Publicité
Publicité
Format du document : text/plain
Prévisualisation
���������� | Shortcut_Module | g3n-h@ckm@n | 13.03.2014.1
����� XP | Vista | 7 | 8 - 32/64 bits ����� - Start 11:10:40 - 13/03/2014
Mis � jour le : 13/03/2014 | 08.24 par g3n-h@ckm@n
Contact : http://www.sosvirus.net
Boot : Normal
Syst�me : Microsoft Windows XP (32 bits) Service Pack 3
M�moire RAM = Total (MB) : 2088 | Libre (MB) : 1017
Pagefile = Total (MB) : 3491 | Libre (MB) : 2353
Virtuelle = Total (MB) : 2097 | Libre (MB) : 1998
Registre sauvegard� , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe
���������� | Mises � jour Windows
Derni�re(s) d�tection(s) : 2014-03-13 07:44:40
Derni�res T�l�charg�es : 2014-03-12 15:49:24
Derni�res install�es : 2014-02-28 12:20:29
Prochaine recherche : 2014-03-14 01:41:06
���������� | Navigateurs
IE : 8.0.6001.18702 (� Microsoft Corporation. All rights reserved.)
���������� | Processus tu�s
1380 | C:\WINDOWS\system32\spoolsv.exe (.Microsoft Corporation - Spooler SubSystem App.) - (5.1.2600.6024) -> C:\WINDOWS\system32\spoolsv.exe
1460 | C:\Program Files\Avira\AntiVir Desktop\sched.exe (.Avira GmbH - Antivirus Scheduler.) - (10.0.0.19) -> "C:\Program Files\Avira\AntiVir Desktop\sched.exe"
1624 | C:\WINDOWS\Explorer.EXE (.Microsoft Corporation - Explorateur Windows.) - (6.0.2900.5512) -> C:\WINDOWS\Explorer.EXE
1780 | C:\Program Files\Avira\AntiVir Desktop\avguard.exe (.Avira GmbH - Antivirus On-Access Service.) - (10.0.1.56) -> "C:\Program Files\Avira\AntiVir Desktop\avguard.exe"
1856 | C:\Program Files\Java\jre6\bin\jqs.exe (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - (6.0.190.4) -> "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
1868 | C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (.Avira GmbH - AntiVir shadow copy service.) - (1.0.0.6) -> "C:\Program Files\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000006f4
1912 | C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) - (1.3.59.0) -> "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
244 | C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE (.Microsoft Corporation - Microsoft� Windows Live ID Service.) - (6.500.3146.0) -> "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE"
412 | C:\WINDOWS\system32\SearchIndexer.exe (.Microsoft Corporation - Microsoft Windows Search Indexer.) - (7.0.6001.16503) -> C:\WINDOWS\system32\SearchIndexer.exe /Embedding
1436 | C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (.Broadcom Corporation. - Bluetooth Support Server.) - (5.5.0.4400) -> "C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe"
2060 | C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSvcM.exe (.Microsoft Corporation - Microsoft� Windows Live ID Service Monitor.) - (6.500.3146.0) -> WLIDSvcM.exe 244
2100 | C:\WINDOWS\system32\igfxtray.exe (.Intel Corporation - igfxTray Module.) - (6.14.10.4906) -> "C:\WINDOWS\system32\igfxtray.exe"
2120 | C:\WINDOWS\system32\igfxsrvc.exe (.Intel Corporation - igfxsrvc Module.) - (6.14.10.4906) -> C:\WINDOWS\system32\igfxsrvc.exe -Embedding
2152 | C:\WINDOWS\system32\hkcmd.exe (.Intel Corporation - hkcmd Module.) - (6.14.10.4906) -> "C:\WINDOWS\system32\hkcmd.exe"
2192 | C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe (.ASUSTeK Computer Inc. - Asus Eee PC ACPI Service.) - (6.1.1.1008) -> "C:\PROGRAM FILES\EEEPC\ACPI\ASACPISVR.EXE"
2200 | C:\Program Files\EeePC\ACPI\AsEPCMon.exe (.ASUSTeK Computer Inc. - AsEPCMon.) - (6.1.1.1001) -> "C:\Program Files\EeePC\ACPI\AsEPCMon.exe"
2208 | C:\Program Files\EeePC\ACPI\AsTray.exe (.ASUSTeK Computer Inc. - Eee PC Tray Utility.) - (6.1.1.1002) -> "C:\Program Files\EeePC\ACPI\AsTray.exe"
2240 | C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe (. - .) - (0.0.0.0) -> "C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe" auto
2248 | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) - (12.2.8.0) -> "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
2256 | C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (.Synaptics Incorporated - Asus Custom Acpi Monitor Application.) - (12.2.8.0) -> "C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe"
2280 | C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) - (2.0.2.1) -> "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
