Mon PC est infecté
Bonjour,
j'ai plein de virus sur mon PC, j'ai pas d'antivirus, j'avais antivir, mais il se mettra plus à jour, je l'ai désintallé, mes clé USB sont infecté aussi, SVP que dois je faire?
j'essaie de telecharger RSIT du lien : http://images.malwareremoval.com/random/RSIT.exe mais il m'affiche serveur introuvable!! y'a t il un autre lien?
merci,
--
The best way to escape from a problem is to solve it.
j'ai plein de virus sur mon PC, j'ai pas d'antivirus, j'avais antivir, mais il se mettra plus à jour, je l'ai désintallé, mes clé USB sont infecté aussi, SVP que dois je faire?
j'essaie de telecharger RSIT du lien : http://images.malwareremoval.com/random/RSIT.exe mais il m'affiche serveur introuvable!! y'a t il un autre lien?
merci,
--
The best way to escape from a problem is to solve it.
Configuration: Windows XP Firefox 3.5.6
23 réponses
Résumé de la discussion
Problème central : un utilisateur signale une infection virale importante sur son PC sans antivirus actif, des clés USB potentiellement contaminées et une tentative échouée de télécharger RSIT. Des conseils recommandent d'utiliser Dr.Web ou d'autres antivirus, de réaliser un scan complet ou rapide selon l'outil, et de vérifier les liens avant téléchargement sur internet. D'autres préconisent ComboFix, à renommer et exécuter selon les instructions, puis d'analyser le rapport ou HijackThis pour identifier les éléments persistant, en sauvegardant le rapport sur le bureau. Par ailleurs, les rapports évoqués dans les réponses incluent des services et programmes variés, des éléments de démarrage et des outils de sécurité, utiles pour cibler les infections lors d'un nettoyage.
-
Contributeur sécuritéslt . Ici Rsit .
-
Voila ça marche:
Logfile of random's system information tool 1.06 (written by random/random) Run by ASSIA at 2009-12-24 22:49:38 Microsoft Windows XP Professionnel Service Pack 2 System drive C: has 61 GB (80%) free of 76 GB Total RAM: 503 MB (6% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:49:53, on 24/12/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe C:\oracle\ora92\bin\omtsreco.exe C:\WINDOWS\SkyTel.EXE C:\WINDOWS\system32\00THotkey.exe C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe C:\WINDOWS\system32\ctfmon.exe C:\oracle\ora92\bin\agntsrvc.exe C:\oracle\ora92\Apache\Apache\apache.exe C:\WINDOWS\system32\cmd.exe C:\oracle\ora92\BIN\TNSLSNR.exe C:\oracle\ora92\bin\dbsnmp.exe c:\oracle\ora92\bin\ORACLE.EXE C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\ThpSrv.exe C:\oracle\ora92\Apache\Apache\apache.exe C:\oracle\ora92\jdk\bin\java.exe c:\oracle\ora92\bin\isqlplus C:\oracle\ora92\jdk\bin\java.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\WINDOWS\System32\svchost.exe C:\Documents and Settings\ASSIA\Mes documents\setups\RSIT.exe C:\Program Files\trend micro\ASSIA.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\system32\00THotkey.exe O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\oracle\ora92\bin\omtsreco.exe O23 - Service: OracleOraHome92Agent - Oracle Corporation - C:\oracle\ora92\bin\agntsrvc.exe O23 - Service: OracleOraHome92ClientCache - Unknown owner - C:\oracle\ora92\BIN\ONRSD.EXE O23 - Service: OracleOraHome92HTTPServer - Unknown owner - C:\oracle\ora92\Apache\Apache\apache.exe O23 - Service: OracleOraHome92PagingServer - Unknown owner - C:\oracle\ora92/bin/pagntsrv.exe O23 - Service: OracleOraHome92SNMPPeerEncapsulator - Unknown owner - C:\oracle\ora92\BIN\ENCSVC.EXE O23 - Service: OracleOraHome92SNMPPeerMasterAgent - Unknown owner - C:\oracle\ora92\BIN\AGNTSVC.EXE O23 - Service: OracleOraHome92TNSListener - Unknown owner - C:\oracle\ora92\BIN\TNSLSNR.exe O23 - Service: OracleServiceORACLEDB - Oracle Corporation - c:\oracle\ora92\bin\ORACLE.EXE O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: TOSHIBA HDD Protection (Thpsrv) - TOSHIBA Corporation - C:\WINDOWS\system32\ThpSrv.exe O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe -- End of file - 5699 bytes ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [2005-11-10 184423] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "000StTHK"=C:\WINDOWS\system32\000StTHK.exe [2001-06-23 24576] "SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-04-24 1448960] "00THotkey"=C:\WINDOWS\system32\00THotkey.exe [2006-05-18 253952] "CFSServ.exe"=CFSServ.exe -NoClient [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360] "ares"=C:\Program Files\Ares\Ares.exe [2009-02-03 1004544] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG] C:\WINDOWS\AGRSMMSG.exe [2006-03-04 88204] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] C:\WINDOWS\ALCMTR.EXE [2005-05-04 69632] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CFSServ.exe] CFSServ.exe -NoClient [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe [2006-03-23 77824] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxpers] C:\WINDOWS\system32\igfxpers.exe [2006-03-23 118784] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxtray] C:\WINDOWS\system32\igfxtray.exe [2006-03-23 94208] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [2005-11-28 602182] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [2005-12-05 667718] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LtMoh] C:\Program Files\ltmoh\Ltmoh.exe [2006-03-04 184320] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NDSTray.exe] NDSTray.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] C:\WINDOWS\RTHDCPL.EXE [2006-05-09 16207360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe [2005-05-17 118784] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TFNF5] C:\WINDOWS\system32\TFNF5.exe [2006-04-11 622592] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ThpSrv] thpsrv /logon [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TosHKCW.exe] C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe [2005-05-17 49152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe [2005-09-07 98304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPSMain] C:\WINDOWS\system32\TPSMain.exe [2006-05-19 299008] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPSODDCtl] C:\WINDOWS\system32\TPSODDCtl.exe [2006-05-19 102400] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Service Manager.lnk] C:\PROGRA~1\MI6841~1\80\Tools\Binn\sqlmangr.exe [2000-08-06 69632] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxdev.dll [2006-03-23 139264] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Toshiba\ConfigFree\CFXFER.exe"="C:\Program Files\Toshiba\ConfigFree\CFXFER.exe:*:Enabled:ConfigFree SUMMIT Engine" "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe"="C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe:*:Enabled:Apache HTTP Server" "C:\Program Files\BearShare Applications\BearShare\BearShare.exe"="C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare" "C:\Program Files\Ares\Ares.exe"="C:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows" "C:\Documents and Settings\ASSIA\Local Settings\Temp\OraInstall2009-12-20_10-34-48PM\jre\bin\javaw.exe"="C:\Documents and Settings\ASSIA\Local Settings\Temp\OraInstall2009-12-20_10-34-48PM\jre\bin\javaw.exe:*:Enabled:javaw" "C:\oracle\ora92\Apache\Apache\Apache.exe"="C:\oracle\ora92\Apache\Apache\Apache.exe:*:Enabled:Apache" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{476fe164-eaf6-11de-a7e0-0018de6e9005}] shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{476fe16b-eaf6-11de-a7e0-0018de6e9005}] shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{476fe16c-eaf6-11de-a7e0-0018de6e9005}] shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{746aedf5-e3fa-11de-a7d6-0018de6e9005}] shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9791db6d-ea33-11de-a7df-0018de6e9005}] shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b4be00c2-e4a5-11de-a7d8-0018de6e9005}] shell\AutoRun\command - E:\NOT\GLOW\eKn.exe shell\open\command - E:\NOT\GLOW\eKn.exe ======File associations====== .js - edit - "C:\Program Files\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1" ======List of files/folders created in the last 1 months====== 2009-12-24 22:49:40 ----D---- C:\Program Files\trend micro 2009-12-24 22:49:38 ----D---- C:\rsit 2009-12-24 22:45:55 ----D---- C:\Program Files\Windows Live Safety Center 2009-12-24 20:30:31 ----SHD---- C:\Config.Msi 2009-12-24 18:11:31 ----D---- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files 2009-12-22 16:37:09 ----D---- C:\Program Files\Sybase 2009-12-22 16:37:09 ----D---- C:\Documents and Settings\All Users\Application Data\PowerAMC 12 2009-12-20 22:35:22 ----D---- C:\oracle 2009-12-20 22:35:17 ----D---- C:\Program Files\Oracle 2009-12-19 16:31:00 ----A---- C:\WINDOWS\iun6002.exe 2009-12-19 16:30:59 ----D---- C:\WINDOWS\system32\athan 2009-12-19 16:29:20 ----D---- C:\Program Files\Athan 2009-12-16 11:31:23 ----D---- C:\Documents and Settings\All Users\Application Data\Macromedia 2009-12-16 11:30:45 ----D---- C:\Program Files\Macromedia 2009-12-16 11:30:45 ----D---- C:\Program Files\Fichiers communs\Macromedia 2009-12-16 11:30:06 ----D---- C:\WINDOWS\Downloaded Installations 2009-12-15 22:27:15 ----D---- C:\Program Files\Ares 2009-12-15 10:43:10 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$ 2009-12-15 10:40:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$ 2009-12-14 