Nouveau topic_jlpjlp

Bonjour,
voici le rapport rsit du pc qui a accès a internet

Logfile of random's system information tool 1.06 (written by random/random)
Run by J@w€n at 2009-05-11 18:30:23
Microsoft Windows XP Professionnel Service Pack 1
System drive C: has 41 GB (53%) free of 78 GB
Total RAM: 1535 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:30:52, on 11/05/2009
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\J@w€n\Bureau\RSIT.exe
C:\Program Files\trend micro\J@w€n.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - DefaultPrefix:
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware Sandra Lite 2007.SP1\RpcSandraSrv.exe
O23 - Service: VirusKeeper antivirus/antispyware (vkservice) - AxBx - C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe

--
End of file - 2697 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=36
"NoDriveAutoRun"=FFFFFFFF
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.reg - edit -
.reg - open - "%1" %*

======List of files/folders created in the last 1 months======

2009-05-11 18:30:23 ----D---- C:\rsit
2009-05-11 18:30:23 ----D---- C:\Program Files\trend micro
2009-05-10 22:53:06 ----RASHD---- C:\autorun.inf
2009-05-10 21:48:34 ----SHD---- C:\RECYCLER
2009-05-10 21:38:21 ----D---- C:\WINDOWS\temp
2009-05-10 21:38:19 ----A---- C:\ComboFix.txt
2009-05-10 21:34:04 ----A---- C:\Boot.bak
2009-05-10 21:33:59 ----RASHD---- C:\cmdcons
2009-05-10 21:32:52 ----A---- C:\WINDOWS\zip.exe
2009-05-10 21:32:52 ----A---- C:\WINDOWS\vFind.exe
2009-05-10 21:32:52 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-05-10 21:32:52 ----A---- C:\WINDOWS\SWSC.exe
2009-05-10 21:32:52 ----A---- C:\WINDOWS\SWREG.exe
2009-05-10 21:32:52 ----A---- C:\WINDOWS\sed.exe
2009-05-10 21:32:52 ----A---- C:\WINDOWS\NIRCMD.exe
2009-05-10 21:32:52 ----A---- C:\WINDOWS\grep.exe
2009-05-10 21:32:45 ----D---- C:\WINDOWS\ERDNT
2009-05-10 21:32:44 ----D---- C:\ComboFix
2009-05-10 21:32:00 ----D---- C:\Qoobox
2009-05-10 18:44:11 ----D---- C:\log
2009-05-09 23:03:13 ----D---- C:\Documents and Settings\J@w€n\Application Data\Malwarebytes
2009-05-09 23:02:59 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-04-29 18:49:20 ----HD---- C:\WINDOWS\$hf_mig$
2009-04-17 20:33:35 ----D---- C:\Documents and Settings\J@w€n\Application Data\Macromedia
2009-04-17 20:33:35 ----D---- C:\Documents and Settings\J@w€n\Application Data\Adobe
2009-04-14 00:30:56 ----D---- C:\Documents and Settings\J@w€n\Application Data\vlc
2009-04-14 00:30:12 ----D---- C:\Documents and Settings\J@w€n\Application Data\dvdcss
2009-04-13 23:34:14 ----D---- C:\Program Files\VideoLAN
2009-04-13 23:28:09 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-04-13 23:28:09 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-04-13 23:20:50 ----D---- C:\Program Files\The Cleaner Free
2009-04-13 22:57:56 ----D---- C:\Documents and Settings\J@w€n\Application Data\XericDesign
2009-04-13 22:57:36 ----D---- C:\Program Files\XericDesign
2009-04-13 22:49:58 ----D---- C:\Program Files\AxBx
2009-04-13 22:44:54 ----D---- C:\Program Files\GridinSoft Trojan Killer
2009-04-13 22:42:03 ----D---- C:\WINDOWS\System32\NtmsData
2009-04-13 21:59:02 ----D---- C:\disks durs
2009-04-13 21:57:01 ----D---- C:\Documents and Settings\All Users\Application Data\AVS4YOU
2009-04-13 21:14:27 ----D---- C:\disks durs2
2009-04-13 20:36:17 ----D---- C:\Documents and Settings\J@w€n\Application Data\DeepBurner
2009-04-13 20:35:19 ----D---- C:\Program Files\Astonsoft
2009-04-13 20:32:28 ----D---- C:\Documents and Settings\J@w€n\Application Data\Mozilla
2009-04-13 20:31:58 ----D---- C:\Program Files\Mozilla Firefox
2009-04-13 20:27:04 ----A---- C:\WINDOWS\Wininit.ini
2009-04-13 20:26:44 ----SHD---- C:\Config.Msi
2009-04-13 20:24:49 ----D---- C:\Documents and Settings\J@w€n\Application Data\FarStone
2009-04-13 20:22:54 ----D---- C:\Program Files\FarStone
2009-04-13 20:21:13 ----D---- C:\Program Files\Fichiers communs\InstallShield
2009-04-13 20:16:18 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-04-13 20:15:44 ----D---- C:\WINDOWS\System32\bits
2009-04-13 20:15:40 ----N---- C:\WINDOWS\System32\spmsg.dll
2009-04-13 20:15:35 ----HDC---- C:\WINDOWS\$NtUninstallKB842773$
2009-04-13 20:14:55 ----N---- C:\WINDOWS\System32\bitsprx3.dll
2009-04-13 20:14:55 ----N---- C:\WINDOWS\System32\bitsprx2.dll
2009-04-13 20:14:55 ----A---- C:\WINDOWS\System32\winhttp.dll
2009-04-13 20:14:55 ----A---- C:\WINDOWS\System32\qmgrprxy.dll
2009-04-13 20:13:38 ----A---- C:\WINDOWS\System32\wups2.dll
2009-04-13 20:13:38 ----A---- C:\WINDOWS\System32\wups.dll
2009-04-13 20:13:37 ----A---- C:\WINDOWS\System32\wucltui.dll.mui
2009-04-13 20:13:37 ----A---- C:\WINDOWS\System32\wucltui.dll
2009-04-13 20:13:37 ----A---- C:\WINDOWS\System32\wuaueng.dll.mui
2009-04-13 20:13:36 ----A---- C:\WINDOWS\System32\wuapi.dll.mui
2009-04-13 20:13:35 ----A---- C:\WINDOWS\System32\wuapi.dll
2009-04-13 07:57:49 ----A---- C:\WINDOWS\System32\nv4_disp.dll

