Rapport help me plz
Fermé
Bonjour,
voici ce que j'ai obtenue comme rapport avec RSIT après la lecture d'un autre post qui demandé de faire ca, quelqu'un peut me dire ce que ca veut dire ? ^^'
Logfile of random's system information tool 1.06 (written by random/random)
Run by AngeL at 2009-11-27 17:33:09
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 220 GB (75%) free of 295 GB
Total RAM: 3037 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:33:29, on 27/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\FRAPS\FRAPS.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\World of Warcraft\BackgroundDownloader.exe
C:\Documents and Settings\AngeL\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\trend micro\AngeL.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.asus.com/fr/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.asus.com/fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Wireless Console 2] "C:\Program Files\Wireless Console 2\wcourier.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: ,C:\DOCUME~1\AngeL\LOCALS~1\Temp\76xxx.dll
O20 - Winlogon Notify: Aspwdflt - C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
--
End of file - 5920 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\PerfectOptimizer_home.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-10-22 1111320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-09-02 1107200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-09-02 1107200]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-09-18 16855040]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-07-01 150040]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-07-01 170520]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-07-01 141848]
"ATKOSD2"=C:\Program Files\ATKOSD2\ATKOSD2.exe [2008-01-23 7766016]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-10-12 815104]
"Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2007-07-05 1040384]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-11-26 2029336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"Fraps"=C:\FRAPS\FRAPS.EXE [2009-11-07 2377648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACMON]
C:\Program Files\ASUS\Splendid\ACMON.exe [2008-01-15 851968]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [2008-03-31 266240]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKHOTKEY]
C:\Program Files\ASUS\ATK Hotkey\HControl.exe [2008-10-20 166456]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2008-02-01 61440]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2008-08-18 98304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMC]
C:\Program Files\FriendFinder\FriendFinder Messenger 4\imc.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsgTranAgt]
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe [2008-08-18 117304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmager]
C:\DOCUME~1\AngeL\LOCALS~1\Temp\caiiac.dll,Set1 []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Net4Switch]
C:\Program Files\ASUS\Net4Switch\Net4Switch.exe [2007-11-20 1145400]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone]
C:\Program Files\P4P\P4P.exe [2008-01-25 778240]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Power_Gear]
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe [2006-07-26 90112]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"spmgr"=2
"AgereModemAudio"=2
"ADSMService"=2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=",C:\DOCUME~1\AngeL\LOCALS~1\Temp\76xxx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Aspwdflt]
C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT.dll [2008-04-19 1556480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2009-10-22 11952]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-06-27 212992]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265088]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\World of Warcraft\WoW-3.0.1-to-3.0.2-frFR-Win-Update-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.0.1-to-3.0.2-frFR-Win-Update-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE"="C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE:*:Enabled:Windows Live Messenger"
"C:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\WoW-3.2.0-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.2.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\AVG\AVG8\avgam.exe"="C:\Program Files\AVG\AVG8\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE"="C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fae9cbfe-cc9e-11de-9020-0023545d5b22}]
shell\AutoRun\command - EXPLORER.EXE
shell\explore\command - EXPLORER.EXE
shell\open\command - EXPLORER.EXE
======List of files/folders created in the last 1 months======
2009-11-27 17:33:10 ----D---- C:\Program Files\trend micro
2009-11-27 17:33:09 ----D---- C:\rsit
2009-11-26 18:28:02 ----D---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-11-26 18:25:48 ----D---- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2009-11-26 03:01:42 ----HD---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-11-26 03:01:19 ----HD---- C:\WINDOWS\$NtUninstallKB973687$
2009-11-25 13:30:32 ----SHD---- C:\FOUND.003
2009-11-23 21:35:28 ----D---- C:\Program Files\Fichiers communs\Skype
