Pc escargot, rapport rsit
yoti
-
pimprenelle27 Messages postés 22182 Statut Contributeur sécurité -
pimprenelle27 Messages postés 22182 Statut Contributeur sécurité -
Bonjour, mon pc est une vraie lenteur, quelqu'un peut regardé mon rapport rsit ???
merci pour l'aide
Logfile of random's system information tool 1.06 (written by random/random)
Run by Alex at 2009-08-29 16:21:36
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 136 GB (57%) free of 238 GB
Total RAM: 3582 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:21:56, on 29/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Alex\Downloads\RSIT.exe
C:\Users\Alex\Downloads\Alex.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\s wg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [DisableS3S4] c:\DisableS3S4.cmd
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu. exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SRS Premium Sound] "C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" /hideme
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: FancyStart daemon.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SRS Volume Sync Service (SRS_VolSync_Service) - SRS Labs, Inc. - C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe
--
End of file - 8626 bytes
======Scheduled tasks folder======
C:\Windows\tasks\User_Feed_Synchronization-{CD490DC0-1DC7-4D00-8360-4E24ABFBF9B0}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-25 256112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\s wg.dll [2009-08-25 761840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-08-25 458736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-29 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-25 256112]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"DisableS3S4"=c:\DisableS3S4.cmd []
"CLMLServer"=C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2008-07-19 104936]
"P2Go_Menu"=C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu. exe [2008-06-14 210216]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-04-15 13736480]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2009-03-30 424864]
"AmIcoSinglun"=C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [2008-10-01 237568]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2008-08-18 98304]
"ATKOSD2"=C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [2009-03-04 8392704]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-03-24 7289376]
"Wireless Console 3"=C:\Program Files\ASUS\Wireless Console 3\wcourier.exe [2009-02-07 1593344]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMedia.exe [2009-04-07 159744]
"ASUS Camera ScreenSaver"=C:\Windows\AsScrProlog.exe [2009-06-24 47672]
"ADSMTray"=C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [2008-04-01 266240]
"ACMON"=C:\Program Files\ASUS\Splendid\ACMON.exe [2008-10-01 851968]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-12-03 35184]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-07-13 292128]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-29 149280]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]
"SRS Premium Sound"=C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe [2009-04-07 3405048]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe [2009-06-24 39408]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{A9FEB6D7-9C52-49FC-B956-7AB275B78890}\_5598CE641C54B66A23693F.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa]
"notification packages"=scecli
C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\standard profile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\domainpr ofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{55eb47aa-9238-11de-b1ab-002618572080}]
shell\AutoRun\command - F:\Setup.exe
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2009-08-29 16:21:36 ----D---- C:\rsit
2009-08-29 09:47:27 ----D---- C:\ProgramData\Avira
2009-08-29 09:47:27 ----D---- C:\Program Files\Avira
2009-08-29 09:22:18 ----A---- C:\Windows\system32\newdev.exe
2009-08-29 09:22:18 ----A---- C:\Windows\system32\newdev.dll
2009-08-29 07:00:37 ----A---- C:\Windows\system32\javaws.exe
2009-08-29 07:00:37 ----A---- C:\Windows\system32\javaw.exe
2009-08-29 07:00:37 ----A---- C:\Windows\system32\java.exe
2009-08-29 07:00:37 ----A---- C:\Windows\system32\deploytk.dll
2009-08-29 07:00:11 ----D---- C:\Program Files\Java
2009-08-29 02:38:54 ----D---- C:\Users\Alex\AppData\Roaming\Malwarebytes
2009-08-29 02:38:48 ----D---- C:\ProgramData\Malwarebytes
2009-08-29 02:38:47 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-08-28 19:50:41 ----D---- C:\Program Files\a-squared Free
2009-08-28 17:33:12 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-08-28 17:33:12 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-08-28 17:31:33 ----D---- C:\Users\Alex\AppData\Roaming\vlc
2009-08-28 17:30:23 ----D---- C:\Program Files\VideoLAN
2009-08-28 15:24:04 ----A---- C:\Windows\system32\occache.dll
2009-08-28 15:24:03 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-08-28 15:24:03 ----A---- C:\Windows\system32\msfeeds.dll
2009-08-28 15:24:03 ----A---- C:\Windows\system32\jsproxy.dll
2009-08-28 15:24:03 ----A---- C:\Windows\system32\iepeers.dll
2009-08-28 15:24:02 ----A---- C:\Windows\system32\ieui.dll
2009-08-28 15:24:02 ----A---- C:\Windows\system32\iesetup.dll
2009-08-28 15:24:01 ----A---- C:\Windows\system32\wininet.dll
2009-08-28 15:24:01 ----A---- C:\Windows\system32\msfeedssync.exe
2009-08-28 15:24:01 ----A---- C:\Windows\system32\iertutil.dll
2009-08-28 15:24:01 ----A---- C:\Windows\system32\iernonce.dll
2009-08-28 15:24:01 ----A---- C:\Windows\system32\ie4uinit.exe
2009-08-28 15:24:00 ----A---- C:\Windows\system32\urlmon.dll
2009-08-28 15:24:00 ----A---- C:\Windows\system32\ieUnatt.exe
2009-08-28 15:24:00 ----A---- C:\Windows\system32\iesysprep.dll