2316 | C:\WINDOWS\system32\igfxext.exe (.Intel Corporation - igfxext Module.) - (6.14.10.4906) -> C:\WINDOWS\system32\igfxext.exe -Embedding
2356 | C:\Program Files\Visagesoft\eXPert PDF 5\vspdfprsrv.exe (. - .) - (5.1.170.0) -> "C:\Program Files\Visagesoft\eXPert PDF 5\vspdfprsrv.exe" --background
2388 | C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (.Microsoft Corporation - GrooveMonitor Utility.) - (12.0.6500.5000) -> "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
2412 | C:\WINDOWS\RTHDCPL.EXE (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) - (2.2.7.5) -> "C:\WINDOWS\RTHDCPL.EXE"
2428 | C:\WINDOWS\system32\ctfmon.exe (.Microsoft Corporation - CTF Loader.) - (5.1.2600.5512) -> "C:\WINDOWS\system32\ctfmon.exe"
2496 | C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe (.ASUSTeK Computer Inc. - Eee Super Hybrid Engine.) - (6.1.1.1001) -> "C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe"
2504 | C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (.Broadcom Corporation. - Bluetooth Tray Application.) - (5.5.0.4400) -> "C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
2536 | C:\WINDOWS\system32\NOTEPAD.EXE (.Microsoft Corporation - Bloc-notes.) - (5.1.2600.5512) -> "C:\WINDOWS\system32\NOTEPAD.EXE" C:\AdwCleaner\AdwCleaner[S0].txt
2884 | C:\WINDOWS\system32\wscntfy.exe (.Microsoft Corporation - Windows Security Center Notification App.) - (5.1.2600.5512) -> C:\WINDOWS\system32\wscntfy.exe
3380 | C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.Google Inc. - Google Chrome.) - (33.0.1750.146) -> "C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe"
3724 | C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.Google Inc. - Google Chrome.) - (33.0.1750.146) -> "C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --type=renderer --lang=fr --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/group_61/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --disable-gpu-compositing --disable-pepper-3d --channel="3380.3.1516673296\1051225317" /prefetch:673131151
3880 | C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.Google Inc. - Google Chrome.) - (33.0.1750.146) -> "C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3380.4.462791701\1245023267" --ppapi-flash-args --lang=fr --ignored=" --type=renderer " /prefetch:-632637702
2652 | C:\Program Files\Avira\AntiVir Desktop\avcenter.exe (.Avira GmbH - Antivirus Control Center.) - (10.0.12.29) -> "C:\Program Files\Avira\AntiVir Desktop\avcenter.exe"
���������� | Processus d�marr�s
[12/05/2010 23:32:41] - 504 | C:\WINDOWS\System32\smss.exe (.Microsoft Corporation - Gestionnaire de session Windows NT.) - (5.1.2600.5512) -> \SystemRoot\System32\smss.exe [50688 Ko]
[12/05/2010 23:32:43] - 728 | C:\WINDOWS\system32\winlogon.exe (.Microsoft Corporation - Application d'ouverture de session Windows NT.) - (5.1.2600.5512) -> winlogon.exe [512000 Ko]
[12/05/2010 23:32:40] - 772 | C:\WINDOWS\system32\services.exe (.Microsoft Corporation - Applications Services et Contr�leur.) - (5.1.2600.5755) -> C:\WINDOWS\system32\services.exe [111104 Ko]
[12/05/2010 23:32:36] - 784 | C:\WINDOWS\system32\lsass.exe (.Microsoft Corporation - LSA Shell (Export Version).) - (5.1.2600.5512) -> C:\WINDOWS\system32\lsass.exe [13312 Ko]
[12/05/2010 23:32:42] - 968 | C:\WINDOWS\system32\svchost.exe (.Microsoft Corporation - Generic Host Process for Win32 Services.) - (5.1.2600.5512) -> C:\WINDOWS\system32\svchost -k DcomLaunch [14336 Ko]
[12/05/2010 23:32:42] - 1080 | C:\WINDOWS\System32\svchost.exe (.Microsoft Corporation - Generic Host Process for Win32 Services.) - (5.1.2600.5512) -> C:\WINDOWS\System32\svchost.exe -k netsvcs [14336 Ko]
[12/03/2014 11:19:12] - 1460 | C:\Program Files\Avira\AntiVir Desktop\sched.exe (.Avira GmbH - Antivirus Scheduler.) - (10.0.0.19) -> "C:\Program Files\Avira\AntiVir Desktop\sched.exe" [135336 Ko]
[12/03/2014 11:19:10] - 1780 | C:\Program Files\Avira\AntiVir Desktop\avguard.exe (.Avira GmbH - Antivirus On-Access Service.) - (10.0.1.56) -> "C:\Program Files\Avira\AntiVir Desktop\avguard.exe" [267944 Ko]