2009-11-23 21:35:27 ----RD---- C:\Program Files\Skype
2009-11-23 21:32:30 ----SHD---- C:\FOUND.002
2009-11-21 15:01:02 ----SHD---- C:\FOUND.001
2009-11-19 02:15:36 ----D---- C:\Fraps
2009-11-15 00:51:49 ----HD---- C:\WINDOWS\$NtUninstallKB939683$
2009-11-13 19:14:52 ----HD---- C:\WINDOWS\$NtUninstallKB929399$
2009-11-13 19:14:18 ----HD---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-11-12 18:20:29 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-11-12 18:20:28 ----HD---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-11-12 18:20:12 ----D---- C:\Program Files\Windows Media Connect 2
2009-11-12 18:19:50 ----HD---- C:\WINDOWS\$NtUninstallwmp11$
2009-11-12 18:18:33 ----HD---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-11-12 18:17:50 ----HD---- C:\WINDOWS\$NtUninstallWudf01000$
2009-11-12 18:17:13 ----D---- C:\bf467e4129acaf4fe9d5b30a60e5d366
2009-11-12 13:42:14 ----SHD---- C:\FOUND.000
2009-11-12 01:12:03 ----D---- C:\Program Files\SpyWebcam
2009-11-12 00:43:00 ----D---- C:\Program Files\MetaGeek
2009-11-12 00:42:44 ----D---- C:\Temp
2009-11-11 16:05:12 ----HD---- C:\WINDOWS\$NtUninstallKB969947$
2009-11-10 20:38:47 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-11-07 23:25:36 ----A---- C:\WINDOWS\system32\frapsvid.dll
2009-11-05 03:00:26 ----HD---- C:\WINDOWS\$NtUninstallKB976749$
2009-11-02 18:35:44 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-11-02 18:35:44 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-11-02 18:01:41 ----D---- C:\WINDOWS\pss
======List of files/folders modified in the last 1 months======
2009-11-27 15:57:56 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-27 15:57:00 ----A---- C:\WINDOWS\system.ini
2009-11-22 16:31:40 ----RASH---- C:\boot.ini
2009-11-22 16:31:40 ----A---- C:\WINDOWS\win.ini
2009-11-05 18:36:22 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-02 18:07:36 ----A---- C:\WINDOWS\ModemLog_Agere Systems HDA Modem.txt
2009-10-28 16:07:16 ----N---- C:\WINDOWS\system32\tzchange.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-10-22 335240]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-10-22 27784]
R1 AvgTdiX;AVG8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-10-22 108552]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 sdcplh;sdcplh; C:\WINDOWS\System32\drivers\sdcplh.sys [2005-11-09 55168]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys []
R2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2008-02-15 46592]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\WINDOWS\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-03-21 1203776]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-06-27 1315776]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\WINDOWS\system32\DRIVERS\ATSwpDrv.sys [2008-04-25 146688]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-06-27 6023072]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-09-18 4816896]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service; C:\WINDOWS\system32\drivers\IntcHdmi.sys [2008-06-13 110080]
R3 kbfiltr;Keyboard Filter; C:\WINDOWS\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2006-12-17 7680]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-10-12 198976]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S3 0bb42d4c-68e4-4282-9666-988e371cf7a8;0bb42d4c-68e4-4282-9666-988e371cf7a8; \??\D:\Player\cds300.dll []
S3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\PROGRA~1\ASUS\ATKHOT~1\ASNDIS5.SYS []
S3 ASUSProcObsrv;ASUS Process Creation/Termination Observer; \??\D:\I386\AsProcOb.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 ipswuio;ipswuio; C:\WINDOWS\System32\DRIVERS\ipswuio.sys [2007-08-01 41656]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCMP532.sys []
S3 PLCND532;PLCND532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCND532.sys []
S3 sffdisk;Pilote de classe de stockage SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2008-04-13 11904]
S3 sffp_sd;Pilote de protocole de stockage SFF pour SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2008-04-13 11008]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avg8emc;AVG8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2009-10-22 908056]
R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-10-22 297752]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 ADSMService;ADSM Service; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
S4 AgereModemAudio;Agere Modem Call Progress Audio; C:\WINDOWS\system32\agrsmsvc.exe [2008-03-18 13312]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
-----------------EOF-----------------
voici ce que j'ai obtenue comme rapport avec RSIT après la lecture d'un autre post qui demandé de faire ca, quelqu'un peut me dire ce que ca veut dire ? ^^'
Logfile of random's system information tool 1.06 (written by random/random)
Run by AngeL at 2009-11-27 17:33:09
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 220 GB (75%) free of 295 GB
Total RAM: 3037 MB (63% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:33:29, on 27/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\FRAPS\FRAPS.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\World of Warcraft\BackgroundDownloader.exe
C:\Documents and Settings\AngeL\Mes documents\Téléchargements\RSIT.exe