2009-08-28 15:24:00 ----A---- C:\Windows\system32\iedkcs32.dll
2009-08-28 15:23:58 ----A---- C:\Windows\system32\mshtml.dll
2009-08-28 15:23:58 ----A---- C:\Windows\system32\ieframe.dll
2009-08-28 15:19:29 ----A---- C:\Windows\system32\mshtmled.dll
2009-08-28 15:19:28 ----A---- C:\Windows\system32\mshtmler.dll
2009-08-28 15:19:28 ----A---- C:\Windows\system32\icardie.dll
2009-08-28 15:19:28 ----A---- C:\Windows\system32\admparse.dll
2009-08-28 15:19:27 ----A---- C:\Windows\system32\msls31.dll
2009-08-28 15:19:27 ----A---- C:\Windows\system32\ieakeng.dll
2009-08-28 15:19:27 ----A---- C:\Windows\system32\corpol.dll
2009-08-28 15:19:26 ----A---- C:\Windows\system32\imgutil.dll
2009-08-28 15:19:26 ----A---- C:\Windows\system32\dxtmsft.dll
2009-08-28 15:19:22 ----A---- C:\Windows\system32\dxtrans.dll
2009-08-28 15:19:20 ----A---- C:\Windows\system32\licmgr10.dll
2009-08-28 15:19:20 ----A---- C:\Windows\system32\inseng.dll
2009-08-28 15:19:20 ----A---- C:\Windows\system32\ieaksie.dll
2009-08-28 15:19:19 ----A---- C:\Windows\system32\wextract.exe
2009-08-28 15:19:19 ----A---- C:\Windows\system32\webcheck.dll
2009-08-28 15:19:19 ----A---- C:\Windows\system32\msrating.dll
2009-08-28 15:19:19 ----A---- C:\Windows\system32\ieakui.dll
2009-08-28 15:19:18 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-08-28 15:19:18 ----A---- C:\Windows\system32\pngfilt.dll
2009-08-28 15:19:18 ----A---- C:\Windows\system32\mstime.dll
2009-08-28 15:19:18 ----A---- C:\Windows\system32\advpack.dll
2009-08-28 15:19:17 ----A---- C:\Windows\system32\vbscript.dll
2009-08-28 15:19:17 ----A---- C:\Windows\system32\jscript.dll
2009-08-28 15:19:17 ----A---- C:\Windows\system32\ieapfltr.dll
2009-08-28 15:19:16 ----A---- C:\Windows\system32\url.dll
2009-08-28 15:19:13 ----A---- C:\Windows\system32\SetDepNx.exe
2009-08-28 15:19:13 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-08-28 15:19:13 ----A---- C:\Windows\system32\mshta.exe
2009-08-28 15:19:13 ----A---- C:\Windows\system32\iexpress.exe
2009-08-28 15:19:12 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-08-28 15:19:12 ----A---- C:\Windows\system32\PDMSetup.exe
2009-08-27 03:04:14 ----A---- C:\Windows\system32\tzres.dll
2009-08-26 18:18:25 ----D---- C:\Program Files\Microsoft Office Outlook Connector
2009-08-26 14:11:02 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-08-26 14:11:01 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-08-26 02:17:48 ----D---- C:\Program Files\CCleaner
2009-08-26 02:07:26 ----D---- C:\Program Files\7-Zip
2009-08-26 01:58:59 ----D---- C:\Program Files\ConvertHelper
2009-08-26 00:02:45 ----D---- C:\Users\Alex\AppData\Roaming\COWON
2009-08-25 23:42:38 ----D---- C:\Users\Alex\AppData\Roaming\CyberLink
2009-08-25 22:14:29 ----D---- C:\Program Files\Common Files\COWON
2009-08-25 22:14:28 ----D---- C:\Program Files\JetAudio
2009-08-25 22:12:21 ----D---- C:\Users\Alex\AppData\Roaming\InstallShield
2009-08-25 17:37:32 ----D---- C:\Users\Alex\AppData\Roaming\Apple Computer
2009-08-25 17:37:16 ----A---- C:\Windows\system32\GEARAspi.dll
2009-08-25 17:37:04 ----D---- C:\Program Files\iPod
2009-08-25 17:37:02 ----D---- C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-08-25 17:37:02 ----D---- C:\Program Files\iTunes
2009-08-25 17:36:28 ----D---- C:\Program Files\Bonjour
2009-08-25 17:35:53 ----D---- C:\Program Files\QuickTime
2009-08-25 17:35:52 ----D---- C:\ProgramData\Apple Computer
2009-08-25 17:35:32 ----D---- C:\Program Files\Apple Software Update
2009-08-25 17:34:18 ----D---- C:\ProgramData\Apple
2009-08-25 17:34:18 ----D---- C:\Program Files\Common Files\Apple
2009-08-25 17:12:51 ----D---- C:\Users\Alex\AppData\Roaming\Adobe
2009-08-25 16:55:10 ----D---- C:\Users\Alex\AppData\Roaming\Mozilla
2009-08-25 16:52:19 ----D---- C:\Program Files\Mozilla Firefox
2009-08-25 16:35:17 ----A---- C:\Windows\system32\infocardapi.dll
2009-08-25 16:35:16 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-08-25 16:35:16 ----A---- C:\Windows\system32\PresentationCFFRasterizerNativ e_v0300.dll
2009-08-25 16:35:16 ----A---- C:\Windows\system32\icardres.dll
2009-08-25 16:35:16 ----A---- C:\Windows\system32\icardagt.exe
2009-08-25 16:35:13 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-08-25 16:35:11 ----A---- C:\Windows\system32\PresentationHost.exe
2009-08-25 16:30:22 ----A---- C:\Windows\system32\dfshim.dll
2009-08-25 16:30:18 ----A---- C:\Windows\system32\netfxperf.dll
2009-08-25 16:30:18 ----A---- C:\Windows\system32\mscoree.dll
2009-08-25 16:30:08 ----A---- C:\Windows\system32\mscorier.dll
2009-08-25 16:30:03 ----A---- C:\Windows\system32\mscories.dll
2009-08-25 16:12:23 ----A---- C:\Windows\system32\mstscax.dll
2009-08-25 16:12:11 ----A---- C:\Windows\system32\psisdecd.dll
2009-08-25 16:12:11 ----A---- C:\Windows\system32\EncDec.dll
2009-08-25 16:12:07 ----A---- C:\Windows\system32\localspl.dll
2009-08-25 16:12:05 ----A---- C:\Windows\system32\wkssvc.dll
2009-08-25 16:11:50 ----A---- C:\Windows\system32\wersvc.dll
2009-08-25 16:11:50 ----A---- C:\Windows\system32\Faultrep.dll
2009-08-25 16:11:48 ----A---- C:\Windows\system32\wdigest.dll
2009-08-25 16:11:48 ----A---- C:\Windows\system32\msv1_0.dll
2009-08-25 16:11:48 ----A---- C:\Windows\system32\kerberos.dll
2009-08-25 16:11:47 ----A---- C:\Windows\system32\schannel.dll
2009-08-25 16:11:47 ----A---- C:\Windows\system32\lsass.exe
2009-08-25 16:11:47 ----A---- C:\Windows\system32\lsasrv.dll
2009-08-25 16:11:46 ----A---- C:\Windows\system32\secur32.dll
2009-08-25 16:11:41 ----A---- C:\Windows\system32\wmp.dll
2009-08-25 16:11:40 ----A---- C:\Windows\system32\wmpdxm.dll
2009-08-25 16:11:39 ----A---- C:\Windows\system32\spwmp.dll
2009-08-25 16:11:39 ----A---- C:\Windows\system32\dxmasf.dll
2009-08-25 16:11:38 ----A---- C:\Windows\system32\wmploc.DLL
