Bonjour,
désolé pour hier après midi j'ai du m'absenter.
voici le rapport :
List'em by g3n-h@ckm@n 1.0.2.8
updated on 24.08.2009 ::::: 8.00
Microsoft Windows XP [version 5.1.2600]
24/08/2009 14:02:35,23
Nom de l'h“te:
Nom du systŠme d'exploitation: Microsoft Windows XP Professionnel
Version du systŠme: 5.1.2600 Service Pack 2 version 2600
Fabricant du systŠme d'exploitation: Microsoft Corporation
Configuration du systŠme d'exploitation: Station de travail autonome
Type de version du systŠme d'exploitation: Multiprocessor Free
Propri‚taire enregistr‚ÿ:
Organisation enregistr‚eÿ:
Identificateur de produit:
Date d'installation originale: 14/12/2006, 15:34:21
Dur‚e d'activit‚ systŠme: 0 jours, 4 heures, 58 minutes, 41 secondes
Fabricant du systŠme: HP Pavilion 061
ModŠle du systŠme: RF770AA-ABF a1604.fr
Type du systŠme: X86-based PC
Processeur(s): 2 processeur(s) install‚(s).
[01]: x86 Family 15 Model 4 Stepping 9 GenuineIntel ~3065 MHz
[02]: x86 Family 15 Model 4 Stepping 9 GenuineIntel ~3065 MHz
Version du BIOS: HP-CPC - 6000622
R‚pertoire Windows: C:\WINDOWS
R‚pertoire systŠme: C:\WINDOWS\system32
P‚riph‚rique d'amor‡age: \Device\HarddiskVolume1
Option r‚gionale du systŠme: fr;Fran‡ais (France)
ParamŠtres r‚gionaux d'entr‚eÿ: fr;Fran‡ais (France)
Fuseau horaire: N/D
M‚moire physique totale: 959 Mo
M‚moire physique disponible: 287 Mo
M‚moire virtuelle : taille maximale: 2ÿ048 Mo
M‚moire virtuelle : disponible: 2ÿ008 Mo
M‚moire virtuelle : en cours d'utilisation: 40 Mo
Emplacements des fichiers d'‚change: C:\pagefile.sys
Domaine: MSHOME
Serveur d'ouverture de session:
Correctif(s): 420 Corrections install‚es.
[01]: File 1
[02]: File 1
[03]: File 1
[04]: File 1
[05]: File 1
[06]: File 1
[07]: File 1
[08]: File 1
[09]: File 1
[10]: File 1
[11]: File 1
[12]: File 1
[13]: File 1
[14]: File 1
[15]: File 1
[16]: File 1
[17]: File 1
[18]: File 1
[19]: File 1
[20]: File 1
[21]: File 1
[22]: File 1
[23]: File 1
[24]: File 1
[25]: File 1
[26]: File 1
[27]: File 1
[28]: File 1
[29]: File 1
[30]: File 1
[31]: File 1
[32]: File 1
[33]: File 1
[34]: File 1
[35]: File 1
[36]: File 1
[37]: File 1
[38]: File 1
[39]: File 1
[40]: File 1
[41]: File 1
[42]: File 1
[43]: File 1
[44]: File 1
[45]: File 1
[46]: File 1
[47]: File 1
[48]: File 1
[49]: File 1
[50]: File 1
[51]: File 1
[52]: File 1
[53]: File 1
[54]: File 1
[55]: File 1
[56]: File 1
[57]: File 1
[58]: File 1
[59]: File 1
[60]: File 1
[61]: File 1
[62]: File 1
[63]: File 1
[64]: File 1
[65]: File 1
[66]: File 1
[67]: File 1
[68]: File 1
[69]: File 1
[70]: File 1
[71]: File 1
[72]: File 1
[73]: File 1
[74]: File 1
[75]: File 1
[76]: File 1
[77]: File 1
[78]: File 1
[79]: File 1
[80]: File 1
[81]: File 1
[82]: File 1
[83]: File 1
[84]: File 1
[85]: File 1
[86]: File 1
[87]: File 1
[88]: File 1
[89]: File 1
[90]: File 1
[91]: File 1
[92]: File 1
[93]: File 1
[94]: File 1
[95]: File 1
