[LOGICIEL] [resolu] Tr/Agent.job, Impossible à supprimer

matt30-bis · le 7 février 2009

Bonjour, Antivir me detecte le virus Tr/Agent.job. Jai beau lui dire de le déplacer en quarantaine ou de le supprimer, il revient à chaque fois, j'ai également fait un scan avec MAM. Il m'a trouvé la même chose, j'ai demandé à ce qui le supprime mais c'est toujours là.

Pouvez-vous m'aidez à me débarasser de Tr/Agent.job ?

Merci.

noisette · le 7 février 2009

Salut,

effectivement, tu as chopé un truc pas très facile à désinfecter (un exemple: http://forum.malekal.com/viewtopic.php?f=3...;sk=t&sd=a).

Il va donc falloir t'en remettre à un spécialiste.

Ici, c'est Snooky :cartonrouge: : poste-lui pour commencer un rapport Hijackthis dans la centralisation du même nom (lien dans ma signature).

Prépare-toi à une désinfection compliquée.

Bon courage. (à toi et à Snooky ^^)

snooky · le 7 février 2009

Salut,

lance MBAM , supprime tout ce qu'il trouve et poste le rapport créé :

http://www.malwarebytes.org/mbam.php

Lance ComboFix et poste le rapport cré :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

matt30-bis · le 7 février 2009

OK.

Voici le rapport de ComboFix :

ComboFix 09-02-06.02 - Mathias 2009-02-07 15:35:44.1 - NTFSx86

Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.3326.2368 [GMT 1:00]

Lancé depuis: c:\users\Mathias\Desktop\ComboFix.exe

* Un nouveau point de restauration a été créé

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\users\Mathias\AppData\Roaming\dllhst3g.exe

c:\users\Mathias\AppData\Roaming\esentutl.exe

c:\users\Mathias\AppData\Roaming\logman.exe

c:\users\Mathias\AppData\Roaming\Microsoft\ieudinit.exe

.

((((((((((((((((((((((((((((( Fichiers créés du 2009-01-07 au 2009-02-07 ))))))))))))))))))))))))))))))))))))

.

2009-02-07 15:28 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\sessmgr.exe

2009-02-06 17:52 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\mqtgsvc.exe

2009-02-06 17:30 . 2009-02-06 22:41 <REP> d-------- c:\users\All Users\Electronic Arts

2009-02-06 17:30 . 2009-02-06 22:41 <REP> d-------- c:\programdata\Electronic Arts

2009-02-06 17:30 . 2009-02-06 17:30 <REP> d-------- c:\program files\Electronic Arts

2009-02-06 17:30 . 2009-02-06 17:30 1,202 --a------ c:\windows\System32\ealregsnapshot1.reg

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Videos

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Searches

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Saved Games

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Pictures

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Music

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Links

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Downloads

2009-02-06 17:29 . 2009-02-06 17:29 <REP> dr------- c:\windows\System32\config\systemprofile\Documents

2009-02-06 17:17 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\cisvc.exe

2009-02-06 17:14 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\mstinit.exe

2009-02-06 17:12 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\rsvp.exe

2009-02-06 17:12 . 2009-02-06 17:12 81,920 --a------ c:\users\Mathias\AppData\Roaming\clipsrv.exe

2009-02-05 20:21 . 2009-02-06 22:23 <REP> d-------- c:\users\All Users\Google Updater

2009-02-05 20:21 . 2009-02-06 22:23 <REP> d-------- c:\programdata\Google Updater

2009-02-05 20:21 . 2009-02-05 20:27 <REP> d-------- c:\program files\Google

2009-02-05 18:16 . 2009-02-05 18:16 <REP> d-------- c:\users\Mathias\AppData\Roaming\Convivea

2009-02-05 18:16 . 2004-03-09 00:00 152,848 --a------ c:\windows\System32\comdlg32.OCX

2009-02-05 18:16 . 2004-03-09 00:00 124,688 --a------ c:\windows\System32\mswinsck.ocx

2009-02-05 13:20 . 2009-02-07 10:58 <REP> d-------- c:\users\Mathias\AppData\Roaming\uTorrent