2009-08-25 16:11:34 ----A---- C:\Windows\system32\t2embed.dll
2009-08-25 16:11:34 ----A---- C:\Windows\system32\fontsub.dll
2009-08-25 16:11:34 ----A---- C:\Windows\system32\dciman32.dll
2009-08-25 16:11:34 ----A---- C:\Windows\system32\atmfd.dll
2009-08-25 16:11:32 ----A---- C:\Windows\system32\avifil32.dll
2009-08-25 16:11:31 ----A---- C:\Windows\system32\atl.dll
2009-08-25 16:06:08 ----A---- C:\Windows\system32\rpcrt4.dll
2009-08-25 16:01:30 ----D---- C:\Users\Alex\AppData\Roaming\Google
2009-08-25 15:57:53 ----A---- C:\Windows\system32\wups2.dll
2009-08-25 15:57:53 ----A---- C:\Windows\system32\wucltux.dll
2009-08-25 15:57:53 ----A---- C:\Windows\system32\wuaueng.dll
2009-08-25 15:57:53 ----A---- C:\Windows\system32\wuauclt.exe
2009-08-25 15:57:40 ----A---- C:\Windows\system32\wups.dll
2009-08-25 15:57:40 ----A---- C:\Windows\system32\wudriver.dll
2009-08-25 15:57:40 ----A---- C:\Windows\system32\wuapi.dll
2009-08-25 15:57:35 ----A---- C:\Windows\system32\wuwebv.dll
2009-08-25 15:57:35 ----A---- C:\Windows\system32\wuapp.exe
2009-08-25 15:42:35 ----D---- C:\ProgramData\LightScribe
2009-08-25 15:40:20 ----A---- C:\Windows\ATKPF.ini
2009-08-25 15:23:36 ----D---- C:\ProgramData\ASUS
2009-08-25 15:10:21 ----D---- C:\Users\Alex\AppData\Roaming\Macromedia
2009-08-25 15:09:58 ----D---- C:\Users\Alex\AppData\Roaming\Identities
2009-08-25 15:06:30 ----D---- C:\Program Files\Microsoft Silverlight
2009-08-25 15:06:05 ----DC---- C:\Windows\system32\DRVSTORE
2009-08-25 15:05:11 ----A---- C:\Windows\system32\d3dx9_32.dll
2009-08-25 15:04:48 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2009-08-25 15:03:23 ----D---- C:\Program Files\Microsoft
2009-08-25 15:03:08 ----D---- C:\Program Files\Windows Live SkyDrive
2009-08-25 15:02:49 ----D---- C:\Program Files\Windows Live
2009-08-25 15:01:41 ----D---- C:\Program Files\Common Files\Windows Live
2009-08-25 14:59:59 ----D---- C:\ProgramData\Adobe
2009-08-25 14:59:55 ----D---- C:\Program Files\Common Files\Adobe
2009-08-25 14:59:55 ----D---- C:\Program Files\Adobe
2009-08-25 14:57:35 ----SD---- C:\Users\Alex\AppData\Roaming\Microsoft
2009-08-25 14:57:35 ----D---- C:\Users\Alex\AppData\Roaming\Media Center Programs
======List of files/folders modified in the last 1 months======
2009-08-29 16:21:56 ----D---- C:\Windows\Temp
2009-08-29 15:30:06 ----D---- C:\Windows\System32
2009-08-29 15:30:06 ----D---- C:\Windows\inf
2009-08-29 15:30:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-08-29 15:25:21 ----A---- C:\Windows\system32\acovcnt.exe
2009-08-29 15:23:14 ----HD---- C:\ProgramData
2009-08-29 15:20:08 ----D---- C:\Windows
2009-08-29 13:06:56 ----D---- C:\Windows\winsxs
2009-08-29 13:06:46 ----SHD---- C:\System Volume Information
2009-08-29 09:47:29 ----D---- C:\Windows\system32\drivers
2009-08-29 09:47:27 ----RD---- C:\Program Files
2009-08-29 09:46:03 ----SHD---- C:\Windows\Installer
2009-08-29 09:42:52 ----D---- C:\Program Files\Common Files
2009-08-29 09:42:03 ----D---- C:\ProgramData\Norton
2009-08-29 09:41:46 ----RSD---- C:\Windows\assembly
2009-08-29 09:41:43 ----D---- C:\Windows\system32\catroot
2009-08-29 09:31:51 ----HD---- C:\Windows\system32\GroupPolicy
2009-08-29 06:00:09 ----D---- C:\Windows\system32\LogFiles
2009-08-29 05:10:16 ----D---- C:\Windows\rescache
2009-08-29 05:02:34 ----SD---- C:\Windows\Downloaded Program Files
2009-08-29 05:01:00 ----D---- C:\Windows\system32\catroot2
2009-08-29 04:57:47 ----D---- C:\Windows\system32\WDI
2009-08-29 04:56:45 ----D---- C:\Windows\system32\nl-NL
2009-08-29 04:55:03 ----D---- C:\ProgramData\Partner
2009-08-28 23:27:43 ----D---- C:\Windows\Logs
2009-08-28 23:18:16 ----D---- C:\Windows\Prefetch
2009-08-28 15:48:02 ----D---- C:\Windows\system32\migration
2009-08-28 15:48:02 ----D---- C:\Program Files\Internet Explorer
2009-08-28 15:47:58 ----D---- C:\Windows\system32\it-IT
2009-08-28 15:47:56 ----D---- C:\Windows\system32\fr-FR
2009-08-28 15:47:53 ----D---- C:\Windows\PolicyDefinitions
2009-08-28 15:47:52 ----D---- C:\Windows\system32\en-US
2009-08-28 15:43:30 ----D---- C:\Windows\Microsoft.NET
2009-08-28 15:26:14 ----D---- C:\ProgramData\Microsoft Help
2009-08-27 10:17:42 ----D---- C:\Windows\AppPatch
2009-08-26 02:21:17 ----D---- C:\Windows\Debug
2009-08-26 00:28:22 ----SD---- C:\ProgramData\Microsoft
2009-08-25 23:42:42 ----D---- C:\ProgramData\CyberLink
2009-08-25 23:41:43 ----D---- C:\Windows\Tasks
2009-08-25 23:41:43 ----D---- C:\Windows\system32\Tasks
2009-08-25 22:14:27 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-25 20:45:55 ----D---- C:\Windows\system32\NDF
2009-08-25 17:54:04 ----D---- C:\Windows\system32\de-DE
2009-08-25 17:54:03 ----D---- C:\Windows\ehome
2009-08-25 17:53:55 ----D---- C:\Program Files\Windows Media Player
2009-08-25 17:53:21 ----D---- C:\Windows\system32\XPSViewer
2009-08-25 17:53:21 ----D---- C:\Windows\system32\wbem
2009-08-25 17:52:59 ----D---- C:\Program Files\Windows Mail
2009-08-25 17:02:35 ----D---- C:\Program Files\Common Files\microsoft shared
2009-08-25 16:52:45 ----RSD---- C:\Windows\Fonts
2009-08-25 16:52:22 ----D---- C:\Program Files\Microsoft Works
2009-08-25 16:51:01 ----A---- C:\Windows\win.ini
2009-08-25 15:49:20 ----D---- C:\ProgramData\Symantec
2009-08-25 15:22:08 ----D---- C:\Windows\SoftwareDistribution
2009-08-25 15:10:16 ----SHD---- C:\$RECYCLE.BIN
2009-08-25 15:06:16 ----D---- C:\Program Files\Common Files\System
2009-08-25 14:57:35 ----RD---- C:\Users
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-08-29 28520]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-08-29 55656]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-02-18 1093632]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-03-30 129536]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-03-24 2346016]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2008-11-03 13880]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-04-15 9561472]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2008-08-25 15872]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-11-27 135680]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2008-08-11 1752704]
