cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 15/10/2015 00:43:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\SKYNET\Downloads
Starter Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

749,48 Mb Total Physical Memory | 278,42 Mb Available Physical Memory | 37,15% Memory free
1,73 Gb Paging File | 0,75 Gb Available in Paging File | 43,07% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232,79 Gb Total Space | 221,13 Gb Free Space | 94,99% Space Free | Partition Type: NTFS

Computer Name: SKYNET-PC | User Name: SKYNET | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - C:\Users\SKYNET\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\360\Total Security\safemon\QHSafeTray.exe (QIHU 360 SOFTWARE CO. LIMITED)
PRC - C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe (QIHU 360 SOFTWARE CO. LIMITED)
PRC - C:\Program Files\360\Total Security\safemon\QHWatchdog.exe (Qihu Software Co. Limited)
PRC - C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe (Realtek Semiconductor)
PRC - C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe (Realtek Semiconductor)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - C:\Users\SKYNET\AppData\Local\Google\Chrome\Application\46.0.2490.71\libglesv2.dll ()
MOD - C:\Users\SKYNET\AppData\Local\Google\Chrome\Application\46.0.2490.71\libegl.dll ()
MOD - C:\Program Files\360\Total Security\safemon\wdui2.dll ()


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (QHActiveDefense) -- C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe (QIHU 360 SOFTWARE CO. LIMITED)
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (RtkAudioService) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe (Realtek Semiconductor)
SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - (SWDUMon) -- C:\Windows\System32\drivers\SWDUMon.sys (SlimWare Utilities, Inc.)
DRV - (360Box) -- C:\Windows\System32\drivers\360Box.sys (360.cn)
DRV - (360SelfProtection) -- C:\Windows\System32\drivers\360SelfProtection.sys (360‰[hQ-NÃ_)
DRV - (360AntiHacker) -- C:\Windows\System32\drivers\360AntiHacker.sys (360.cn)
DRV - (HookPort) -- C:\Windows\System32\drivers\hookport.sys (360‰[hQ-NÃ_)
DRV - (qutmipc) -- C:\Windows\System32\drivers\qutmipc.sys (360.cn)
DRV - (360Camera) -- C:\Windows\System32\drivers\360Camera.sys (360.cn)
DRV - (qutmdserv) -- C:\Windows\System32\drivers\qutmdrv.sys (360.cn)
DRV - (BAPIDRV) -- C:\Windows\System32\drivers\BAPIDRV.SYS (Qihu 360 Software Co., Ltd.)
DRV - (360AvFlt) -- C:\Windows\System32\drivers\360AvFlt.sys (360.cn)
DRV - (EfiMon) -- C:\Windows\System32\drivers\efimon.sys (360‰[hQ-NÃ_)
DRV - (L1C) -- C:\Windows\System32\drivers\L1C62x86.sys (Qualcomm Atheros Co., Ltd.)
DRV - (rtsuvc) -- C:\Windows\System32\drivers\rtsuvc.sys (Realtek Semiconductor Corp.)
DRV - (amdkmdag) -- C:\Windows\System32\drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV - (amdkmdap) -- C:\Windows\System32\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Qualcomm Atheros Communications, Inc.)
DRV - (amd_sata) -- C:\Windows\System32\drivers\amd_sata.sys (Advanced Micro Devices)
DRV - (amd_xata) -- C:\Windows\System32\drivers\amd_xata.sys (Advanced Micro Devices)
DRV - (AtiHDAudioService) -- C:\Windows\System32\drivers\AtihdW73.sys (Advanced Micro Devices)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/ar-eg/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BA BB 1D 73 A2 ED D0 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_207.dll ()
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\SKYNET\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\SKYNET\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\WebProtection@360safe.com: C:\Program Files\360\Total Security\safemon\webprotection_firefox [2015/08/30 19:10:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2015/08/30 19:12:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\SKYNET\AppData\Roaming\mozilla\Extensions
[2015/09/08 17:35:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\SKYNET\AppData\Roaming\mozilla\Firefox\Profiles\3e3oq5zu.default\extensions
[2015/08/30 19:01:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
[2015/08/30 19:01:58 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/10/03 03:31:35 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\updated\browser\extensions
[2015/10/03 03:33:05 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\updated\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[color=#E56717]========== Chrome ==========[/color]

CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.0_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\baopgcilhaalmoiophieebboejipjncg\12.14.8.17068_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\fomgjoekakdfbdndcgcibonbofhbifim\12.14.8.30385_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.0_1\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\mppnoffgpafgpgbaigljliadgbnhljfl\1.1_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\nafaimnnclfjfedmmabolbppcngeolgf\1.1_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\niojcggonafbneajjmkpkcigabaobmge\12.14.8.30394_0\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_1\
CHR - Extension: No name found = C:\Users\SKYNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\

O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O4 - HKLM..\Run: [QHSafeTray] C:\Program Files\360\Total Security\safemon\QHSafeTray.exe (QIHU 360 SOFTWARE CO. LIMITED)
O4 - HKCU..\Run: [Tasksgr(TM)] C:\Users\SKYNET\AppData\Roaming\Java\System\tasksgr.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8EE9A805-82F6-41A9-B791-6F7FB8AC5E89}: NameServer = 8.8.8.8,8.8.2.2
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found


ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2015/10/09 01:39:12 | 000,000,000 | -HSD | C] -- C:\found.000

