|
|
|
|
Bonjour,
Je voulais télécharger un logiciel pour envoyer plusieurs message à la fois, mes je me suis fait infecter par un virus.
Comme antivirus j'avais nod32, mes sa ma redemarrer mon pc et Nod32 ne se lançais pas me même temps comme d'habitude,lorsq'ue que j'ai essayer de le lancer sa ma mit "n'est pas une aplication valide".
J'ai aussi "Malwarebytes' Anti-Malware" mes il se bloque pendant un bout de temps....
J'ai essayer de démarrer en mode sans échec mais sa me mets un écran bleu pourtant avant sa marcher..
Pouvez vous m'aidez svp merci.
Configuration: Windows XP Opera 9.63
Salut,
|
Voila le raport.
# [ FindyKill V4.714 - Scan ] ############## \\\\\\\\\\\\\\\\\\\\ [ Processus actifs ] /////////////////// C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\Administrateur\Application Data\drivers\winupgro.exe C:\WINDOWS\Explorer.exe C:\Program Files\Opera\opera.exe C:\Documents and Settings\Administrateur\Application Data\m\flec006.exe C:\Documents and Settings\Administrateur\Application Data\drivers\downld\1181078.exe \\\\\\\\\\\\\\\\\\ [ Processus infectieux stoppés ] /////////////////// "C:\Documents and Settings\Administrateur\Application Data\drivers\winupgro.exe" (1428) "C:\Documents and Settings\Administrateur\Application Data\m\flec006.exe" (1048) "C:\Documents and Settings\Administrateur\Application Data\drivers\downld\1181078.exe" (380) \\\\\\\\\\\\\\\\\\ [ Fichiers/Dossiers infectieux ] /////////////////// ################## [ C:\ ] ################## [ C:\WINDOWS ] ################## [ C:\WINDOWS\Prefetch ] ################## [ C:\WINDOWS\system32 ] Found ! [22/01/2009 16:30] - C:\WINDOWS\system32\mdelk.exe Found ! [22/01/2009 16:30] - C:\WINDOWS\system32\wintems.exe ################## [ C:\WINDOWS\system32\drivers ] ################## [ C:\Documents and Settings\Administrateur\Application Data ] Found ! [22/01/2009 16:21] - "C:\Documents and Settings\Administrateur\Application Data\m\flec006.exe" Found ! [22/01/2009 16:22] - "C:\Documents and Settings\Administrateur\Application Data\m\list.oct" Found ! [22/01/2009 16:23] - "C:\Documents and Settings\Administrateur\Application Data\m\data.oct" Found ! [22/01/2009 16:23] - "C:\Documents and Settings\Administrateur\Application Data\m\srvlist.oct" Found ! [22/01/2009 16:33] - "C:\Documents and Settings\Administrateur\Application Data\m\shared" Found ! [22/01/2009 16:23] - "C:\Documents and Settings\Administrateur\Application Data\m" Found ! [22/01/2009 16:01] - "C:\Documents and Settings\Administrateur\Application Data\drivers" Found ! [22/01/2009 16:13] - "C:\Documents and Settings\Administrateur\Application Data\drivers\srosa2.sys" Found ! [22/01/2009 16:13] - "C:\Documents and Settings\Administrateur\Application Data\drivers\wfsintwq.sys" Found ! [19/04/2006 10:01] - "C:\Documents and Settings\Administrateur\Application Data\drivers\winupgro.exe" Found ! [22/01/2009 16:31] - "C:\Documents and Settings\Administrateur\Application Data\drivers\downld" ################## [ C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp ] \\\\\\\\\\\\\\\\\\ [ Registre / Startup ] /////////////////// [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run] ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater= <NO NAME>= [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run] egui="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice [HKEY_CURRENT_USER\software\local appwizard-generated applications\egui] [HKEY_CURRENT_USER\software\local appwizard-generated applications\install] [HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro] \\\\\\\\\\\\\\\\\\ [ Registre / Clés infectieuses ] /////////////////// Found ! - HKEY_USERS\S-1-5-21-1482476501-813497703-1957994488-500\Software\Local AppWizard-Generated Applications\winupgro Found ! - HKEY_USERS\S-1-5-21-1482476501-813497703-1957994488-500\Software\bisoft Found ! - HKEY_USERS\S-1-5-21-1482476501-813497703-1957994488-500\Software\FFC Found ! - HKEY_USERS\S-1-5-21-1482476501-813497703-1957994488-500\Software\FirtR Found ! - HKEY_USERS\S-1-5-21-1482476501-813497703-1957994488-500\Software\MuleAppData Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s Found ! - HKEY_CURRENT_USER\Software\bisoft Found ! - HKEY_CURRENT_USER\Software\FirtR Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | drvsyskit Found ! - [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] | mule_st_key /!\ Infection active : HKLM\SYSTEM\...\Services\srosa -> Start = 0x1 /!\ Infection active : HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1 \\\\\\\\\\\\\\\\\\ [ Etat / Services ] /////////////////// # Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot /!\ Mode sans echec non fonctionnel !! # Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal /!\ Mode sans echec non fonctionnel !! # Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network /!\ Mode sans echec non fonctionnel !! # Services : [ Auto=2 / Demande=3 / Désactivé=4 ] /!\ Ndisuio - # Type de démarrage = 4 EapHost - # Type de démarrage = 3 /!\ Ip6Fw - # Type de démarrage = 4 /!\ SharedAccess - # Type de démarrage = 4 /!\ wuauserv - # Type de démarrage = 4 /!\ wscsvc - # Type de démarrage = 4 \\\\\\\\\\\\\\\\\\ [ Recherche dans supports amovibles] /////////////////// # Informations : C: - Lecteur fixe G: - Lecteur amovible # presence des fichiers : \\\\\\\\\\\\\\\\\\ [ Registre / Mountpoint2 ] /////////////////// -> Not found ! ################## [ ! Fin du rapport # FindyKill V4.714 ! ] |
Infection Bagle.
|
Voila pour le deuxième raport:
# [ FindyKill V4.714 - Scan ] ############## \\\\\\\\\\\\\\\\\\\\ [ Processus actifs ] /////////////////// C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Opera\opera.exe \\\\\\\\\\\\\\\\\\ [ Fichiers/Dossiers infectieux ] /////////////////// ################## [ C:\ ] ################## [ C:\WINDOWS ] ################## [ C:\WINDOWS\Prefetch ] ################## [ C:\WINDOWS\system32 ] ################## [ C:\WINDOWS\system32\drivers ] ################## [ C:\Documents and Settings\Administrateur\Application Data ] ################## [ C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp ] \\\\\\\\\\\\\\\\\\ [ Registre / Startup ] /////////////////// [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run] ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater= <NO NAME>= [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run] egui="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice \\\\\\\\\\\\\\\\\\ [ Registre / Clés infectieuses ] /////////////////// \\\\\\\\\\\\\\\\\\ [ Etat / Services ] /////////////////// # Services : [ Auto=2 / Demande=3 / Désactivé=4 ] Ndisuio - # Type de démarrage = 3 EapHost - # Type de démarrage = 2 Ip6Fw - # Type de démarrage = 2 SharedAccess - # Type de démarrage = 2 wuauserv - # Type de démarrage = 2 /!\ wscsvc - # Type de démarrage = 4 \\\\\\\\\\\\\\\\\\ [ Recherche dans supports amovibles] /////////////////// # Informations : C: - Lecteur fixe G: - Lecteur amovible # presence des fichiers : \\\\\\\\\\\\\\\\\\ [ Registre / Mountpoint2 ] /////////////////// -> Not found ! ################## [ ! Fin du rapport # FindyKill V4.714 ! ] |
---> Réinstalle les applications qui ont été infectées (Antivirus...).