12:44:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$ 2009-12-14 12:44:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$ 2009-12-14 12:44:37 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$ 2009-12-14 12:44:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$ 2009-12-14 12:41:10 ----HDC---- C:\WINDOWS\$NtUninstallKB935448$ 2009-12-14 12:41:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$ 2009-12-14 12:40:18 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$ 2009-12-14 12:40:12 ----HDC---- C:\WINDOWS\$NtUninstallKB923723$ 2009-12-14 12:38:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$ 2009-12-14 12:38:04 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$ 2009-12-14 12:36:34 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$ 2009-12-14 12:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$ 2009-12-14 12:29:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$ 2009-12-14 12:29:49 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$ 2009-12-14 12:29:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$ 2009-12-14 12:29:08 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$ 2009-12-14 12:28:49 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$ 2009-12-14 12:28:30 ----HDC---- C:\WINDOWS\$NtUninstallKB925720$ 2009-12-14 12:28:18 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$ 2009-12-14 12:28:09 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$ 2009-12-14 12:27:37 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$ 2009-12-14 12:27:08 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$ 2009-12-14 12:26:01 ----HDC---- C:\WINDOWS\$NtUninstallKB976325$ 2009-12-14 12:24:15 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$ 2009-12-14 12:23:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$ 2009-12-14 12:23:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$ 2009-12-14 12:22:35 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$ 2009-12-14 12:16:29 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$ 2009-12-14 12:16:18 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$ 2009-12-14 12:15:33 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$ 2009-12-14 12:15:23 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$ 2009-12-14 12:15:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$ 2009-12-14 12:15:03 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$ 2009-12-14 12:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$ 2009-12-14 12:14:48 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$ 2009-12-14 12:14:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$ 2009-12-14 12:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$ 2009-12-14 12:14:03 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$ 2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\ProSoftLK.dll 2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MSVCRTD.DLL 2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MSVCIRTD.DLL 2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\msrd2x35.dll 2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\msexcl35.dll 2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MFCO42D.DLL 2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MFCD42D.DLL 2009-12-13 13:18:50 ----A---- C:\WINDOWS\system32\MFC42D.DLL 2009-12-13 13:18:49 ----A---- C:\WINDOWS\system32\msjet35.dll 2009-12-13 13:18:48 ----D---- C:\Program Files\ProLog Software 2009-12-13 13:18:48 ----A---- C:\WINDOWS\system32\vbar332.dll 2009-12-13 13:18:48 ----A---- C:\WINDOWS\system32\msjter35.dll 2009-12-13 13:18:48 ----A---- C:\WINDOWS\system32\msjint35.dll 2009-12-13 10:49:19 ----D---- C:\WINDOWS\system32\CatRoot_bak 2009-12-13 10:48:44 ----D---- C:\Program Files\MSXML 4.0 2009-12-12 11:58:47 ----D---- C:\Program Files\Microsoft Synchronization Services 2009-12-12 11:58:46 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition 2009-12-12 11:54:26 ----D---- C:\Program Files\Microsoft Visual Studio 9.0 2009-12-12 11:53:51 ----D---- C:\Program Files\Microsoft SDKs 2009-12-12 11:51:41 ----N---- C:\WINDOWS\system32\spmsg2.dll 2009-12-12 11:51:35 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$ 2009-12-12 11:51:11 ----D---- C:\WINDOWS\system32\fr-FR 2009-12-12 11:47:51 ----D---- C:\WINDOWS\system32\XPSViewer 2009-12-12 11:47:44 ----D---- C:\WINDOWS\system32\en-US 2009-12-12 11:47:36 ----D---- C:\Program Files\Reference Assemblies 2009-12-12 11:46:28 ----N---- C:\WINDOWS\system32\xpssvcs.dll 2009-12-12 11:46:28 ----N---- C:\WINDOWS\system32\xpsshhdr.dll 2009-12-12 11:46:28 ----N---- C:\WINDOWS\system32\prntvpt.dll 2009-12-12 11:46:27 ----D---- C:\1bde3832f7ffeafa4022b74a 2009-12-12 11:43:03 ----HDC---- C:\WINDOWS\$NtUninstallWIC$ 2009-12-12 11:42:56 ----D---- C:\Program Files\MSXML 6.0 2009-12-12 10:39:01 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$ 2009-12-12 10:38:55 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$ 2009-12-12 10:38:49 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$ 2009-12-12 10:38:20 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$ 2009-12-12 10:38:14 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$ 2009-12-12 10:38:08 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$ 2009-12-12 10:38:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$ 2009-12-12 10:37:57 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$ 2009-12-12 10:37:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$ 2009-12-12 10:37:48 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2 2009-12-12 10:37:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$ 2009-12-12 10:37:18 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$ 2009-12-12 10:37:09 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$ 2009-12-12 10:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$ 2009-12-12 10:36:58 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$ 2009-12-12 10:36:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$ 2009-12-12 10:36:29 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$ 2009-12-12 10:36:23 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$ 2009-12-12 10:36:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$ 2009-12-12 10:36:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$ 2009-12-12 10:36:02 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$ 2009-12-12 10:35:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$ 2009-12-12 10:35:51 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$ 2009-12-12 10:35:23 ----D---- C:\WINDOWS\ServicePackFiles 2009-12-12 10:35:21 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$ 2009-12-12 10:35:12 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$ 2009-12-12 10:35:06 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$ 2009-12-12 10:34:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$ 2009-12-11 22:10:18 ----D---- C:\Documents and Settings\ASSIA\Application Data\WinRAR 2009-12-11 17:14:24 ----N---- C:\WINDOWS\system32\tzchange.exe 2009-12-11 15:13:35 ----D---- C:\wamp 2009-12-11 12:35:13 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$ 2009-12-10 12:53:45 ----D---- C:\WINDOWS\system32\PreInstall 2009-12-10 12:53:44 ----N---- C:\WINDOWS\system32\spmsg.dll 2009-12-10 12:53:42 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$ 2009-12-09 23:03:30 ----HD---- C:\WINDOWS\system32\GroupPolicy 2009-12-09 19:24:32 ----D---- C:\WINDOWS\SxsCaPendDel 2009-12-09 19:23:07 ----D---- C:\Program Files\Microsoft 2009-12-09 19:22:48 ----D---- C:\Program Files\Windows Live SkyDrive 2009-12-09 19:22:20 ----D---- C:\Program Files\Windows Live 2009-12-09 13:11:52 ----A---- C:\WINDOWS\system32\muweb.dll 2009-12-09 13:11:52 ----A---- C:\WINDOWS\system32\mucltui.dll.mui 2009-12-09 13:11:51 ----A---- C:\WINDOWS\system32\mucltui.dll 2009-12-09 08:07:13 ----D---- C:\WINDOWS\system32\SoftwareDistribution 2009-12-08 22:27:26 ----D---- C:\Program Files\Fichiers communs\Windows Live 2009-12-08 22:11:35 ----D---- C:\Documents and Settings\ASSIA\Application Data\Mozilla 2009-12-08 17:30:16 ----D---- C:\Program Files\Mozilla Firefox 2009-12-08 13:33:13 ----D---- C:\WINDOWS\pss 2009-12-08 13:11:40 ----D---- C:\Documents and Settings\ASSIA\Application Data\Macromedia 2009-12-08 13:09:29 ----D---- C:\Program Files\WinRAR 2009-12-08 13:05:02 ----A---- C:\WINDOWS\system32\msrpjt40.dll 2009-12-08 13:04:56 ----A---- C:\WINDOWS\system32\insrepim.exe 2009-12-08 13:04:14 ----A---- C:\WINDOWS\system32\mdt2fw95.dll 2009-12-08 13:03:41 ----A---- C:\WINDOWS\system32\ntwdblib.DLL 2009-12-08 13:03:33 ----A---- C:\WINDOWS\system32\DBmsSHRn.dll 2009-12-08 13:03:33 ----A---- C:\WINDOWS\system32\dbmslpcn.dll 2009-12-08 13:02:42 ----A---- C:\WINDOWS\IsUninst.exe 2009-12-08 13:02:30 ----D---- C:\Program Files\Microsoft SQL Server 2009-12-08 12:20:10 ----D---- C:\Program Files\Microsoft Works 2009-12-08 12:19:56 ----D---- C:\Program Files\MSBuild 2009-12-08 12:19:37 ----D---- C:\Program Files\Microsoft Visual Studio 2009-12-08 12:19:36 ----D---- C:\Program Files\Fichiers communs\DESIGNER 2009-12-08 12:18:24 ----D---- C:\Program Files\Microsoft.NET 2009-12-08 12:14:43 ----D---- C:\WINDOWS\SHELLNEW 2009-12-08 12:14:23 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2009-12-08 12:13:57 ----RHD---- C:\MSOCache 2009-12-07 22:43:42 ----SHD---- C:\RECYCLER 2009-12-07 22:33:14 ----D---- C:\WINDOWS\system32\appmgmt 