Voyez-vous quelque chose d'anormal?
Marilyn.Manson
Messages postés
2772
Date d'inscription
Statut
Membre
Dernière intervention
-
Marilyn.Manson Messages postés 2772 Date d'inscription Statut Membre Dernière intervention -
Marilyn.Manson Messages postés 2772 Date d'inscription Statut Membre Dernière intervention -
Bonjour,
Je viens d'effectuer un scan a l'aide de RSIT Ce rapport est il sain?
Merci d'avance :)
Logfile of random's system information tool 1.06 (written by random/random)
Run by Espagnaa at 2009-10-24 10:23:21
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 1 GB (3%) free of 45 GB
Total RAM: 511 MB (28% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:24:15, on 24.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lxducoms.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MESSEN~1\Msmsgs.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Sony Ericsson\Mobile2\File Manager\FMObexServer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtblfs.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\Espagnaa\Bureau\RSIT.exe
C:\Program Files\trend micro\Espagnaa.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Lexmark - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [lxdumon.exe] "C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe"
O4 - HKLM\..\Run: [lxduamon] "C:\Program Files\Lexmark 5600-6600 Series\lxduamon.exe"
O4 - HKLM\..\Run: [Lexmark 5600-6600 Series Fax Server] "C:\Program Files\Lexmark 5600-6600 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRA~1\MESSEN~1\Msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\Espagnaa\Local Settings\Temp\{1B8C1723-D5DA-43D1-A0CA-44B0095FE5C2}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
O8 - Extra context menu item: Ajouter à l'Anti-bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxduCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe
O23 - Service: lxdu_device - - C:\WINDOWS\system32\lxducoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
--
End of file - 8723 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll [2009-10-20 68112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2C5E510-BE6D-42CC-9F61-E4F939078474}]
Lexmark - C:\Program Files\Lexmark Printable Web\bho.dll [2008-05-30 180224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll [2009-10-20 268816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Sony Ericsson PC Suite"=C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-06-13 528384]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2006-01-12 155648]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-10-22 7700480]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-10-22 86016]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-25 149280]
"AdobeCS4ServiceManager"=C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"lxdumon.exe"=C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe [2008-05-30 676520]
"lxduamon"=C:\Program Files\Lexmark 5600-6600 Series\lxduamon.exe [2008-05-30 16040]
"Lexmark 5600-6600 Series Fax Server"=C:\Program Files\Lexmark 5600-6600 Series\fm3032.exe [2008-05-30 311976]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-10-20 340456]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\PROGRA~1\MESSEN~1\Msmsgs.exe [2008-06-02 1660952]
C:\Documents and Settings\Espagnaa\Menu Démarrer\Programmes\Démarrage
RollerCoaster Tycoon 3 Registration.lnk - C:\Documents and Settings\Espagnaa\Local Settings\Temp\{1B8C1723-D5DA-43D1-A0CA-44B0095FE5C2}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\system32\klogon.dll [2009-10-20 219664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-08-27 190976]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\Program Files\VoipDiscount.com\VoipDiscount\VoipDiscount.exe"="C:\Program Files\VoipDiscount.com\VoipDiscount\VoipDiscount.exe:*:Enabled:VoipDiscount"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\WINDOWS\system32\lxducoms.exe"="C:\WINDOWS\system32\lxducoms.exe:*:Enabled:5600-6600 Series Server"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Assistance à distance - Windows Messenger et voix"