[96]: File 1
[97]: File 1
[98]: File 1
[99]: File 1
[100]: File 1
[101]: File 1
[102]: File 1
[103]: File 1
[104]: File 1
[105]: File 1
[106]: File 1
[107]: File 1
[108]: File 1
[109]: File 1
[110]: File 1
[111]: File 1
[112]: File 1
[113]: File 1
[114]: File 1
[115]: File 1
[116]: File 1
[117]: File 1
[118]: File 1
[119]: File 1
[120]: File 1
[121]: File 1
[122]: File 1
[123]: File 1
[124]: File 1
[125]: File 1
[126]: File 1
[127]: File 1
[128]: File 1
[129]: File 1
[130]: File 1
[131]: File 1
[132]: File 1
[133]: File 1
[134]: File 1
[135]: File 1
[136]: File 1
[137]: File 1
[138]: File 1
[139]: File 1
[140]: File 1
[141]: File 1
[142]: File 1
[143]: File 1
[144]: File 1
[145]: File 1
[146]: File 1
[147]: File 1
[148]: File 1
[149]: File 1
[150]: File 1
[151]: File 1
[152]: File 1
[153]: File 1
[154]: File 1
[155]: File 1
[156]: File 1
[157]: File 1
[158]: File 1
[159]: File 1
[160]: File 1
[161]: File 1
[162]: File 1
[163]: File 1
[164]: File 1
[165]: File 1
[166]: File 1
[167]: File 1
[168]: File 1
[169]: File 1
[170]: File 1
[171]: File 1
[172]: File 1
[173]: File 1
[174]: File 1
[175]: File 1
[176]: File 1
[177]: File 1
[178]: File 1
[179]: File 1
[180]: File 1
[181]: File 1
[182]: File 1
[183]: File 1
[184]: File 1
[185]: File 1
[186]: File 1
[187]: File 1
[188]: File 1
[189]: File 1
[190]: File 1
[191]: File 1
[192]: File 1
[193]: File 1
[194]: File 1
[195]: File 1
[196]: File 1
[197]: File 1
[198]: File 1
[199]: File 1
[200]: Q147222
[201]: KB887998 - QFE
[202]: KB930494 - QFE
[203]: M928366 - Update
[204]: S867460 - Update
[205]: KB900325 - Update
[206]: Q927978
[207]: Q936181
[208]: Q954430
[209]: KB923723 - Update
[210]: KB929399
[211]: KB952069_WM9
[212]: KB973540_WM9L
[213]: KB913800
[214]: KB917734_WMP10
[215]: KB926251
[216]: KB936782_WMP11
[217]: KB939683
[218]: KB954154_WM11
[219]: KB959772_WM11
[220]: KB925398_WMP64
[221]: KB923689
[222]: KB941569
[223]: MSCompPackV1 - Update
[224]: KB873339 - Update
[225]: KB883667 - Update
[226]: KB885250 - Update
[227]: KB885835 - Update
[228]: KB885836 - Update
[229]: KB885884 - Update
[230]: KB886185 - Update
[231]: KB887472 - Update
[232]: KB887742 - Update
[233]: KB887998 - Update
[234]: KB888113 - Update
[235]: KB888302 - Update
[236]: KB888795 - Update
[237]: KB890175 - Update
[238]: KB890859 - Update
[239]: KB891593 - Update
[240]: KB891781 - Update
[241]: KB892050 - Update
[242]: KB893066 - Update
[243]: KB893357 - Update
[244]: KB893756 - Update
[245]: KB893803v2 - Update
[246]: KB896358 - Update
[247]: KB896422 - Update
[248]: KB896423 - Update
[249]: KB896424 - Update
[250]: KB896428 - Update
[251]: KB898461 - Update
[252]: KB899337 - Update
[253]: KB899510 - Update
[254]: KB899587 - Update
[255]: KB899591 - Update
[256]: KB900485 - Update
[257]: KB900725 - Update
[258]: KB901017 - Update
[259]: KB901190 - Update
[2
Carte(s) r‚seau: 2 carte(s) r‚seau install‚e(s).