R3 SRS_PremiumSound_Service;SRS Labs Premium Sound; C:\Windows\system32\drivers\srs_PremiumSound_i386. sys [2009-04-01 233128]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-07-09 39424]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 a2free;a-squared Free Service; C:\Program Files\a-squared Free\a2service.exe [2009-08-28 980512]
R2 ADSMService;ADSM Service; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-08-29 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-29 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-07-09 144712]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2008-08-14 100920]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-04-15 211488]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SRS_VolSync_Service;SRS Volume Sync Service; C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe [2009-04-07 70880]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-07-13 542496]
S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-08-25 182768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
-----------------EOF-----------------
merci pour l'aide
Logfile of random's system information tool 1.06 (written by random/random)
Run by Alex at 2009-08-29 16:21:36
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 136 GB (57%) free of 238 GB
Total RAM: 3582 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:21:56, on 29/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Alex\Downloads\RSIT.exe
C:\Users\Alex\Downloads\Alex.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\s wg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [DisableS3S4] c:\DisableS3S4.cmd
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu. exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SRS Premium Sound] "C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" /hideme
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: FancyStart daemon.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SRS Volume Sync Service (SRS_VolSync_Service) - SRS Labs, Inc. - C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe
--
End of file - 8626 bytes
======Scheduled tasks folder======
C:\Windows\tasks\User_Feed_Synchronization-{CD490DC0-1DC7-4D00-8360-4E24ABFBF9B0}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-25 256112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\s wg.dll [2009-08-25 761840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-08-25 458736]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-29 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-08-25 256112]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"DisableS3S4"=c:\DisableS3S4.cmd []
"CLMLServer"=C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2008-07-19 104936]
"P2Go_Menu"=C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu. exe [2008-06-14 210216]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-04-15 13736480]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2009-03-30 424864]
"AmIcoSinglun"=C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [2008-10-01 237568]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2008-08-18 98304]
"ATKOSD2"=C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [2009-03-04 8392704]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-03-24 7289376]
"Wireless Console 3"=C:\Program Files\ASUS\Wireless Console 3\wcourier.exe [2009-02-07 1593344]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMedia.exe [2009-04-07 159744]
"ASUS Camera ScreenSaver"=C:\Windows\AsScrProlog.exe [2009-06-24 47672]
"ADSMTray"=C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [2008-04-01 266240]
"ACMON"=C:\Program Files\ASUS\Splendid\ACMON.exe [2008-10-01 851968]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-12-03 35184]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-07-13 292128]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-29 149280]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-21 1233920]
"SRS Premium Sound"=C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe [2009-04-07 3405048]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe [2009-06-24 39408]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{A9FEB6D7-9C52-49FC-B956-7AB275B78890}\_5598CE641C54B66A23693F.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Lsa]
"notification packages"=scecli
C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\standard profile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\servic es\sharedaccess\parameters\firewallpolicy\domainpr ofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{55eb47aa-9238-11de-b1ab-002618572080}]
shell\AutoRun\command - F:\Setup.exe
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2009-08-29 16:21:36 ----D---- C:\rsit
2009-08-29 09:47:27 ----D---- C:\ProgramData\Avira
2009-08-29 09:47:27 ----D---- C:\Program Files\Avira
2009-08-29 09:22:18 ----A---- C:\Windows\system32\newdev.exe
2009-08-29 09:22:18 ----A---- C:\Windows\system32\newdev.dll
2009-08-29 07:00:37 ----A---- C:\Windows\system32\javaws.exe
2009-08-29 07:00:37 ----A---- C:\Windows\system32\javaw.exe
2009-08-29 07:00:37 ----A---- C:\Windows\system32\java.exe
2009-08-29 07:00:37 ----A---- C:\Windows\system32\deploytk.dll
2009-08-29 07:00:11 ----D---- C:\Program Files\Java
2009-08-29 02:38:54 ----D---- C:\Users\Alex\AppData\Roaming\Malwarebytes
2009-08-29 02:38:48 ----D---- C:\ProgramData\Malwarebytes
2009-08-29 02:38:47 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-08-28 19:50:41 ----D---- C:\Program Files\a-squared Free
