Re bonjour
Alors pour reprendre dans l'ordre :
-J'ai fait Ccleaner
-J'ai chargé AVG, mais MAJ impossible
-En mode sans échec administrateur, Gator Adaware removal met un message d'erreur que voici : "Cannot Ping Machine under 1500ms".
Comprenne qui pourra. Tentative en mode normal, autre message d'erreur : "Cannot connect to Machine or Not Enough privilege - Admin$ share. Please try again"
J'étais pourtant en session administrateur. J'ai essayé plusieurs fois, meme après les autres scan, rien à faire
-J'ai fait AVG (toujours mode sans échec), voici le rapport
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 15:26:25 17/04/2008
+ Résultat de l'analyse:
C:Everest Pokercstart-tmp.exe -> Adware.Casino : Nettoyé.
C:Documents and SettingsOlivierCookiesolivier@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:Documents and SettingsOlivierCookiesolivier@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:Documents and
SettingsOlivierCookiesolivier@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.
Fin du rapport
-J'ai fait spybot (mode sans échec), rapport vierge
-J'ai fait Ccleaner (mode sans échec), voici le rapport
NETTOYAGE COMPLET - (1.884 secs)
------------------------------------------------------------------------------------------
1,66MB supprimés.
------------------------------------------------------------------------------------------
Détails des fichiers effacés
------------------------------------------------------------------------------------------
Fichiers Temporaires d'Internet Explorer (fichiers 1) 77,07KB
Marqué pour l'effacement: C:Documents and SettingsAdministrateurLocal SettingsTemporary Internet FilesContent.IE5index.dat
Marqué pour l'effacement: C:Documents and SettingsAdministrateurCookiesindex.dat
C:WINDOWSsystem32wbemLogswbemess.log 29,62KB
C:WINDOWSsystem32wbemLogswbemprox.log 875 bytes
C:WINDOWSsystem32wbemLogswmiprov.log 52 bytes
C:WINDOWS .log 0 bytes
C:WINDOWSWindowsUpdate.log 1,52MB
C:WINDOWSSchedLgU.Txt 31,77KB
C:Documents and SettingsAdministrateurApplication DataRealRealPlayer
ealplayer.ste 0 bytes
C:Program FilesGrisoftAVG Anti-Spyware 7.5logfile.txt 164 bytes
C:Documents and SettingsAll UsersApplication DataSpybot - Search & DestroyLogsChecks.080417-1532.log 241 bytes
C:Documents and SettingsAll UsersApplication DataSpybot - Search & DestroyLogsChecks.080417-1537.txt 1,01KB
C:Documents and SettingsAll UsersApplication DataSpybot - Search & DestroyStatistics.ini 0 bytes
------------------------------------------------------------------------------------------
- J'ai fait combofix, voici le rapport
ComboFix 08-04-15.8 - Administrateur 2008-04-17 15:46:18.1 - NTFSx86 MINIMAL
Endroit: C:Program FilesComboFix.exe
AVERTISSEMENT - LA CONSOLE DE RECUPERATION N'EST PAS INSTALLEE SUR CETTE MACHINE !!
.
((((((((((((((((((((((((((((( Fichiers créés 2008-03-17 to 2008-04-17 ))))))))))))))))))))))))))))))))))))
.
