\System32\drivers\Msft_Kernel_LHidFilt_01005.Wdf

2009-02-01 15:16 . 2009-02-01 15:16 <REP> d-------- c:\program files\Remove Empty Directories

2009-02-01 15:11 . 2008-06-20 02:14 781,344 --a------ c:\windows\System32\PresentationNative_v0300.dll

2009-02-01 15:11 . 2008-06-20 02:14 622,080 --a------ c:\windows\System32\icardagt.exe

2009-02-01 15:11 . 2008-06-20 02:14 326,160 --a------ c:\windows\System32\PresentationHost.exe

2009-02-01 15:11 . 2008-06-20 02:14 105,016 --a------ c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll

2009-02-01 15:11 . 2008-06-20 02:14 97,800 --a------ c:\windows\System32\infocardapi.dll

2009-02-01 15:11 . 2008-06-20 02:14 43,544 --a------ c:\windows\System32\PresentationHostProxy.dll

2009-02-01 15:11 . 2008-06-20 02:14 37,384 --a------ c:\windows\System32\infocardcpl.cpl

2009-02-01 15:11 . 2008-06-20 02:14 11,264 --a------ c:\windows\System32\icardres.dll

2009-02-01 15:07 . 2008-07-27 19:03 282,112 --a------ c:\windows\System32\mscoree.dll

2009-02-01 15:07 . 2008-07-27 19:03 158,720 --a------ c:\windows\System32\mscorier.dll

2009-02-01 15:07 . 2008-07-27 19:03 96,760 --a------ c:\windows\System32\dfshim.dll

2009-02-01 15:07 . 2008-07-27 19:03 83,968 --a------ c:\windows\System32\mscories.dll

2009-02-01 15:07 . 2008-07-27 19:03 41,984 --a------ c:\windows\System32\netfxperf.dll

2009-01-26 19:17 . 2009-01-26 19:17 <REP> d-------- c:\program files\directx

2009-01-14 08:15 . 2009-01-14 08:15 4,235,776 --a------ c:\windows\System32\drivers\atikmdag.sys

2009-01-14 07:53 . 2008-12-16 03:42 288,768 --a------ c:\windows\System32\drivers\srv.sys

2009-01-14 06:01 . 2009-01-14 06:01 286,720 --a------ c:\windows\System32\Ati2evxx.dll

2009-01-14 06:01 . 2009-01-14 06:01 274,432 --a------ c:\windows\System32\Oemdspif.dll

2009-01-14 06:01 . 2009-01-14 06:01 43,520 --a------ c:\windows\System32\ati2edxx.dll

2009-01-14 05:59 . 2009-01-14 05:59 729,088 --a------ c:\windows\System32\Ati2evxx.exe

2009-01-14 05:50 . 2009-01-14 05:50 2,345,472 --a------ c:\windows\System32\atidxx32.dll

2009-01-14 05:21 . 2009-01-14 05:21 79,008 --a------ c:\windows\System32\atiumdva.cap

2009-01-14 05:08 . 2009-01-14 05:08 50,688 --a------ c:\windows\System32\amdpcom32.dll

2009-01-14 04:59 . 2009-01-14 04:59 11,247,616 --a------ c:\windows\System32\atioglxx.dll

2009-01-14 04:50 . 2009-01-14 04:50 53,248 --a------ c:\windows\System32\drivers\ati2erec.dll

2009-01-14 03:54 . 2009-01-14 03:54 57,344 --a------ c:\windows\System32\amdcalrt.dll

2009-01-14 03:53 . 2009-01-14 03:53 53,248 --a------ c:\windows\System32\amdcalcl.dll

2009-01-14 03:51 . 2009-01-14 03:51 3,239,936 --a------ c:\windows\System32\amdcaldd.dll

2009-01-12 20:03 . 2009-01-12 20:03 <REP> d-------- c:\program files\SystemRequirementsLab

2009-01-10 18:59 . 2009-01-10 18:59 <REP> d-------- c:\users\All Users\Media Center Programs

2009-01-10 18:59 . 2009-01-10 18:59 <REP> d-------- c:\programdata\Media Center Programs