"C:\Program Files\Messenger\Msmsgs.exe"="C:\Program Files\Messenger\Msmsgs.exe:*:Enabled:Windows Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
======List of files/folders created in the last 1 months======
2009-10-24 10:23:31 ----D---- C:\Program Files\trend micro
2009-10-24 10:23:21 ----D---- C:\rsit
2009-10-23 21:49:34 ----D---- C:\Program Files\VirtualDJ
2009-10-23 17:40:00 ----D---- C:\WINDOWS\LastGood
2009-10-22 21:18:21 ----D---- C:\Documents and Settings\Espagnaa\Application Data\Malwarebytes
2009-10-22 21:17:40 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-10-22 21:17:27 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-10-22 20:38:18 ----A---- C:\FindyKill.txt
2009-10-22 20:30:11 ----D---- C:\FindyKill
2009-10-22 16:50:49 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2009-10-22 16:50:27 ----D---- C:\WINDOWS\LastGood.Tmp
2009-10-20 20:34:56 ----A---- C:\WINDOWS\system32\klogon.dll
2009-10-16 18:00:47 ----D---- C:\Program Files\VoipDiscount.com
2009-10-16 12:31:13 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-10-16 12:26:02 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-10-16 12:25:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-10-16 12:23:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-10-16 12:23:22 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-10-16 12:22:59 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-10-16 12:22:24 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-10-16 12:19:06 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-10-16 12:17:23 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-10-16 12:15:29 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-10-13 12:11:48 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-10-11 10:37:31 ----D---- C:\WINDOWS\system32\Adobe
2009-10-10 09:54:36 ----A---- C:\WINDOWS\WORDPAD.INI
2009-10-05 20:47:58 ----D---- C:\Program Files\Rockstar Games
2009-10-03 10:29:43 ----D---- C:\Program Files\Microsoft
2009-09-28 12:17:21 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-09-27 19:26:29 ----A---- C:\WINDOWS\system32\REX Shared Library.dll
2009-09-27 19:26:23 ----A---- C:\WINDOWS\system32\ReWire.dll
2009-09-27 18:32:08 ----D---- C:\Documents and Settings\All Users\Application Data\Propellerhead Software
2009-09-27 18:31:52 ----D---- C:\Documents and Settings\Espagnaa\Application Data\Propellerhead Software
2009-09-27 18:28:49 ----D---- C:\Program Files\Propellerhead
2009-09-27 13:03:02 ----D---- C:\Program Files\VST
2009-09-27 13:03:02 ----D---- C:\Documents and Settings\All Users\Application Data\Acoustica
2009-09-27 13:02:27 ----D---- C:\Program Files\Acoustica Mixcraft 4
2009-09-26 23:51:34 ----A---- C:\WINDOWS\Robota.INI
2009-09-26 23:50:34 ----D---- C:\Documents and Settings\Espagnaa\Application Data\MAGIX
2009-09-26 23:48:26 ----A---- C:\WINDOWS\system32\wmv8dmod.dll
2009-09-26 23:48:24 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2009-09-26 23:36:03 ----A---- C:\WINDOWS\system32\msxml4a.dll
2009-09-26 23:35:13 ----A---- C:\WINDOWS\system32\mgxasio2.dll
2009-09-26 23:35:12 ----A---- C:\WINDOWS\system32\TTIC32.dll
2009-09-26 23:35:12 ----A---- C:\WINDOWS\system32\MXRestore.exe
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\TTI32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\STRING32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\mgxcdr.txt
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLTPO32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLRES32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLRD32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLPTL32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLPRJ32.dll
2009-09-26 23:35:10 ----A---- C:\WINDOWS\system32\DLLPRF32.dll
2009-09-26 23:35:10 ----A---- C:\WINDOWS\system32\DLLPNT32.dll
2009-09-26 23:35:10 ----A---- C:\WINDOWS\system32\DLLMSC32.dll
2009-09-26 23:35:10 ----A---- C:\WINDOWS\system32\DLLIX.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLISO32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLIO32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLIMG32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLDRV32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLDIR32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLDEV32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLCPY32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLCDF32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLCDA32.dll