C:\Program Files\trend micro\AngeL.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.asus.com/fr/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.asus.com/fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Wireless Console 2] "C:\Program Files\Wireless Console 2\wcourier.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.asus.com/fr/
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: ,C:\DOCUME~1\AngeL\LOCALS~1\Temp\76xxx.dll
O20 - Winlogon Notify: Aspwdflt - C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
--
End of file - 5920 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\PerfectOptimizer_home.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2009-10-22 1111320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-09-02 1107200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll [2009-09-02 1107200]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-09-18 16855040]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-07-01 150040]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-07-01 170520]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-07-01 141848]
"ATKOSD2"=C:\Program Files\ATKOSD2\ATKOSD2.exe [2008-01-23 7766016]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-10-12 815104]
"Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2007-07-05 1040384]
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-11-26 2029336]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"Fraps"=C:\FRAPS\FRAPS.EXE [2009-11-07 2377648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACMON]
C:\Program Files\ASUS\Splendid\ACMON.exe [2008-01-15 851968]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [2008-03-31 266240]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKHOTKEY]
C:\Program Files\ASUS\ATK Hotkey\HControl.exe [2008-10-20 166456]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2008-02-01 61440]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2008-08-18 98304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMC]
C:\Program Files\FriendFinder\FriendFinder Messenger 4\imc.exe []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsgTranAgt]
C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe [2008-08-18 117304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmager]
C:\DOCUME~1\AngeL\LOCALS~1\Temp\caiiac.dll,Set1 []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Net4Switch]
C:\Program Files\ASUS\Net4Switch\Net4Switch.exe [2007-11-20 1145400]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone]
C:\Program Files\P4P\P4P.exe [2008-01-25 778240]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Power_Gear]
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe [2006-07-26 90112]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"spmgr"=2
"AgereModemAudio"=2
"ADSMService"=2
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=",C:\DOCUME~1\AngeL\LOCALS~1\Temp\76xxx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Aspwdflt]
C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT.dll [2008-04-19 1556480]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2009-10-22 11952]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-06-27 212992]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265088]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\World of Warcraft\WoW-3.0.1-to-3.0.2-frFR-Win-Update-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.0.1-to-3.0.2-frFR-Win-Update-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE"="C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE:*:Enabled:Windows Live Messenger"
"C:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\WoW-3.2.0-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.2.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-frFR-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-frFR-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\AVG\AVG8\avgam.exe"="C:\Program Files\AVG\AVG8\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE"="C:\Program Files\Windows Live\Messenger\MSNMSGR.EXE:*:Enabled:Windows Live Messenger"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fae9cbfe-cc9e-11de-9020-0023545d5b22}]
shell\AutoRun\command - EXPLORER.EXE
shell\explore\command - EXPLORER.EXE
shell\open\command - EXPLORER.EXE
======List of files/folders created in the last 1 months======
2009-11-27 17:33:10 ----D---- C:\Program Files\trend micro
2009-11-27 17:33:09 ----D---- C:\rsit
2009-11-26 18:28:02 ----D---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-11-26 18:25:48 ----D---- C:\Documents and Settings\All Users\Application Data\Simply Super Software
2009-11-26 03:01:42 ----HD---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-11-26 03:01:19 ----HD---- C:\WINDOWS\$NtUninstallKB973687$
2009-11-25 13:30:32 ----SHD---- C:\FOUND.003
2009-11-23 21:35:28 ----D---- C:\Program Files\Fichiers communs\Skype
2009-11-23 21:35:27 ----RD---- C:\Program Files\Skype
2009-11-23 21:32:30 ----SHD---- C:\FOUND.002
2009-11-21 15:01:02 ----SHD---- C:\FOUND.001
2009-11-19 02:15:36 ----D---- C:\Fraps
2009-11-15 00:51:49 ----HD---- C:\WINDOWS\$NtUninstallKB939683$
2009-11-13 19:14:52 ----HD---- C:\WINDOWS\$NtUninstallKB929399$