[01]: Carte r‚seau 1394
Nom de la connexion : Connexion 1394
DHCP activ‚ : Oui
Serveur DHCP : N/D
Adresse(s) IP
[02]: Realtek RTL8139/810x Family Fast Ethernet NIC
Nom de la connexion : Connexion au r‚seau local
tat : Support d‚connect‚
Nom de l'image PIDÿ Nom de la sessio Num‚ro d Utilisation
========================= ====== ================ ======== ============
System Idle Process 0 Console 0 28 Ko
System 4 Console 0 236 Ko
smss.exe 540 Console 0 416 Ko
csrss.exe 604 Console 0 5ÿ308 Ko
winlogon.exe 636 Console 0 22ÿ136 Ko
services.exe 680 Console 0 4ÿ936 Ko
lsass.exe 692 Console 0 2ÿ016 Ko
ati2evxx.exe 860 Console 0 3ÿ388 Ko
svchost.exe 880 Console 0 5ÿ564 Ko
svchost.exe 940 Console 0 4ÿ588 Ko
svchost.exe 1008 Console 0 31ÿ920 Ko
svchost.exe 1080 Console 0 5ÿ056 Ko
svchost.exe 1152 Console 0 3ÿ048 Ko
aswUpdSv.exe 1240 Console 0 248 Ko
ati2evxx.exe 1272 Console 0 3ÿ848 Ko
ashServ.exe 1340 Console 0 35ÿ760 Ko
spoolsv.exe 1624 Console 0 5ÿ708 Ko
svchost.exe 1824 Console 0 3ÿ404 Ko
arservice.exe 1852 Console 0 2ÿ328 Ko
SERVIC~1.EXE 1924 Console 0 2ÿ700 Ko
ehrecvr.exe 1952 Console 0 4ÿ576 Ko
ehSched.exe 1976 Console 0 2ÿ808 Ko
fsbwsys.exe 2032 Console 0 2ÿ668 Ko
FSMA32.EXE 2044 Console 0 1ÿ848 Ko
FSMB32.EXE 192 Console 0 1ÿ696 Ko
FTRTSVC.exe 168 Console 0 1ÿ608 Ko
LSSrvc.exe 400 Console 0 2ÿ488 Ko
FCH32.EXE 608 Console 0 2ÿ392 Ko
HPZipm12.exe 140 Console 0 1ÿ764 Ko
svchost.exe 1140 Console 0 3ÿ824 Ko
FAMEH32.EXE 1164 Console 0 2ÿ324 Ko
svchost.exe 1292 Console 0 4ÿ276 Ko
mcrdsvc.exe 1880 Console 0 3ÿ020 Ko
explorer.exe 2332 Console 0 21ÿ984 Ko
ehtray.exe 2516 Console 0 1ÿ132 Ko
RTHDCPL.EXE 2548 Console 0 5ÿ716 Ko
arpwrmsg.exe 2560 Console 0 1ÿ616 Ko
DMAScheduler.exe 2572 Console 0 9ÿ948 Ko
hpwuSchd2.exe 2624 Console 0 2ÿ592 Ko
realsched.exe 2632 Console 0 668 Ko
jusched.exe 2644 Console 0 4ÿ144 Ko
dllhost.exe 2784 Console 0 6ÿ148 Ko
ashDisp.exe 2996 Console 0 1ÿ752 Ko
DevDetect.exe 3032 Console 0 4ÿ832 Ko
spamihilator.exe 3076 Console 0 368 Ko
TaskBarIcon.exe 3084 Console 0 4ÿ560 Ko
MOM.exe 3276 Console 0 5ÿ536 Ko
ehmsas.exe 3480 Console 0 4ÿ076 Ko
alg.exe 3508 Console 0 3ÿ564 Ko
GoogleToolbarNotifier.exe 3660 Console 0 1ÿ388 Ko
GestionnaireInternet.exe 3940 Console 0 14ÿ016 Ko
ComComp.exe 3960 Console 0 8ÿ820 Ko
TeaTimer.exe 4004 Console 0 91ÿ008 Ko
