Problème partition suite à un virus

Masato92 · Mai 22, 2007, 8:19

Voilà le rapport fait avec HijackThis :

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Cyber06\CyberMeteo\CyberMeteo.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\eMule\emule.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Kid\LOCALS~1\Temp\Rar$EX00.281\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 84.19.177.62:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe “C:\WINDOWS\KesenjanganSosial.exe”
O1 - Hosts: <!doctype html public “-//W3C//DTD HTML 4.01 Transitional//EN”>
O1 - Hosts: <html?gt;
O1 - Hosts: <head>
O1 - Hosts: <title> Songs, mp3 and lyrics db searches</title
O1 - Hosts: <meta name=“Author” content=“net4free.org”>
O1 - Hosts: <meta name=“Keywords” content=“free web host, domain host, mp3 searchable database, lyrics searches, lyrics, mp3 discographi”>
O1 - Hosts: </head>
O1 - Hosts: <STYLE type=text/css>
O1 - Hosts: <!–
O1 - Hosts: a {color: #3300CC; text-decoration: none}
O1 - Hosts: .bordata {border-bottom :solid #C0C0C0 1px;border-top :solid #C0C0C0 1px;border-left :solid #C0C0C0 1px;border-right :solid #C0C0C0 1px}
O1 - Hosts: h3{font-family: Arial;font-style : normal ;font-size : 12pt; font-weight :bold;text-align : center; color :#FFFFFF;background-color :#004f9d }
O1 - Hosts: body {FONT-SIZE: 4px; COLOR: #444444;}
O1 - Hosts: .small {BORDER-RIGHT: silver 1px solid; BORDER-TOP: silver 1px solid; FONT-SIZE: 7pt; BORDER-LEFT: silver 1px solid; COLOR: black; BORDER-BOTTOM: silver 1px solid; FONT-FAMILY: Verdana,Arial,sans-serif; HEIGHT: 14px; BACKGROUND-COLOR: white}
O1 - Hosts: .small1 {FONT-SIZE: 7pt; WIDTH: 75px; COLOR: black; FONT-FAMILY: Verdana,Arial,sans-serif; HEIGHT: 14px; }
O1 - Hosts: .small2 {FONT-SIZE: 9pt; FONT-FAMILY: Verdana,Arial;}
O1 - Hosts: .abuse {FONT-SIZE: 10pt; FONT-FAMILY: Verdana,Arial;}
O1 - Hosts: .HF {FONT-SIZE: 17pt; FONT-FAMILY: Verdana,Arial;}
O1 - Hosts: -->
O1 - Hosts: </STYLE>
O1 - Hosts: </head>
O1 - Hosts: <body leftmargin=0 rightmargin=0>
O1 - Hosts: <table class=bordata cellpadding=14 cellspacing=0 height=80 width=100% background="/images/sfondo1.gif" BORDER=0>
O1 - Hosts: <tr>
O1 - Hosts: <td valign=top><a href=“http://www.net4free.org/”><img src=“http://www.net4free.org/images/nff_l.gif” border=0 alt=""></a></td>
O1 - Hosts: <td valign=top>
O1 - Hosts: <p align=right>
O1 - Hosts: <table cellpadding=2 cellspacing=2 BORDER=0>
O1 - Hosts: <tr>
O1 - Hosts: <td class=small align=center><a href=“http://www.net4free.org/free_web_hosting.php”><b>Join Now</a></b></td>
O1 - Hosts: <td class=small align=center><a href="/faq.html?quot;><b>FAQ</a></b></td>
O1 - Hosts: <td class=small align=center><a href="/terms_of_service.html?quot;><b>Terms Of Service</a></b></td>
O1 - Hosts: <td class=small align=center><a href="/free_utility.html?quot;><b>Net4Free Utility</a></b></td>
O1 - Hosts: <td class=small align=center><a href="/welcome.php"><b>Forgot Password</a></b></td>
O1 - Hosts: </tr>
O1 - Hosts: </table>
O1 - Hosts: </p>
O1 - Hosts: </td>
O1 - Hosts: </tr>
O1 - Hosts: </table>
O1 - Hosts: <table><tr><td></td></tr></table>