2009-11-13 19:14:18 ----HD---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-11-12 18:20:29 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-11-12 18:20:28 ----HD---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-11-12 18:20:12 ----D---- C:\Program Files\Windows Media Connect 2
2009-11-12 18:19:50 ----HD---- C:\WINDOWS\$NtUninstallwmp11$
2009-11-12 18:18:33 ----HD---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-11-12 18:17:50 ----HD---- C:\WINDOWS\$NtUninstallWudf01000$
2009-11-12 18:17:13 ----D---- C:\bf467e4129acaf4fe9d5b30a60e5d366
2009-11-12 13:42:14 ----SHD---- C:\FOUND.000
2009-11-12 01:12:03 ----D---- C:\Program Files\SpyWebcam
2009-11-12 00:43:00 ----D---- C:\Program Files\MetaGeek
2009-11-12 00:42:44 ----D---- C:\Temp
2009-11-11 16:05:12 ----HD---- C:\WINDOWS\$NtUninstallKB969947$
2009-11-10 20:38:47 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-11-07 23:25:36 ----A---- C:\WINDOWS\system32\frapsvid.dll
2009-11-05 03:00:26 ----HD---- C:\WINDOWS\$NtUninstallKB976749$
2009-11-02 18:35:44 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-11-02 18:35:44 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-11-02 18:01:41 ----D---- C:\WINDOWS\pss
======List of files/folders modified in the last 1 months======
2009-11-27 15:57:56 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-27 15:57:00 ----A---- C:\WINDOWS\system.ini
2009-11-22 16:31:40 ----RASH---- C:\boot.ini
2009-11-22 16:31:40 ----A---- C:\WINDOWS\win.ini
2009-11-05 18:36:22 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-02 18:07:36 ----A---- C:\WINDOWS\ModemLog_Agere Systems HDA Modem.txt
2009-10-28 16:07:16 ----N---- C:\WINDOWS\system32\tzchange.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-10-22 335240]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-10-22 27784]
R1 AvgTdiX;AVG8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2009-10-22 108552]
R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 sdcplh;sdcplh; C:\WINDOWS\System32\drivers\sdcplh.sys [2005-11-09 55168]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys []
R2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2008-02-15 46592]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\WINDOWS\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-03-21 1203776]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-06-27 1315776]
R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\WINDOWS\system32\DRIVERS\ATSwpDrv.sys [2008-04-25 146688]
R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-06-27 6023072]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-09-18 4816896]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service; C:\WINDOWS\system32\drivers\IntcHdmi.sys [2008-06-13 110080]
R3 kbfiltr;Keyboard Filter; C:\WINDOWS\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2006-12-17 7680]
R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-10-12 198976]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 usbvideo;Périphérique vidéo USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S3 0bb42d4c-68e4-4282-9666-988e371cf7a8;0bb42d4c-68e4-4282-9666-988e371cf7a8; \??\D:\Player\cds300.dll []
S3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\PROGRA~1\ASUS\ATKHOT~1\ASNDIS5.SYS []
S3 ASUSProcObsrv;ASUS Process Creation/Termination Observer; \??\D:\I386\AsProcOb.sys []
S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 ipswuio;ipswuio; C:\WINDOWS\System32\DRIVERS\ipswuio.sys [2007-08-01 41656]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCMP532.sys []
S3 PLCND532;PLCND532 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PLCND532.sys []
S3 sffdisk;Pilote de classe de stockage SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2008-04-13 11904]
S3 sffp_sd;Pilote de protocole de stockage SFF pour SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2008-04-13 11008]
S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avg8emc;AVG8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2009-10-22 908056]
R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-10-22 297752]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 ADSMService;ADSM Service; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
S4 AgereModemAudio;Agere Modem Call Progress Audio; C:\WINDOWS\system32\agrsmsvc.exe [2008-03-18 13312]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
-----------------EOF-----------------
Configuration: Windows XP Firefox 3.5.5
4 réponses
-
Contributeur sécuritéSalut,
infection par support amovible ...
fais ceci dans un premier temps :
Télécharge UsbFix ( de C_XX, Chimay8 & Chiquitine29 ) sur ton bureau :
ici http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe
ou ici https://www.ionos.fr/?affiliate_id=77097
! Déconnecte toi d'internet et ferme toutes applications en cours !
Impératif :
Branche toutes tes unités externes à ton PC (clé USB, DD externe, flash disk, lecteur MP3,carte SD, etc...) succeptibles d'avoir été infectés ( mais sans les ouvrir ! ) .
# Double clique sur UsbFix.exe présent sur ton bureau pour lancer l'outil.
# Choisis l' option 1 ( Recherche )
# Laisse travailler l'outil et ne touche à rien pendant le scan .
# Une fois terminé, poste le rapport UsbFix.txt qui apparaitra.
Le rapport est en outre sauvegardé à la racine du disque maitre ( C:\UsbFix.txt ).