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2015/10/15 00:47:06 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015/10/15 00:45:55 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2015/10/15 00:44:11 | 000,001,082 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2371119298-1557038349-1674959225-1000UA.job
[2015/10/15 00:42:36 | 000,001,185 | ---- | M] () -- C:\Users\SKYNET\Desktop\Document.rtf
[2015/10/15 00:40:10 | 000,010,864 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015/10/15 00:40:10 | 000,010,864 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015/10/15 00:32:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015/10/15 00:31:24 | 589,410,304 | -HS- | M] () -- C:\hiberfil.sys
[2015/10/14 02:31:18 | 000,002,335 | ---- | M] () -- C:\Users\SKYNET\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2015/10/14 01:48:52 | 000,780,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2015/10/14 01:48:52 | 000,142,536 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2015/10/14 01:44:07 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2371119298-1557038349-1674959225-1000Core.job
[2015/10/04 23:10:20 | 000,695,004 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2015/10/04 23:10:20 | 000,607,190 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2015/10/04 23:10:20 | 000,127,684 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2015/10/04 23:10:20 | 000,103,568 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2015/10/15 00:45:55 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2015/10/15 00:42:36 | 000,001,185 | ---- | C] () -- C:\Users\SKYNET\Desktop\Document.rtf
[2015/08/30 19:06:16 | 000,002,333 | ---- | C] () -- C:\Users\SKYNET\Google Chrome.lnk
[2015/08/30 00:40:44 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2015/08/30 00:29:40 | 000,662,785 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2015/08/30 00:29:40 | 000,232,372 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik.dat
[2015/08/30 00:29:40 | 000,230,192 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik_nd.dat
[2015/08/30 00:29:40 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2015/08/30 00:29:40 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2015/08/30 00:29:39 | 000,078,928 | ---- | C] () -- C:\Windows\System32\ativce02.dat
[2015/08/30 00:29:39 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2015/08/30 00:28:37 | 000,200,704 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2015/08/30 00:28:36 | 000,798,734 | ---- | C] () -- C:\Windows\System32\amdocl_ld32.exe
[2015/08/30 00:28:35 | 000,995,342 | ---- | C] () -- C:\Windows\System32\amdocl_as32.exe
[2015/08/30 00:27:22 | 000,618,913 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2009/07/14 03:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
Invalid Environment Variable: alluserprofile
Invalid Environment Variable: alluserprofile

[color=#A23BEC]< %appdata%\*. >[/color]
[2015/09/22 01:29:09 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\360safe
[2015/09/10 12:46:53 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\Adobe
[2015/08/30 21:48:07 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\dvdcss
[2015/08/30 00:16:30 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\Identities
[2015/08/30 19:06:57 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\Java
[2015/09/06 14:35:34 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\Macromedia
[2015/09/10 12:46:53 | 000,000,000 | --SD | M] -- C:\Users\SKYNET\AppData\Roaming\Microsoft
[2015/08/30 19:12:28 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\Mozilla
[2015/10/14 14:35:14 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\Skype
[2015/09/09 13:13:45 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\vlc
[2015/08/30 19:01:17 | 000,000,000 | ---D | M] -- C:\Users\SKYNET\AppData\Roaming\WinRAR

[color=#A23BEC]< %appdata%\*.exe /s >[/color]

[color=#A23BEC]< %systemdrive%\*. >[/color]
[2015/10/04 23:35:59 | 000,000,000 | -HSD | M] -- C:\$360Section
[2015/08/30 00:16:18 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2015/09/01 00:05:59 | 000,000,000 | RHSD | M] -- C:\360SANDBOX
[2009/07/14 06:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2015/10/09 01:39:12 | 000,000,000 | -HSD | M] -- C:\found.000
[2015/08/30 18:41:20 | 000,000,000 | ---D | M] -- C:\Mon disque
[2015/08/30 18:42:58 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2009/07/14 04:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2015/08/30 21:49:29 | 000,000,000 | R--D | M] -- C:\Program Files
[2015/09/04 16:44:19 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2015/08/30 00:15:49 | 000,000,000 | -HSD | M] -- C:\Recovery
[2015/10/15 00:47:57 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2015/08/30 00:15:59 | 000,000,000 | R--D | M] -- C:\Users
[2015/08/30 21:45:48 | 000,000,000 | ---D | M] -- C:\Windows

[color=#A23BEC]< %systemdrive%\*.exe >[/color]

[color=#A23BEC]< %programfiles%\*. >[/color]
[2015/08/30 19:10:29 | 000,000,000 | ---D | M] -- C:\Program Files\360
[2015/08/30 18:36:10 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2015/08/30 19:11:02 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2009/07/14 10:39:39 | 000,000,000 | ---D | M] -- C:\Program Files\DVD Maker
[2015/08/30 00:15:49 | 000,000,000 | -HSD | M] -- C:\Program Files\Fichiers communs
[2009/08/16 17:14:25 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2015/08/30 18:51:20 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2015/08/30 18:51:15 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio
[2015/08/30 18:45:28 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio 8
[2015/08/30 18:51:59 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2015/08/30 18:49:59 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2015/10/03 03:31:29 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2015/10/03 03:31:13 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service
[2015/08/30 18:51:38 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2015/08/30 00:27:53 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2015/08/30 18:59:27 | 000,000,000 | R--D | M] -- C:\Program Files\Skype
[2009/07/14 06:53:23 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2015/08/30 19:00:16 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2009/07/14 10:39:39 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2009/07/14 10:39:39 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2009/07/14 10:39:39 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2015/08/30 00:15:49 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2009/07/14 10:39:39 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Viewer
[2009/07/14 06:52:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2009/07/14 10:39:39 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2015/08/30 19:01:16 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2009/07/14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009/08/16 17:14:52 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/16 17:14:52 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\explorer.exe
[2009/08/16 17:14:52 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009/07/14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009/07/14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009/07/14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\System32\winlogon.exe
[2009/07/14 03:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe

< End of report >

Publicité


Signaler le contenu de ce document

Publicité