2009-02-04 18:26 . 2009-02-04 18:26 <REP> d-------- c:\program files\PDFCreator

2009-02-04 18:26 . 2004-03-09 00:00 662,288 --a------ c:\windows\System32\MSCOMCT2.OCX

2009-02-04 18:26 . 1998-07-13 01:08 141,312 --a------ c:\windows\System32\MSCMCFR.DLL

2009-02-04 18:26 . 1998-06-24 00:00 137,000 --a------ c:\windows\System32\MSMAPI32.OCX

2009-02-04 18:26 . 1998-07-13 01:08 119,568 --a------ c:\windows\System32\VB6FR.DLL

2009-02-04 18:26 . 2001-10-28 16:42 116,224 --a------ c:\windows\System32\pdfcmnnt.dll

2009-02-04 18:26 . 1998-07-13 01:08 59,904 --a------ c:\windows\System32\MSCC2FR.DLL

2009-02-04 18:26 . 1998-07-06 00:00 23,552 --a------ c:\windows\System32\MSMPIDE.DLL

2009-02-03 12:49 . 2009-02-03 12:49 <REP> d-------- c:\program files\Java

2009-02-01 16:43 . 2009-02-01 16:43 0 --ah----- c:\windows\System32\drivers\Msft_Kernel_LHidFilt_01005.Wdf

2009-02-01 15:16 . 2009-02-01 15:16 <REP> d-------- c:\program files\Remove Empty Directories

2009-02-01 15:11 . 2008-06-20 02:14 781,344 --a------ c:\windows\System32\PresentationNative_v0300.dll

2009-02-01 15:11 . 2008-06-20 02:14 622,080 --a------ c:\windows\System32\icardagt.exe

2009-02-01 15:11 . 2008-06-20 02:14 326,160 --a------ c:\windows\System32\PresentationHost.exe

2009-02-01 15:11 . 2008-06-20 02:14 105,016 --a------ c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll

2009-02-01 15:11 . 2008-06-20 02:14 97,800 --a------ c:\windows\System32\infocardapi.dll

2009-02-01 15:11 . 2008-06-20 02:14 43,544 --a------ c:\windows\System32\PresentationHostProxy.dll

2009-02-01 15:11 . 2008-06-20 02:14 37,384 --a------ c:\windows\System32\infocardcpl.cpl

2009-02-01 15:11 . 2008-06-20 02:14 11,264 --a------ c:\windows\System32\icardres.dll

2009-02-01 15:07 . 2008-07-27 19:03 282,112 --a------ c:\windows\System32\mscoree.dll

2009-02-01 15:07 . 2008-07-27 19:03 158,720 --a------ c:\windows\System32\mscorier.dll

2009-02-01 15:07 . 2008-07-27 19:03 96,760 --a------ c:\windows\System32\dfshim.dll

2009-02-01 15:07 . 2008-07-27 19:03 83,968 --a------ c:\windows\System32\mscories.dll

2009-02-01 15:07 . 2008-07-27 19:03 41,984 --a------ c:\windows\System32\netfxperf.dll

2009-01-26 19:17 . 2009-01-26 19:17 <REP> d-------- c:\program files\directx

2009-01-14 08:15 . 2009-01-14 08:15 4,235,776 --a------ c:\windows\System32\drivers\atikmdag.sys

2009-01-14 07:53 . 2008-12-16 03:42 288,768 --a------ c:\windows\System32\drivers\srv.sys

2009-01-14 06:01 . 2009-01-14 06:01 286,720 --a------ c:\windows\System32\Ati2evxx.dll

2009-01-14 06:01 . 2009-01-14 06:01 274,432 --a------ c:\windows\System32\Oemdspif.dll

2009-01-14 06:01 . 2009-01-14 06:01 43,520 --a------ c:\windows\System32\ati2edxx.dll

2009-01-14 05:59 . 2009-01-14 05:59 729,088 --a------ c:\windows\System32\Ati2evxx.exe

2009-01-14 05:50 . 2009-01-14 05:50 2,345,472 --a------ c:\windows\System32\atidxx32.dll

2009-01-14 05:21 . 2009-01-14 05:21 79,008 --a------ c:\windows\System32\atiumdva.cap