|
Voici le contenu du log.txt
Logfile of random's system information tool 1.05 (written by random/random) Run by **** at 2009-01-22 18:29:52 Microsoft Windows XP Professionnel Service Pack 3 System drive C: has 29 GB (38%) free of 76 GB Total RAM: 254 MB (19% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:30:38, on 22/01/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\WINDOWS\Explorer.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Opera\opera.exe C:\Documents and Settings\Administrateur\Bureau\RSIT.exe C:\Program Files\trend micro\Bruno.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.winlsd.org/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: Shell=Explorer.exe O1 - Hosts: 255.255.255.255 broadcasthost O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKLM\..\Policies\Explorer\Run: [DirectX For Microsoft® Windows] C:\WINDOWS\system32\fservice.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [WinLSD_SP3] %systemroot%\LSD\end.cmd (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O20 - AppInit_DLLs: umzilh.dll O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O24 - Desktop Component 1: (no name) - file://localhost/C:/Documents%20and%20Settings/Administrateur/Bureau/Paris_by_Fabrizio_Verardo/paris.swf -- End of file - 4566 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\gwynhkxr.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2008-07-01 1447168] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "DirectX For Microsoft® Windows"=C:\WINDOWS\system32\fservice.exe [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe [2002-07-17 90112] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray] C:\WINDOWS\system32\igfxtray.exe [2002-07-17 143360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LClock] C:\Windows\LSD\LClock\lclock.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SystemTray] C:\WINDOWS\system32\SysTray.Exe [2001-08-28 3072] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrateur^Menu Démarrer^Programmes^Démarrage^Hitlog.txt] C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Hitlog.txt [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "srservice"=2 "SharedAccess"=2 "SysmonLog"=2 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="umzilh.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"=NULL [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "ForceClassicControlPanel"=1 "NoSMBalloonTip"=0 "NoStartMenuPinnedList"=1 "NoDriveTypeAutoRun"=145 "NoSMHelp"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" ======File associations====== .bat - edit - .cmd - edit - .inf - open - .ini - open - notepad.exe %1 .js - edit - .reg - edit - .txt - open - notepad.exe %1 .vbs - edit - ======List of files/folders created in the last 1 months====== 2009-01-22 18:29:55 ----D---- C:\Program Files\trend micro 2009-01-22 18:29:52 ----D---- C:\rsit 2009-01-22 18:18:32 ----D---- C:\Program Files\ESET 2009-01-22 17:54:12 ----A---- C:\FindyKill.txt 2009-01-22 16:51:30 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-01-22 16:40:37 ----D---- C:\Program Files\FindyKill 2009-01-20 16:19:55 ----D---- C:\WINDOWS\ShellNew 2009-01-19 16:46:29 ----D---- C:\Documents and Settings\All Users\Application Data\MySQL 2009-01-18 15:36:52 ----D---- C:\Documents and Settings\Administrateur\Application Data\dvdcss 2009-01-17 23:11:42 ----D---- C:\Program Files\MeadCo Neptune 2009-01-17 12:58:29 ----D---- C:\Documents and Settings\Administrateur\Application Data\Thinstall 2009-01-15 18:49:01 ----A---- C:\WINDOWS\system32\b3b94d0d-.txt 2009-01-15 18:43:10 ----D---- C:\Documents and Settings\All Users\Application Data\Babylon 2009-01-15 14:45:31 ----D---- C:\Program Files\AtomixMP3 2009-01-13 13:57:51 ----D---- C:\Program Files\VMware 2009-01-12 16:59:06 ----D---- C:\Program Files\ma-config.com 