2009-01-09 13:33 . 2009-01-09 13:33 <REP> d-------- c:\program files\Lavalys

2009-01-09 13:30 . 2009-01-09 13:30 <REP> d-------- c:\users\All Users\ATI

2009-01-09 13:30 . 2009-01-09 13:30 <REP> d-------- c:\programdata\ATI

2009-01-09 13:23 . 2009-01-09 13:23 <REP> d-------- C:\ATI

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-02-07 09:02 --------- d-----w c:\users\Mathias\AppData\Roaming\AIMP

2009-02-06 16:30 --------- d--h--w c:\program files\InstallShield Installation Information

2009-02-06 16:29 --------- d-----w c:\program files\Common Files\InstallShield

2009-02-03 11:49 410,984 ----a-w c:\windows\System32\deploytk.dll

2009-02-01 13:59 319,488 ----a-w c:\windows\HideWin.exe

2009-02-01 13:59 319,456 ----a-w c:\windows\DIFxAPI.dll

2009-01-31 11:22 --------- d-----w c:\program files\JKDefrag v3.36

2009-01-29 19:12 --------- d-----w c:\program files\Opera

2009-01-23 11:47 --------- d-----w c:\users\Mathias\AppData\Roaming\DAEMON Tools Pro

2009-01-21 17:16 --------- d-----w c:\program files\AIMP2

2009-01-15 17:58 --------- d-----w c:\program files\Malwarebytes' Anti-Malware

2009-01-14 15:11 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys

2009-01-14 15:11 15,504 ----a-w c:\windows\system32\drivers\mbam.sys

2009-01-14 06:55 --------- d-----w c:\program files\Windows Mail

2009-01-14 05:03 425,984 ----a-w c:\windows\System32\ATIDEMGX.dll

2009-01-14 05:02 159,744 ----a-w c:\windows\System32\atitmmxx.dll

2009-01-14 05:01 348,160 ----a-w c:\windows\System32\atipdlxx.dll

2009-01-14 04:44 3,963,392 ----a-w c:\windows\System32\atiumdag.dll

2009-01-14 04:22 4,765,696 ----a-w c:\windows\System32\atiumdva.dll

2009-01-14 04:07 122,880 ----a-w c:\windows\System32\atiadlxx.dll

2009-01-09 21:04 --------- d-----w c:\program files\ATI

2009-01-09 12:26 --------- d-----w c:\program files\ATI Technologies

2009-01-04 13:04 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_xusb21_01005.Wdf

2009-01-03 12:37 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf

2009-01-02 17:13 --------- d-----w c:\program files\CCleaner

2009-01-02 17:09 --------- d-----w c:\program files\K-Lite Codec Pack

2009-01-02 13:12 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_xusb21_01001.Wdf

2009-01-02 13:11 --------- d-----w c:\program files\Microsoft Xbox 360 Accessories

2009-01-01 20:52 130,208 ------r c:\windows\bwUnin-8.1.1.87-8876480SL.exe

2009-01-01 11:51 127,034 ------r c:\windows\bwUnin-8.1.1.50-8876480SL.exe

2009-01-01 11:51 --------- d-----w c:\users\Mathias\AppData\Roaming\Logitech

2009-01-01 11:51 --------- d-----w c:\program files\Common Files\Logishrd

2009-01-01 11:50 --------- d-----w c:\program files\Logitech

2009-01-01 11:49 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_LUsbFilt_01005.Wdf

2009-01-01 11:49 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf

2009-01-01 11:48 --------- d-----w c:\users\Mathias\AppData\Roaming\InstallShield

2009-01-01 11:48 --------- d-----w c:\programdata\Logitech

2009-01-01 11:47 --------- d-----w c:\programdata\LogiShrd

2009-01-01 11:45 --------- d-----w c:\program files\Common Files\Logitech

2008-12-31 18:50 1,700,352 ----a-w c:\windows\System32\gdiplus.dll

2008-12-31 18:50 1,060,864 ----a-w c:\windows\System32\mfc71.dll

2008-12-31 18:41 --------- d--h--r c:\users\Mathias\AppData\Roaming\SecuROM

2008-12-31 18:41 --------- d-----w c:\program files\Microsoft Games for Windows - LIVE