2009-12-07 22:30:16 ----A---- C:\WINDOWS\system32\wmpns.dll 2009-12-07 22:30:15 ----HD---- C:\Program Files\Uninstall Information 2009-12-07 22:29:47 ----A---- C:\WINDOWS\system32\results.txt 2009-12-07 22:29:25 ----D---- C:\Documents and Settings\All Users\Application Data\Intel 2009-12-07 22:29:13 ----D---- C:\Documents and Settings\ASSIA\Application Data\Intel 2009-12-07 22:29:04 ----DC---- C:\WINDOWS\system32\DRVSTORE 2009-12-07 22:28:38 ----D---- C:\Documents and Settings\ASSIA\Application Data\Identities 2009-12-07 22:28:38 ----D---- C:\Documents and Settings\ASSIA\Application Data\Adobe 2009-12-07 22:28:38 ----ASH---- C:\Documents and Settings\ASSIA\Application Data\desktop.ini 2009-12-07 22:28:37 ----SD---- C:\Documents and Settings\ASSIA\Application Data\Microsoft 2009-12-07 22:28:37 ----D---- C:\Documents and Settings\ASSIA\Application Data\toshiba 2009-12-07 22:28:37 ----D---- C:\Documents and Settings\ASSIA\Application Data\Sonic 2009-12-07 22:28:14 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll 2009-12-07 22:27:51 ----A---- C:\WINDOWS\Alcmtr.exe ======List of files/folders modified in the last 1 months====== 2009-12-24 22:49:45 ----D---- C:\WINDOWS\Prefetch 2009-12-24 22:49:40 ----RD---- C:\Program Files 2009-12-24 20:44:04 ----D---- C:\WINDOWS\system32 2009-12-24 20:43:45 ----D---- C:\WINDOWS 2009-12-24 20:42:05 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-12-24 20:31:50 ----D---- C:\WINDOWS\system32\drivers 2009-12-24 20:31:26 ----HD---- C:\WINDOWS\inf 2009-12-24 20:31:17 ----D---- C:\WINDOWS\Temp 2009-12-24 20:30:28 ----SHD---- C:\WINDOWS\Installer 2009-12-24 20:26:52 ----D---- C:\WINDOWS\system32\CatRoot2 2009-12-22 16:37:19 ----HD---- C:\Program Files\InstallShield Installation Information 2009-12-16 11:09:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-12-16 11:01:43 ----SHD---- C:\System Volume Information 2009-12-16 11:01:43 ----D---- C:\WINDOWS\system32\Restore 2009-12-15 13:13:32 ----A---- C:\WINDOWS\ODBC.INI 2009-12-15 10:43:15 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-12-15 10:41:53 ----RSD---- C:\WINDOWS\assembly 2009-12-15 10:40:12 ----A---- C:\WINDOWS\imsins.BAK 2009-12-15 10:35:20 ----SD---- C:\WINDOWS\Tasks 2009-12-15 10:33:35 ----D---- C:\WINDOWS\system32\wbem 2009-12-15 10:33:35 ----D---- C:\WINDOWS\system32\Setup 2009-12-15 10:33:34 ----D---- C:\WINDOWS\AppPatch 2009-12-14 22:52:32 ----D---- C:\WINDOWS\Microsoft.NET 2009-12-14 12:44:57 ----HD---- C:\WINDOWS\$hf_mig$ 2009-12-14 12:43:26 ----D---- C:\WINDOWS\WinSxS 2009-12-14 12:36:29 ----D---- C:\WINDOWS\system32\CatRoot 2009-12-14 12:26:19 ----D---- C:\Program Files\Internet Explorer 2009-12-14 12:23:13 ----D---- C:\Program Files\Outlook Express 2009-12-14 12:21:07 ----A---- C:\WINDOWS\win.ini 2009-12-14 12:19:31 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared 2009-12-13 15:21:06 ----D---- C:\Documents and Settings 2009-12-13 14:22:59 ----RASH---- C:\boot.ini 2009-12-13 14:22:59 ----A---- C:\WINDOWS\system.ini 2009-12-13 10:49:19 ----D---- C:\WINDOWS\Debug 2009-12-12 11:58:56 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft 2009-12-12 11:47:43 ----RSD---- C:\WINDOWS\Fonts 2009-12-12 11:47:07 ----D---- C:\WINDOWS\system32\spool 2009-12-12 10:39:03 ----D---- C:\Program Files\Messenger 2009-12-09 08:07:20 ----D---- C:\WINDOWS\SoftwareDistribution 2009-12-09 08:07:17 ----D---- C:\WINDOWS\Help 2009-12-08 22:27:26 ----D---- C:\Program Files\Fichiers communs 2009-12-08 12:19:42 ----D---- C:\Program Files\Microsoft Office 2009-12-08 12:14:54 ----D---- C:\Program Files\Fichiers communs\System 2009-12-08 12:10:28 ----D---- C:\Program Files\Fichiers communs\Symantec Shared 2009-12-08 12:10:27 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec 2009-12-08 12:10:25 ----D---- C:\Program Files\Symantec 2009-12-08 07:21:43 ----D---- C:\WINDOWS\system32\mui 2009-12-08 07:21:31 ----D---- C:\WINDOWS\system32\MsDtc 2009-12-08 07:21:23 ----D---- C:\WINDOWS\system32\Macromed 2009-12-08 07:21:16 ----D---- C:\WINDOWS\system32\IME 2009-12-08 07:21:13 ----D---- C:\WINDOWS\system32\icsxml 2009-12-08 07:21:12 ----D---- C:\WINDOWS\system32\ias 2009-12-08 07:20:50 ----D---- C:\WINDOWS\system32\DirectX 2009-12-08 07:20:39 ----D---- C:\WINDOWS\system32\Com 2009-12-08 07:20:31 ----D---- C:\WINDOWS\system32\1036 2009-12-08 07:20:31 ----D---- C:\WINDOWS\system32\1033 2009-12-08 07:20:31 ----D---- C:\WINDOWS\system 2009-12-08 07:20:17 ----D---- C:\WINDOWS\Resources 2009-12-08 07:19:55 ----D---- C:\WINDOWS\PeerNet 2009-12-08 07:19:45 ----RD---- C:\WINDOWS\Offline Web Pages 2009-12-08 07:19:45 ----D---- C:\WINDOWS\Options 2009-12-08 07:19:40 ----D---- C:\WINDOWS\msapps 2009-12-08 07:19:23 ----D---- C:\WINDOWS\java 2009-12-08 07:18:10 ----D---- C:\WINDOWS\ime 2009-12-08 07:16:35 ----D---- C:\WINDOWS\ehome 2009-12-08 07:15:37 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-12-08 07:15:13 ----HDC---- C:\WINDOWS\$NtUninstallKB912945$ 2009-12-08 07:15:05 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$ 2009-12-08 07:15:05 ----HDC---- C:\WINDOWS\$NtUninstallKB910728$ 2009-12-08 07:15:04 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$ 2009-12-08 07:15:04 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$ 2009-12-08 07:15:03 ----HDC---- C:\WINDOWS\$NtUninstallKB905915$ 2009-12-08 07:14:59 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$ 2009-12-08 07:14:58 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$ 2009-12-08 07:14:58 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$ 2009-12-08 07:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$ 2009-12-08 07:14:52 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$ 2009-12-08 07:14:51 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$ 2009-12-08 07:14:51 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$ 2009-12-08 07:14:47 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$ 2009-12-08 07:14:47 ----HDC---- C:\WINDOWS\$NtUninstallKB899588$ 2009-12-08 07:14:47 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$ 2009-12-08 07:14:46 ----HDC---- C:\WINDOWS\$NtUninstallKB898458$ 2009-12-08 07:14:46 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$ 2009-12-08 07:14:45 ----HDC---- C:\WINDOWS\$NtUninstallKB896424$ 2009-12-08 07:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$ 2009-12-08 07:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB896422$ 2009-12-08 07:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$ 2009-12-08 07:14:43 ----HDC---- C:\WINDOWS\$NtUninstallKB896256$ 2009-12-08 07:14:41 ----HDC---- C:\WINDOWS\$NtUninstallKB896243$ 2009-12-08 07:14:41 ----HDC---- C:\WINDOWS\$NtUninstallKB895200$ 2009-12-08 07:14:38 ----HDC---- C:\WINDOWS\$NtUninstallKB894871$ 2009-12-08 07:14:38 ----HDC---- C:\WINDOWS\$NtUninstallKB894391_0$ 2009-12-08 07:14:37 ----HDC---- C:\WINDOWS\$NtUninstallKB894391$ 2009-12-08 07:14:35 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$ 2009-12-08 07:14:35 ----HDC---- C:\WINDOWS\$NtUninstallKB893357$ 2009-12-08 07:14:34 ----HDC---- C:\WINDOWS\$NtUninstallKB893066$ 2009-12-08 07:14:34 ----HDC---- C:\WINDOWS\$NtUninstallKB893056$ 2009-12-08 07:14:33 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$ 2009-12-08 07:14:33 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$ 2009-12-08 07:14:33 ----HDC---- C:\WINDOWS\$NtUninstallKB890175$ 2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB890046_0$ 2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$ 2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB889673$ 2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB888622$ 2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$ 2009-12-08 07:14:32 ----HDC---- C:\WINDOWS\$NtUninstallKB888113$ 2009-12-08 07:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$ 2009-12-08 07:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB887472$ 2009-12-08 07:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB886185$ 2009-12-08 07:14:31 ----HDC---- C:\WINDOWS\$NtUninstallKB885855$ 2009-12-08 07:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$ 2009-12-08 07:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB885835$ 2009-12-08 07:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB885250$ 2009-12-08 07:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$ 2009-12-08 07:14:29 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$ 2009-12-08 07:13:57 ----D---- C:\VALUEADD 2009-12-08 07:13:52 ----D---- C:\ToolsCD 2009-12-08 07:07:51 ----D---- C:\SUPPORT 2009-12-08 07:07:51 ----D---- C:\Program Files\xerox 2009-12-08 07:07:50 ----D---- C:\Program Files\Windows NT 2009-12-08 07:07:49 ----D---- C:\Program Files\Windows Media Player 2009-12-08 07:07:08 ----D---- C:\Program Files\Services en ligne 2009-12-08 07:06:56 ----D---- C:\Program Files\Online Services 2009-12-08 07:06:55 ----AD---- C:\Program Files\Offre Wanadoo 2009-12-08 07:06:14 ----D---- C:\Program Files\NetMeeting 2009-12-08 07:06:11 ----D---- C:\Program Files\MSN Gaming Zone 2009-12-08 07:05:59 ----D---- C:\Program Files\MSN 2009-12-08 07:05:59 ----D---- C:\Program Files\Movie Maker 2009-12-08 07:05:44 ----D---- C:\Program Files\microsoft frontpage 2009-12-08 07:05:43 ----D---- C:\Program Files\ltmoh 2009-12-08 07:05:21 ----D---- C:\Program Files\Java 2009-12-08 07:05:14 ----D---- C:\Program Files\InterVideo 2009-12-08 07:03:41 ----D---- C:\Program Files\Fichiers communs\SpeechEngines 2009-12-08 07:03:41 ----D---- C:\Program Files\Fichiers communs\Services 2009-12-08 07:03:41 ----D---- C:\Program Files\Fichiers communs\ODBC 2009-12-08 07:03:41 ----D---- C:\Program Files\Fichiers communs\MSSoap 2009-12-08 07:03:09 ----D---- C:\Program Files\Fichiers communs\Java 2009-12-08 07:03:06 ----D---- C:\Program Files\Fichiers communs\InstallShield 2009-12-08 07:02:11 ----D---- C:\Program Files\Adobe 2009-12-08 07:00:56 ----D---- C:\I386 2009-12-08 06:55:13 ----D---- C:\Documents and Settings\All Users\Application Data\SBSI 2009-12-08 00:50:19 ----D---- C:\Program Files\Sonic 2009-12-07 22:42:34 ----D---- C:\Program Files\Toshiba 2009-12-07 22:36:22 ----D---- C:\WINDOWS\pchealth 2009-12-07 22:31:04 ----D---- C:\WINDOWS\security 2009-12-07 22:30:17 ----A---- C:\WINDOWS\OEWABLog.txt 2009-12-07 22:30:08 ----D---- C:\WINDOWS\oemdrv 2009-12-07 22:29:25 ----D---- C:\Program Files\Intel 2009-12-07 22:28:28 ----A---- C:\WINDOWS\setuplog.txt 2009-12-07 22:28:20 ----D---- C:\WINDOWS\system32\config 2009-12-07 22:28:14 ----D---- C:\WINDOWS\system32\RTCOM 2009-12-07 22:27:51 ----D---- C:\Program Files\Realtek 2009-12-07 22:27:26 ----D---- C:\WINDOWS\Registration 2009-12-07 22:24:06 ----D---- C:\WINDOWS\repair ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-05 40320] R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.9.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-12-07 21275] R2 Netdevio;TOSHIBA Network Device Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS\netdevio.sys [2003-01-29 12032] R2 s24trans;Transport RLAN; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2005-11-28 13568] R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2006-03-04 1124097] R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-03 14080] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752] R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-03-23 1166972] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-05-10 4273152] R3 Iviaspi;IVI ASPI Shell; C:\WINDOWS\system32\drivers\iviaspi.sys [2003-09-10 21060] R3 Pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-18 10368] R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2006-01-13 76544] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600] R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480] R3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2005-12-05 1428096] S3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [] S3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800] S3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2005-09-15 179200] S3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600] S3 IFXTPM;IFXTPM; C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS [2005-06-10 35968] S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] S3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824] S3 sffdisk;Pilote de classe de stockage SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2006-01-13 11136] S3 sffp_sd;Pilote de protocole de stockage SFF pour SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2006-01-13 10368] S3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20050901.036\symidsco.sys [] S3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2006-05-06 28800] S3 tosrfec;Bluetooth ACPI from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfec.sys [2005-09-09 9344] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 CFSvcs;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2005-01-17 40960] R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2005-11-28 114753] R2 MSSQLSERVER;MSSQLSERVER; C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe [2000-08-23 7442493] R2 OracleMTSRecoveryService;OracleMTSRecoveryService; C:\oracle\ora92\bin\omtsreco.exe [2002-04-30 57603] R2 OracleOraHome92Agent;OracleOraHome92Agent; C:\oracle\ora92\bin\agntsrvc.exe [2002-04-26 28944] R2 OracleOraHome92HTTPServer;OracleOraHome92HTTPServer; C:\oracle\ora92\Apache\Apache\apache.exe [2002-04-18 4096] R2 OracleOraHome92TNSListener;OracleOraHome92TNSListener; C:\oracle\ora92\BIN\TNSLSNR [] R2 OracleServiceORACLEDB;OracleServiceORACLEDB; c:\oracle\ora92\bin\ORACLE.EXE [2002-05-14 29475088] R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2005-11-28 217164] R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2005-11-28 540745] R2 Thpsrv;TOSHIBA HDD Protection; C:\WINDOWS\system32\ThpSrv.exe [2006-05-24 167936] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912] S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2000-08-06 65602] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776] S3 OracleOraHome92ClientCache;OracleOraHome92ClientCache; C:\oracle\ora92\BIN\ONRSD.EXE [2002-04-26 242328] S3 OracleOraHome92PagingServer;OracleOraHome92PagingServer; C:\oracle\ora92/bin/pagntsrv.exe [2002-08-20 49152] S3 OracleOraHome92SNMPPeerEncapsulator;OracleOraHome92SNMPPeerEncapsulator; C:\oracle\ora92\BIN\ENCSVC.EXE [2002-02-13 187392] S3 OracleOraHome92SNMPPeerMasterAgent;OracleOraHome92SNMPPeerMasterAgent; C:\oracle\ora92\BIN\AGNTSVC.EXE [2002-02-13 254464] S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 SQLSERVERAGENT;SQLSERVERAGENT; C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlagent.exe [2000-08-06 303170] S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe [2008-12-10 24636] S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe [2009-06-17 6582912] S4 NetTcpPortSharing;Service de partage de ports Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF----------------- -
Contributeur sécuritébranche tous tes supports externes puis colle un rapport avec usbfix . Option 1 (recherche).
-
############################## | UsbFix V6.067 | User : ASSIA (Administrateurs) # JACINTHUS Update on 24/12/2009 by Chiquitine29, C_XX & Chimay8 Start at: 19:35:58 | 25/12/2009 Website : http://pagesperso-orange.fr/NosTools/index.html Contact : FindyKill.Contact@gmail.com Genuine Intel(R) CPU T2050 @ 1.60GHz Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2 Internet Explorer 6.0.2900.2180 Windows Firewall Status : Enabled C:\ -> Disque fixe local # 74.53 Go (59.49 Go free) # NTFS D:\ -> Disque CD-ROM E:\ -> Disque amovible # 1.9 Go (1.3 Go free) # FAT32 F:\ -> Disque amovible # 3.77 Go (2.39 Go free) [@$$!@] # FAT32 G:\ -> Disque amovible # 971.12 Mo (2.66 Mo free) # FAT ############################## | Processus actifs | C:\WINDOWS\System32\smss.exe 576 C:\WINDOWS\system32\csrss.exe 624 C:\WINDOWS\system32\winlogon.exe 648 C:\WINDOWS\system32\services.exe 692 C:\WINDOWS\system32\lsass.exe 704 C:\WINDOWS\system32\svchost.exe 860 C:\WINDOWS\system32\svchost.exe 960 C:\WINDOWS\System32\svchost.exe 1016 C:\Program Files\Intel\Wireless\Bin\EvtEng.exe 1088 C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe 1152 C:\WINDOWS\system32\svchost.exe 1256 C:\WINDOWS\system32\svchost.exe 1304 C:\WINDOWS\system32\spoolsv.exe 1584 C:\WINDOWS\system32\svchost.exe 1652 C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe 1700 C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe 1792 C:\WINDOWS\Explorer.EXE 176 C:\oracle\ora92\bin\omtsreco.exe 412 c:\oracle\ora92\bin\ORACLE.EXE 1216 C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe 1264 C:\WINDOWS\system32\ThpSrv.exe 1480 C:\WINDOWS\system32\wdfmgr.exe 1728 C:\WINDOWS\SkyTel.EXE 1832 C:\WINDOWS\system32\00THotkey.exe 1876 C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe 1968 C:\WINDOWS\system32\ctfmon.exe 1996 C:\Program Files\Ares\Ares.exe 2036 C:\Program Files\Mozilla Firefox\firefox.exe 948 C:\WINDOWS\System32\alg.exe 1516 C:\Program Files\TOSHIBA\ConfigFree\CFXFER.exe 2348 C:\WINDOWS\system32\wbem\wmiprvse.exe 3488 ################## | Elements infectieux | E:\autorun.inf E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665 F:\autorun.inf F:\log.exe F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665 G:\autorun.inf G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665 ################## | Registre | ################## | Mountpoints2 | HKCU\..\..\Explorer\MountPoints2\{476fe164-eaf6-11de-a7e0-0018de6e9005} Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn HKCU\..\..\Explorer\MountPoints2\{476fe16b-eaf6-11de-a7e0-0018de6e9005} Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn HKCU\..\..\Explorer\MountPoints2\{476fe16c-eaf6-11de-a7e0-0018de6e9005} Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn HKCU\..\..\Explorer\MountPoints2\{746aedf5-e3fa-11de-a7d6-0018de6e9005} Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn HKCU\..\..\Explorer\MountPoints2\{9791db6d-ea33-11de-a7df-0018de6e9005} Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn HKCU\..\..\Explorer\MountPoints2\{a9090cc0-f07a-11de-a7e9-e38b09b697c4} Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn HKCU\..\..\Explorer\MountPoints2\{b4be00c2-e4a5-11de-a7d8-0018de6e9005} Shell\AutoRun\command =E:\NOT\GLOW\eKn.exe Shell\open\command =E:\NOT\GLOW\eKn.exe ################## | Cracks / Keygens / Serials | "C:\oracle\ora92\jdk\bin\serialver.exe" 18/04/2002 21:40 |Size 20576 |Crc32 36509380 |Md5 0e24a5116b5dcf62d17781a8aa15640b ################## | ! Fin du rapport # UsbFix V6.067 ! | -
Contributeur sécuritéok fais l'option 2 et colle le rapport . Puis colle un rapport d'un scan rapide avec malwarebyte antimalware.