2009-09-26 23:35:08 ----A---- C:\WINDOWS\system32\DLLAV32.dll
2009-09-26 23:27:09 ----D---- C:\Documents and Settings\All Users\Application Data\MAGIX
2009-09-26 23:24:43 ----D---- C:\Program Files\MAGIX
2009-09-26 23:24:43 ----A---- C:\WINDOWS\system32\DLLDEV32i.dll
2009-09-26 23:23:56 ----A---- C:\WINDOWS\mgxoschk.ini
2009-09-26 23:23:55 ----D---- C:\WINDOWS\system32\MAGIX
2009-09-26 23:23:55 ----A---- C:\WINDOWS\system32\mgxoschk.dll
2009-09-26 18:12:09 ----D---- C:\WINDOWS\system32\XPSViewer
2009-09-26 18:11:49 ----D---- C:\WINDOWS\system32\en-US
2009-09-26 18:11:31 ----D---- C:\Program Files\Reference Assemblies
2009-09-26 08:13:45 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-09-26 08:13:40 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-09-26 08:13:37 ----N---- C:\WINDOWS\system32\xpssvcs.dll
======List of files/folders modified in the last 1 months======
2009-10-24 10:23:31 ----RD---- C:\Program Files
2009-10-24 10:23:27 ----D---- C:\WINDOWS\Prefetch
2009-10-24 10:05:54 ----D---- C:\Documents and Settings\Espagnaa\Application Data\uTorrent
2009-10-24 10:02:19 ----A---- C:\WINDOWS\NeroDigital.ini
2009-10-24 09:25:14 ----D---- C:\WINDOWS\Temp
2009-10-24 09:04:18 ----D---- C:\Program Files\Mozilla Firefox
2009-10-24 08:56:28 ----D---- C:\WINDOWS
2009-10-23 22:24:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-23 22:24:25 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-23 21:50:33 ----RSD---- C:\WINDOWS\Fonts
2009-10-23 21:49:28 ----D---- C:\WINDOWS\system32
2009-10-23 21:27:05 ----D---- C:\Program Files\Adobe
2009-10-23 17:41:52 ----HD---- C:\WINDOWS\inf
2009-10-23 17:41:47 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-10-22 21:17:48 ----D---- C:\WINDOWS\system32\drivers
2009-10-22 19:45:25 ----D---- C:\Documents and Settings
2009-10-22 17:01:08 ----SHD---- C:\System Volume Information
2009-10-22 16:56:04 ----SHD---- C:\WINDOWS\Installer
2009-10-22 16:50:49 ----D---- C:\Program Files\Kaspersky Lab
2009-10-22 16:43:21 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-10-16 18:59:57 ----D---- C:\Documents and Settings\Espagnaa\Application Data\VoipDiscount
2009-10-16 15:43:43 ----D---- C:\WINDOWS\Debug
2009-10-16 14:01:06 ----D---- C:\WINDOWS\Microsoft.NET
2009-10-16 14:00:54 ----RSD---- C:\WINDOWS\assembly
2009-10-16 12:48:21 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-16 12:43:26 ----D---- C:\WINDOWS\WinSxS
2009-10-16 12:34:28 ----D---- C:\Program Files\Internet Explorer
2009-10-16 12:33:26 ----D---- C:\WINDOWS\ie8updates
2009-10-16 12:32:10 ----HD---- C:\WINDOWS\$hf_mig$
2009-10-16 12:25:15 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-10-16 12:22:24 ----D---- C:\Program Files\Fichiers communs
2009-10-13 21:00:36 ----D---- C:\Documents and Settings\Espagnaa\Application Data\vlc
2009-10-11 10:39:50 ----D---- C:\Documents and Settings\Espagnaa\Application Data\Adobe
2009-10-05 20:47:58 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-02 20:01:57 ----A---- C:\WINDOWS\system32\MRT.exe
2009-10-01 16:24:24 ----D---- C:\WINDOWS\system32\Restore
2009-09-28 12:23:54 ----D---- C:\WINDOWS\system32\CatRoot
2009-09-26 23:49:38 ----D---- C:\WINDOWS\Help
2009-09-26 18:11:58 ----D---- C:\Program Files\MSBuild
2009-09-26 18:00:00 ----D---- C:\WINDOWS\system32\mui
2009-09-26 12:01:23 ----SD---- C:\Documents and Settings\Espagnaa\Application Data\Microsoft
2009-09-26 08:15:13 ----D---- C:\WINDOWS\system32\spool
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 kl1;Kl1; \??\C:\WINDOWS\system32\drivers\kl1.sys []
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-10-22 315408]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
R3 FA312;Pilote de la carte Fast Ethernet FA330/FA312/FA311 NETGEAR; C:\WINDOWS\system32\DRIVERS\FA312nd5.sys [2001-08-17 16074]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2009-09-14 32272]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [2009-10-02 19472]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12288]