O1 - Hosts: <table class=bordata cellpadding=14 cellspacing=0 height=180 width=100% background="/images/sfondog.gif" BORDER=0>
O1 - Hosts: <tr>
O1 - Hosts: <td align=center>
O1 - Hosts: <a href=“http://www.top100lyrics.com/in/?id=997”><img src="/images/top100.gif" border=0></a><BR><BR>
O1 - Hosts: <table class=bordata>
O1 - Hosts: <tr>
O1 - Hosts: <td><a href=“http://www.mp3qm.com/”><img src=“http://www.mp3qm.com/images/logo.gif” border=0 alt=“Mp3 lyrics database”><br>
O1 - Hosts: Mp3 search searchable database</a></td>
O1 - Hosts: </tr>
O1 - Hosts: </table>
O1 - Hosts: <BR>
O1 - Hosts: <table class=bordata>
O1 - Hosts: <tr>
O1 - Hosts: <td><a href=“http://www.lyricsbook.net/”><img src=“http://www.lyricsbook.net/images/lyrics_book1.gif” border=0 alt=“Mp3 database”><br>
O1 - Hosts: <CENTER>Lyrics searchable database</CENTER></a></td>
O1 - Hosts: </tr>
O1 - Hosts: </table>
O1 - Hosts: </td>
O1 - Hosts: <td align=“center”>
O1 - Hosts: <table ><tr><td>
O1 - Hosts: <!–
O1 - Hosts: <a href=“http://www.net4free.org/angelicastore.php” onMouseover=“window.status=‘Angelica Store!’; return true”>
O1 - Hosts: <img src=“http://www.net4free.org/images/angel3.jpg” alt=“Angelica Store!” border=“0”/></a>
O1 - Hosts: -->
O1 - Hosts: </td>
O1 - Hosts: </tr>
O1 - Hosts: </table>
O1 - Hosts: </td>
O1 - Hosts: <td>
O1 - Hosts: <table class=bordata bgcolor=#FFFFFF>
O1 - Hosts: <tr>
O1 - Hosts: <td>
O1 - Hosts: <table>
O1 - Hosts: <tr>
O1 - Hosts: <td align=center><a href=“http://www.findhostdir.com/”><img src=“http://www.findhostdir.com/images/link2.gif” border=0><br>
O1 - Hosts: Free web Host, Free domain Host<br> and Cheap web Host Directory</a></td>
O1 - Hosts: </tr>
O1 - Hosts: </table>
O1 - Hosts: </td>
O1 - Hosts: </tr>
O1 - Hosts: </table>
O1 - Hosts: </td>
O1 - Hosts: </tr>
O1 - Hosts: <tr>
O1 - Hosts: <td></td>
O1 - Hosts: </tr>
O1 - Hosts: </table>
O1 - Hosts: </body>
O1 - Hosts: </html?gt;
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\…\Run: [MessengerPlus3] “C:\Program Files\MessengerPlus! 3\MsgPlus.exe”
O4 - HKLM\…\Run: [BDMCon] “C:\Program Files\Softwin\BitDefender10\bdmcon.exe” /reg
O4 - HKLM\…\Run: [BDAgent] “C:\Program Files\Softwin\BitDefender10\bdagent.exe”
O4 - HKLM\…\Run: [SunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe”
O4 - HKLM\…\Run: [DiskeeperSystray] “C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe”
O4 - HKLM\…\Run: [TkBellExe] “C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe” -osboot
O4 - HKCU\…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: CyberMétéo.lnk = C:\Program Files\Cyber06\CyberMeteo\CyberMeteo.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.5.107.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by105fd.bay105.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1168461512296
O16 - DPF: {97E71027-0BA2-44F2-97DB-F84D808ED0B6} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab55762.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab55579.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab55668.cab
O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - “C:\PROGRA~1\MSNMES~1\msgrapp.dll” (file missing)
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)