-
USBFIX:
############################## | UsbFix V6.067 | User : ASSIA (Administrateurs) # JACINTHUS Update on 24/12/2009 by Chiquitine29, C_XX & Chimay8 Start at: 21:23:42 | 25/12/2009 Website : http://pagesperso-orange.fr/NosTools/index.html Contact : FindyKill.Contact@gmail.com Genuine Intel(R) CPU T2050 @ 1.60GHz Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2 Internet Explorer 6.0.2900.2180 Windows Firewall Status : Enabled C:\ -> Disque fixe local # 74.53 Go (59.45 Go free) # NTFS D:\ -> Disque CD-ROM E:\ -> Disque amovible # 1.9 Go (1.3 Go free) # FAT32 F:\ -> Disque amovible # 3.77 Go (2.39 Go free) [@$$!@] # FAT32 G:\ -> Disque amovible # 971.12 Mo (2.66 Mo free) # FAT ############################## | Processus actifs | C:\WINDOWS\System32\smss.exe 576 C:\WINDOWS\system32\csrss.exe 628 C:\WINDOWS\system32\winlogon.exe 652 C:\WINDOWS\system32\services.exe 696 C:\WINDOWS\system32\lsass.exe 708 C:\WINDOWS\system32\svchost.exe 864 C:\WINDOWS\system32\svchost.exe 944 C:\WINDOWS\System32\svchost.exe 1000 C:\Program Files\Intel\Wireless\Bin\EvtEng.exe 1076 C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe 1156 C:\WINDOWS\system32\svchost.exe 1264 C:\WINDOWS\system32\svchost.exe 1312 C:\WINDOWS\system32\spoolsv.exe 1588 C:\WINDOWS\system32\svchost.exe 1660 C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe 1696 C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe 1800 C:\WINDOWS\Explorer.EXE 140 C:\oracle\ora92\bin\omtsreco.exe 276 c:\oracle\ora92\bin\ORACLE.EXE 1428 C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe 1324 C:\WINDOWS\system32\ThpSrv.exe 1052 C:\WINDOWS\system32\wdfmgr.exe 1724 C:\oracle\ora92\bin\oradim.exe 1888 C:\WINDOWS\System32\alg.exe 592 C:\WINDOWS\system32\wbem\wmiprvse.exe 824 ################## | Elements infectieux | Supprimé ! C:\Recycler\S-1-5-21-2579720848-1240602005-1065437235-1005 Supprimé ! E:\autorun.inf Supprimé ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx Supprimé ! E:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665 Supprimé ! F:\autorun.inf Supprimé ! F:\log.exe Supprimé ! F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx Supprimé ! F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665 Supprimé ! F:\Recycler\S-1-5-21-1482476501-1644491937-682003330-1013 Supprimé ! G:\autorun.inf Supprimé ! G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx Supprimé ! G:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665 ################## | Registre | ################## | Mountpoints2 | Supprimé ! HKCU\...\Explorer\MountPoints2\{476fe164-eaf6-11de-a7e0-0018de6e9005}\Shell\AutoRun\Command Supprimé ! HKCU\...\Explorer\MountPoints2\{476fe16b-eaf6-11de-a7e0-0018de6e9005}\Shell\AutoRun\Command Supprimé ! HKCU\...\Explorer\MountPoints2\{476fe16c-eaf6-11de-a7e0-0018de6e9005}\Shell\AutoRun\Command Supprimé ! HKCU\...\Explorer\MountPoints2\{b4be00c2-e4a5-11de-a7d8-0018de6e9005}\Shell\AutoRun\Command ################## | Listing des fichiers présent | [08/06/2006 11:42|--a------|0] C:\AUTOEXEC.BAT [13/12/2009 14:22|-rahs----|227] C:\boot.ini [05/08/2004 10:00|-rahs----|4952] C:\Bootfont.bin [08/06/2006 11:42|--a------|0] C:\CONFIG.SYS [?|?|?] C:\hiberfil.sys [08/06/2006 11:42|-rahs----|0] C:\IO.SYS [08/06/2006 11:42|-rahs----|0] C:\MSDOS.SYS [05/08/2004 10:00|-rahs----|47564] C:\NTDETECT.COM [05/08/2004 10:00|-rahs----|251712] C:\ntldr [?|?|?] C:\pagefile.sys [24/12/2009 00:57|--a------|233472] C:\Service.mdb [19/06/2006 20:14|--ah-----|176] C:\SWSTAMP.TXT [25/12/2009 21:27|--a------|3648] C:\UsbFix.txt [24/12/2009 17:28|--a------|28672] E:\TP4-CpmressionCryptageQuota.doc [23/04/2008 19:06|--a------|5143172] E:\adele - chasing pavements(2)(2).mp3 [29/01/2009 22:28|-ra------|3926116] E:\Backstreet_Boys_-_Helpless_When_She_Smiles_-_hopsmp3thing.com.mp3 [01/05/2009 11:39|--a------|5214839] E:\hinder- lips of an angel (acoustic)(4).mp3 [15/08/2009 17:06|--a------|4985042] E:\ - Coldplay - The Scientist.mp3 [15/08/2009 17:06|--a------|4156325] E:\01-daniel bedingfield - if you're not the one.mp3 [14/09/2009 09:37|--a------|5717329] E:\07 - I'm Awake Now.mp3 [14/09/2009 09:37|--a------|3347921] E:\08 - Torn Apart.mp3 [14/09/2009 09:37|--a------|5471228] E:\09 - No Way Out.mp3 [14/09/2009 09:37|--a------|5512492] E:\10 - String Of Lies.mp3 [14/09/2009 09:37|--a------|10156501] E:\11 - We'll Be Here (When You're Gone) (New Mix).mp3 [14/09/2009 09:37|--a------|6574900] E:\12 - Without You Here.mp3 [14/09/2009 09:37|--a------|5941507] E:\13 - Only One.mp3 [14/09/2009 09:37|--a------|6474032] E:\14 - Truth Is A Whisper.mp3 [14/09/2009 09:37|--a------|8181360] E:\15 - What A Scene.mp3 [14/09/2009 09:37|--a------|5085884] E:\16 - Million Miles Away.mp3 [14/09/2009 09:37|--a------|4696521] E:\17 - I Wanna Destroy You.mp3 [14/09/2009 09:37|--a------|6763020] E:\18 - Wait For The Blackout.mp3 [14/09/2009 09:37|--a------|4264061] E:\19 - Slave Girl.mp3 [14/09/2009 09:37|--a------|6541997] E:\20 - Don't Change.mp3 [14/09/2009 09:37|--a------|6281050] E:\21 - I Don't Want To Know.mp3 [14/09/2009 09:37|--a------|5985039] E:\22 - American Girl (Live).mp3 [14/09/2009 09:37|--a------|7554608] E:\01 - Hate This Place.mp3 [14/09/2009 09:37|--a------|6074511] E:\02 - Stop The World.mp3 [14/09/2009 09:37|--a------|6351802] E:\03 - Long Way Down.mp3 [14/09/2009 09:37|--a------|8178285] E:\04 - All Eyes On Me (Live).mp3 [14/09/2009 09:37|--a------|6720735] E:\05 - Lazy Eye.mp3 [14/09/2009 09:37|--a------|5543921] E:\06 - Iris (Demo).mp3 [09/02/2009 17:29|--a------|7859198] E:\Hinder- Homecoming Queen.mp3 [09/02/2009 16:38|--a------|6344779] E:\Hinder - It Ain't No Suprise.mp3 [09/02/2009 16:29|--a------|3739481] E:\Hinder - Without You (Album Version).mp3 [09/02/2009 17:51|--a------|6523743] E:\The Fray - All At Once.mp3 [09/02/2009 17:41|--a------|7512744] E:\The Fray - Look After You.mp3 [09/02/2009 18:11|--a------|5237307] E:\The Fray - Trust Me.mp3 [22/02/2009 07:17|--a------|5730432] E:\Hinder - Bed of roses.mp3 [24/10/2009 10:56|--a------|5888005] E:\Hinder - Better than me.mp3 [15/08/2009 18:00|--a------|7559150] E:\02-paramore-decode.mp3 [15/08/2009 18:00|--a------|5356474] E:\01-muse-supermassive_black_hole.mp3 [14/09/2009 09:36|--a------|8427098] E:\09-Sum41-With_Me-HHI.mp3 [14/09/2009 09:36|--a------|6807898] E:\12-Sum41-Best_Of_Me-HHI.mp3 [09/02/2009 17:18|--a------|4655542] E:\04 - HINDER - Nothin' Good About Goodbye.mp3 [06/03/2009 13:02|--a------|5135770] E:\Cadillac Records Soundtrack [deluxe] cD1.2008. 05. Beyonce.Once In A Lifetime.mp3 [09/03/2009 11:40|--a------|4291714] E:\Cadillac Records Soundtrack [deluxe] cD2.2008. 03. Beyonce.Trust In Me.mp3 [09/03/2009 11:44|--a------|6564950] E:\Cadillac Records Soundtrack - 05 Once In A Lifetime (BeyoncŠ).mp3 [09/03/2009 12:04|--a------|3676810] E:\Cadillac Records Soundtrack Cd1 2008 11 Beyonce I'd Rather Go Blind.mp3 [16/12/2009 13:04|--a------|2987262] E:\Orange Whip Groove.mp3 [13/12/2009 13:59|--a------|2127914] E:\Same Girl.mp3 [13/12/2009 15:38|--a------|1793803] E:\The Cove.mp3 [13/12/2009 14:25|--a------|5191093] E:\What You Thought You Need.mp3 [13/12/2009 14:20|--a------|1423334] E:\While We Wait.mp3 [13/12/2009 12:47|--a------|2013658] E:\Angel.mp3 [13/12/2009 15:51|--a------|3896966] E:\Breakdown.mp3 [13/12/2009 16:08|--a------|3787607] E:\If I Had Eyes.mp3 [13/12/2009 17:12|--a------|3421347] E:\Imagine.mp3 [13/11/2009 21:25|--a------|61707] F:\4IIRT1.pdf [21/11/2009 13:14|--a------|221184] F:\hokey.mdb [04/12/2009 15:02|--a------|741] F:\livre.sql.zip [03/12/2009 14:59|--a------|2323] F:\base.txt [02/12/2009 21:11|--a------|517632] F:\CoursPHP_Snineh.ppt [08/12/2009 17:15|--a------|1048576] F:\base1_Log.LDF [08/12/2009 17:15|--a------|1179648] F:\base1_Data.MDF [10/12/2009 16:26|--a------|3016] F:\base2.txt [16/12/2009 11:16|--a------|427401] F:\suite(PHP).ppt [24/12/2009 14:59|--a------|1240] F:\livres_sc.sql [24/12/2009 16:28|--a------|424] F:\insert_categoorie.php [24/12/2009 15:54|--a------|235] F:\admin_fns.php [24/12/2009 17:11|--a------|326] F:\admin_fns_lvr.php [10/11/2008 10:25|---hs----|4096] G:\tfs4_160.ess [13/10/2009 13:20|--a------|28272] G:\Young_Link_Avy_by_iSoulTouch.png ################## | Vaccination | # C:\autorun.inf -> Dossier créé par UsbFix. # E:\autorun.inf -> Dossier créé par UsbFix. # F:\autorun.inf -> Dossier créé par UsbFix. # G:\autorun.inf -> Dossier créé par UsbFix. ################## | Cracks / Keygens / Serials | "C:\oracle\ora92\jdk\bin\serialver.exe" 18/04/2002 21:40 |Size 20576 |Crc32 36509380 |Md5 0e24a5116b5dcf62d17781a8aa15640b ################## | Upload | Veuillez envoyer le fichier : C:\DOCUME~1\ASSIA\Bureau\UsbFix_Upload_Me_JACINTHUS.zip : https://www.ionos.fr/?affiliate_id=77097 Merci pour votre contribution . ################## | ! Fin du rapport # UsbFix V6.067 ! | -
malwarebytes
Malwarebytes' Anti-Malware 1.42 Version de la base de données: 3289 Windows 5.1.2600 Service Pack 2 Internet Explorer 6.0.2900.2180 25/12/2009 22:39:16 mbam-log-2009-12-25 (22-39-16).txt Type de recherche: Examen complet (C:\|D:\|) Eléments examinés: 239820 Temps écoulé: 44 minute(s), 49 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)
-
Contributeur sécuritéantivir remarche?