2008-04-17 13:40 . 2008-04-17 13:40 <REP> d-------- C:Documents and SettingsAdministrateurApplication DataGrisoft
2008-04-17 12:51 . 2008-04-17 13:41 <REP> d-------- C:Program FilesAVG Anti-Spyware 7.5
2008-04-17 12:51 . 2008-04-17 12:51 <REP> d-------- C:Documents and SettingsAurélieApplication DataGrisoft
2008-04-17 12:51 . 2008-04-17 12:51 <REP> d-------- C:Documents and SettingsAll UsersApplication DataGrisoft
2008-04-17 12:51 . 2007-05-30 14:10 10,872 --a------ C:WINDOWSsystem32driversAvgAsCln.sys
2008-04-17 12:31 . 2008-04-17 12:38 <REP> d-------- C:Program FilesCCleaner
2008-04-17 12:21 . 2008-04-17 12:21 2,724,328 --a------ C:Program Filesccsetup203.exe
2008-04-17 12:19 . 2008-04-17 12:19 12,413,440 --a------ C:Program Filesavgas-setup-7.5.1.43.exe
2008-04-17 12:15 . 2008-04-17 12:15 307,200 --a------ C:Program FilesGatorRemover.exe
2008-04-16 19:06 . 2008-04-16 19:06 1,770,255 --a------ C:Program FilesComboFix.exe
2008-04-16 18:29 . 2007-08-14 08:12 5,760 --------- C:WINDOWSsystem325A.tmp
2008-04-16 18:19 . 2005-02-05 03:29 <REP> d--h----- C:Documents and SettingsAdministrateurVoisinage réseau
2008-04-16 18:19 . 2005-02-05 03:29 <REP> d--h----- C:Documents and SettingsAdministrateurVoisinage d'impression
2008-04-16 18:19 . 2005-02-05 03:29 <REP> d--h----- C:Documents and SettingsAdministrateurModèles
2008-04-16 18:19 . 2005-02-04 18:36 <REP> dr------- C:Documents and SettingsAdministrateurMes documents
2008-04-16 18:19 . 2005-02-05 03:29 <REP> dr------- C:Documents and SettingsAdministrateurMenu Démarrer
2008-04-16 18:19 . 2005-02-04 18:36 <REP> dr------- C:Documents and SettingsAdministrateurFavoris
2008-04-16 18:19 . 2008-04-17 15:43 <REP> d-------- C:Documents and SettingsAdministrateurBureau
2008-04-16 18:19 . 2005-02-04 19:10 <REP> d-------- C:Documents and SettingsAdministrateurApplication DataSymantec
2008-04-16 18:19 . 2005-02-04 18:59 <REP> d-------- C:Documents and SettingsAdministrateurApplication DataSonic
2008-04-16 18:19 . 2005-02-04 19:10 <REP> d-------- C:Documents and SettingsAdministrateurApplication DataApple Computer
2008-04-16 18:19 . 2008-04-17 15:41 <REP> d-------- C:Documents and SettingsAdministrateur
2008-04-16 17:50 . 2008-04-16 17:50 <REP> d-a------ C:WINDOWSzts2.exe
2008-04-16 17:50 . 2008-04-16 17:50 <REP> d-a------ C:WINDOWSsystem32vcmgcd32.dll
2008-04-16 17:50 . 2008-04-16 17:50 <REP> d-a------ C:WINDOWSsystem32iifgfgf.dll
2008-04-16 17:50 . 2008-04-16 17:50 <REP> d-a------ C:WINDOWS
undll16.exe
2008-04-16 17:50 . 2008-04-16 17:50 <REP> d-a------ C:WINDOWS
undl132.dll
2008-04-16 17:50 . 2008-04-16 17:50 <REP> d-a------ C:WINDOWSlogo1_.exe
2008-04-16 17:46 . 2004-08-05 10:00 153,088 --a------ C:WINDOWSR.COM
2008-04-16 17:46 . 2004-08-05 10:00 143,360 --a------ C:WINDOWSsystem32T.COM
2008-04-16 17:34 . 2008-04-16 17:39 <REP> d-------- C:Documents and SettingsAurélie.housecall6.6
2008-04-16 17:34 . 2008-04-16 17:39 <REP> d-------- C:Documents and SettingsAurélie.housecall6.6
2008-04-16 16:19 . 2008-04-16 16:19 <REP> d-------- C:Program FilesSophos
2008-04-16 14:10 . 2008-04-16 14:10 <REP> d-------- C:Documents and SettingsOlivierApplication DataBitdefender
2008-04-16 12:48 . 2008-04-17 13:34 81,984 --a------ C:WINDOWSsystem32dod.bin
2008-04-16 12:47 . 2008-04-16 12:47 <REP> d-------- C:Documents and SettingsAurélieApplication DataBitdefender
2008-04-16 12:45 . 2008-04-16 12:45 <REP> d-------- C:Program FilesSoftwin
2008-04-16 12:45 . 2008-04-16 12:46 <REP> d-------- C:Documents and SettingsAll UsersApplication DataBitDefender