[23/12/2009 11:50:52] - 1856 | C:\Program Files\Java\jre6\bin\jqs.exe (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - (6.0.190.4) -> "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" [153376 Ko]
[12/03/2014 11:19:10] - 1868 | C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (.Avira GmbH - AntiVir shadow copy service.) - (1.0.0.6) -> "C:\Program Files\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000006f4 [76968 Ko]
[12/05/2010 23:32:42] - 2032 | C:\WINDOWS\system32\svchost.exe (.Microsoft Corporation - Generic Host Process for Win32 Services.) - (5.1.2600.5512) -> C:\WINDOWS\system32\svchost.exe -k imgsvc [14336 Ko]
[12/05/2010 21:42:19] - 3012 | C:\WINDOWS\system32\wbem\wmiapsrv.exe (.Microsoft Corporation - Service de la carte de performance WMI.) - (5.1.2600.5512) -> C:\WINDOWS\system32\wbem\wmiapsrv.exe [126464 Ko]
[13/03/2014 11:07:26] - 2492 | C:\Documents and Settings\lionel\Mes documents\Downloads\Shortcut_Module.exe (. - Shortcut_Module.) - (13.3.2014.1) -> "C:\Documents and Settings\lionel\Mes documents\Downloads\Shortcut_Module.exe" [2151936 Ko]
[12/03/2014 11:19:09] - 2652 | C:\Program Files\Avira\AntiVir Desktop\avcenter.exe (.Avira GmbH - Antivirus Control Center.) - (10.0.12.29) -> "C:\Program Files\Avira\AntiVir Desktop\avcenter.exe" [389288 Ko]
[12/05/2010 23:32:43] - 3020 | C:\WINDOWS\system32\wscntfy.exe (.Microsoft Corporation - Windows Security Center Notification App.) - (5.1.2600.5512) -> C:\WINDOWS\system32\wscntfy.exe [13824 Ko]
���������� | Services
���������� | Hosts
C:\WINDOWS\System32\Drivers\etc\hosts : Remis a z�ro avec succ�s
���������� | Registre
Supprim� avec succ�s : HKLM\Software\Classes\.umbrella
Supprim� avec succ�s : HKLM\Software\Classes\AMtoolbar.AMtoolbar
Supprim� avec succ�s : HKLM\Software\Classes\AMtoolbar.AMtoolbar.1
Supprim� avec succ�s : HKLM\Software\Classes\Groove.FormsToolSearchDialogDelegate
Supprim� avec succ�s : HKLM\Software\Classes\Groove.ToolBar
Supprim� avec succ�s : HKLM\Software\Classes\umbrella_auto_file
Supprim� avec succ�s : HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Classes\Applications\tinyumbrella-4.1.13.exe
Supprim� avec succ�s : HKLM\Software\Classes\AppID\{6A070EEA-E3F8-411E-9D3A-F3814ED6D1A8} : SoftwareUpdateApp
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\0146B227CDF623340BA3D126B06587C4 : C:\DOCUME~1\lionel\LOCALS~1\Temp\{BB1920DC-C537-4CDA-A4BA-034E35D397EE}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\1B3A5E831FDA0E7408426713A003BE63 : C:\DOCUME~1\lionel\LOCALS~1\Temp\{15C453E1-7F0D-4E58-BFDF-4C3B37BAD3B6}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\1F9ACB2AC6655084791DF7CD39837632 : c:\docume~1\lionel\locals~1\temp\air38.tmp\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\26DDC2EC4210AC63483DF9D4FCC5B59D : C:\WINDOWS\TEMP\IXP04458.tmp\dotnetfx35\x86\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\44844A015644E654C87908DB4D6F8854 : C:\DOCUME~1\lionel\LOCALS~1\Temp\VSD10C.tmp\WindowsLiveSign-inAssistantforOLW\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\47FCAB7470A5DB84ABBD7A9655F0F0A5 : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{0BB0C3B8-EB92-4764-9CB1-49861043BDCA}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\5C1093C35543A0E32A41B090A305076A : C:\DOCUME~1\lionel\LOCALS~1\Temp\Microsoft .NET Framework 4 Setup_4.0.30319\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\A94AC27C73290184489454ADB32DD646 : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{A531B9CF-A570-4230-8002-FC9B627504AD}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\BAC29E6A36E9CD64A8FBC0FA7F7BDC20 : C:\DOCUME~1\lionel\LOCALS~1\Temp\expertpdf_v5.exe\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\c1c4f01781cc94c4c8fb1542c0981a2a : C:\WINDOWS\TEMP\IXP000.TMP\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\CA811C46A2AFC9E47AE6CD22ACF42CD0 : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{983D933D-3A82-4847-9D5E-D21F0B32F407}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\DDE7F2BCF1D91C3409CFF425AE1E271A : C:\DOCUME~1\lionel\LOCALS~1\Temp\IXP000.TMP\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\FCDAC0A0AD874C333A05DC1548B97920 : C:\DOCUME~1\lionel\LOCALS~1\Temp\Microsoft .NET Framework 4 Setup_4.0.30319\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\05CA691F59C71E249974DBBA81FBC3C8 : C:\DOCUME~1\lionel\LOCALS~1\Temp\IXP000.TMP\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\243493A986A4ABE4586A555B954F7E00 : C:\DOCUME~1\lionel\LOCALS~1\Temp\IXP000.TMP\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\487EA05EEBAFAD641A8FB7B665CD2BE2 : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{B6520772-3C83-46CD-92AC-D6351EF25828}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\B64ADB9B71E234F4D9A7B9E1900A4A8D : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{301A1609-591B-41E9-BDA4-3D191C4057B0}\