mets le a jour et colle un rapport avec
si impossible colle un scan en ligne de chez bitdefender
http://www.bitdefender.com/scan_fr/scan8/ie.html-
j'ai pas d'antivirus!! lorsque je l'ai reinstallé (antivir) , il m'affiche un message d'erreur:
une connexion internet sécurisée (à codage SSL) est nécessaire pour l'activation du produit. il n'a pas été possible de l'établir. on me suggère : de vérifier qu'internet est disponible de manière générale de vérifier la date système de vérifier la connexion du modem de vérifier que l'application fact.exe a accès à internet et n'est pas bloquée derrière un pare-feu
D'ou vient ce probleme??
j'ai desactivé le parfeu mais tjrs le meme problem,
j'utilise pas de proxy
-
-
Contributeur sécuritéok colle un scan en ligne de chez bitdefender pour voir
-
Contributeur sécuritéok
Télécharge Combofix de sUBs : Renomme le avant toute installation, par exemple, nomme le "KillBagle". aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Sauvegarde le sur ton bureau et pas ailleurs !
Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic
Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.-
ComboFix 09-12-25.04 - ASSIA 26/12/2009 12:24:18.1.2 - x86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.503.73 [GMT 0:00] Lancé depuis: c:\documents and settings\ASSIA\Bureau\Bibitte.exe . ((((((((((((((((((((((((((((( Fichiers créés du 2009-11-26 au 2009-12-26 )))))))))))))))))))))))))))))))))))) . 2009-12-26 11:13 . 2009-12-26 11:14 -------- d-----w- c:\documents and settings\ASSIA\Local Settings\Application Data\Temp 2009-12-26 11:13 . 2009-12-26 11:14 -------- d-----w- c:\documents and settings\ASSIA\Local Settings\Application Data\Google 2009-12-25 21:53 . 2009-12-25 21:53 -------- d-----w- c:\documents and settings\ASSIA\Application Data\Malwarebytes 2009-12-25 21:53 . 2009-12-03 16:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-12-25 21:53 . 2009-12-25 21:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-12-25 21:53 . 2009-12-25 21:53 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-12-25 21:53 . 2009-12-03 16:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-12-25 19:34 . 2009-12-25 21:28 -------- d-----w- C:\UsbFix 2009-12-24 22:49 . 2009-12-24 22:49 -------- d-----w- c:\program files\trend micro 2009-12-24 22:49 . 2009-12-24 22:49 -------- d-----w- C:\rsit 2009-12-24 22:45 . 2009-12-24 22:45 -------- d-----w- c:\program files\Windows Live Safety Center 2009-12-24 18:11 . 2009-12-24 18:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files 2009-12-22 16:37 . 2009-12-22 16:39 -------- d-----w- c:\documents and settings\All Users\Application Data\PowerAMC 12 2009-12-22 16:37 . 2009-12-22 16:37 -------- d-----w- c:\program files\Sybase 2009-12-20 22:35 . 2009-12-20 23:02 -------- d-----w- C:\oracle 2009-12-20 22:35 . 2009-12-20 22:42 -------- d-----w- c:\program files\Oracle 2009-12-19 16:31 . 2009-12-19 16:29 737280 ----a-w- c:\windows\iun6002.exe 2009-12-19 16:30 . 2009-12-19 16:30 -------- d-----w- c:\windows\system32\athan 2009-12-19 16:29 . 2009-12-19 16:39 -------- d-----w- c:\program files\Athan 2009-12-16 11:33 . 2005-09-16 16:28 1052672 ----a-w- c:\documents and settings\ASSIA\Application Data\Macromedia\Dreamweaver 8\Configuration\Flash Player\FlashPlayerW.dll 2009-12-16 11:30 . 2009-12-16 11:32 -------- d-----w- c:\program files\Fichiers communs\Macromedia 2009-12-16 11:30 . 2009-12-16 11:31 -------- d-----w- c:\program files\Macromedia 2009-12-16 11:30 . 2009-12-16 11:30 -------- d-----w- c:\windows\Downloaded Installations 2009-12-15 22:27 . 2009-12-15 22:27 -------- d-----w- c:\documents and settings\ASSIA\Local Settings\Application Data\Ares 2009-12-15 22:27 . 2009-12-15 22:27 -------- d-----w- c:\program files\Ares 2009-12-13 20:52 . 2009-12-13 20:52 -------- d-s---w- c:\documents and settings\ASSIA\UserData 2009-12-13 13:18 . 1999-09-09 21:06 252688 ----a-w- c:\windows\system32\msexcl35.dll 2009-12-13 13:18 . 1998-09-16 00:12 262144 ----a-w- c:\windows\system32\msrd2x35.dll 2009-12-13 13:18 . 1998-06-16 23:00 929844 ----a-w- c:\windows\system32\MFC42D.DLL 2009-12-13 13:18 . 1998-06-16 23:00 798773 ----a-w- c:\windows\system32\MFCO42D.DLL 2009-12-13 13:18 . 1998-06-16 23:00 274485 ----a-w- c:\windows\system32\MFCD42D.DLL 2009-12-13 13:18 . 1999-09-28 20:42 1050896 ----a-w- c:\windows\system32\msjet35.dll 2009-12-13 13:18 . 2009-12-13 13:18 -------- d-----w- c:\program files\ProLog Software 2009-12-13 13:18 . 1999-08-03 23:00 24848 ----a-w- c:\windows\system32\msjter35.dll 2009-12-13 13:18 . 1999-08-03 23:00 123664 ----a-w- c:\windows\system32\msjint35.dll 2009-12-13 13:18 . 1998-05-18 01:06 368912 ----a-w- c:\windows\system32\vbar332.dll 2009-12-13 13:18 . 2009-12-13 13:18 -------- d-----w- c:\documents and settings\ASSIA\WINDOWS 2009-12-13 11:02 . 2008-06-14 17:59 272768 -c----w- c:\windows\system32\dllcache\bthport.sys 2009-12-13 11:02 . 2008-06-14 17:59 272768 ------w- c:\windows\system32\drivers\bthport.sys 2009-12-13 11:01 . 2005-07-26 04:29 60416 -c----w- c:\windows\system32\dllcache\colbact.dll 2009-12-13 11:01 . 2009-03-06 14:00 286720 -c----w- c:\windows\system32\dllcache\pdh.dll 2009-12-13 11:01 . 2009-02-09 10:03 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll 2009-12-13 11:01 . 2009-02-06 09:41 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe 2009-12-13 11:01 . 2009-02-09 10:03 740352 -c----w- c:\windows\system32\dllcache\ntdll.dll 2009-12-13 11:01 . 2009-02-09 10:03 686080 -c----w- c:\windows\system32\dllcache\advapi32.dll 2009-12-13 11:01 . 2009-02-09 10:03 473088 -c----w- c:\windows\system32\dllcache\fastprox.dll 2009-12-13 11:01 . 2009-02-09 09:53 111104 -c----w- c:\windows\system32\dllcache\services.exe 2009-12-13 11:01 . 2009-02-06 09:54 35328 -c----w- c:\windows\system32\dllcache\sc.exe 2009-12-13 11:00 . 2009-07-10 13:41 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll 2009-12-13 11:00 . 2009-08-04 17:16 2144768 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe 2009-12-13 11:00 . 2009-08-04 17:16 2065024 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe 2009-12-13 11:00 . 2009-08-04 17:16 2188032 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe 2009-12-13 11:00 . 2009-08-04 17:16 2022912 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe 2009-12-13 11:00 . 2009-08-25 09:47 352256 -c----w- c:\windows\system32\dllcache\winhttp.dll 2009-12-13 11:00 . 2009-07-31 04:58 1172480 -c----w- c:\windows\system32\dllcache\msxml3.dll 2009-12-13 11:00 . 2008-04-21 21:27 219136 -c----w- c:\windows\system32\dllcache\wordpad.exe 2009-12-13 10:49 . 2009-12-13 12:19 -------- d-----w- c:\windows\system32\CatRoot_bak 2009-12-13 10:48 . 2009-12-13 10:48 -------- d-----w- c:\program files\MSXML 4.0 2009-12-12 11:58 . 2009-12-12 11:58 -------- d-----w- c:\program files\Microsoft Synchronization Services 2009-12-12 11:58 . 2009-12-12 11:58 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition 2009-12-12 11:57 . 2009-12-12 11:57 188416 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\VCSExpress\9.0\1036\ResourceCache.dll 2009-12-12 11:56 . 2009-12-12 11:56 416 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\MSDN\9.0\1036\ResourceCache.dll 2009-12-12 11:54 . 2009-12-12 11:58 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0 2009-12-12 11:53 . 2009-12-12 11:53 -------- d-----w- c:\program files\Microsoft SDKs 2009-12-12 11:51 . 2006-06-29 13:07 14048 ------w- c:\windows\system32\spmsg2.dll 2009-12-12 11:51 . 2009-12-12 11:51 -------- d-----w- c:\windows\system32\fr-FR 2009-12-12 11:42 . 2009-12-12 11:42 -------- d-----w- c:\program files\MSXML 6.0 2009-12-12 10:38 . 2009-12-12 10:38 -------- d-----w- c:\documents and settings\Default User\Local Settings\Application Data\Microsoft Help 2009-12-12 10:37 . 2009-12-12 10:37 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2 2009-12-12 10:35 . 2009-12-12 10:35 -------- d-----w- c:\windows\ServicePackFiles 2009-12-11 21:20 . 2009-06-21 22:06 153088 -c----w- c:\windows\system32\dllcache\triedit.dll 2009-12-11 20:24 . 2008-05-08 12:28 202752 -c----w- c:\windows\system32\dllcache\rmcast.sys 2009-12-11 20:22 . 2008-10-24 11:10 453632 -c----w- c:\windows\system32\dllcache\mrxsmb.sys 2009-12-11 20:21 . 