2009-08-28 17:33:12 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-08-28 17:33:12 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-08-28 17:31:33 ----D---- C:\Users\Alex\AppData\Roaming\vlc
2009-08-28 17:30:23 ----D---- C:\Program Files\VideoLAN
2009-08-28 15:24:04 ----A---- C:\Windows\system32\occache.dll
2009-08-28 15:24:03 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-08-28 15:24:03 ----A---- C:\Windows\system32\msfeeds.dll
2009-08-28 15:24:03 ----A---- C:\Windows\system32\jsproxy.dll
2009-08-28 15:24:03 ----A---- C:\Windows\system32\iepeers.dll
2009-08-28 15:24:02 ----A---- C:\Windows\system32\ieui.dll
2009-08-28 15:24:02 ----A---- C:\Windows\system32\iesetup.dll
2009-08-28 15:24:01 ----A---- C:\Windows\system32\wininet.dll
2009-08-28 15:24:01 ----A---- C:\Windows\system32\msfeedssync.exe
2009-08-28 15:24:01 ----A---- C:\Windows\system32\iertutil.dll
2009-08-28 15:24:01 ----A---- C:\Windows\system32\iernonce.dll
2009-08-28 15:24:01 ----A---- C:\Windows\system32\ie4uinit.exe
2009-08-28 15:24:00 ----A---- C:\Windows\system32\urlmon.dll
2009-08-28 15:24:00 ----A---- C:\Windows\system32\ieUnatt.exe
2009-08-28 15:24:00 ----A---- C:\Windows\system32\iesysprep.dll
2009-08-28 15:24:00 ----A---- C:\Windows\system32\iedkcs32.dll
2009-08-28 15:23:58 ----A---- C:\Windows\system32\mshtml.dll
2009-08-28 15:23:58 ----A---- C:\Windows\system32\ieframe.dll
2009-08-28 15:19:29 ----A---- C:\Windows\system32\mshtmled.dll
2009-08-28 15:19:28 ----A---- C:\Windows\system32\mshtmler.dll
2009-08-28 15:19:28 ----A---- C:\Windows\system32\icardie.dll
2009-08-28 15:19:28 ----A---- C:\Windows\system32\admparse.dll
2009-08-28 15:19:27 ----A---- C:\Windows\system32\msls31.dll
2009-08-28 15:19:27 ----A---- C:\Windows\system32\ieakeng.dll
2009-08-28 15:19:27 ----A---- C:\Windows\system32\corpol.dll
2009-08-28 15:19:26 ----A---- C:\Windows\system32\imgutil.dll
2009-08-28 15:19:26 ----A---- C:\Windows\system32\dxtmsft.dll
2009-08-28 15:19:22 ----A---- C:\Windows\system32\dxtrans.dll
2009-08-28 15:19:20 ----A---- C:\Windows\system32\licmgr10.dll
2009-08-28 15:19:20 ----A---- C:\Windows\system32\inseng.dll
2009-08-28 15:19:20 ----A---- C:\Windows\system32\ieaksie.dll
2009-08-28 15:19:19 ----A---- C:\Windows\system32\wextract.exe
2009-08-28 15:19:19 ----A---- C:\Windows\system32\webcheck.dll
2009-08-28 15:19:19 ----A---- C:\Windows\system32\msrating.dll
2009-08-28 15:19:19 ----A---- C:\Windows\system32\ieakui.dll
2009-08-28 15:19:18 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-08-28 15:19:18 ----A---- C:\Windows\system32\pngfilt.dll
2009-08-28 15:19:18 ----A---- C:\Windows\system32\mstime.dll
2009-08-28 15:19:18 ----A---- C:\Windows\system32\advpack.dll
2009-08-28 15:19:17 ----A---- C:\Windows\system32\vbscript.dll
2009-08-28 15:19:17 ----A---- C:\Windows\system32\jscript.dll
2009-08-28 15:19:17 ----A---- C:\Windows\system32\ieapfltr.dll
2009-08-28 15:19:16 ----A---- C:\Windows\system32\url.dll
2009-08-28 15:19:13 ----A---- C:\Windows\system32\SetDepNx.exe
2009-08-28 15:19:13 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-08-28 15:19:13 ----A---- C:\Windows\system32\mshta.exe
2009-08-28 15:19:13 ----A---- C:\Windows\system32\iexpress.exe
2009-08-28 15:19:12 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-08-28 15:19:12 ----A---- C:\Windows\system32\PDMSetup.exe
2009-08-27 03:04:14 ----A---- C:\Windows\system32\tzres.dll
2009-08-26 18:18:25 ----D---- C:\Program Files\Microsoft Office Outlook Connector
2009-08-26 14:11:02 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-08-26 14:11:01 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-08-26 02:17:48 ----D---- C:\Program Files\CCleaner
2009-08-26 02:07:26 ----D---- C:\Program Files\7-Zip
2009-08-26 01:58:59 ----D---- C:\Program Files\ConvertHelper
2009-08-26 00:02:45 ----D---- C:\Users\Alex\AppData\Roaming\COWON
2009-08-25 23:42:38 ----D---- C:\Users\Alex\AppData\Roaming\CyberLink
2009-08-25 22:14:29 ----D---- C:\Program Files\Common Files\COWON
2009-08-25 22:14:28 ----D---- C:\Program Files\JetAudio
2009-08-25 22:12:21 ----D---- C:\Users\Alex\AppData\Roaming\InstallShield
2009-08-25 17:37:32 ----D---- C:\Users\Alex\AppData\Roaming\Apple Computer
2009-08-25 17:37:16 ----A---- C:\Windows\system32\GEARAspi.dll
2009-08-25 17:37:04 ----D---- C:\Program Files\iPod
2009-08-25 17:37:02 ----D---- C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-08-25 17:37:02 ----D---- C:\Program Files\iTunes
2009-08-25 17:36:28 ----D---- C:\Program Files\Bonjour
2009-08-25 17:35:53 ----D---- C:\Program Files\QuickTime
2009-08-25 17:35:52 ----D---- C:\ProgramData\Apple Computer
2009-08-25 17:35:32 ----D---- C:\Program Files\Apple Software Update
2009-08-25 17:34:18 ----D---- C:\ProgramData\Apple
2009-08-25 17:34:18 ----D---- C:\Program Files\Common Files\Apple
2009-08-25 17:12:51 ----D---- C:\Users\Alex\AppData\Roaming\Adobe
2009-08-25 16:55:10 ----D---- C:\Users\Alex\AppData\Roaming\Mozilla
2009-08-25 16:52:19 ----D---- C:\Program Files\Mozilla Firefox
2009-08-25 16:35:17 ----A---- C:\Windows\system32\infocardapi.dll
2009-08-25 16:35:16 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-08-25 16:35:16 ----A---- C:\Windows\system32\PresentationCFFRasterizerNativ e_v0300.dll
2009-08-25 16:35:16 ----A---- C:\Windows\system32\icardres.dll
2009-08-25 16:35:16 ----A---- C:\Windows\system32\icardagt.exe
2009-08-25 16:35:13 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-08-25 16:35:11 ----A---- C:\Windows\system32\PresentationHost.exe
2009-08-25 16:30:22 ----A---- C:\Windows\system32\dfshim.dll
2009-08-25 16:30:18 ----A---- C:\Windows\system32\netfxperf.dll
2009-08-25 16:30:18 ----A---- C:\Windows\system32\mscoree.dll
2009-08-25 16:30:08 ----A---- C:\Windows\system32\mscorier.dll
2009-08-25 16:30:03 ----A---- C:\Windows\system32\mscories.dll