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01FB9D36515EA62478C46E3C3515AABD] : 01:\Software\Tracker Software\LiveUpdate\StartMenuShortCut
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E52E3A99F2B1D6B42947AB0549128B54] : C:\Program Files\Tracker Software\Live Update\LiveUpdate.exe
Supprim� avec succ�s : [HKLM\Software\Microsoft\Command Processor]|[AutoRun] :
Supprim� avec succ�s : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Windows\CurrentVersion\Run]|[ISUSPM] : C:\Documents and Settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe -scheduler
Supprim� avec succ�s : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\temp\janinblr\iTunnel\iTunnel.exe] : C:\temp\janinblr\iTunnel\iTunnel.exe:*:Enabled:iTunnel
Supprim� avec succ�s : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-4.1.13.exe] : C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-4.1.13.exe:*:Enabled:TinyUmbrella - Save your SHSH!
Supprim� avec succ�s : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-5.10.07.exe] : C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-5.10.07.exe:*:Enabled:TinyUmbrella - Save your SHSH!
Supprim� avec succ�s : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-6.01.00.exe] : C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-6.01.00.exe:*:Enabled:TinyUmbrella - Save your SHSH!
���������� | IFEO
���������� | Dossiers
Supprim� avec succ�s : C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
Supprim� avec succ�s : C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2681073451-2210917993-591611826-1005Core.job
Supprim� avec succ�s : C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2681073451-2210917993-591611826-1005UA.job
Supprim� avec succ�s : C:\Documents and Settings\All Users\Menu D�marrer\LiveUpdate.lnk
Supprim� avec succ�s : C:\Documents and Settings\All Users\Application Data\FLEXnet\Connect\Database\{2BA4F03E-3B47-4ed2-BA5E-A44DECC8A182}.ini
Supprim� avec succ�s : C:\Documents and Settings\lionel\Application Data\FLEXnet\Connect\Database\isuspm.ini
Supprim� avec succ�s : C:\Documents and Settings\lionel\Application Data\FLEXnet\Connect\Database\update.ini
Supprim� avec succ�s : C:\Documents and Settings\lionel\Application Data\Microsoft\CLView\Toolbars.dat
Supprim� avec succ�s : C:\Documents and Settings\lionel\Local Settings\Temp\conduitinstaller.exe
Supprim� avec succ�s : C:\Documents and Settings\lionel\Local Settings\Temp\e4j1D9.tmp_dir\umbrella-win.jar
Supprim� avec succ�s : C:\Documents and Settings\lionel\Local Settings\Temp\e4j209.tmp_dir\umbrella-win.jar
Supprim� avec succ�s : C:\Documents and Settings\lionel\Local Settings\Temp\e4jFB.tmp_dir\umbrella-win.jar
Supprim� avec succ�s : C:\WINDOWS\Installer\wix{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}.SchedServiceConfig.rmi
Supprim� avec succ�s : C:\WINDOWS\Installer\{38E5A3B1-ADF1-47E0-8024-76310A30EB36}\LiveUpdate.exe_159D431DD2094A75A6EE2B7624A40520.exe
Supprim� avec succ�s : C:\WINDOWS\Installer\{EF8CCDB9-8AF2-4B45-9C27-B892CC33793A}\_80A27599615A97912540AE.exe
Supprim� avec succ�s : C:\Documents and Settings\All Users\Application Data\FLEXnet
Supprim� avec succ�s : C:\Documents and Settings\lionel\Application Data\FLEXnet
���������� | D�tournements de raccourcis
Supprim� avec succ�s : C:\Documents and Settings\All Users\Menu D�marrer\Programmes\Vivia - The Video Editor.lnk : C:\WINDOWS\Installer\{EF8CCDB9-8AF2-4B45-9C27-B892CC33793A}\_80A27599615A97912540AE.exe
Supprim� avec succ�s : C:\Documents and Settings\All Users\Menu D�marrer\Programmes\PDF-XChange\Check for Updates.lnk : C:\Program Files\Tracker Software\Live Update\LiveUpdate.exe