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
Note :
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
Site de l'auteur > http://pagesperso-orange.fr/NosTools/usbfix.html
-
ok... j'ai pas connecté de clé usb depuis longtemps (ou autre supports)... et j'an ai plus ^^'
j'ai quand meme fais le scan et voila ce que j'ai eu :
(en passant dsl pour le temps de réponse ^^')
############################## | UsbFix V6.058 |
User : AngeL (Administrateurs) # JESSICA
Update on 26/11/2009 by Chiquitine29, C_XX & Chimay8
Start at: 00:16:45 | 01/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com
Intel(R) Pentium(R) Dual CPU T3400 @ 2.16GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 6.0.2900.5512
Windows Firewall Status : Enabled
AV : AVG Anti-Virus 8.5 [ Enabled | Updated ]
C:\ -> Disque fixe local # 288,25 Go (185,07 Go free) # FAT32
D:\ -> Disque CD-ROM
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe 756
C:\WINDOWS\system32\csrss.exe 816
C:\WINDOWS\system32\winlogon.exe 840
C:\WINDOWS\system32\services.exe 888
C:\WINDOWS\system32\lsass.exe 900
C:\WINDOWS\system32\svchost.exe 1052
C:\WINDOWS\system32\svchost.exe 1132
C:\WINDOWS\System32\svchost.exe 1172
C:\WINDOWS\system32\svchost.exe 1276
C:\WINDOWS\system32\svchost.exe 1312
C:\WINDOWS\system32\spoolsv.exe 1588
C:\WINDOWS\system32\svchost.exe 1904
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe 1940
C:\WINDOWS\system32\svchost.exe 2012
C:\PROGRA~1\AVG\AVG8\avgemc.exe 692
C:\PROGRA~1\AVG\AVG8\avgam.exe 804
C:\PROGRA~1\AVG\AVG8\avgrsx.exe 1028
C:\PROGRA~1\AVG\AVG8\avgnsx.exe 1072
C:\WINDOWS\Explorer.EXE 1448
C:\Program Files\AVG\AVG8\avgcsrvx.exe 1864
C:\WINDOWS\System32\alg.exe 1800
C:\WINDOWS\RTHDCPL.EXE 1244
C:\WINDOWS\system32\igfxtray.exe 2060
C:\WINDOWS\system32\igfxpers.exe 2076
C:\Program Files\ATKOSD2\ATKOSD2.exe 2084
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 2100
C:\Program Files\Wireless Console 2\wcourier.exe 2140
C:\PROGRA~1\AVG\AVG8\avgtray.exe 2168
C:\WINDOWS\system32\igfxsrvc.exe 2224
C:\Program Files\Skype\Phone\Skype.exe 2244
C:\FRAPS\FRAPS.EXE 2316
C:\WINDOWS\system32\wbem\wmiapsrv.exe 3156
C:\Program Files\Skype\Plugin Manager\skypePM.exe 3316
C:\WINDOWS\System32\svchost.exe 2464
C:\Program Files\AVG\AVG8\avgcsrvx.exe 2820
C:\Program Files\World of Warcraft\BackgroundDownloader.exe 3132
C:\Program Files\Mozilla Firefox\firefox.exe 2312
C:\WINDOWS\system32\wbem\wmiprvse.exe 1272
################## | Fichiers # Dossiers infectieux |
C:\DOCUME~1\AngeL\APPLIC~1\addon.dat
################## | Registre # Clés infectieuses |
################## | Registre # Mountpoints2 |
HKCU\..\..\Explorer\MountPoints2\{fae9cbfe-cc9e-11de-9020-0023545d5b22}
Shell\AutoRun\command =EXPLORER.EXE
Shell\explore\Command =EXPLORER.EXE
Shell\open\Command =EXPLORER.EXE
################## | Cracks / Keygens / Serials |
"C:\Documents and Settings\AngeL\Mes documents\Logiciel\AVG Antivirus 8 0 + serial (EXPIRES YEAR 2018) (CLEAN) [blaze69]\avg_avwt_stf_all_8_199a1389.exe"
12/12/2008 19:41 |Size 62352896 |Crc32 0ee14d33 |Md5 d7df17da571effe206cdba2e112851a3
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Setup\instmsia.exe"
11/03/2002 09:45 |Size 1708856 |Crc32 3ccaccf9 |Md5 43f7305c2e5dd4a8f3c5abeb2ffe4833
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Setup\instmsiw.exe"
11/03/2002 10:06 |Size 1822520 |Crc32 be716ace |Md5 61a5fb191ae2ae876db31dcce75e4183
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Setup\setup.exe"
10/05/2004 14:02 |Size 229376 |Crc32 22c2d625 |Md5 5d386f74fce362466b7fa3a4cea935a4
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\RESCUEME\setup.exe"
03/09/2003 05:18 |Size 109712 |Crc32 ef6e99f2 |Md5 774798bbffd9d711c3b8c9eeb5e074f7
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\CHKDSK.EXE"
30/03/2001 14:38 |Size 59471 |Crc32 4cabf4c7 |Md5 53545bed66d627e5403c6a34c090c6ed
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\EMM386.EXE"