2008-04-16 12:44 . 2008-04-16 12:45 <REP> d-------- C:Program FilesFichiers communsSoftwin
2008-04-15 23:11 . 2008-04-16 12:37 3,802 --a------ C:WINDOWSsystem32 mp.reg
2008-04-15 23:06 . 2007-09-06 00:22 289,144 --a------ C:WINDOWSsystem32VCCLSID.exe
2008-04-15 23:06 . 2006-04-27 17:49 288,417 --a------ C:WINDOWSsystem32SrchSTS.exe
2008-04-15 23:06 . 2008-04-14 19:28 86,528 --a------ C:WINDOWSsystem32VACFix.exe
2008-04-15 23:06 . 2008-04-12 13:49 82,432 --a------ C:WINDOWSsystem32IEDFix.exe
2008-04-15 23:06 . 2003-06-05 21:13 53,248 --a------ C:WINDOWSsystem32Process.exe
2008-04-15 23:06 . 2004-07-31 18:50 51,200 --a------ C:WINDOWSsystem32dumphive.exe
2008-04-15 23:06 . 2007-10-04 00:36 25,600 --a------ C:WINDOWSsystem32WS2Fix.exe
2008-04-15 18:34 . 2008-04-15 18:34 <REP> d-------- C:Documents and SettingsAll UsersApplication DataAntiVir PersonalEdition Classic
2008-04-14 18:31 . 2008-04-16 17:47 26 --a------ C:WINDOWSLic.xxx
2008-04-14 15:01 . 2008-04-15 11:37 <REP> d-------- C:Documents and SettingsAll UsersApplication DataLavasoft
2008-04-14 13:57 . 2008-04-15 11:37 <REP> d-------- C:Documents and SettingsInvitéModèles
2008-04-14 13:57 . 2008-04-15 11:37 <REP> d-------- C:Documents and SettingsInvitéFavoris
2008-04-14 13:57 . 2005-02-04 18:59 <REP> d-------- C:Documents and SettingsInvitéApplication DataSonic
2008-04-14 13:57 . 2008-04-15 11:37 <REP> d---s---- C:Documents and SettingsInvité
2008-04-14 12:04 . 2008-04-15 19:54 <REP> d-------- C:Program FilesAvira
2008-04-14 12:04 . 2008-04-14 12:04 <REP> d-------- C:Documents and SettingsAll UsersApplication DataAvira
2008-04-14 10:48 . 2008-04-14 10:48 <REP> d-------- C:Program FilesAxBx
2008-04-13 20:47 . 2008-04-15 11:37 <REP> d-------- C:Program FilesMozilla Firefox(2)
2008-04-13 20:47 . 2008-04-13 20:47 0 --a------ C:WINDOWS
sreg.dat
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-17 13:41 --------- d-----w C:Documents and SettingsAll UsersApplication DataSpybot - Search & Destroy
2008-04-15 09:37 --------- d-----w C:Program FilesLavasoft
2008-04-15 09:36 --------- d-----w C:Program FilesFichiers communsWise Installation Wizard
2008-04-14 13:02 --------- d-----w C:Documents and SettingsAurélieApplication DataLavasoft
2008-03-20 08:09 1,845,376 ----a-w C:WINDOWSsystem32win32k.sys
2008-03-20 08:09 1,845,376 ------w C:WINDOWSsystem32dllcachewin32k.sys
2008-03-09 19:19 --------- d-----w C:Documents and SettingsAurélieApplication DataAdobeUM
2008-03-01 16:28 3,591,680 ----a-w C:WINDOWSsystem32dllcachemshtml.dll
2008-02-29 08:57 625,664 ------w C:WINDOWSsystem32dllcacheiexplore.exe
2008-02-29 08:56 70,656 ------w C:WINDOWSsystem32dllcacheie4uinit.exe
2008-02-22 10:00 13,824 ------w C:WINDOWSsystem32dllcacheieudinit.exe
2008-02-20 06:51 282,624 ----a-w C:WINDOWSsystem32gdi32.dll
2008-02-20 06:51 282,624 ------w C:WINDOWSsystem32dllcachegdi32.dll
2008-02-20 05:35 45,568 ----a-w C:WINDOWSsystem32dnsrslvr.dll
2008-02-20 05:35 45,568 ------w C:WINDOWSsystem32dllcachednsrslvr.dll
2008-02-20 05:35 148,992 ------w C:WINDOWSsystem32dllcachednsapi.dll
2008-02-15 05:44 161,792 ------w C:WINDOWSsystem32dllcacheieakui.dll
2007-05-14 21:09 0 ----a-w C:Documents and SettingsOlivierApplication Datawklnhst.dat
2006-09-08 10:50 34,360 ----a-w C:Documents and SettingsOlivierApplication DataGDIPFONTCACHEV1.DAT
2005-12-07 14:39 34,360 ----a-w C:Documents and SettingsAurélieApplication DataGDIPFONTCACHEV1.DAT
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