2009-01-08 12:20:08 ----D---- C:\Documents and Settings\Administrateur\Application Data\AIMP 2009-01-07 02:56:56 ----ASH---- C:\Program Files\desktop.ini 2009-01-06 23:03:01 ----D---- C:\Program Files\iColorFolder 2009-01-06 14:13:23 ----D---- C:\WINDOWS\Media 2009-01-06 14:13:16 ----D---- C:\WINDOWS\%DownloadedProgramFiles% 2009-01-06 14:12:30 ----HDC---- C:\WINDOWS\ie7 2009-01-06 14:10:57 ----N---- C:\WINDOWS\system32\ieframe.dll.mui 2009-01-06 13:56:28 ----N---- C:\WINDOWS\system32\spmsg.dll 2009-01-06 13:55:52 ----D---- C:\WINDOWS\help 2009-01-06 13:55:01 ----D---- C:\WINDOWS\INF 2008-12-29 19:04:31 ----A---- C:\WINDOWS\system32\log_output.txt 2008-12-29 13:35:54 ----A---- C:\WINDOWS\system32\slbmgpg.dll 2008-12-29 13:35:54 ----A---- C:\WINDOWS\system32\iopCOM3.dll 2008-12-29 13:35:54 ----A---- C:\WINDOWS\system32\egdrvins.dll 2008-12-29 13:35:52 ----A---- C:\WINDOWS\system32\WinWorX.dll 2008-12-28 17:19:13 ----A---- C:\WINDOWS\system32\LAYOUT.DLL 2008-12-28 17:08:34 ----A---- C:\WINDOWS\IsUn040c.exe 2008-12-26 11:37:08 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage ======List of files/folders modified in the last 1 months====== 2009-01-22 18:29:55 ----RD---- C:\Program Files 2009-01-22 18:23:05 ----D---- C:\WINDOWS 2009-01-22 18:20:44 ----D---- C:\WINDOWS\Temp 2009-01-22 18:20:16 ----SHD---- C:\WINDOWS\Installer 2009-01-22 18:20:06 ----D---- C:\WINDOWS\system32\drivers 2009-01-22 18:20:02 ----D---- C:\WINDOWS\system32\CatRoot2 2009-01-22 16:54:05 ----D---- C:\WINDOWS\system32 2009-01-22 16:54:05 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-01-22 16:52:54 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-01-22 15:59:32 ----D---- C:\Program Files\eMule 2009-01-21 17:35:25 ----D---- C:\Program Files\Windows Media Connect 2 2009-01-21 16:39:43 ----D---- C:\Documents and Settings\Administrateur\Application Data\uTorrent 2009-01-19 18:45:11 ----A---- C:\WINDOWS\NeroDigital.ini 2009-01-17 21:13:40 ----D---- C:\Program Files\StuffPlug3 2009-01-17 15:41:33 ----D---- C:\Documents and Settings\Administrateur\Application Data\Adobe 2009-01-17 15:41:32 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe 2009-01-17 15:41:31 ----D---- C:\Program Files\Adobe 2009-01-17 15:38:36 ----D---- C:\Program Files\Fichiers communs\Adobe 2009-01-17 15:38:18 ----D---- C:\Program Files\Fichiers communs 2009-01-17 13:13:00 ----D---- C:\WINDOWS\system32\config 2009-01-16 22:20:02 ----A---- C:\WINDOWS\iun6002.exe 2009-01-16 16:45:51 ----D---- C:\WINDOWS\Cursors 2009-01-15 20:38:07 ----D---- C:\WINDOWS\Prefetch 2009-01-15 18:43:09 ----SD---- C:\WINDOWS\Tasks 2009-01-15 16:50:02 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2009-01-15 14:13:44 ----D---- C:\Program Files\Opera 2009-01-12 16:59:07 ----D---- C:\Documents and Settings\All Users\Application Data\ma-config.com 2009-01-11 20:42:24 ----D---- C:\WINDOWS\Fonts 2009-01-08 11:15:26 ----D---- C:\Program Files\Fichiers communs\GTK 2009-01-07 02:28:04 ----HD---- C:\LG3G 2009-01-06 18:27:19 ----D---- C:\Documents and Settings 2009-01-06 14:29:15 ----D---- C:\WINDOWS\system32\CatRoot 2009-01-06 14:13:23 ----D---- C:\Program Files\Internet Explorer 2009-01-06 14:13:16 ----D---- C:\WINDOWS\system32\dllcache 2009-01-06 13:56:30 ----D---- C:\Program Files\Windows Media Player 2009-01-05 17:17:08 ----A---- C:\WINDOWS\system32\pgdfgsvc.exe 2008-12-27 09:55:07 ----SH---- C:\boot.ini 2008-12-27 09:55:07 ----N---- C:\WINDOWS\win.ini 2008-12-27 09:55:07 ----N---- C:\WINDOWS\system.ini 2008-12-26 19:20:26 ----D---- C:\Documents and Settings\Administrateur\Application Data\vlc ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 easdrv;easdrv; C:\WINDOWS\system32\DRIVERS\easdrv.sys [2008-07-01 53256] R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2008-07-01 34312] R1 