======List of files/folders modified in the last 1 months======

2009-05-30 23:55:25 ----HD---- C:\WINDOWS\inf
2009-05-11 18:30:23 ----RD---- C:\Program Files
2009-05-11 18:06:20 ----D---- C:\WINDOWS\system32
2009-05-11 18:06:20 ----A---- C:\WINDOWS\System32\PerfStringBackup.INI
2009-05-11 18:05:14 ----D---- C:\WINDOWS\Debug
2009-05-10 23:23:24 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-05-10 21:38:21 ----D---- C:\WINDOWS
2009-05-10 21:36:41 ----A---- C:\WINDOWS\system.ini
2009-05-10 21:36:08 ----D---- C:\WINDOWS\System32\drivers
2009-05-10 21:36:08 ----D---- C:\WINDOWS\AppPatch
2009-05-10 21:36:03 ----D---- C:\Program Files\Fichiers communs
2009-05-10 21:35:07 ----D---- C:\WINDOWS\System32\CatRoot2
2009-05-10 21:34:04 ----RASH---- C:\boot.ini
2009-05-10 20:04:33 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-04-22 13:13:48 ----RSHDC---- C:\WINDOWS\System32\DllCache
2009-04-18 00:34:17 ----D---- C:\WINDOWS\system
2009-04-13 23:29:27 ----D---- C:\WINDOWS\Prefetch
2009-04-13 22:11:41 ----SD---- C:\Documents and Settings\J@w€n\Application Data\Microsoft
2009-04-13 20:26:43 ----SHD---- C:\WINDOWS\Installer
2009-04-13 20:16:08 ----A---- C:\WINDOWS\imsins.BAK
2009-04-13 20:13:49 ----D---- C:\WINDOWS\SoftwareDistribution
2009-04-13 20:13:40 ----D---- C:\WINDOWS\Help
2009-04-13 20:13:06 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-04-13 20:11:05 ----D---- C:\Program Files\SiSoftware Sandra Lite 2007.SP1

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Fallback;Fallback; C:\WINDOWS\System32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\System32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\System32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 SoftFax;SoftFax; C:\WINDOWS\System32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 Tones;Tones; C:\WINDOWS\System32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\System32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2006-06-09 1373120]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2002-08-28 891711]
R3 SISNIC;Pilote de carte Fast Ethernet PCI SiS; C:\WINDOWS\System32\DRIVERS\sisnic.sys [2001-08-17 31232]
R3 usbehci;Pilote miniport de contrôleur hôte amélioré USB 2.0 Microsoft; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2002-08-29 19328]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2002-08-29 51968]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2002-08-29 15744]
S3 basic2;basic2; C:\WINDOWS\System32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
S3 catchme;catchme; \??\C:\DOCUME~1\J@WN~1\LOCALS~1\Temp\catchme.sys []
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 hsf_msft;hsf_msft; C:\WINDOWS\System32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
S3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MS1000;MS1000; C:\WINDOWS\System32\DRIVERS\MS1000.sys [2009-04-13 5376]
S3 Rksample;Rksample; C:\WINDOWS\System32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2002-08-29 21760]
S4 IntelIde;IntelIde; C:\WINDOWS\System32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 vkservice;VirusKeeper antivirus/antispyware; C:\Program Files\AxBx\VirusKeeper 2009 Pro Evaluation\vk_service.exe [2008-09-26 1119584]
S3 SandraTheSrv;Sandra Service; C:\Program Files\SiSoftware Sandra Lite 2007.SP1\RpcSandraSrv.exe [2006-08-03 1156096]

-----------------EOF-----------------

--
sea sex and sun and sex, and sex again =D
cordialement, jaja_33