Supprim� avec succ�s : C:\Documents and Settings\lionel\Recent\hosts.umbrella.lnk : C:\WINDOWS\system32\drivers\etc\hosts.umbrella
���������� | D�tournement internet Explorer
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : http://www.google.com/ie -> http://www.google.com/
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://eeepc.asus.com/global -> http://www.google.com/
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://www.google.com -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : http://www.google.com/ie -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : http://www.google.com/ie -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> http://www.google.com/ie
R�par� : [HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[MigrateProxy] : 0 -> 1
R�par� : [HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[MigrateProxy] : 0 -> 1
���������� | D�tournement Google Chrome
[lionel] Remis a z�ro avec succ�s : SearchURL
[lionel] Remis a z�ro avec succ�s : Preferences
���������� | D�tournement Firefox
[lionel] Supprim� avec succ�s : user_pref("extensions.testpilot.alreadyCustomizedToolbar", true);
[lionel] Supprim� avec succ�s : user_pref("weboftrust.search.ask.display", "Ask.com Web Search");
[lionel] Supprim� avec succ�s : user_pref("weboftrust.search.dogpile.prestyle", ".paidSearchResult [ATTR] { display: none ! important; } .searchResultsPane { max-width: 44.08em; } [ATTR] { position: absolute; visibility: hidden; }");
[lionel] Supprim� avec succ�s : user_pref("weboftrust.search.google.urlign", "^http(s)?\\:\\/\\/((www|encrypted)\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/(a\\/|accounts|ad(s|manager|planner|sense|words)|alerts|analytics|apps|appserve|base|calendar|chrome(frame)?|codesearch|comparisonads|corporate|datacenter|dfp|dictionary|doodle|educators|enterprise|events|experimental|familysafety|finance|flutrends|friendconnect|goog411|googlebooks|googlenotebook|gwt|help|history|images|imgres|ime|insights|landing|local|logos|maps|mobile|moon|music|newproducts|news|notebook|patents|phone|postini|powermeter|press|profiles|publicdata|puzzles|onlinechallenge|reader|relief|services|s2|sitesearch|sky|smallbusinessnetwork|squared|submit|support|sync|talk|toolbar|ventures|voice|web(masters|elements)|intl\\/[^\\/]+\\/.+)");
[lionel] Supprim� avec succ�s : user_pref("weboftrust.search.mailru.style", "#searchResultsWrap .res-head a[id] ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 2px; position: relative; visibility: visible; }");
���������� | D�tournement des cl�s StartMenuInternet
R�par� : [HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : C:\Program Files\Internet Explorer\iexplore.exe -> "C:\Program Files\Internet Explorer\iexplore.exe"
R�par� : [HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command] : "C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" -> "C:\Program Files\Google\Chrome\Application\chrome.exe"
���������� | AppInit_DLLs
���������� | D�tournement Javascript
���������� | Firewall
���������� | Fichiers temporaires
[Default User] Fichiers temporaires Supprim�s : 0 Ko
[Administrateur] Fichiers temporaires Supprim�s : 31 Ko
[NetworkService] Fichiers temporaires Supprim�s : 0 Ko
[All Users] Fichiers temporaires Supprim�s : 0 Ko
[LocalService] Fichiers temporaires Supprim�s : 0 Ko
[lionel] Fichiers temporaires Supprim�s : 2649 Ko
Autre rapport
���������� |EOF| ���������� | 11:27:46
����� XP | Vista | 7 | 8 - 32/64 bits ����� - Start 11:10:40 - 13/03/2014
Mis � jour le : 13/03/2014 | 08.24 par g3n-h@ckm@n
Contact : http://www.sosvirus.net
Boot : Normal
Syst�me : Microsoft Windows XP (32 bits) Service Pack 3
M�moire RAM = Total (MB) : 2088 | Libre (MB) : 1017
Pagefile = Total (MB) : 3491 | Libre (MB) : 2353
Virtuelle = Total (MB) : 2097 | Libre (MB) : 1998
Registre sauvegard� , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe
���������� | Mises � jour Windows
Derni�re(s) d�tection(s) : 2014-03-13 07:44:40
Derni�res T�l�charg�es : 2014-03-12 15:49:24
Derni�res install�es : 2014-02-28 12:20:29
Prochaine recherche : 2014-03-14 01:41:06
���������� | Navigateurs
IE : 8.0.6001.18702 (� Microsoft Corporation. All rights reserved.)