30/03/2001 14:38 |Size 179583 |Crc32 19be7158 |Md5 da5fd1ab76171ca857d76df1ccf748db
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\FLOPPY.EXE"
30/03/2001 14:38 |Size 32768 |Crc32 796d1df6 |Md5 d4a997aca446bd7e58827002888587a5
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\FLOPPY9x.EXE"
30/03/2001 14:38 |Size 57344 |Crc32 1e7d5e09 |Md5 09edb7b5c7961da474555e763d80529f
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\FLOPPYME.EXE"
30/03/2001 14:38 |Size 57856 |Crc32 2eb70a00 |Md5 341b379b0508949603af82ea59bd821d
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\NWCDEX.EXE"
30/03/2001 14:38 |Size 21756 |Crc32 1a99ba16 |Md5 c9c13316344a1c0645f21de0184ec1c7
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\PTEDIT32.EXE"
05/05/2004 18:38 |Size 504320 |Crc32 b87b0e46 |Md5 198794015e4b6f639d30ab56d93e3fd2
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Setup\instmsia.exe"
11/03/2002 09:45 |Size 1708856 |Crc32 3ccaccf9 |Md5 43f7305c2e5dd4a8f3c5abeb2ffe4833
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Setup\instmsiw.exe"
11/03/2002 10:06 |Size 1822520 |Crc32 be716ace |Md5 61a5fb191ae2ae876db31dcce75e4183
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Setup\setup.exe"
10/05/2004 13:37 |Size 229376 |Crc32 8c9b8f90 |Md5 319bae355472c58530c69c7af1f4c9d2
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\setup.exe"
03/09/2003 05:18 |Size 109712 |Crc32 ef6e99f2 |Md5 774798bbffd9d711c3b8c9eeb5e074f7
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\CHKDSK.EXE"
30/03/2001 14:38 |Size 59471 |Crc32 4cabf4c7 |Md5 53545bed66d627e5403c6a34c090c6ed
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\EMM386.EXE"
30/03/2001 14:38 |Size 179583 |Crc32 19be7158 |Md5 da5fd1ab76171ca857d76df1ccf748db
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\FLOPPY.EXE"
30/03/2001 14:38 |Size 32768 |Crc32 796d1df6 |Md5 d4a997aca446bd7e58827002888587a5
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\FLOPPY9x.EXE"
30/03/2001 14:38 |Size 57344 |Crc32 1e7d5e09 |Md5 09edb7b5c7961da474555e763d80529f
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\FLOPPYME.EXE"
30/03/2001 14:38 |Size 57856 |Crc32 2eb70a00 |Md5 341b379b0508949603af82ea59bd821d
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\NWCDEX.EXE"
30/03/2001 14:38 |Size 21756 |Crc32 1a99ba16 |Md5 c9c13316344a1c0645f21de0184ec1c7
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\PQBOOT.EXE"
05/05/2004 19:06 |Size 90450 |Crc32 b1d7fb80 |Md5 64516ae9dc54caa5b90a87c17a506da7
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\PTEDIT32.EXE"
05/05/2004 18:38 |Size 504320 |Crc32 b87b0e46 |Md5 198794015e4b6f639d30ab56d93e3fd2
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\restrmbr.exe"
30/03/2001 14:39 |Size 41038 |Crc32 c1c40b4c |Md5 6e712a1b4ddb46918d9461a209e46db3
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\WRPROG.EXE"
05/05/2004 19:07 |Size 66576 |Crc32 1a9305cc |Md5 6d05242b5d048d17c374aa37e481d420
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\AUTOEXE2.BAT
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\AUTOEXEC.BAT
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\CHKDSK.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\EMM386.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\FLOPPY.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\FLOPPY9x.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\FLOPPYME.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\NWCDEX.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\PQBOOT.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\PTEDIT32.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\restrmbr.exe
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\DOSYSTEM\WRPROG.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Rescueme\setup.exe
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Setup\instmsia.exe
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Setup\instmsiw.exe