2009-08-25 16:12:23 ----A---- C:\Windows\system32\mstscax.dll
2009-08-25 16:12:11 ----A---- C:\Windows\system32\psisdecd.dll
2009-08-25 16:12:11 ----A---- C:\Windows\system32\EncDec.dll
2009-08-25 16:12:07 ----A---- C:\Windows\system32\localspl.dll
2009-08-25 16:12:05 ----A---- C:\Windows\system32\wkssvc.dll
2009-08-25 16:11:50 ----A---- C:\Windows\system32\wersvc.dll
2009-08-25 16:11:50 ----A---- C:\Windows\system32\Faultrep.dll
2009-08-25 16:11:48 ----A---- C:\Windows\system32\wdigest.dll
2009-08-25 16:11:48 ----A---- C:\Windows\system32\msv1_0.dll
2009-08-25 16:11:48 ----A---- C:\Windows\system32\kerberos.dll
2009-08-25 16:11:47 ----A---- C:\Windows\system32\schannel.dll
2009-08-25 16:11:47 ----A---- C:\Windows\system32\lsass.exe
2009-08-25 16:11:47 ----A---- C:\Windows\system32\lsasrv.dll
2009-08-25 16:11:46 ----A---- C:\Windows\system32\secur32.dll
2009-08-25 16:11:41 ----A---- C:\Windows\system32\wmp.dll
2009-08-25 16:11:40 ----A---- C:\Windows\system32\wmpdxm.dll
2009-08-25 16:11:39 ----A---- C:\Windows\system32\spwmp.dll
2009-08-25 16:11:39 ----A---- C:\Windows\system32\dxmasf.dll
2009-08-25 16:11:38 ----A---- C:\Windows\system32\wmploc.DLL
2009-08-25 16:11:34 ----A---- C:\Windows\system32\t2embed.dll
2009-08-25 16:11:34 ----A---- C:\Windows\system32\fontsub.dll
2009-08-25 16:11:34 ----A---- C:\Windows\system32\dciman32.dll
2009-08-25 16:11:34 ----A---- C:\Windows\system32\atmfd.dll
2009-08-25 16:11:32 ----A---- C:\Windows\system32\avifil32.dll
2009-08-25 16:11:31 ----A---- C:\Windows\system32\atl.dll
2009-08-25 16:06:08 ----A---- C:\Windows\system32\rpcrt4.dll
2009-08-25 16:01:30 ----D---- C:\Users\Alex\AppData\Roaming\Google
2009-08-25 15:57:53 ----A---- C:\Windows\system32\wups2.dll
2009-08-25 15:57:53 ----A---- C:\Windows\system32\wucltux.dll
2009-08-25 15:57:53 ----A---- C:\Windows\system32\wuaueng.dll
2009-08-25 15:57:53 ----A---- C:\Windows\system32\wuauclt.exe
2009-08-25 15:57:40 ----A---- C:\Windows\system32\wups.dll
2009-08-25 15:57:40 ----A---- C:\Windows\system32\wudriver.dll
2009-08-25 15:57:40 ----A---- C:\Windows\system32\wuapi.dll
2009-08-25 15:57:35 ----A---- C:\Windows\system32\wuwebv.dll
2009-08-25 15:57:35 ----A---- C:\Windows\system32\wuapp.exe
2009-08-25 15:42:35 ----D---- C:\ProgramData\LightScribe
2009-08-25 15:40:20 ----A---- C:\Windows\ATKPF.ini
2009-08-25 15:23:36 ----D---- C:\ProgramData\ASUS
2009-08-25 15:10:21 ----D---- C:\Users\Alex\AppData\Roaming\Macromedia
2009-08-25 15:09:58 ----D---- C:\Users\Alex\AppData\Roaming\Identities
2009-08-25 15:06:30 ----D---- C:\Program Files\Microsoft Silverlight
2009-08-25 15:06:05 ----DC---- C:\Windows\system32\DRVSTORE
2009-08-25 15:05:11 ----A---- C:\Windows\system32\d3dx9_32.dll
2009-08-25 15:04:48 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2009-08-25 15:03:23 ----D---- C:\Program Files\Microsoft
2009-08-25 15:03:08 ----D---- C:\Program Files\Windows Live SkyDrive
2009-08-25 15:02:49 ----D---- C:\Program Files\Windows Live
2009-08-25 15:01:41 ----D---- C:\Program Files\Common Files\Windows Live
2009-08-25 14:59:59 ----D---- C:\ProgramData\Adobe
2009-08-25 14:59:55 ----D---- C:\Program Files\Common Files\Adobe
2009-08-25 14:59:55 ----D---- C:\Program Files\Adobe
2009-08-25 14:57:35 ----SD---- C:\Users\Alex\AppData\Roaming\Microsoft
2009-08-25 14:57:35 ----D---- C:\Users\Alex\AppData\Roaming\Media Center Programs
======List of files/folders modified in the last 1 months======
2009-08-29 16:21:56 ----D---- C:\Windows\Temp
2009-08-29 15:30:06 ----D---- C:\Windows\System32
2009-08-29 15:30:06 ----D---- C:\Windows\inf
2009-08-29 15:30:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-08-29 15:25:21 ----A---- C:\Windows\system32\acovcnt.exe
2009-08-29 15:23:14 ----HD---- C:\ProgramData
2009-08-29 15:20:08 ----D---- C:\Windows
2009-08-29 13:06:56 ----D---- C:\Windows\winsxs
2009-08-29 13:06:46 ----SHD---- C:\System Volume Information
2009-08-29 09:47:29 ----D---- C:\Windows\system32\drivers
2009-08-29 09:47:27 ----RD---- C:\Program Files
2009-08-29 09:46:03 ----SHD---- C:\Windows\Installer
2009-08-29 09:42:52 ----D---- C:\Program Files\Common Files
2009-08-29 09:42:03 ----D---- C:\ProgramData\Norton
2009-08-29 09:41:46 ----RSD---- C:\Windows\assembly
2009-08-29 09:41:43 ----D---- C:\Windows\system32\catroot
2009-08-29 09:31:51 ----HD---- C:\Windows\system32\GroupPolicy
2009-08-29 06:00:09 ----D---- C:\Windows\system32\LogFiles
2009-08-29 05:10:16 ----D---- C:\Windows\rescache
2009-08-29 05:02:34 ----SD---- C:\Windows\Downloaded Program Files
2009-08-29 05:01:00 ----D---- C:\Windows\system32\catroot2
2009-08-29 04:57:47 ----D---- C:\Windows\system32\WDI
2009-08-29 04:56:45 ----D---- C:\Windows\system32\nl-NL
2009-08-29 04:55:03 ----D---- C:\ProgramData\Partner
2009-08-28 23:27:43 ----D---- C:\Windows\Logs
2009-08-28 23:18:16 ----D---- C:\Windows\Prefetch
2009-08-28 15:48:02 ----D---- C:\Windows\system32\migration
2009-08-28 15:48:02 ----D---- C:\Program Files\Internet Explorer
2009-08-28 15:47:58 ----D---- C:\Windows\system32\it-IT
2009-08-28 15:47:56 ----D---- C:\Windows\system32\fr-FR
2009-08-28 15:47:53 ----D---- C:\Windows\PolicyDefinitions
2009-08-28 15:47:52 ----D---- C:\Windows\system32\en-US
2009-08-28 15:43:30 ----D---- C:\Windows\Microsoft.NET
2009-08-28 15:26:14 ----D---- C:\ProgramData\Microsoft Help
2009-08-27 10:17:42 ----D---- C:\Windows\AppPatch
2009-08-26 02:21:17 ----D---- C:\Windows\Debug
2009-08-26 00:28:22 ----SD---- C:\ProgramData\Microsoft
2009-08-25 23:42:42 ----D---- C:\ProgramData\CyberLink
2009-08-25 23:41:43 ----D---- C:\Windows\Tasks
2009-08-25 23:41:43 ----D---- C:\Windows\system32\Tasks
2009-08-25 22:14:27 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-25 20:45:55 ----D---- C:\Windows\system32\NDF
2009-08-25 17:54:04 ----D---- C:\Windows\system32\de-DE