2008-12-11 11:57 333184 -c----w- c:\windows\system32\dllcache\srv.sys 2009-12-11 20:11 . 2008-04-11 18:51 683520 -c----w- c:\windows\system32\dllcache\inetcomm.dll 2009-12-11 18:22 . 2008-10-15 16:59 332800 -c----w- c:\windows\system32\dllcache\netapi32.dll 2009-12-11 15:13 . 2009-12-11 15:15 -------- d-----w- C:\wamp 2009-12-11 14:59 . 2008-05-01 14:31 331776 -c----w- c:\windows\system32\dllcache\msadce.dll 2009-12-11 14:39 . 2009-08-21 06:51 450560 -c----w- c:\windows\system32\dllcache\jscript.dll 2009-12-11 14:20 . 2009-06-05 07:46 655872 -c----w- c:\windows\system32\dllcache\mstscax.dll 2009-12-11 13:01 . 2001-08-23 17:04 12288 -c--a-w- c:\windows\system32\dllcache\mouhid.sys 2009-12-11 13:01 . 2001-08-23 17:04 12288 ----a-w- c:\windows\system32\drivers\mouhid.sys 2009-12-11 13:01 . 2001-08-17 22:02 9600 -c--a-w- c:\windows\system32\dllcache\hidusb.sys 2009-12-11 13:01 . 2001-08-17 22:02 9600 ----a-w- c:\windows\system32\drivers\hidusb.sys 2009-12-09 23:03 . 2009-12-09 23:03 -------- d--h--w- c:\windows\system32\GroupPolicy 2009-12-09 19:26 . 2009-12-26 10:46 -------- d-----w- c:\documents and settings\ASSIA\Tracing 2009-12-09 19:24 . 2009-12-10 12:51 -------- d-----w- c:\windows\SxsCaPendDel 2009-12-09 19:23 . 2009-12-09 19:23 -------- d-----w- c:\program files\Microsoft 2009-12-09 19:22 . 2009-12-09 19:22 -------- d-----w- c:\program files\Windows Live SkyDrive 2009-12-09 19:22 . 2009-12-09 19:23 -------- d-----w- c:\program files\Windows Live 2009-12-09 18:25 . 2009-12-09 18:25 -------- d-----w- c:\documents and settings\ASSIA\Contacts 2009-12-09 13:11 . 2009-08-06 19:23 215920 ----a-w- c:\windows\system32\muweb.dll 2009-12-09 13:11 . 2009-08-06 19:23 274288 ----a-w- c:\windows\system32\mucltui.dll 2009-12-08 22:27 . 2009-12-08 22:27 -------- d-----w- c:\program files\Fichiers communs\Windows Live 2009-12-08 22:12 . 2009-12-17 10:27 68464 ----a-w- c:\documents and settings\ASSIA\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-12-08 22:11 . 2009-12-08 22:11 0 ----a-w- c:\windows\nsreg.dat 2009-12-08 22:11 . 2009-12-08 22:11 -------- d-----w- c:\documents and settings\ASSIA\Local Settings\Application Data\Mozilla 2009-12-08 13:45 . 2009-12-12 14:43 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2009-12-08 13:05 . 2000-08-06 09:51 192569 ----a-w- c:\windows\system32\msrpjt40.dll 2009-12-08 13:04 . 2000-08-06 09:50 36939 ----a-w- c:\windows\system32\insrepim.exe 2009-12-08 13:04 . 2000-07-07 20:20 81920 ----a-w- c:\windows\system32\mdt2fw95.dll 2009-12-08 13:03 . 2000-08-23 22:27 278585 ----a-w- c:\windows\system32\ntwdblib.DLL 2009-12-08 13:03 . 2000-08-06 09:51 32830 ----a-w- c:\windows\system32\DBmsSHRn.dll 2009-12-08 13:03 . 2000-08-06 09:51 28734 ----a-w- c:\windows\system32\dbmslpcn.dll 2009-12-08 13:02 . 1998-10-29 16:45 306688 ----a-w- c:\windows\IsUninst.exe 2009-12-07 22:30 . 2009-12-07 22:30 -------- d-----w- c:\documents and settings\Default User\Voisinage réseau 2009-12-07 22:30 . 2009-12-07 22:30 -------- d-----w- c:\documents and settings\ASSIA\Voisinage réseau 2009-12-07 22:30 . 2009-12-07 22:30 -------- d-----w- c:\documents and settings\Administrateur\Voisinage réseau 2009-12-07 22:29 . 2009-12-07 22:29 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Intel 2009-12-07 22:29 . 2009-12-07 22:29 21275 ----a-w- c:\windows\system32\drivers\AegisP.sys 2009-12-07 22:29 . 2009-12-07 22:29 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\Intel 2009-12-07 22:29 . 2009-12-07 22:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Intel 2009-12-07 22:29 . 2009-12-07 22:29 -------- d-----w- c:\documents and settings\ASSIA\Application Data\Intel 2009-12-07 22:29 . 2009-12-09 18:25 -------- dc----w- c:\windows\system32\DRVSTORE 2009-12-07 22:27 . 2005-05-04 01:43 69632 ----a-w- c:\windows\Alcmtr.exe 2009-12-07 22:27 . 2009-12-08 06:55 -------- d-----w- c:\documents and settings\Default User\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150060} 2009-12-07 22:27 . 2009-12-08 06:55 -------- d-----w- c:\documents and settings\Default User\Local Settings\Application Data\ApplicationHistory 2009-12-07 22:27 . 2009-12-08 06:55 -------- d-----w- c:\documents and settings\Default User\Local Settings\Application Data\Adobe 2009-12-07 22:27 . 2006-06-08 11:51 137 ----a-w- c:\documents and settings\Default User\Local Settings\Application Data\fusioncache.dat . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-12-22 16:37 . 2006-06-08 12:30 -------- d--h--w- c:\program files\InstallShield Installation Information 2009-12-16 11:09 . 2006-06-08 11:28 528810 ----a-w- c:\windows\system32\perfh00C.dat 2009-12-16 11:09 . 2006-06-08 11:28 92308 ----a-w- c:\windows\system32\perfc00C.dat 2009-12-15 10:43 . 2009-12-08 12:14 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help 2009-12-12 11:59 . 2009-12-08 13:02 -------- d-----w- c:\program files\Microsoft SQL Server 2009-12-12 11:47 . 2009-12-08 12:19 -------- d-----w- c:\program files\MSBuild 2009-12-12 11:47 . 2009-12-12 11:47 -------- d-----w- c:\program files\Reference Assemblies 2009-12-08 12:20 . 2009-12-08 12:20 -------- d-----w- c:\program files\Microsoft Works 2009-12-08 12:18 . 2009-12-08 12:18 -------- d-----w- c:\program files\Microsoft.NET 2009-12-08 12:12 . 2009-12-07 22:28 -------- d-----w- c:\documents and settings\ASSIA\Application Data\toshiba 2009-12-08 12:10 . 2006-06-09 06:21 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared 2009-12-08 12:10 . 2006-06-09 06:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec 2009-12-08 12:10 . 2006-06-09 06:21 -------- d-----w- c:\program files\Symantec 2009-12-08 07:07 . 2006-06-08 11:40 -------- d-----w- c:\program files\Services en ligne 2009-12-08 07:06 . 2006-06-12 12:59 -------- d---a-w- c:\program files\Offre Wanadoo 2009-12-08 07:05 . 2006-06-08 11:42 -------- d-----w- c:\program files\microsoft frontpage 2009-12-08 07:05 . 2006-06-08 12:41 -------- d-----w- c:\program files\ltmoh 2009-12-08 07:05 . 2006-06-08 12:05 -------- d-----w- c:\program files\Java 2009-12-08 07:05 . 2006-06-09 05:29 -------- d-----w- c:\program files\InterVideo 2009-12-08 07:03 . 2006-06-08 12:05 -------- d-----w- c:\program files\Fichiers communs\Java 2009-12-08 07:03 . 2006-06-08 11:49 -------- d-----w- c:\program files\Fichiers communs\InstallShield 2009-12-08 06:55 . 2006-06-08 11:48 -------- d-----w- c:\documents and settings\All Users\Application Data\SBSI 2009-12-08 06:55 . 2009-12-07 22:28 -------- d-----w- c:\documents and settings\ASSIA\Application Data\Sonic 2009-12-08 06:55 . 2009-12-07 22:28 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\toshiba 2009-12-08 06:55 . 2009-12-07 22:28 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\Symantec 2009-12-08 06:55 . 2009-12-07 22:28 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\Sonic 2009-12-08 06:55 . 2006-06-09 06:31 -------- d-----w- c:\documents and settings\Administrateur\Application Data\Sonic 2009-12-08 06:55 . 2006-06-09 05:27 -------- d-----w- c:\documents and settings\Administrateur\Application Data\toshiba 2009-12-08 00:50 . 2006-06-09 05:34 -------- d-----w- c:\program files\Sonic 2009-12-07 22:42 . 2006-06-08 12:33 -------- d-----w- c:\program files\Toshiba 2009-12-07 22:30 . 2009-12-07 22:30 0 --sha-r- c:\windows\system32\drivers\TOSHIBA_Satellite Pro A120_04342-FR_PSAC1E-04X01.MRK 2009-12-07 22:29 . 2006-06-08 12:26 -------- d-----w- c:\program files\Intel 2009-12-07 22:27 . 2006-06-08 12:30 -------- d-----w- c:\program files\Realtek 2009-10-29 05:20 . 2006-06-08 11:28 672768 ----a-w- c:\windows\system32\wininet.dll 2009-10-21 06:03 . 2006-06-08 11:27 75776 ----a-w- c:\windows\system32\strmfilt.dll 2009-10-21 06:03 . 2006-06-08 11:27 25088 ----a-w- c:\windows\system32\httpapi.dll 2009-10-20 14:58 . 2004-08-03 23:00 263552 ----a-w- c:\windows\system32\drivers\http.sys 2009-10-13 10:52 . 2006-06-08 11:27 267776 ----a-w- c:\windows\system32\oakley.dll 2009-10-12 13:52 . 2006-06-08 11:27 69632 ----a-w- c:\windows\system32\raschap.dll 2009-10-12 13:52 . 2006-06-08 11:27 113152 ----a-w- c:\windows\system32\rastls.dll 2009-03-21 14:20 . 2006-06-08 11:27 159280 --sha-r- c:\windows\system32\auaaneq.