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\BTMagic\Setup\setup.exe
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\AUTOEXE2.BAT
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\AUTOEXEC.BAT
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\CHKDSK.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\EMM386.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\FLOPPY.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\FLOPPY9x.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\FLOPPYME.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\NWCDEX.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\DOSYSTEM\PTEDIT32.EXE
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\RESCUEME\setup.exe
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\Setup\instmsia.exe
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\Setup\instmsiw.exe
"C:\Documents and Settings\AngeL\Bureau\Partition Magic 8.05 + serial\Norton Partition Magic 8.05 + serial.zip"
-> Contain : Norton Partition Magic 8.05 + serial\Setup\setup.exe
################## | ! Fin du rapport # UsbFix V6.058 ! | -
Contributeur sécuritéSalut,
arrête les cracks et autres keygens , c'est l'une des cause principale d'infection en informatique ....
la suite dans l'ordre :
1-! Déconnecte toi d'internet et ferme toutes applications en cours !
Impératif :
Branche toutes tes unités externes à ton PC (clé USB, DD externe, flash disk, lecteur MP3,carte SD, etc...) succeptibles d'avoir été infectés ( mais sans les ouvrir ! ) .
# Double clique sur UsbFix.exe présent sur ton bureau pour lancer l'outil .
# Cette fois ci , tu choisis l' option 2 ( Suppression ) .
> Ton bureau disparaitra et le pc redémarrera ( c'est normal ).
# Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil et ne touche à rien .
# Une fois terminé, poste le nouveau rapport UsbFix.txt qui apparaitra avec le bureau .
( Le rapport est en outre sauvegardé à la racine du disque maitre > C:\UsbFix.txt ).
/!\ Si le Bureau ne réapparait pas, presse Ctrl + Alt + Suppr pour ouvrir le Gestionnaire des Tâches > Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valide ) /!\
======================
2- Télécharge ZHPDiag (de Nicolas Coolman) sur ton bureau :
-> https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
!! déconnecte toi et ferme toutes tes applications en cours !!
> double-clique sur "ZHPDiag.exe" pour lancer l'installation de l'outil et laisse toi guider ( ne modifie pas les paramètres d'installe et coche bien la case "créer une icone sur le bureau" afin d'avoir les raccourcis "ZHPDiag" et "ZHPFix" ) .
> Lance ZHPDiag depuis le raccourci du bureau .
> Une fois ZHPDiag ouvert, clique sur le bouton "option" en haut sur la droite .
( celui avec le tournevis )
Une liste apparait dans l'encadré principal > vérifie que toutes les lignes soient bien cochées sauf les 045 et 061 ( important ! ) .
> Puis clique sur le bouton de "la loupe" ( en haut à gauche ) pour lancer le scan .
Laisses travailler l'outil ...
> Une fois terminé , le rapport s'affiche : clique sur bouton "disquette" pour sauvegarder le rapport obtenu ...
Enregistre bien ZHPDiag.txt de façon à le retrouver facilement ( sur le bureau par exemple ).
( Sinon le rapport sera en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag )
Puis ferme le programme ...
> rends toi ensuite sur ce site : http://www.cijoint.fr/
Clique sur "parcourir" et va jusqu'au rapport que tu as sauvegardé .
Clique ensuite sur "cliquer ici pour déposer le fichier" et patiente ...
Une fois l'upload finit , un lien apparait > copie/colle le dans ta prochaine réponse stp ....
-
ModérateurBonjour
________ ___. .__ \______ \ ____ __ _\_ |__ | | ____ ____ | | \ / _ \| | \ __ \| | / _ \ / \ | ` ( <_> ) | / \_\ \ |_( <_> ) | \ /_______ /\____/|____/|___ /____/\____/|___| / \/ \/ \/
on continue ici :
https://forums.commentcamarche.net/forum/affich-15426542-trojan736-urgent