2008-12-31 18:37 107,888 ----a-w c:\windows\System32\CmdLineExt.dll

2008-12-31 16:52 --------- d-----w c:\program files\RocketDock

2008-12-31 15:14 --------- d-----w c:\program files\Microsoft.NET

2008-12-31 15:11 --------- d-----w c:\users\Mathias\AppData\Roaming\DAEMON Tools Lite

2008-12-30 22:55 --------- d-----w c:\program files\Quicksys

2008-12-30 22:52 --------- d-----w c:\users\Mathias\AppData\Roaming\SumatraPDF

2008-12-30 22:51 --------- d-----w c:\program files\SumatraPDF

2008-12-30 22:07 --------- d-----w c:\users\Mathias\AppData\Roaming\InfraRecorder

2008-12-30 22:07 --------- d-----w c:\program files\InfraRecorder

2008-12-30 21:53 --------- d-----w c:\users\Mathias\AppData\Roaming\DAEMON Tools

2008-12-30 21:52 --------- d-----w c:\programdata\DAEMON Tools Lite

2008-12-30 21:52 --------- d-----w c:\program files\DAEMON Tools Lite

2008-12-30 21:49 717,296 ----a-w c:\windows\system32\drivers\sptd.sys

2008-12-30 21:15 --------- d-----w c:\users\Mathias\AppData\Roaming\Malwarebytes

2008-12-30 21:15 --------- d-----w c:\programdata\Malwarebytes

2008-12-30 21:07 --------- d-----w c:\programdata\Avira

2008-12-30 21:07 --------- d-----w c:\program files\Avira

2008-12-30 21:00 --------- d-----w c:\program files\Media Player Classic

2008-12-30 20:59 --------- d-----w c:\users\Mathias\AppData\Roaming\Media Player Classic

2008-12-30 20:58 --------- d-----w c:\program files\IZArc

2008-12-30 20:31 --------- d-----w c:\program files\NETGEAR

2008-12-30 20:27 --------- d-----w c:\users\Mathias\AppData\Roaming\ATI

2008-12-30 20:25 --------- d-----w c:\program files\Common Files\ATI Technologies

2008-12-30 20:20 --------- d-----w c:\program files\Marvell

2008-12-30 20:09 --------- d-----w c:\program files\Intel

2008-12-30 20:04 --------- d-sh--w c:\programdata\Modèles

2008-12-30 20:04 --------- d-sh--w c:\programdata\Menu Démarrer

2008-12-30 20:04 --------- d-sh--w c:\programdata\Favoris

2008-12-30 20:04 --------- d-sh--w c:\programdata\Bureau

2008-12-30 20:04 --------- d-sh--w c:\program files\Fichiers communs

2008-12-16 13:05 48,128 ----a-w c:\windows\system32\drivers\L1E60x86.sys

2008-12-08 11:53 57,344 ----a-w c:\windows\System32\ff_vfw.dll

2008-12-07 18:08 795,648 ----a-w c:\windows\System32\xvidcore.dll

2008-12-07 18:08 130,048 ----a-w c:\windows\System32\xvidvfw.dll

2008-11-07 15:38 84,496 ----a-w c:\windows\System32\KemXML.dll

2008-11-07 15:38 170,512 ----a-w c:\windows\System32\kemutb.dll

2008-11-07 15:38 145,936 ----a-w c:\windows\System32\KemUtil.dll

2008-11-07 15:38 117,264 ----a-w c:\windows\System32\KemWnd.dll

2008-11-07 15:37 301,656 ----a-w c:\windows\System32\BtCoreIf.dll

2008-01-21 02:43 174 --sha-w c:\program files\desktop.ini

2007-04-23 13:21 269,824 ----a-w c:\windows\inf\WG111v3\Vista64\wg111v3.sys

2007-04-23 13:19 227,328 ----a-w c:\windows\inf\WG111v3\WG111v3.sys

2007-04-23 13:19 227,328 ----a-w c:\windows\inf\WG111v3\Vista\wg111v3.sys

2006-12-15 10:30 98,304 ----a-w c:\windows\inf\WG111v3\UScanM.exe

2006-12-15 10:30 315,392 ----a-w c:\windows\inf\WG111v3\InstallDriver.exe

2006-12-15 10:30 28,672 ----a-w c:\windows\inf\WG111v3\SetDrv.exe

2006-12-15 10:30 212,992 ----a-w c:\windows\inf\WG111v3\CopyWHQLDriver.exe

2006-12-15 10:30 20,480 ----a-w c:\windows\inf\WG111v3\RTWUPath.exe

2006-12-15 10:30 19,968 ----a-w c:\windows\inf\WG111v3\RTWREFU.EXE

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

"Google Update"="c:\users\Mathias\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-01-31 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]