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ares"="c:\program files\Ares\Ares.exe" [2009-02-03 1004544] "Google Update"="c:\documents and settings\ASSIA\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2009-12-26 135664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CFSServ.exe"="CFSServ.exe -NoClient" [X] "000StTHK"="000StTHK.exe" [2001-06-23 24576] "SkyTel"="SkyTel.EXE" [2006-04-24 1448960] "00THotkey"="c:\windows\system32\00THotkey.exe" [2006-05-18 253952] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "HonorAutoRunSetting"= 0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "HonorAutoRunSetting"= 0 (0x0) [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Service Manager.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Service Manager.lnk backup=c:\windows\pss\Service Manager.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CFSServ.exe] CFSServ.exe -NoClient [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ThpSrv] thpsrv [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG] 2006-03-04 02:51 88204 ----a-w- c:\windows\agrsmmsg.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] 2005-05-04 01:43 69632 ----a-w- c:\windows\Alcmtr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxhkcmd] 2006-03-23 20:13 77824 ----a-w- c:\windows\system32\hkcmd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxpers] 2006-03-23 20:17 118784 ----a-w- c:\windows\system32\igfxpers.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxtray] 2006-03-23 20:17 94208 ----a-w- c:\windows\system32\igfxtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless] 2005-11-28 11:41 602182 ----a-w- c:\program files\Intel\Wireless\Bin\iFrmewrk.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelZeroConfig] 2005-12-05 12:37 667718 ----a-w- c:\program files\Intel\Wireless\Bin\ZCfgSvc.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LtMoh] 2006-03-04 02:51 184320 ------w- c:\program files\ltmoh\ltmoh.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] 2006-05-09 20:53 16207360 ----a-w- c:\windows\RTHDCPL.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmoothView] 2005-05-17 07:24 118784 ----a-w- c:\program files\Toshiba\Utilitaire de zoom TOSHIBA\SmoothView.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TFNF5] 2006-04-11 01:14 622592 ----a-w- c:\windows\system32\TFNF5.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TosHKCW.exe] 2005-05-17 09:42 49152 ----a-w- c:\program files\Toshiba\Wireless Hotkey\TosHKCW.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TouchED] 2005-09-07 12:25 98304 ----a-w- c:\program files\Toshiba\TouchED\TouchED.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPSMain] 2006-05-19 11:53 299008 ----a-w- c:\windows\system32\TPSMain.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TPSODDCtl] 2006-05-19 11:53 102400 ----a-w- c:\windows\system32\TPSODDCtl.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Toshiba\\ConfigFree\\CFXFER.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\WINDOWS\\system32\\javaw.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\wamp\\bin\\apache\\Apache2.2.11\\bin\\httpd.exe"= "c:\\Program Files\\Ares\\Ares.exe"= "c:\\oracle\\ora92\\Apache\\Apache\\Apache.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "4948:TCP"= 4948:TCP:vqson R0 Thpdrv;TOSHIBA HDD Protection Driver;c:\windows\system32\drivers\thpdrv.sys [27/12/2004 21:31 16384] R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;c:\windows\system32\drivers\Thpevm.sys [13/11/2004 10:24 6144] S2 lwwvzhcif;Support Driver;c:\windows\system32\svchost.exe -k netsvcs [08/06/2006 11:27 14336] S2 OracleServiceORACLEDB;OracleServiceORACLEDB;c:\oracle\ora92\bin\ORACLE.EXE ORACLEDB --> c:\oracle\ora92\bin\ORACLE.EXE ORACLEDB [?] S3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [09/06/2006 05:39 35968] S3 OracleOraHome92Agent;OracleOraHome92Agent;c:\oracle\ora92\bin\agntsrvc.exe [26/04/2002 17:29 28944] S3 OracleOraHome92HTTPServer;OracleOraHome92HTTPServer;c:\oracle\ora92\Apache\Apache\Apache.exe [18/04/2002 22:02 4096] S3 OracleOraHome92SNMPPeerEncapsulator;OracleOraHome92SNMPPeerEncapsulator;c:\oracle\ora92\bin\encsvc.exe [13/02/2002 08:23 187392] S3 OracleOraHome92SNMPPeerMasterAgent;OracleOraHome92SNMPPeerMasterAgent;c:\oracle\ora92\bin\agntsvc.exe [13/02/2002 08:23 254464] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs lwwvzhcif . ------- Examen supplémentaire ------- . IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\documents and settings\ASSIA\Application Data\Mozilla\Firefox\Profiles\yr6e9smc.default\ FF - plugin: c:\documents and settings\ASSIA\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava11.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava12.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava13.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava14.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava32.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJPI150_06.dll FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPOJI610.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ . - - - - ORPHELINS SUPPRIMES - - - - MSConfigStartUp-NDSTray - NDSTray.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-12-26 12:28 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\OracleOraHome92PagingServer] "ImagePath"="c:\oracle\ora92/bin/pagntsrv.exe" [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\OracleOraHome92TNSListener] "ImagePath"="c:\oracle\ora92\BIN\TNSLSNR " [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\lwwvzhcif] "ServiceDll"="c:\windows\system32\auaaneq.dll" . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'explorer.exe'(4008) c:\windows\system32\msi.dll . Heure de fin: 2009-12-26 12:31:02 ComboFix-quarantined-files.txt 2009-12-26 12:31 Avant-CF: 63 619 137 536 octets libres Après-CF: 63 777 759 232 octets libres WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect /forceresetreg - - End Of File - - 03BE95DD6EE60D26D16D540F177AE797
-
-
Contributeur sécuritécolle un rapport avec dr web
https://www.commentcamarche.net/telecharger/securite/7749-dr-web-cureit/ -
...
-
Contributeur sécuritéici
https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/33668.html
si cela passe pas
colle un rapport avec
bit defender free
https://www.01net.com/telecharger/windows/Securite/antivirus-antitrojan/fiches/29063.html-
aucun des deux exe ne s'ouvre..(voila ce qu'il m'affiche: [http://www.cijoint.fr/cjlink.php?file=cj200912/cijcaqUSk5.jpg
D'ou vient ce probleme?!
Les liens qui s'ouvrent pas c'est lorsque je veux telecharger un logiciel, il me retourne page introuvable et aussi le site espaceetudiant de mon ecole, lorsque je m'authentifie il m'affiche une erreur (c'est pas login et password incorrecte mais plutot un probleme de proxy, mais moi j'utilise pas de proxy)
Avez-vous une idée??
-
-
Contributeur sécuritétransfère par une clé usb les deux logiciels et colle les rapports avec
-
Vous ne me repondez toujours pas à ma question, je crois pas que j'ai un virus aprés le marwarebyte scan , si ce n'est pas le forum convenient, dites le moi.
Merci à vous -
Contributeur sécuritédr web et bitdefender permettront de voir si tu es infecté
sinon si tu fais cela depuis une école peut etre que tu n'as pas les droits administrateur et que certains sites sont bloqués -
non non, c'est mon reseau et normalement ces sites doivent etre affiché, car dans mon 2eme pc tout marche bien
-
Bonjour,
je me permet de m'imiscer dans la discussion, je n'ai pas lu toutes les réponses, mais concernant le problème de mise à jour d'antivir, j'ai connu ça aussi.
j'avais mis un message sur ce forum et j'ai eu une réponse qui m'a été très utile pour mettre à jour antiivr et depuis pas de problème, antivir fonctionne bien.
voici ce que l'on m'a conseillé, si ça peut aider:
le serveur de mise à jour avira ayant quelque soucis, utilises ce tuto pour la faire manuellement :
•Tuto mise à jour manuel d’avira :
http://www.libellules.ch/
-
-
Contributeur sécuritéla mise à jour manuelle d'antivir et parfois utile . Tu peux nous coller les rapports dr web et bitdefender free?
-
Re,
SVP pour le Dr web , je lance le scan sans le mettre à jour?
je fais analyse rapide ou complet? -
Pour Dr. web , voila ce qu'il a donnée :
auaaneq.dll C:\WINDOWS\system32 Win32.HLLW.Shadow.based Supprimé.
- 1
- 2
Suivant