2009-01-14 05:08 . 2009-01-14 05:08 50,688 --a------ c:\windows\System32\amdpcom32.dll

2009-01-14 04:59 . 2009-01-14 04:59 11,247,616 --a------ c:\windows\System32\atioglxx.dll

2009-01-14 04:50 . 2009-01-14 04:50 53,248 --a------ c:\windows\System32\drivers\ati2erec.dll

2009-01-14 03:54 . 2009-01-14 03:54 57,344 --a------ c:\windows\System32\amdcalrt.dll

2009-01-14 03:53 . 2009-01-14 03:53 53,248 --a------ c:\windows\System32\amdcalcl.dll

2009-01-14 03:51 . 2009-01-14 03:51 3,239,936 --a------ c:\windows\System32\amdcaldd.dll

2009-01-12 20:03 . 2009-01-12 20:03 <REP> d-------- c:\program files\SystemRequirementsLab

2009-01-10 18:59 . 2009-01-10 18:59 <REP> d-------- c:\users\All Users\Media Center Programs

2009-01-10 18:59 . 2009-01-10 18:59 <REP> d-------- c:\programdata\Media Center Programs

2009-01-09 13:33 . 2009-01-09 13:33 <REP> d-------- c:\program files\Lavalys

2009-01-09 13:30 . 2009-01-09 13:30 <REP> d-------- c:\users\All Users\ATI

2009-01-09 13:30 . 2009-01-09 13:30 <REP> d-------- c:\programdata\ATI

2009-01-09 13:23 . 2009-01-09 13:23 <REP> d-------- C:\ATI

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-02-07 09:02 --------- d-----w c:\users\Mathias\AppData\Roaming\AIMP

2009-02-06 16:30 --------- d--h--w c:\program files\InstallShield Installation Information

2009-02-06 16:29 --------- d-----w c:\program files\Common Files\InstallShield

2009-02-03 11:49 410,984 ----a-w c:\windows\System32\deploytk.dll

2009-02-01 13:59 319,488 ----a-w c:\windows\HideWin.exe

2009-02-01 13:59 319,456 ----a-w c:\windows\DIFxAPI.dll

2009-01-31 11:22 --------- d-----w c:\program files\JKDefrag v3.36

2009-01-29 19:12 --------- d-----w c:\program files\Opera

2009-01-23 11:47 --------- d-----w c:\users\Mathias\AppData\Roaming\DAEMON Tools Pro

2009-01-21 17:16 --------- d-----w c:\program files\AIMP2

2009-01-15 17:58 --------- d-----w c:\program files\Malwarebytes' Anti-Malware

2009-01-14 15:11 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys

2009-01-14 15:11 15,504 ----a-w c:\windows\system32\drivers\mbam.sys

2009-01-14 06:55 --------- d-----w c:\program files\Windows Mail

2009-01-14 05:03 425,984 ----a-w c:\windows\System32\ATIDEMGX.dll

2009-01-14 05:02 159,744 ----a-w c:\windows\System32\atitmmxx.dll

2009-01-14 05:01 348,160 ----a-w c:\windows\System32\atipdlxx.dll

2009-01-14 04:44 3,963,392 ----a-w c:\windows\System32\atiumdag.dll

2009-01-14 04:22 4,765,696 ----a-w c:\windows\System32\atiumdva.dll

2009-01-14 04:07 122,880 ----a-w c:\windows\System32\atiadlxx.dll

2009-01-09 21:04 --------- d-----w c:\program files\ATI

2009-01-09 12:26 --------- d-----w c:\program files\ATI Technologies

2009-01-04 13:04 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_xusb21_01005.Wdf

2009-01-03 12:37 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf

2009-01-02 17:13 --------- d-----w c:\program files\CCleaner

2009-01-02 17:09 --------- d-----w c:\program files\K-Lite Codec Pack

2009-01-02 13:12 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_xusb21_01001.Wdf

2009-01-02 13:11 --------- d-----w c:\program files\Microsoft Xbox 360 Accessories