R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-10-22 3994624]
R3 PAC7311;VGA SoC PC-Camer@; C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS [2006-06-19 156416]
R3 s125bus;Sony Ericsson Device 125 driver (WDM); C:\WINDOWS\system32\DRIVERS\s125bus.sys [2007-04-24 83336]
R3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s125mdfl.sys [2007-04-24 15112]
R3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s125mdm.sys [2007-04-24 108680]
R3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s125mgmt.sys [2007-04-24 100488]
R3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s125obex.sys [2007-04-24 98696]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 a8lz4dmw;a8lz4dmw; C:\WINDOWS\system32\drivers\a8lz4dmw.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-10-20 340456]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-25 153376]
R2 lxdu_device;lxdu_device; C:\WINDOWS\system32\lxducoms.exe [2008-05-24 594600]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-10-22 159810]
R2 STI Simulator;STI Simulator; C:\WINDOWS\System32\PAStiSvc.exe [2005-01-14 53248]
S2 lxduCATSCustConnectService;lxduCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe [2008-05-24 98984]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-09-21 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-05-29 234864]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
--
Quand Chuck Norris utilise Windows, il ne plante pas.
Je viens d'effectuer un scan a l'aide de RSIT Ce rapport est il sain?
Merci d'avance :)
Logfile of random's system information tool 1.06 (written by random/random)
Run by Espagnaa at 2009-10-24 10:23:21
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 1 GB (3%) free of 45 GB
Total RAM: 511 MB (28% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:24:15, on 24.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lxducoms.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\Program Files\Lexmark 5600-6600 Series\lxduMsdMon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MESSEN~1\Msmsgs.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Sony Ericsson\Mobile2\File Manager\FMObexServer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtblfs.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\Espagnaa\Bureau\RSIT.exe
C:\Program Files\trend micro\Espagnaa.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Lexmark - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [lxdumon.exe] "C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe"
O4 - HKLM\..\Run: [lxduamon] "C:\Program Files\Lexmark 5600-6600 Series\lxduamon.exe"
O4 - HKLM\..\Run: [Lexmark 5600-6600 Series Fax Server] "C:\Program Files\Lexmark 5600-6600 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRA~1\MESSEN~1\Msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\Espagnaa\Local Settings\Temp\{1B8C1723-D5DA-43D1-A0CA-44B0095FE5C2}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
O8 - Extra context menu item: Ajouter à l'Anti-bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxduCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe
O23 - Service: lxdu_device - - C:\WINDOWS\system32\lxducoms.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
--
End of file - 8723 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll [2009-10-20 68112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2C5E510-BE6D-42CC-9F61-E4F939078474}]
Lexmark - C:\Program Files\Lexmark Printable Web\bho.dll [2008-05-30 180224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll [2009-10-20 268816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Sony Ericsson PC Suite"=C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-06-13 528384]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2006-01-12 155648]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-10-22 7700480]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-10-22 86016]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-25 149280]
"AdobeCS4ServiceManager"=C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"lxdumon.exe"=C:\Program Files\Lexmark 5600-6600 Series\lxdumon.exe [2008-05-30 676520]