2009-08-25 17:54:03 ----D---- C:\Windows\ehome
2009-08-25 17:53:55 ----D---- C:\Program Files\Windows Media Player
2009-08-25 17:53:21 ----D---- C:\Windows\system32\XPSViewer
2009-08-25 17:53:21 ----D---- C:\Windows\system32\wbem
2009-08-25 17:52:59 ----D---- C:\Program Files\Windows Mail
2009-08-25 17:02:35 ----D---- C:\Program Files\Common Files\microsoft shared
2009-08-25 16:52:45 ----RSD---- C:\Windows\Fonts
2009-08-25 16:52:22 ----D---- C:\Program Files\Microsoft Works
2009-08-25 16:51:01 ----A---- C:\Windows\win.ini
2009-08-25 15:49:20 ----D---- C:\ProgramData\Symantec
2009-08-25 15:22:08 ----D---- C:\Windows\SoftwareDistribution
2009-08-25 15:10:16 ----SHD---- C:\$RECYCLE.BIN
2009-08-25 15:06:16 ----D---- C:\Program Files\Common Files\System
2009-08-25 14:57:35 ----RD---- C:\Users
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-08-29 28520]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-08-29 55656]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-02-18 1093632]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-03-30 129536]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-03-24 2346016]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2008-11-03 13880]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-04-15 9561472]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2008-08-25 15872]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-11-27 135680]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2008-08-11 1752704]
R3 SRS_PremiumSound_Service;SRS Labs Premium Sound; C:\Windows\system32\drivers\srs_PremiumSound_i386. sys [2009-04-01 233128]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-07-09 39424]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 a2free;a-squared Free Service; C:\Program Files\a-squared Free\a2service.exe [2009-08-28 980512]
R2 ADSMService;ADSM Service; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-08-29 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-29 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-07-09 144712]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2008-08-14 100920]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-04-15 211488]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SRS_VolSync_Service;SRS Volume Sync Service; C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe [2009-04-07 70880]
R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-07-13 542496]
S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-08-25 182768]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
-----------------EOF-----------------
Configuration: Windows XP Firefox 3.5.2
A voir également:
- Pc escargot, rapport rsit
- Downloader for pc - Télécharger - Téléchargement & Transfert
- Reinitialiser pc - Guide
- Forcer demarrage pc - Guide
- Pc lent - Guide
- Temperature pc - Guide
39 réponses
- 1
- 2
Suivant
vincpec je demande de l'aide pas des reflexions à la con sachant de seven est en version rtm
et le 2ème rapport ne veut pas s'affiché pourquoi ???
et le 2ème rapport ne veut pas s'affiché pourquoi ???
heu...... sans vouloir te vexer, tu n'avait pas besoin de nous afficher tous sa... jusqte de nous dire ke tu etai sous vista et on aurai compris d'ou venai le probleme...
passe sous windows 7 et t probleme de lenteur seront definitivement regler... je sais de coi je parle croi moi....
passe sous windows 7 et t probleme de lenteur seront definitivement regler... je sais de coi je parle croi moi....
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
vincepc40,, arrête de dire n'importe quoi merci.
Fait ceci alors ça ira mieux :
▶ Une fois le scan fini , 2 rapports vont apparaitre. ▶ Héberge le contenu des 2 rapports.
( C:\RSIT\log.txt et C:\RSIT\info.txt )
CTRL A pour sélectionner tout, CTRL C pour copier et puis CTRL V pour coller
Petite chose à faire pour les rapports générés par RSIT avant de continuer
▶ Vous devez fusionner les deux rapports.
▶ C'est-à-dire, copier/coller le contenu du rapport info.txt à la suite du rapport log.txt dans un bloc note pour ne faire qu'un seul rapport.
▶ Ensuite enregistrer le rapport log.txt.
Ensuite :
▶ Rendez-vous à cette adresse d'hébergement gratuit : http://www.cijoint.fr/
▶ Cliquez sur parcourir, puis sur créer le lien cjoint
▶ Une fois le lien crée, faite un clique droit dessus et copier l'adresse du lien pour venir le coller dans votre réponse
Fait ceci alors ça ira mieux :
▶ Une fois le scan fini , 2 rapports vont apparaitre. ▶ Héberge le contenu des 2 rapports.
( C:\RSIT\log.txt et C:\RSIT\info.txt )
CTRL A pour sélectionner tout, CTRL C pour copier et puis CTRL V pour coller
Petite chose à faire pour les rapports générés par RSIT avant de continuer
▶ Vous devez fusionner les deux rapports.
▶ C'est-à-dire, copier/coller le contenu du rapport info.txt à la suite du rapport log.txt dans un bloc note pour ne faire qu'un seul rapport.
▶ Ensuite enregistrer le rapport log.txt.
Ensuite :
▶ Rendez-vous à cette adresse d'hébergement gratuit : http://www.cijoint.fr/
▶ Cliquez sur parcourir, puis sur créer le lien cjoint
▶ Une fois le lien crée, faite un clique droit dessus et copier l'adresse du lien pour venir le coller dans votre réponse
1- se ne sont pas des reflection mais des constatation....
2- Seven RC est la version quasi finale Seven, et je peut te dire kelle est ultra fiable.. je n'est jamais eu de plantage avec. deplus si je te la conseille c'est parce ke Seven s'adapte en fonction du materiel qui le supporte.
3- maintenant mais reflection a la con comme tu dis, je me l'es garde puisque tu n'en veu pas... demerde toi tous seul..........
2- Seven RC est la version quasi finale Seven, et je peut te dire kelle est ultra fiable.. je n'est jamais eu de plantage avec. deplus si je te la conseille c'est parce ke Seven s'adapte en fonction du materiel qui le supporte.