2009-01-01 20:52 130,208 ------r c:\windows\bwUnin-8.1.1.87-8876480SL.exe

2009-01-01 11:51 127,034 ------r c:\windows\bwUnin-8.1.1.50-8876480SL.exe

2009-01-01 11:51 --------- d-----w c:\users\Mathias\AppData\Roaming\Logitech

2009-01-01 11:51 --------- d-----w c:\program files\Common Files\Logishrd

2009-01-01 11:50 --------- d-----w c:\program files\Logitech

2009-01-01 11:49 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_LUsbFilt_01005.Wdf

2009-01-01 11:49 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf

2009-01-01 11:48 --------- d-----w c:\users\Mathias\AppData\Roaming\InstallShield

2009-01-01 11:48 --------- d-----w c:\programdata\Logitech

2009-01-01 11:47 --------- d-----w c:\programdata\LogiShrd

2009-01-01 11:45 --------- d-----w c:\program files\Common Files\Logitech

2008-12-31 18:50 1,700,352 ----a-w c:\windows\System32\gdiplus.dll

2008-12-31 18:50 1,060,864 ----a-w c:\windows\System32\mfc71.dll

2008-12-31 18:41 --------- d--h--r c:\users\Mathias\AppData\Roaming\SecuROM

2008-12-31 18:41 --------- d-----w c:\program files\Microsoft Games for Windows - LIVE

2008-12-31 18:37 107,888 ----a-w c:\windows\System32\CmdLineExt.dll

2008-12-31 16:52 --------- d-----w c:\program files\RocketDock

2008-12-31 15:14 --------- d-----w c:\program files\Microsoft.NET

2008-12-31 15:11 --------- d-----w c:\users\Mathias\AppData\Roaming\DAEMON Tools Lite

2008-12-30 22:55 --------- d-----w c:\program files\Quicksys

2008-12-30 22:52 --------- d-----w c:\users\Mathias\AppData\Roaming\SumatraPDF

2008-12-30 22:51 --------- d-----w c:\program files\SumatraPDF

2008-12-30 22:07 --------- d-----w c:\users\Mathias\AppData\Roaming\InfraRecorder

2008-12-30 22:07 --------- d-----w c:\program files\InfraRecorder

2008-12-30 21:53 --------- d-----w c:\users\Mathias\AppData\Roaming\DAEMON Tools

2008-12-30 21:52 --------- d-----w c:\programdata\DAEMON Tools Lite

2008-12-30 21:52 --------- d-----w c:\program files\DAEMON Tools Lite

2008-12-30 21:49 717,296 ----a-w c:\windows\system32\drivers\sptd.sys

2008-12-30 21:15 --------- d-----w c:\users\Mathias\AppData\Roaming\Malwarebytes

2008-12-30 21:15 --------- d-----w c:\programdata\Malwarebytes

2008-12-30 21:07 --------- d-----w c:\programdata\Avira

2008-12-30 21:07 --------- d-----w c:\program files\Avira

2008-12-30 21:00 --------- d-----w c:\program files\Media Player Classic

2008-12-30 20:59 --------- d-----w c:\users\Mathias\AppData\Roaming\Media Player Classic

2008-12-30 20:58 --------- d-----w c:\program files\IZArc

2008-12-30 20:31 --------- d-----w c:\program files\NETGEAR

2008-12-30 20:27 --------- d-----w c:\users\Mathias\AppData\Roaming\ATI

2008-12-30 20:25 --------- d-----w c:\program files\Common Files\ATI Technologies