"Launch LGDCore"="c:\program files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-07-23 1126400]

"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2007-09-27 734264]

"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-03 148888]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-10-10 c:\windows\KHALMNPR.Exe]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-01-01 91440]

Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-02-01 809488]

NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14 1695744]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\windows]

"load"=c:\users\Mathias\AppData\Roaming\MICROS~1\esentutl.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"TCP Query User{FE192C99-F762-4C67-A785-5F3A41D8DF62}d:\\téléchargement\\emule\\emule.exe"= UDP:d:\téléchargement\emule\emule.exe:eMule

"UDP Query User{692464F3-7913-4E21-9CAF-3AB30118CAA5}d:\\téléchargement\\emule\\emule.exe"= TCP:d:\téléchargement\emule\emule.exe:eMule

"{A0E7E796-1336-4536-A8D7-54B1C9BA7263}"= UDP:d:\jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club

"{4B9AB4D9-3443-4B49-965A-D4AB1DFF511E}"= TCP:d:\jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club

"{CCD649DA-2F00-4967-9AD1-46E7D3851D4C}"= UDP:d:\jeux\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:Grand Theft Auto IV

"{2DEFF54C-ED98-4FBE-9319-C05EB6478BA2}"= TCP:d:\jeux\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:Grand Theft Auto IV

"TCP Query User{B2158CE8-CE96-4310-9239-F66D838D77F2}d:\\jeux\\rockstar games\\grand theft auto iv\\gtaiv.exe"= UDP:d:\jeux\rockstar games\grand theft auto iv\gtaiv.exe:Grand Theft Auto IV

"UDP Query User{EE3280B1-D7AE-4203-A78A-9A3C3F5E0BA5}d:\\jeux\\rockstar games\\grand theft auto iv\\gtaiv.exe"= TCP:d:\jeux\rockstar games\grand theft auto iv\gtaiv.exe:Grand Theft Auto IV

"{EBF77E48-737F-45CE-BED0-231E1F279A32}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{984D7E41-3872-45CD-98F5-9BF642AF7676}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{DC96EF1A-9B8E-4A25-8058-2802DCEF1C3E}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{5D56120D-D172-4CEB-B342-4B7545CAC497}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{F1C33631-2EF5-4F42-825C-AAFE1430902D}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{B1AF75A4-161C-4522-A072-F85DDC9F0217}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"TCP Query User{583738C4-BC3C-4FB4-B68A-CE146F866456}c:\\program files\\opera\\opera.exe"= UDP:c:\program files\opera\opera.exe:Opera Internet Browser

"UDP Query User{FFBF7DB4-1604-4F83-9307-11D6E540DCF1}c:\\program files\\opera\\opera.exe"= TCP:c:\program files\opera\opera.exe:Opera Internet Browser

"{54E1C3CE-3BDB-4334-838C-05773BF8753F}"= UDP:d:\téléchargement\µTorrent\uTorrent.exe:µTorrent (TCP-In)

"{D684A30E-C1CB-4907-B0D3-26F8A29F4F8B}"= TCP:d:\téléchargement\µTorrent\uTorrent.exe:µTorrent (UDP-In)

"{06DB5605-32B3-4F20-B88E-1147F7D46722}"= UDP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutLauncher.exe:Burnout Paradise The Ultimate Box

"{199CB686-7667-48FC-9026-589C095A4210}"= TCP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutLauncher.exe:Burnout Paradise The Ultimate Box

"{95714B72-F3EE-473D-AB8E-16EB882F299B}"= UDP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutConfigTool.exe:Burnout Paradise The Ultimate Box

"{154B4EBB-FDD7-4E54-BC9B-2D37B646DC4F}"= TCP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutConfigTool.exe:Burnout Paradise The Ultimate Box