"lxduamon"=C:\Program Files\Lexmark 5600-6600 Series\lxduamon.exe [2008-05-30 16040]
"Lexmark 5600-6600 Series Fax Server"=C:\Program Files\Lexmark 5600-6600 Series\fm3032.exe [2008-05-30 311976]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-10-20 340456]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\PROGRA~1\MESSEN~1\Msmsgs.exe [2008-06-02 1660952]
C:\Documents and Settings\Espagnaa\Menu Démarrer\Programmes\Démarrage
RollerCoaster Tycoon 3 Registration.lnk - C:\Documents and Settings\Espagnaa\Local Settings\Temp\{1B8C1723-D5DA-43D1-A0CA-44B0095FE5C2}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\system32\klogon.dll [2009-10-20 219664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-08-27 190976]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\Program Files\VoipDiscount.com\VoipDiscount\VoipDiscount.exe"="C:\Program Files\VoipDiscount.com\VoipDiscount\VoipDiscount.exe:*:Enabled:VoipDiscount"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\WINDOWS\system32\lxducoms.exe"="C:\WINDOWS\system32\lxducoms.exe:*:Enabled:5600-6600 Series Server"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe:*:Enabled:Assistance à distance - Windows Messenger et voix"
"C:\Program Files\Messenger\Msmsgs.exe"="C:\Program Files\Messenger\Msmsgs.exe:*:Enabled:Windows Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
======List of files/folders created in the last 1 months======
2009-10-24 10:23:31 ----D---- C:\Program Files\trend micro
2009-10-24 10:23:21 ----D---- C:\rsit
2009-10-23 21:49:34 ----D---- C:\Program Files\VirtualDJ
2009-10-23 17:40:00 ----D---- C:\WINDOWS\LastGood
2009-10-22 21:18:21 ----D---- C:\Documents and Settings\Espagnaa\Application Data\Malwarebytes
2009-10-22 21:17:40 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-10-22 21:17:27 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-10-22 20:38:18 ----A---- C:\FindyKill.txt
2009-10-22 20:30:11 ----D---- C:\FindyKill
2009-10-22 16:50:49 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2009-10-22 16:50:27 ----D---- C:\WINDOWS\LastGood.Tmp
2009-10-20 20:34:56 ----A---- C:\WINDOWS\system32\klogon.dll
2009-10-16 18:00:47 ----D---- C:\Program Files\VoipDiscount.com
2009-10-16 12:31:13 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-10-16 12:26:02 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-10-16 12:25:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-10-16 12:23:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-10-16 12:23:22 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-10-16 12:22:59 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-10-16 12:22:24 ----D---- C:\Program Files\Fichiers communs\ODBC
2009-10-16 12:19:06 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-10-16 12:17:23 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-10-16 12:15:29 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-10-13 12:11:48 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-10-11 10:37:31 ----D---- C:\WINDOWS\system32\Adobe
2009-10-10 09:54:36 ----A---- C:\WINDOWS\WORDPAD.INI
2009-10-05 20:47:58 ----D---- C:\Program Files\Rockstar Games
2009-10-03 10:29:43 ----D---- C:\Program Files\Microsoft
2009-09-28 12:17:21 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-09-27 19:26:29 ----A---- C:\WINDOWS\system32\REX Shared Library.dll
2009-09-27 19:26:23 ----A---- C:\WINDOWS\system32\ReWire.dll
2009-09-27 18:32:08 ----D---- C:\Documents and Settings\All Users\Application Data\Propellerhead Software
2009-09-27 18:31:52 ----D---- C:\Documents and Settings\Espagnaa\Application Data\Propellerhead Software
2009-09-27 18:28:49 ----D---- C:\Program Files\Propellerhead
2009-09-27 13:03:02 ----D---- C:\Program Files\VST
2009-09-27 13:03:02 ----D---- C:\Documents and Settings\All Users\Application Data\Acoustica
2009-09-27 13:02:27 ----D---- C:\Program Files\Acoustica Mixcraft 4
2009-09-26 23:51:34 ----A---- C:\WINDOWS\Robota.INI
2009-09-26 23:50:34 ----D---- C:\Documents and Settings\Espagnaa\Application Data\MAGIX
2009-09-26 23:48:26 ----A---- C:\WINDOWS\system32\wmv8dmod.dll