FileDisk;FileDisk; C:\WINDOWS\system32\drivers\FileDisk.sys [2005-10-16 12928] R1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\system32\DRIVERS\p3.sys [2008-06-15 46848] R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228] R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632] R2 eamon;EAMON; C:\WINDOWS\system32\DRIVERS\eamon.sys [2008-07-01 39944] R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2008-09-22 43520] R3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 i81x;i81x; C:\WINDOWS\system32\DRIVERS\i81xnt5.sys [2002-07-23 161020] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-06-01 12288] R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 VIAudio;Vinyl AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys [2007-06-27 207488] S1 lnsfw1;lnsfw1; C:\WINDOWS\system32\drivers\lnsfw1.sys [] S3 ac97intc;Service d'installation du pilote audio Intel(r) 82801 (WDM); C:\WINDOWS\system32\drivers\ac97intc.sys [2001-08-17 96256] S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-09-24 4122368] S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [] S3 Egatebus;Egatebus; C:\WINDOWS\system32\drivers\egatebus.sys [] S3 Egaterdr;Egaterdr; C:\WINDOWS\system32\drivers\egaterdr.sys [] S3 gameport;FM801 PCI Joystick; C:\WINDOWS\system32\DRIVERS\fmjoy.sys [] S3 iAimFP0;iAimFP0; C:\WINDOWS\system32\DRIVERS\wADV01nt.sys [2002-07-23 12415] S3 iAimFP1;iAimFP1; C:\WINDOWS\system32\DRIVERS\wADV02NT.sys [2002-07-23 12127] S3 iAimFP2;iAimFP2; C:\WINDOWS\system32\DRIVERS\wADV05NT.sys [2002-07-23 11775] S3 iAimFP3;iAimFP3; C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys [2002-07-23 12063] S3 iAimFP4;iAimFP4; C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys [2002-07-23 19455] S3 iAimFP5;iAimFP5; C:\WINDOWS\system32\DRIVERS\wADV07nt.sys [2002-07-23 11807] S3 iAimFP6;iAimFP6; C:\WINDOWS\system32\DRIVERS\wADV08nt.sys [2002-07-23 11295] S3 iAimFP7;iAimFP7; C:\WINDOWS\system32\DRIVERS\wADV09nt.sys [2002-07-23 11871] S3 iAimFP8;iAimFP8; C:\WINDOWS\system32\DRIVERS\wADV11nt.sys [2002-07-23 11935] S3 iAimTV0;iAimTV0; C:\WINDOWS\system32\DRIVERS\wATV01nt.sys [2002-07-23 29311] S3 iAimTV1;iAimTV1; C:\WINDOWS\system32\DRIVERS\wATV02NT.sys [2002-07-23 19551] S3 iAimTV3;iAimTV3; C:\WINDOWS\system32\DRIVERS\wATV04nt.sys [2002-07-23 33599] S3 iAimTV4;iAimTV4; C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys [2002-07-23 23615] S3 iAimTV5;iAimTV5; C:\WINDOWS\system32\DRIVERS\wATV10nt.sys [2002-07-23 25471] S3 iAimTV6;iAimTV6; C:\WINDOWS\system32\DRIVERS\wATV06nt.sys [2002-07-23 22271] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys [] S3 qcusbmdm;Qualcomm Proprietary USB Driver (PID 3197); C:\WINDOWS\system32\DRIVERS\qcusbmdm.sys [2003-03-11 59632] S3 qcusbser;Qualcomm Diagnostic Port 3197; C:\WINDOWS\system32\DRIVERS\qcusbser.sys [2003-03-11 59632] S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416] S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840] S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632] S3 wdm_fm801;FM801 PCI Audio (WDM); C:\WINDOWS\system32\drivers\fm801.sys [] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 Sr;Pilote de filtre de restauration système; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73600] S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-28 12032] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 ekrn;Eset Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2008-07-01 468224] S2 EsetNod32Fix;Nod32 AV; C:\WINDOWS\Regedit.exe [2008-04-14 153088] S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240] S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2008-07-01 19200] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-12-17 654848] S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2008-12-19 195752] S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-24 918016] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] S4 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328] -----------------EOF----------------- Et voila pour info.txt info.txt logfile of random's system information tool 1.05 2009-01-22 18:30:52