"{E0F3CC28-90B4-41F5-9AC4-D1594BC76BF6}"= UDP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutParadise.exe:Burnout Paradise The Ultimate Box

"{E127B845-0CB9-497F-9E4B-5D0364DACA86}"= TCP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutParadise.exe:Burnout Paradise The Ultimate Box

"TCP Query User{ED445966-C75A-4471-8064-7BA0EA651A49}c:\\program files\\electronic arts\\eadm\\core.exe"= UDP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager

"UDP Query User{0A2E0582-ACBC-40A3-82F3-7EE3D6AA30D2}c:\\program files\\electronic arts\\eadm\\core.exe"= TCP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager

R0 mv61xx;mv61xx;c:\windows\System32\drivers\mv61xx.sys [2008-07-22 151592]

R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\System32\drivers\L1E60x86.sys [2008-12-31 48128]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\System32\drivers\mbamswissarmy.sys [2008-12-30 38496]

R3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\System32\drivers\wg111v3.sys [2008-12-30 227328]

S2 gupdate1c987c7b322b263;Google Update Service (gupdate1c987c7b322b263);c:\program files\Google\Update\GoogleUpdate.exe [2009-02-05 133104]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - MBAMSWISSARMY

.

Contenu du dossier 'Tâches planifiées'

2009-02-07 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-05 20:21]

2009-02-07 c:\windows\Tasks\GoogleUpdateTaskMachine.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-05 20:26]

2009-02-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-192886970-665670061-1568562545-1000.job

- c:\users\Mathias\AppData\Local\Google\Update\GoogleUpdate.exe [2009-01-31 11:24]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.google.fr/ig?hl=fr&source=iglk

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-02-07 15:38:27

Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès

Fichiers cachés: 0

**************************************************************************

.

Heure de fin: 2009-02-07 15:39:45

ComboFix-quarantined-files.txt 2009-02-07 14:39:43

Avant-CF: 110 995 087 360 octets libres

Après-CF: 110,972,657,664 octets libres

270 --- E O F --- 2009-02-02 11:24:42

Posté(e)
  • Auteur

Voici le rapport de MBAM :

Malwarebytes' Anti-Malware 1.33

Version de la base de données: 1736

Windows 6.0.6001 Service Pack 1

07/02/2009 16:33:26

mbam-log-2009-02-07 (16-33-26).txt

Type de recherche: Examen complet (C:\|D:\|E:\|)

Eléments examinés: 147180

Temps écoulé: 59 minute(s), 40 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

Fichier(s) infecté(s):

(Aucun élément nuisible détecté)

Posté(e)
  • Auteur

Le rapport de Dr. Web :

ComboFix.exe/data002\32788R22FWJFW\c.bat C:\Documents and Settings\Mathias\Desktop\ComboFix.exe/data002 Probablement BATCH.Virus

ComboFix.exe/data002\32788R22FWJFW\psexec.cfexe C:\Documents and Settings\Mathias\Desktop\ComboFix.exe/data002 Program.PsExec.171

data002 C:\Documents and Settings\Mathias\Desktop L'archive contient des éléments infectés

ComboFix.exe C:\Documents and Settings\Mathias\Desktop Conteneur comporte des objets infectés Quarantaine.

ComboFix.exe/data002\32788R22FWJFW\c.bat C:\Documents and Settings\Mathias\DoctorWeb\Quarantine\ComboFix.exe/data002 Probablement BATCH.Virus

ComboFix.exe/data002\32788R22FWJFW\psexec.cfexe C:\Documents and Settings\Mathias\DoctorWeb\Quarantine\ComboFix.exe/data002 Program.PsExec.171

data002 C:\Documents and Settings\Mathias\DoctorWeb\Quarantine L'archive contient des éléments infectés

ComboFix.exe C:\Documents and Settings\Mathias\DoctorWeb\Quarantine Conteneur comporte des objets infectés Quarantaine.

Quand je fais ça : http://www.malekal.com/Trojan_Agent_iob.php Je n'ai pas de ligne F3

Archivé

Ce sujet est désormais archivé et ne peut plus recevoir de nouvelles réponses.

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.