2009-09-26 23:48:24 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2009-09-26 23:36:03 ----A---- C:\WINDOWS\system32\msxml4a.dll
2009-09-26 23:35:13 ----A---- C:\WINDOWS\system32\mgxasio2.dll
2009-09-26 23:35:12 ----A---- C:\WINDOWS\system32\TTIC32.dll
2009-09-26 23:35:12 ----A---- C:\WINDOWS\system32\MXRestore.exe
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\TTI32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\STRING32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\mgxcdr.txt
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLTPO32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLRES32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLRD32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLPTL32.dll
2009-09-26 23:35:11 ----A---- C:\WINDOWS\system32\DLLPRJ32.dll
2009-09-26 23:35:10 ----A---- C:\WINDOWS\system32\DLLPRF32.dll
2009-09-26 23:35:10 ----A---- C:\WINDOWS\system32\DLLPNT32.dll
2009-09-26 23:35:10 ----A---- C:\WINDOWS\system32\DLLMSC32.dll
2009-09-26 23:35:10 ----A---- C:\WINDOWS\system32\DLLIX.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLISO32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLIO32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLIMG32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLDRV32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLDIR32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLDEV32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLCPY32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLCDF32.dll
2009-09-26 23:35:09 ----A---- C:\WINDOWS\system32\DLLCDA32.dll
2009-09-26 23:35:08 ----A---- C:\WINDOWS\system32\DLLAV32.dll
2009-09-26 23:27:09 ----D---- C:\Documents and Settings\All Users\Application Data\MAGIX
2009-09-26 23:24:43 ----D---- C:\Program Files\MAGIX
2009-09-26 23:24:43 ----A---- C:\WINDOWS\system32\DLLDEV32i.dll
2009-09-26 23:23:56 ----A---- C:\WINDOWS\mgxoschk.ini
2009-09-26 23:23:55 ----D---- C:\WINDOWS\system32\MAGIX
2009-09-26 23:23:55 ----A---- C:\WINDOWS\system32\mgxoschk.dll
2009-09-26 18:12:09 ----D---- C:\WINDOWS\system32\XPSViewer
2009-09-26 18:11:49 ----D---- C:\WINDOWS\system32\en-US
2009-09-26 18:11:31 ----D---- C:\Program Files\Reference Assemblies
2009-09-26 08:13:45 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-09-26 08:13:40 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-09-26 08:13:37 ----N---- C:\WINDOWS\system32\xpssvcs.dll
======List of files/folders modified in the last 1 months======
2009-10-24 10:23:31 ----RD---- C:\Program Files
2009-10-24 10:23:27 ----D---- C:\WINDOWS\Prefetch
2009-10-24 10:05:54 ----D---- C:\Documents and Settings\Espagnaa\Application Data\uTorrent
2009-10-24 10:02:19 ----A---- C:\WINDOWS\NeroDigital.ini
2009-10-24 09:25:14 ----D---- C:\WINDOWS\Temp
2009-10-24 09:04:18 ----D---- C:\Program Files\Mozilla Firefox
2009-10-24 08:56:28 ----D---- C:\WINDOWS
2009-10-23 22:24:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-10-23 22:24:25 ----D---- C:\WINDOWS\system32\CatRoot2
2009-10-23 21:50:33 ----RSD---- C:\WINDOWS\Fonts
2009-10-23 21:49:28 ----D---- C:\WINDOWS\system32
2009-10-23 21:27:05 ----D---- C:\Program Files\Adobe
2009-10-23 17:41:52 ----HD---- C:\WINDOWS\inf
2009-10-23 17:41:47 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-10-22 21:17:48 ----D---- C:\WINDOWS\system32\drivers
2009-10-22 19:45:25 ----D---- C:\Documents and Settings
2009-10-22 17:01:08 ----SHD---- C:\System Volume Information
2009-10-22 16:56:04 ----SHD---- C:\WINDOWS\Installer
2009-10-22 16:50:49 ----D---- C:\Program Files\Kaspersky Lab
2009-10-22 16:43:21 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-10-16 18:59:57 ----D---- C:\Documents and Settings\Espagnaa\Application Data\VoipDiscount
2009-10-16 15:43:43 ----D---- C:\WINDOWS\Debug
2009-10-16 14:01:06 ----D---- C:\WINDOWS\Microsoft.NET
2009-10-16 14:00:54 ----RSD---- C:\WINDOWS\assembly
2009-10-16 12:48:21 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-16 12:43:26 ----D---- C:\WINDOWS\WinSxS
2009-10-16 12:34:28 ----D---- C:\Program Files\Internet Explorer
2009-10-16 12:33:26 ----D---- C:\WINDOWS\ie8updates