NMBgMonitor.exe 4016 Console 0 6ÿ532 Ko
msnmsgr.exe 4088 Console 0 4ÿ996 Ko
PollingModule.exe 1000 Console 0 7ÿ960 Ko
MgApp.exe 1460 Console 0 6ÿ484 Ko
msmsgs.exe 1468 Console 0 1ÿ856 Ko
NMIndexStoreSvr.exe 1900 Console 0 12ÿ104 Ko
ALERTM~1.EXE 1780 Console 0 3ÿ384 Ko
GoogleUpdater.exe 1512 Console 0 872 Ko
IMApp.exe 3012 Console 0 2ÿ648 Ko
Watch.exe 3504 Console 0 2ÿ572 Ko
wuauclt.exe 3956 Console 0 4ÿ016 Ko
NMIndexingService.exe 2708 Console 0 6ÿ436 Ko
CCC.exe 1180 Console 0 6ÿ060 Ko
jucheck.exe 472 Console 0 5ÿ368 Ko
kbd.exe 2696 Console 0 5ÿ424 Ko
hpsysdrv.exe 3688 Console 0 2ÿ708 Ko
IEXPLORE.EXE 3536 Console 0 51ÿ904 Ko
ytbb.exe 740 Console 0 3ÿ564 Ko
rundll32.exe 1032 Console 0 9ÿ804 Ko
List_Killem.exe 2024 Console 0 5ÿ276 Ko
cmd.exe 3844 Console 0 1ÿ672 Ko
wuauclt.exe 4012 Console 0 6ÿ680 Ko
wscntfy.exe 3392 Console 0 2ÿ260 Ko
wmiprvse.exe 4068 Console 0 7ÿ944 Ko
wmiprvse.exe 2640 Console 0 4ÿ796 Ko
tasklist.exe 2608 Console 0 4ÿ420 Ko
Infections :
==========
¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents :
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"
"C:\Program Files\Mozilla Firefox\components\nsBrowserOpt.dll"
"C:\WINDOWS\kb913800.exe"
"C:\WINDOWS\pack.epk"
C:\WINDOWS\system32\{b7a1d05b-765f-6d79-ad60-27b786316f24}.dll-uninst.exe
C:\WINDOWS\System32\iezqnohod_nav.dat
C:\WINDOWS\System32\iezqnohod_navfx.dat
C:\WINDOWS\System32\iezqnohod_navps.dat
C:\WINDOWS\System32\qwopnvykj_navfx.dat
C:\WINDOWS\system32\adssite-remove.exe
C:\WINDOWS\system32\cont_adssite-remove.exe
"C:\WINDOWS\system32\adssite-remove.exe"
"C:\WINDOWS\System32\prnjobs.vbs"
"C:\WINDOWS\system32\prntvpt.dll"
"C:\WINDOWS\system32\rightonadz-uninst.exe"
C:\WINDOWS\System32\SET287.tmp
C:\WINDOWS\System32\SET288.tmp
C:\WINDOWS\System32\SET2DA.tmp
C:\WINDOWS\System32\SET2E6.tmp
C:\WINDOWS\System32\SET2F3.tmp
"C:\WINDOWS\System32\sft.res"
"C:\Documents and Settings\HP_Administrateur\application data\urlredir.cfg"
C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\dhnbav.exe
C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\dhnbav_nav.dat
C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\dhnbav_navps.dat
C:\Documents and Settings\HP_Administrateur\LOCAL Settings\Temp\A~NSISu_.exe
C:\Documents and Settings\HP_Administrateur\LOCAL Settings\Temp\guninst.exe