"CTFMON.EXE"="C:WINDOWSsystem32ctfmon.exe" [2004-08-05 10:00 15360]
"MSMSGS"="C:Program FilesMessengermsmsgs.exe" [2004-10-13 18:24 1694208]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"ATIPTA"="C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe" [2004-12-21 22:05 344064]
"SunJavaUpdateSched"="C:Program FilesJavajre1.5.0_06injusched.exe" [2005-11-10 14:03 36975]
"UpdateManager"="C:Program FilesFichiers communsSonicUpdate Managersgtray.exe" [2003-08-19 02:01 110592]
"SynTPLpr"="C:Program FilesSynapticsSynTPSynTPLpr.exe" [2004-11-04 20:40 98394]
"SynTPEnh"="C:Program FilesSynapticsSynTPSynTPEnh.exe" [2004-11-04 20:38 688218]
"iTunesHelper"="C:Program FilesiTunesiTunesHelper.exe" [2004-06-08 14:31 286720]
"QuickTime Task"="C:Program FilesQuickTimeqttask.exe" [2005-02-04 19:10 98304]
"eabconfg.cpl"="C:Program FilesHPQQuick Launch ButtonsEabServr.exe" [2004-12-03 14:24 290816]
"Cpqset"="C:Program FilesHPQDefault Settingscpqset.exe" [2004-11-05 14:52 233534]
"hpWirelessAssistant"="C:Program FilesHPQHP Wireless AssistantHP Wireless Assistant.exe" [2004-12-08 18:23 790528]
"avast!"="C:PROGRA~1ALWILS~1Avast4ashDisp.exe" [2007-12-04 15:00 79224]
"SmcService"="C:PROGRA~1SygateSPFsmc.exe" [2004-10-15 19:40 2577632]
"TkBellExe"="C:Program FilesFichiers communsRealUpdate_OB
ealsched.exe" [2007-06-11 17:07 185896]
"BDMCon"="C:Program FilesSoftwinBitDefender10dmcon.exe" [2007-04-02 15:48 290816]
"BDAgent"="C:Program FilesSoftwinBitDefender10dagent.exe" [2007-03-26 14:49 69632]
"!AVG Anti-Spyware"="C:Program FilesAVG Anti-Spyware 7.5avgas.exe" [2007-06-11 11:25 6731312]
"MSConfig"="C:WINDOWSPCHealthHelpCtrBinariesMSConfig.exe" [2004-08-05 10:00 160768]
[HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRun]
"CTFMON.EXE"="C:WINDOWSsystem32CTFMON.EXE" [2004-08-05 10:00 15360]
C:Documents and SettingsAll UsersMenu D,marrerProgrammesD,marrage
EPSON Status Monitor 3 Environment Check 2.lnk - C:WINDOWSsystem32spooldriversw32x863E_SRCV02.EXE [2006-01-26 11:48:50 121856]
Microsoft Office.lnk - C:Program FilesMicrosoft OfficeOffice10OSA.EXE [2001-02-13 09:01:04 83360]
[HKLM~servicessharedaccessparametersfirewallpolicystandardprofileAuthorizedApplicationsList]
"%windir%\system32\sessmgr.exe"=
"C:\Program Files\iTunes\iTunes.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"C:\Program Files\Internet Explorer\iexplore.exe"=
S3 HSFHWATI;HSFHWATI;C:WINDOWSsystem32DRIVERSHSFHWATI.sys [2004-06-10 16:59]
S3 MEMSWEEP2;MEMSWEEP2;C:WINDOWSsystem325A.tmp [2007-08-14 08:12]
.
**************************************************************************
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-04-17 15:49:05
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
HKLMSoftwareMicrosoftWindowsCurrentVersionRun
Cpqset = C:Program FilesHPQDefault Settingscpqset.exe????????0?6?6?3??@???? ?,?B?????????????hLC? ??????
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
[HKEY_LOCAL_MACHINEsystemControlSet001ServicesMEMSWEEP2]
"ImagePath"="??C:WINDOWSsystem325A.tmp"
[HKEY_LOCAL_MACHINEsystemControlSet001Servicesvsdatant]
"ImagePath"=""
.
Temps d'accomplissement: 2008-04-17 15:50:48
ComboFix-quarantined-files.txt 2008-04-17 13:50:45
ComboFix2.txt 2008-04-16 17:17:58
Pre-Run: 55,047,995,392 octets libres
Post-Run: 55,041,581,056 octets libres
.
2008-04-10 14:22:36 --- E O F ---
Et voilà. Mon problème est toujours présent. C'est quoi le problème de gator adware removal à ton avis????
Merci encore d'avoir pitié de moi...