3- maintenant mais reflection a la con comme tu dis, je me l'es garde puisque tu n'en veu pas... demerde toi tous seul..........
j'ai déja uploadé les rapport mais mes post ne s'affiche pas, ca fait 6fois que j'essaye de posté le rapport de différente maniere
on s'en fous vincep que j'ai vista, seven, 2000, 95, 98, mac ou autres
voilà le rapport rsit complet, les 2 partie collé
http://www.cijoint.fr/cjlink.php?file=cj200908/cij6wGdTKs.txt
voilà le rapport rsit complet, les 2 partie collé
http://www.cijoint.fr/cjlink.php?file=cj200908/cij6wGdTKs.txt
Logfile of random's system information tool 1.06 (written by random/random)
Run by Alex at 2009-08-29 16:21:36
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 136 GB (57%) free of 238 GB
Total RAM: 3582 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:21:56, on 29/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Alex\Downloads\RSIT.exe
C:\Users\Alex\Downloads\Alex.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\s wg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [DisableS3S4] c:\DisableS3S4.cmd
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu. exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SRS Premium Sound] "C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" /hideme
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: FancyStart daemon.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SRS Volume Sync Service (SRS_VolSync_Service) - SRS Labs, Inc. - C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe
Run by Alex at 2009-08-29 16:21:36
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 136 GB (57%) free of 238 GB
Total RAM: 3582 MB (66% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:21:56, on 29/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Alex\Downloads\RSIT.exe
C:\Users\Alex\Downloads\Alex.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\s wg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [DisableS3S4] c:\DisableS3S4.cmd
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu. exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SRS Premium Sound] "C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe" /hideme
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: FancyStart daemon.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SRS Volume Sync Service (SRS_VolSync_Service) - SRS Labs, Inc. - C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe
1ère chose tu vas me faire ceci :
• Télécharge et installe UsbFix par Chiquitine29
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir
• Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisis "éxécuter en tant qu'administrateur" .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]
• Laisse travailler l outil.
• Ensuite poste le rapport UsbFix.txt qui apparaitra.
• Note : Le rapport UsbFix.txt est sauvegardé à la racine du disque. ( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
• Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html
• Télécharge et installe UsbFix par Chiquitine29
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir
• Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisis "éxécuter en tant qu'administrateur" .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]
• Laisse travailler l outil.
• Ensuite poste le rapport UsbFix.txt qui apparaitra.
• Note : Le rapport UsbFix.txt est sauvegardé à la racine du disque. ( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
• Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html
pimprenelle27 merci déja de m'aidé je vais faire ca le plus vite possible, es ce que tu peux m'expliqué vite fait qu'est ce que j'ai comme infection ???
############################## | UsbFix V6.023 |
User : Alex (Administrateurs) # PC-DE-ALEX
Update on 29/08/09 by Chiquitine29, C_XX & Chimay8
Start at: 00:15:43 | 31/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
Internet Explorer 8.0.6001.18813
Windows Firewall Status : Enabled
C:\ -> Disque fixe local # 232,88 Go (131,99 Go free) [VistaOS] # NTFS
D:\ -> Disque fixe local # 221,16 Go (221,12 Go free) [DATA] # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 7,39 Go (20,8 Mo free) [UP THE IRON] # FAT32
G:\ -> Disque fixe local # 232,88 Go (179,58 Go free) [Expansion Drive] # NTFS
H:\ -> Disque amovible # 487,42 Mo (18,52 Mo free) # FAT32
############################## | Processus actifs |
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\ASUS\ATK Hotkey\HControl.exe
C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
C:\Program Files\ASUS\ATK Hotkey\WDC.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\explorer.exe
C:\Program Files\Winamp\winampa.exe
C:\Windows\system32\WUDFHost.exe
\\?\C:\Windows\system32\wbem\WMIADAP.EXE
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\wmiprvse.exe
################## | Fichiers # Dossiers infectieux |
Présent ! G:\autorun.inf
################## | Suspect ! ... | https://www.virustotal.com/gui/ |
################## | Registre # Clés Run infectieuses |
################## | Registre # Mountpoints2 |
HKCU\..\..\Explorer\MountPoints2\{55eb47aa-9238-11de-b1ab-002618572080}
shell\AutoRun\command =G:\Setup.exe
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # UsbFix V6.023 ! |
ya un 2ème rapport qui arrivent parce que j'ai pas pu branché tout mes trucs usb
User : Alex (Administrateurs) # PC-DE-ALEX
Update on 29/08/09 by Chiquitine29, C_XX & Chimay8
Start at: 00:15:43 | 31/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
Internet Explorer 8.0.6001.18813
Windows Firewall Status : Enabled
C:\ -> Disque fixe local # 232,88 Go (131,99 Go free) [VistaOS] # NTFS
D:\ -> Disque fixe local # 221,16 Go (221,12 Go free) [DATA] # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 7,39 Go (20,8 Mo free) [UP THE IRON] # FAT32
G:\ -> Disque fixe local # 232,88 Go (179,58 Go free) [Expansion Drive] # NTFS
H:\ -> Disque amovible # 487,42 Mo (18,52 Mo free) # FAT32
############################## | Processus actifs |
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRS_VolSync.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\ASUS\ATK Hotkey\HControl.exe
C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
C:\Program Files\ASUS\ATK Hotkey\WDC.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\explorer.exe
C:\Program Files\Winamp\winampa.exe
C:\Windows\system32\WUDFHost.exe
\\?\C:\Windows\system32\wbem\WMIADAP.EXE
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\wmiprvse.exe
################## | Fichiers # Dossiers infectieux |
Présent ! G:\autorun.inf
################## | Suspect ! ... | https://www.virustotal.com/gui/ |
################## | Registre # Clés Run infectieuses |
################## | Registre # Mountpoints2 |
HKCU\..\..\Explorer\MountPoints2\{55eb47aa-9238-11de-b1ab-002618572080}
shell\AutoRun\command =G:\Setup.exe
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # UsbFix V6.023 ! |
ya un 2ème rapport qui arrivent parce que j'ai pas pu branché tout mes trucs usb
Désolé moi aussi, je suis un peut perturbé par des personnes ici qui font et dises n'importe quoi :
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectées sans les ouvrir
• Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisis "éxécuter en tant qu'administrateur" .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 2 " ( Suppression ) et tape sur [entrée]
• Ton bureau disparaitra et le pc redémarrera .
• Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.
• Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau .
• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectées sans les ouvrir
• Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisis "éxécuter en tant qu'administrateur" .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 2 " ( Suppression ) et tape sur [entrée]
• Ton bureau disparaitra et le pc redémarrera .
• Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.
• Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau .
• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
ok tant que t'es pas trop perturbé ca me gène pas, tu bosse dans la desinfection en informatique ???
oui sur ccm, j'adore ça en plus et je suis une formation en désinfection, mais y a beaucoup de personne qui viennent sur ccm et qui font faire n'importe quoi à des personnes qui viennent se faire désinfecté comme toi, et y des personnes qui n'aime pas que j'intervienne sur les topics de quelqu'un qui fait très mal son boulot, alors ça leur plais pas, que je dise ça sur le topic et que je le reprenne en main afin que la personne soit bien désinfecté, et que surtout la personne qui était désinfecté sache que la personne n'y connaissait rien. tu 'est pas d'accord.
- 1
- 2
Suivant