���������� | Processus tu�s
1380 | C:\WINDOWS\system32\spoolsv.exe (.Microsoft Corporation - Spooler SubSystem App.) - (5.1.2600.6024) -> C:\WINDOWS\system32\spoolsv.exe
1460 | C:\Program Files\Avira\AntiVir Desktop\sched.exe (.Avira GmbH - Antivirus Scheduler.) - (10.0.0.19) -> "C:\Program Files\Avira\AntiVir Desktop\sched.exe"
1624 | C:\WINDOWS\Explorer.EXE (.Microsoft Corporation - Explorateur Windows.) - (6.0.2900.5512) -> C:\WINDOWS\Explorer.EXE
1780 | C:\Program Files\Avira\AntiVir Desktop\avguard.exe (.Avira GmbH - Antivirus On-Access Service.) - (10.0.1.56) -> "C:\Program Files\Avira\AntiVir Desktop\avguard.exe"
1856 | C:\Program Files\Java\jre6\bin\jqs.exe (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - (6.0.190.4) -> "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
1868 | C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (.Avira GmbH - AntiVir shadow copy service.) - (1.0.0.6) -> "C:\Program Files\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000006f4
1912 | C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) - (1.3.59.0) -> "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
244 | C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE (.Microsoft Corporation - Microsoft� Windows Live ID Service.) - (6.500.3146.0) -> "C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE"
412 | C:\WINDOWS\system32\SearchIndexer.exe (.Microsoft Corporation - Microsoft Windows Search Indexer.) - (7.0.6001.16503) -> C:\WINDOWS\system32\SearchIndexer.exe /Embedding
1436 | C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (.Broadcom Corporation. - Bluetooth Support Server.) - (5.5.0.4400) -> "C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe"
2060 | C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSvcM.exe (.Microsoft Corporation - Microsoft� Windows Live ID Service Monitor.) - (6.500.3146.0) -> WLIDSvcM.exe 244
2100 | C:\WINDOWS\system32\igfxtray.exe (.Intel Corporation - igfxTray Module.) - (6.14.10.4906) -> "C:\WINDOWS\system32\igfxtray.exe"
2120 | C:\WINDOWS\system32\igfxsrvc.exe (.Intel Corporation - igfxsrvc Module.) - (6.14.10.4906) -> C:\WINDOWS\system32\igfxsrvc.exe -Embedding
2152 | C:\WINDOWS\system32\hkcmd.exe (.Intel Corporation - hkcmd Module.) - (6.14.10.4906) -> "C:\WINDOWS\system32\hkcmd.exe"
2192 | C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe (.ASUSTeK Computer Inc. - Asus Eee PC ACPI Service.) - (6.1.1.1008) -> "C:\PROGRAM FILES\EEEPC\ACPI\ASACPISVR.EXE"
2200 | C:\Program Files\EeePC\ACPI\AsEPCMon.exe (.ASUSTeK Computer Inc. - AsEPCMon.) - (6.1.1.1001) -> "C:\Program Files\EeePC\ACPI\AsEPCMon.exe"
2208 | C:\Program Files\EeePC\ACPI\AsTray.exe (.ASUSTeK Computer Inc. - Eee PC Tray Utility.) - (6.1.1.1002) -> "C:\Program Files\EeePC\ACPI\AsTray.exe"
2240 | C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe (. - .) - (0.0.0.0) -> "C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe" auto
2248 | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) - (12.2.8.0) -> "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
2256 | C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (.Synaptics Incorporated - Asus Custom Acpi Monitor Application.) - (12.2.8.0) -> "C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe"
2280 | C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) - (2.0.2.1) -> "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
2316 | C:\WINDOWS\system32\igfxext.exe (.Intel Corporation - igfxext Module.) - (6.14.10.4906) -> C:\WINDOWS\system32\igfxext.exe -Embedding
2356 | C:\Program Files\Visagesoft\eXPert PDF 5\vspdfprsrv.exe (. - .) - (5.1.170.0) -> "C:\Program Files\Visagesoft\eXPert PDF 5\vspdfprsrv.exe" --background
2388 | C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (.Microsoft Corporation - GrooveMonitor Utility.) - (12.0.6500.5000) -> "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