======Uninstall list======
7-Zip 4.62-->"C:\Program Files\7-Zip\Uninstall.exe"
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->C:\Program Files\Fichiers communs\Adobe\Installers\32e9033392a51340b32fdc6ad893ab7\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{BF794769-8875-4E01-B7BE-E00104604F4A}
Adobe Setup-->MsiExec.exe /I{926DEB4E-2B0A-4C5C-AE4A-BF6C06949702}
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
AIMP2-->C:\Program Files\AIMP2\Uninstall.exe
AtomixMP3 v2.3 Trial-->C:\PROGRA~1\ATOMIX~1\UNWISE.EXE C:\PROGRA~1\ATOMIX~1\INSTALL.LOG
Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"
BitPim 1.0.6-->"C:\Program Files\BitPim\unins000.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
ESET NOD32 Antivirus-->MsiExec.exe /I{3407FD83-0A2F-475E-BE94-34F1FA342C84}
Eset-NOD32: Fix Dasumo v3.2 hasta el 2038-->C:\Program Files\ESET\uninstall.exe
FindyKill-->C:\Program Files\FindyKill\Uninstal.exe
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Free Mp3 Wma Converter V 1.8.0-->"C:\Program Files\Free Audio Pack\unins000.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
iColorFolder-->C:\Program Files\iColorFolder\uninstall.exe
Intel Application Accelerator-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9984DF60-1C5B-11D3-ACA1-908A4FC10801}\Setup.exe" -INTELUNINST
Intel(R) 810/810E/815/815E/815EM Chipset Graphics Driver Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8A708DD8-A5E6-11D4-A706-000629E95E20}\Setup.exe" -inteluninstall
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LG PC Suite-->C:\Program Files\InstallShield Installation Information\{993960EE-CA4D-443F-8F88-E24260DD5FD2}\setup.exe -runfromtemp -l0x040c -removeonly
LG USB Modem driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x40c LG -removeonly
Ma-Config.com-->MsiExec.exe /X{EC7FE2ED-F305-41B7-90B8-3DAE9E35307A}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{CC1DB186-550F-3CFE-A2A9-EBA5E5A34BC1}
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Nero 6 Ultra Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
OpenOffice.org 3.0-->MsiExec.exe /I{6860B340-530D-46B3-91F8-1AE1F70F7C33}
Opera 9.63-->MsiExec.exe /X{1BC4026B-1957-4514-9058-2B542557F143}
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PowerQuest PartitionMagic 8.0 Demo-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}
Pro Evolution Soccer 5-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{85C3FA3C-4832-4204-B21E-168E4920936A} /l1036
SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c -removeonly
StuffPlug 3-->C:\Program Files\StuffPlug3\Uninstall.exe
VIA Gestionnaire de périphériques de plate-forme-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
VIA Rhine-Family Fast-Ethernet Adapter-->Rundll32.exe vuins32.dll,vuins32Ex $Rhine $VIA
VLC media player 0.9.6-->C:\Program Files\VideoLAN\VLC\uninstall.exe
VMware ThinApp-->MsiExec.exe /X{56F612F8-EC80-4E17-9249-2385B6755A31}
VST Bridge 1.1-->"C:\Program Files\Audacity\Plug-ins\VST Bridge\unins000.exe"
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
======Hosts File======
127.0.0.1 localhost
127.0.0.1 ___id___.c.mystat-in.net
127.0.0.1 _216_.justcounter.com
127.0.0.1 _217_.justcounter.com
127.0.0.1 _218_.justcounter.com
127.0.0.1 0.actualization.cn
127.0.0.1 0.r.msn.com
127.0.0.1 00.devoid.us
127.0.0.1 000dom.revenuedirect.com
127.0.0.1 000-search.net
Securitycenter WMI appears to be broken
System event log
Computer Name: ADMINISTRATEUR
Event Code: 59
Message: Resolve Partial Assembly a échoué pour Microsoft.VC80.MFCLOC.