2009-10-16 12:32:10 ----HD---- C:\WINDOWS\$hf_mig$
2009-10-16 12:25:15 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-10-16 12:22:24 ----D---- C:\Program Files\Fichiers communs
2009-10-13 21:00:36 ----D---- C:\Documents and Settings\Espagnaa\Application Data\vlc
2009-10-11 10:39:50 ----D---- C:\Documents and Settings\Espagnaa\Application Data\Adobe
2009-10-05 20:47:58 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-02 20:01:57 ----A---- C:\WINDOWS\system32\MRT.exe
2009-10-01 16:24:24 ----D---- C:\WINDOWS\system32\Restore
2009-09-28 12:23:54 ----D---- C:\WINDOWS\system32\CatRoot
2009-09-26 23:49:38 ----D---- C:\WINDOWS\Help
2009-09-26 18:11:58 ----D---- C:\Program Files\MSBuild
2009-09-26 18:00:00 ----D---- C:\WINDOWS\system32\mui
2009-09-26 12:01:23 ----SD---- C:\Documents and Settings\Espagnaa\Application Data\Microsoft
2009-09-26 08:15:13 ----D---- C:\WINDOWS\system32\spool
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 kl1;Kl1; \??\C:\WINDOWS\system32\drivers\kl1.sys []
R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-10-22 315408]
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256]
R3 FA312;Pilote de la carte Fast Ethernet FA330/FA312/FA311 NETGEAR; C:\WINDOWS\system32\DRIVERS\FA312nd5.sys [2001-08-17 16074]
R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2009-09-14 32272]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [2009-10-02 19472]
R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12288]
R3 ms_mpu401;Pilote UART MIDI MPU-401 Microsoft; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-10-22 3994624]
R3 PAC7311;VGA SoC PC-Camer@; C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS [2006-06-19 156416]
R3 s125bus;Sony Ericsson Device 125 driver (WDM); C:\WINDOWS\system32\DRIVERS\s125bus.sys [2007-04-24 83336]
R3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s125mdfl.sys [2007-04-24 15112]
R3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s125mdm.sys [2007-04-24 108680]
R3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s125mgmt.sys [2007-04-24 100488]
R3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s125obex.sys [2007-04-24 98696]
R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 a8lz4dmw;a8lz4dmw; C:\WINDOWS\system32\drivers\a8lz4dmw.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-10-20 340456]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-25 153376]
R2 lxdu_device;lxdu_device; C:\WINDOWS\system32\lxducoms.exe [2008-05-24 594600]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-10-22 159810]
R2 STI Simulator;STI Simulator; C:\WINDOWS\System32\PAStiSvc.exe [2005-01-14 53248]
S2 lxduCATSCustConnectService;lxduCATSCustConnectService; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe [2008-05-24 98984]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-09-21 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-05-29 234864]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
--
Quand Chuck Norris utilise Windows, il ne plante pas.
Configuration: Une boite avec plein de câbles et un ventilateur
A voir également:
- Voyez-vous quelque chose d'anormal?
- Flouter quelque chose sur une photo - Guide
- Je suis une chose que les garçons utilisent 2 fois par jour et les filles une fois dans leur vie - Forum Loisirs / Divertissements
- Ccleaner est toujours occupé avec autre chose ✓ - Forum Logiciels
- Photo ours polaire sur plage qui cache quelque chose - Forum Discussions générales
- Effacer quelque chose sur une photo - Guide
6 réponses
Non mais il y a quelques jours j'avais eu un bagle que j'ai viré a l'aide de findykill et Malwarebytes et Kaspersky.
Oui, mais je préfère toujours vérifier deux fois et demander l'avis à des personnes qui s'y connaissent mieux que moi.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
...
On est jamais trop prudent !
Quelques conseils ...
https://www.malekal.com/proteger-pc-virus-pirates/
et aussi ...
https://www.malekal.com/securiser-votre-navigateur-internet-explorer-2/
On est jamais trop prudent !
Quelques conseils ...
https://www.malekal.com/proteger-pc-virus-pirates/
et aussi ...
https://www.malekal.com/securiser-votre-navigateur-internet-explorer-2/