2412 | C:\WINDOWS\RTHDCPL.EXE (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) - (2.2.7.5) -> "C:\WINDOWS\RTHDCPL.EXE"
2428 | C:\WINDOWS\system32\ctfmon.exe (.Microsoft Corporation - CTF Loader.) - (5.1.2600.5512) -> "C:\WINDOWS\system32\ctfmon.exe"
2496 | C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe (.ASUSTeK Computer Inc. - Eee Super Hybrid Engine.) - (6.1.1.1001) -> "C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe"
2504 | C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (.Broadcom Corporation. - Bluetooth Tray Application.) - (5.5.0.4400) -> "C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
2536 | C:\WINDOWS\system32\NOTEPAD.EXE (.Microsoft Corporation - Bloc-notes.) - (5.1.2600.5512) -> "C:\WINDOWS\system32\NOTEPAD.EXE" C:\AdwCleaner\AdwCleaner[S0].txt
2884 | C:\WINDOWS\system32\wscntfy.exe (.Microsoft Corporation - Windows Security Center Notification App.) - (5.1.2600.5512) -> C:\WINDOWS\system32\wscntfy.exe
3380 | C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.Google Inc. - Google Chrome.) - (33.0.1750.146) -> "C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe"
3724 | C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.Google Inc. - Google Chrome.) - (33.0.1750.146) -> "C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --type=renderer --lang=fr --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StandardR2/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-1-Percent/group_61/UMA-Uniformity-Trial-10-Percent/group_07/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --disable-gpu-compositing --disable-pepper-3d --channel="3380.3.1516673296\1051225317" /prefetch:673131151
3880 | C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (.Google Inc. - Google Chrome.) - (33.0.1750.146) -> "C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3380.4.462791701\1245023267" --ppapi-flash-args --lang=fr --ignored=" --type=renderer " /prefetch:-632637702
2652 | C:\Program Files\Avira\AntiVir Desktop\avcenter.exe (.Avira GmbH - Antivirus Control Center.) - (10.0.12.29) -> "C:\Program Files\Avira\AntiVir Desktop\avcenter.exe"
���������� | Processus d�marr�s
[12/05/2010 23:32:41] - 504 | C:\WINDOWS\System32\smss.exe (.Microsoft Corporation - Gestionnaire de session Windows NT.) - (5.1.2600.5512) -> \SystemRoot\System32\smss.exe [50688 Ko]
[12/05/2010 23:32:43] - 728 | C:\WINDOWS\system32\winlogon.exe (.Microsoft Corporation - Application d'ouverture de session Windows NT.) - (5.1.2600.5512) -> winlogon.exe [512000 Ko]
[12/05/2010 23:32:40] - 772 | C:\WINDOWS\system32\services.exe (.Microsoft Corporation - Applications Services et Contr�leur.) - (5.1.2600.5755) -> C:\WINDOWS\system32\services.exe [111104 Ko]
[12/05/2010 23:32:36] - 784 | C:\WINDOWS\system32\lsass.exe (.Microsoft Corporation - LSA Shell (Export Version).) - (5.1.2600.5512) -> C:\WINDOWS\system32\lsass.exe [13312 Ko]
[12/05/2010 23:32:42] - 968 | C:\WINDOWS\system32\svchost.exe (.Microsoft Corporation - Generic Host Process for Win32 Services.) - (5.1.2600.5512) -> C:\WINDOWS\system32\svchost -k DcomLaunch [14336 Ko]
[12/05/2010 23:32:42] - 1080 | C:\WINDOWS\System32\svchost.exe (.Microsoft Corporation - Generic Host Process for Win32 Services.) - (5.1.2600.5512) -> C:\WINDOWS\System32\svchost.exe -k netsvcs [14336 Ko]
[12/03/2014 11:19:12] - 1460 | C:\Program Files\Avira\AntiVir Desktop\sched.exe (.Avira GmbH - Antivirus Scheduler.) - (10.0.0.19) -> "C:\Program Files\Avira\AntiVir Desktop\sched.exe" [135336 Ko]
[12/03/2014 11:19:10] - 1780 | C:\Program Files\Avira\AntiVir Desktop\avguard.exe (.Avira GmbH - Antivirus On-Access Service.) - (10.0.1.56) -> "C:\Program Files\Avira\AntiVir Desktop\avguard.exe" [267944 Ko]
[23/12/2009 11:50:52] - 1856 | C:\Program Files\Java\jre6\bin\jqs.exe (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - (6.0.190.4) -> "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" [153376 Ko]