2008-12-30 20:20 --------- d-----w c:\program files\Marvell

2008-12-30 20:09 --------- d-----w c:\program files\Intel

2008-12-30 20:04 --------- d-sh--w c:\programdata\Modèles

2008-12-30 20:04 --------- d-sh--w c:\programdata\Menu Démarrer

2008-12-30 20:04 --------- d-sh--w c:\programdata\Favoris

2008-12-30 20:04 --------- d-sh--w c:\programdata\Bureau

2008-12-30 20:04 --------- d-sh--w c:\program files\Fichiers communs

2008-12-16 13:05 48,128 ----a-w c:\windows\system32\drivers\L1E60x86.sys

2008-12-08 11:53 57,344 ----a-w c:\windows\System32\ff_vfw.dll

2008-12-07 18:08 795,648 ----a-w c:\windows\System32\xvidcore.dll

2008-12-07 18:08 130,048 ----a-w c:\windows\System32\xvidvfw.dll

2008-11-07 15:38 84,496 ----a-w c:\windows\System32\KemXML.dll

2008-11-07 15:38 170,512 ----a-w c:\windows\System32\kemutb.dll

2008-11-07 15:38 145,936 ----a-w c:\windows\System32\KemUtil.dll

2008-11-07 15:38 117,264 ----a-w c:\windows\System32\KemWnd.dll

2008-11-07 15:37 301,656 ----a-w c:\windows\System32\BtCoreIf.dll

2008-01-21 02:43 174 --sha-w c:\program files\desktop.ini

2007-04-23 13:21 269,824 ----a-w c:\windows\inf\WG111v3\Vista64\wg111v3.sys

2007-04-23 13:19 227,328 ----a-w c:\windows\inf\WG111v3\WG111v3.sys

2007-04-23 13:19 227,328 ----a-w c:\windows\inf\WG111v3\Vista\wg111v3.sys

2006-12-15 10:30 98,304 ----a-w c:\windows\inf\WG111v3\UScanM.exe

2006-12-15 10:30 315,392 ----a-w c:\windows\inf\WG111v3\InstallDriver.exe

2006-12-15 10:30 28,672 ----a-w c:\windows\inf\WG111v3\SetDrv.exe

2006-12-15 10:30 212,992 ----a-w c:\windows\inf\WG111v3\CopyWHQLDriver.exe

2006-12-15 10:30 20,480 ----a-w c:\windows\inf\WG111v3\RTWUPath.exe

2006-12-15 10:30 19,968 ----a-w c:\windows\inf\WG111v3\RTWREFU.EXE

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

"Google Update"="c:\users\Mathias\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-01-31 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]

"Launch LGDCore"="c:\program files\Common Files\Logitech\G-series Software\LGDCore.exe" [2006-07-23 1126400]

"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2007-09-27 734264]

"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-03 148888]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-10-10 c:\windows\KHALMNPR.Exe]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-01-01 91440]

Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-02-01 809488]

NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14 1695744]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows nt\currentversion\windows]

"load"=c:\users\Mathias\AppData\Roaming\MICROS~1\esentutl.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"TCP Query User{FE192C99-F762-4C67-A785-5F3A41D8DF62}d:\\téléchargement\\emule\\emule.exe"= UDP:d:\téléchargement\emule\emule.exe:eMule

"UDP Query User{692464F3-7913-4E21-9CAF-3AB30118CAA5}d:\\téléchargement\\emule\\emule.exe"= TCP:d:\téléchargement\emule\emule.exe:eMule

"{A0E7E796-1336-4536-A8D7-54B1C9BA7263}"= UDP:d:\jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club

"{4B9AB4D9-3443-4B49-965A-D4AB1DFF511E}"= TCP:d:\jeux\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:Rockstar Games Social Club

"{CCD649DA-2F00-4967-9AD1-46E7D3851D4C}"= UDP:d:\jeux\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:Grand Theft Auto IV

"{2DEFF54C-ED98-4FBE-9319-C05EB6478BA2}"= TCP:d:\jeux\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:Grand Theft Auto IV

"TCP Query User{B2158CE8-CE96-4310-9239-F66D838D77F2}d:\\jeux\\rockstar games\\grand theft auto iv\\gtaiv.exe"= UDP:d:\jeux\rockstar games\grand theft auto iv\gtaiv.exe:Grand Theft Auto IV

"UDP Query User{EE3280B1-D7AE-4203-A78A-9A3C3F5E0BA5}d:\\jeux\\rockstar games\\grand theft auto iv\\gtaiv.exe"= TCP:d:\jeux\rockstar games\grand theft auto iv\gtaiv.exe:Grand Theft Auto IV

"{EBF77E48-737F-45CE-BED0-231E1F279A32}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{984D7E41-3872-45CD-98F5-9BF642AF7676}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{DC96EF1A-9B8E-4A25-8058-2802DCEF1C3E}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{5D56120D-D172-4CEB-B342-4B7545CAC497}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{F1C33631-2EF5-4F42-825C-AAFE1430902D}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"{B1AF75A4-161C-4522-A072-F85DDC9F0217}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger

"TCP Query User{583738C4-BC3C-4FB4-B68A-CE146F866456}c:\\program files\\opera\\opera.exe"= UDP:c:\program files\opera\opera.exe:Opera Internet Browser

"UDP Query User{FFBF7DB4-1604-4F83-9307-11D6E540DCF1}c:\\program files\\opera\\opera.exe"= TCP:c:\program files\opera\opera.exe:Opera Internet Browser

"{54E1C3CE-3BDB-4334-838C-05773BF8753F}"= UDP:d:\téléchargement\µTorrent\uTorrent.exe:µTorrent (TCP-In)

"{D684A30E-C1CB-4907-B0D3-26F8A29F4F8B}"= TCP:d:\téléchargement\µTorrent\uTorrent.exe:µTorrent (UDP-In)

"{06DB5605-32B3-4F20-B88E-1147F7D46722}"= UDP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutLauncher.exe:Burnout Paradise The Ultimate Box

"{199CB686-7667-48FC-9026-589C095A4210}"= TCP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutLauncher.exe:Burnout Paradise The Ultimate Box

"{95714B72-F3EE-473D-AB8E-16EB882F299B}"= UDP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutConfigTool.exe:Burnout Paradise The Ultimate Box

"{154B4EBB-FDD7-4E54-BC9B-2D37B646DC4F}"= TCP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutConfigTool.exe:Burnout Paradise The Ultimate Box

"{E0F3CC28-90B4-41F5-9AC4-D1594BC76BF6}"= UDP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutParadise.exe:Burnout Paradise The Ultimate Box

"{E127B845-0CB9-497F-9E4B-5D0364DACA86}"= TCP:d:\jeux\Burnout Paradise The Ultimate Box\BurnoutParadise.exe:Burnout Paradise The Ultimate Box

"TCP Query User{ED445966-C75A-4471-8064-7BA0EA651A49}c:\\program files\\electronic arts\\eadm\\core.exe"= UDP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager

"UDP Query User{0A2E0582-ACBC-40A3-82F3-7EE3D6AA30D2}c:\\program files\\electronic arts\\eadm\\core.exe"= TCP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager

R0 mv61xx;mv61xx;c:\windows\System32\drivers\mv61xx.sys [2008-07-22 151592]

R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\System32\drivers\L1E60x86.sys [2008-12-31 48128]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\System32\drivers\mbamswissarmy.sys [2008-12-30 38496]

R3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\System32\drivers\wg111v3.sys [2008-12-30 227328]

S2 gupdate1c987c7b322b263;Google Update Service (gupdate1c987c7b322b263);c:\program files\Google\Update\GoogleUpdate.exe [2009-02-05 133104]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - MBAMSWISSARMY

.

Contenu du dossier 'Tâches planifiées'

2009-02-07 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-05 20:21]

2009-02-07 c:\windows\Tasks\GoogleUpdateTaskMachine.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-05 20:26]

2009-02-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-192886970-665670061-1568562545-1000.job

- c:\users\Mathias\AppData\Local\Google\Update\GoogleUpdate.exe [2009-01-31 11:24]

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.google.fr/ig?hl=fr&source=iglk

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-02-07 15:38:27

Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès

Fichiers cachés: 0

**************************************************************************

.

Heure de fin: 2009-02-07 15:39:45

ComboFix-quarantined-files.txt 2009-02-07 14:39:43

Avant-CF: 110 995 087 360 octets libres

Après-CF: 110,972,657,664 octets libres

270 --- E O F --- 2009-02-02 11:24:42

matt30-bis · le 7 février 2009

Voici le rapport de MBAM :

Malwarebytes' Anti-Malware 1.33

Version de la base de données: 1736

Windows 6.0.6001 Service Pack 1

07/02/2009 16:33:26

mbam-log-2009-02-07 (16-33-26).txt

Type de recherche: Examen complet (C:\|D:\|E:\|)

Eléments examinés: 147180

Temps écoulé: 59 minute(s), 40 second(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

Processus mémoire infecté(s):