C:\Documents and Settings\HP_Administrateur\LOCAL Settings\Temp\installation.exe
C:\Documents and Settings\HP_Administrateur\LOCAL Settings\Temp\Install_WLMessenger.exe
C:\Documents and Settings\HP_Administrateur\LOCAL Settings\Temp\rbSolnUpdateFRA.2.7.0.exe
C:\Documents and Settings\HP_Administrateur\LOCAL Settings\Temp\spamihilator_0_9_9_44[1].exe
C:\Documents and Settings\HP_Administrateur\LOCAL Settings\Temp\TFRDE.exe
C:\Documents and Settings\HP_Administrateur\LOCAL Settings\Temp\Vodafone 810 Mobile phone User Guide-FR.exe
¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes :
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "msconfig"
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar "{6F282B65-56BF-4BD1-A8B2-A4449A05863D}"
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
"HKLM\Software\Trymedia Systems"
¤¤¤¤¤¤¤¤¤¤ C:\WINDOWS\Prefetch :
ACRORD32INFO.EXE-013EA364.pf
ALCMTR.EXE-235F9538.pf
ATIPTAXX.EXE-18FE8D8B.pf
AVAST.SETUP-032170A8.pf
CCC.EXE-2F1AF7F1.pf
CCLEANER.EXE-0BCE437C.pf
CLEANMGR.EXE-1F86EA8E.pf
CMD.EXE-087B4001.pf
CONTROL.EXE-013DBFB5.pf
CSC.EXE-01730C27.pf
CVTRES.EXE-2329DCD5.pf
DYNASTY.EXE-1FA9B9CA.pf
GESTMAJ.EXE-26927B6B.pf
GOOGLEUPDATER.EXE-2CAF5929.pf
GOOGLEUPDATERSERVICE.EXE-3AB369BE.pf
HPSYSDRV.EXE-0E7EF3EF.pf
HPZIPM12.EXE-145E7369.pf
IEXPLORE.EXE-27122324.pf
IMNOTFY.EXE-39B9FFE6.pf
INCMAIL.EXE-1D49117E.pf
JUCHECK.EXE-07806FD3.pf
JUSCHED.EXE-2ABC3D1B.pf
KBD.EXE-2AF7866F.pf
Layout.ini
LIST_KILLEM.EXE-20A56FDA.pf
LIST_KILLEM[1].EXE-310EFAC7.pf
LOGONUI.EXE-0AF22957.pf
MAGENTIC.EXE-0173035F.pf
MGAPP.EXE-073133FE.pf
MODE.COM-31685BAE.pf
MSNMSGR.EXE-366A1A81.pf
NMINDEXINGSERVICE.EXE-01E84916.pf
NTOSBOOT-B00DFAAD.pf
REALSCHED.EXE-04BEC5CC.pf
REG.EXE-0D2A95F7.pf
RUNDLL32.EXE-137523D2.pf
RUNDLL32.EXE-13DA0E71.pf
RUNDLL32.EXE-1831A4F3.pf
RUNDLL32.EXE-4489B61B.pf
RUNDLL32.EXE-451FC2C0.pf
SETUP.EXE-26FF9008.pf
SHELL.EXE-3189A993.pf
SSMYPICS.SCR-01C62024.pf
SYSTEMINFO.EXE-32ED1FAB.pf
TASKLIST.EXE-10D94B23.pf
TOASTER.EXE-1CBF7015.pf
UNINSTALL.EXE-164B0D31.pf
UNINSTALL.EXE-2F1A5ADC.pf
VERCLSID.EXE-3667BD89.pf
WATCH.EXE-0DACDE18.pf
WMIPRVSE.EXE-28F301A9.pf
WOOBROWSER.EXE-2D710CF8.pf
WSCNTFY.EXE-1B24F5EB.pf
WUAUCLT.EXE-399A8E72.pf
YTBB.EXE-36089050.pf
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
Que dois je faire???
Merci d'avance
Cahier des charges fonctionnel