Message d'erreur de référence : L'assemblage référencé n'est pas installé sur votre système.
.
Record Number: 2087
Source Name: SideBySide
Time Written: 20081212204133.000000+060
Event Type: erreur
User:
Computer Name: ADMINISTRATEUR
Event Code: 32
Message: L'assemblage dépendant Microsoft.VC80.MFCLOC ne peut pas être trouvé. La dernière erreur était L'assemblage référencé n'est pas installé sur votre système.
Record Number: 2086
Source Name: SideBySide
Time Written: 20081212204133.000000+060
Event Type: erreur
User:
Computer Name: ADMINISTRATEUR
Event Code: 59
Message: Generate Activation Context a échoué pour C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL.
Message d'erreur de référence : Opération réussie.
.
Record Number: 2085
Source Name: SideBySide
Time Written: 20081212204133.000000+060
Event Type: erreur
User:
Computer Name: ADMINISTRATEUR
Event Code: 59
Message: Resolve Partial Assembly a échoué pour Microsoft.VC80.MFCLOC.
Message d'erreur de référence : L'assemblage référencé n'est pas installé sur votre système.
.
Record Number: 2084
Source Name: SideBySide
Time Written: 20081212204133.000000+060
Event Type: erreur
User:
Computer Name: ADMINISTRATEUR
Event Code: 32
Message: L'assemblage dépendant Microsoft.VC80.MFCLOC ne peut pas être trouvé. La dernière erreur était L'assemblage référencé n'est pas installé sur votre système.
Record Number: 2083
Source Name: SideBySide
Time Written: 20081212204133.000000+060
Event Type: erreur
User:
Application event log
Computer Name: BRUNO
Event Code: 1000
Message: Les compteurs de performances pour le service MSDTC (MSDTC) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 5
Source Name: LoadPerf
Time Written: 20081204224101.000000+060
Event Type: Informations
User:
Computer Name: BRUNO
Event Code: 1000
Message: Les compteurs de performances pour le service TermService (Services Terminal Server) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 4
Source Name: LoadPerf
Time Written: 20081204224057.000000+060
Event Type: Informations
User:
Computer Name: BRUNO
Event Code: 1000
Message: Les compteurs de performances pour le service RemoteAccess (Routage et accès distant) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 3
Source Name: LoadPerf
Time Written: 20081204224011.000000+060
Event Type: Informations
User:
Computer Name: BRUNO
Event Code: 1000
Message: Les compteurs de performances pour le service PSched (PSched) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 2
Source Name: LoadPerf
Time Written: 20081204223946.000000+060
Event Type: Informations
User:
Computer Name: BRUNO
Event Code: 1000
Message: Les compteurs de performances pour le service RSVP (QoS RSVP) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.
Record Number: 1
Source Name: LoadPerf
Time Written: 20081204223931.000000+060
Event Type: Informations
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\Smart Projects\IsoBuster
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 8 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=080a
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"DEVMGR_SHOW_DETAILS"=1
-----------------EOF-----------------
|
---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
|
Destrio5@Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau. Je l'avais déjà ;-) Il na rien détecter, en tout cas merci de ton aide. Petite question à ton avis comment je pourrais faire pour que l'on évite de killer mon antivirus, car un jour j'avais fait un test j'avais mit un trojan sur mon pc, et j'avais mit un mot de passe à nod32,mais rien n'y à fait j'ai quand même réussi à le désactiver (facilement) sans mot de passe,alors que en local il demander un mot de passe...... Aurais tu une petite astuce. Merci |
Anti virus bien à télécharger conseils Cfg virus Disque dur plein sur vista virus résolu Ec.atdmt.com virus Jqs.exe virus Julien pelletier virus Meilleur anti-virus gratuit New folder virus Solow.dll.vbs.dll virus Usb infecte Utorrent virus Virus autorun.inf Virus avast pro Virus bagle Virus dans avast pro Virus imprimante Virus informatique cheval de troie Virus msn