[12/03/2014 11:19:10] - 1868 | C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (.Avira GmbH - AntiVir shadow copy service.) - (1.0.0.6) -> "C:\Program Files\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000006f4 [76968 Ko]
[12/05/2010 23:32:42] - 2032 | C:\WINDOWS\system32\svchost.exe (.Microsoft Corporation - Generic Host Process for Win32 Services.) - (5.1.2600.5512) -> C:\WINDOWS\system32\svchost.exe -k imgsvc [14336 Ko]
[12/05/2010 21:42:19] - 3012 | C:\WINDOWS\system32\wbem\wmiapsrv.exe (.Microsoft Corporation - Service de la carte de performance WMI.) - (5.1.2600.5512) -> C:\WINDOWS\system32\wbem\wmiapsrv.exe [126464 Ko]
[13/03/2014 11:07:26] - 2492 | C:\Documents and Settings\lionel\Mes documents\Downloads\Shortcut_Module.exe (. - Shortcut_Module.) - (13.3.2014.1) -> "C:\Documents and Settings\lionel\Mes documents\Downloads\Shortcut_Module.exe" [2151936 Ko]
[12/03/2014 11:19:09] - 2652 | C:\Program Files\Avira\AntiVir Desktop\avcenter.exe (.Avira GmbH - Antivirus Control Center.) - (10.0.12.29) -> "C:\Program Files\Avira\AntiVir Desktop\avcenter.exe" [389288 Ko]
[12/05/2010 23:32:43] - 3020 | C:\WINDOWS\system32\wscntfy.exe (.Microsoft Corporation - Windows Security Center Notification App.) - (5.1.2600.5512) -> C:\WINDOWS\system32\wscntfy.exe [13824 Ko]
���������� | Services
���������� | Hosts
C:\WINDOWS\System32\Drivers\etc\hosts : Remis a z�ro avec succ�s
���������� | Registre
Supprim� avec succ�s : HKLM\Software\Classes\.umbrella
Supprim� avec succ�s : HKLM\Software\Classes\AMtoolbar.AMtoolbar
Supprim� avec succ�s : HKLM\Software\Classes\AMtoolbar.AMtoolbar.1
Supprim� avec succ�s : HKLM\Software\Classes\Groove.FormsToolSearchDialogDelegate
Supprim� avec succ�s : HKLM\Software\Classes\Groove.ToolBar
Supprim� avec succ�s : HKLM\Software\Classes\umbrella_auto_file
Supprim� avec succ�s : HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Classes\Applications\tinyumbrella-4.1.13.exe
Supprim� avec succ�s : HKLM\Software\Classes\AppID\{6A070EEA-E3F8-411E-9D3A-F3814ED6D1A8} : SoftwareUpdateApp
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\0146B227CDF623340BA3D126B06587C4 : C:\DOCUME~1\lionel\LOCALS~1\Temp\{BB1920DC-C537-4CDA-A4BA-034E35D397EE}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\1B3A5E831FDA0E7408426713A003BE63 : C:\DOCUME~1\lionel\LOCALS~1\Temp\{15C453E1-7F0D-4E58-BFDF-4C3B37BAD3B6}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\1F9ACB2AC6655084791DF7CD39837632 : c:\docume~1\lionel\locals~1\temp\air38.tmp\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\26DDC2EC4210AC63483DF9D4FCC5B59D : C:\WINDOWS\TEMP\IXP04458.tmp\dotnetfx35\x86\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\44844A015644E654C87908DB4D6F8854 : C:\DOCUME~1\lionel\LOCALS~1\Temp\VSD10C.tmp\WindowsLiveSign-inAssistantforOLW\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\47FCAB7470A5DB84ABBD7A9655F0F0A5 : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{0BB0C3B8-EB92-4764-9CB1-49861043BDCA}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\5C1093C35543A0E32A41B090A305076A : C:\DOCUME~1\lionel\LOCALS~1\Temp\Microsoft .NET Framework 4 Setup_4.0.30319\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\A94AC27C73290184489454ADB32DD646 : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{A531B9CF-A570-4230-8002-FC9B627504AD}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\BAC29E6A36E9CD64A8FBC0FA7F7BDC20 : C:\DOCUME~1\lionel\LOCALS~1\Temp\expertpdf_v5.exe\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\c1c4f01781cc94c4c8fb1542c0981a2a : C:\WINDOWS\TEMP\IXP000.TMP\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\CA811C46A2AFC9E47AE6CD22ACF42CD0 : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{983D933D-3A82-4847-9D5E-D21F0B32F407}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\DDE7F2BCF1D91C3409CFF425AE1E271A : C:\DOCUME~1\lionel\LOCALS~1\Temp\IXP000.TMP\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\FCDAC0A0AD874C333A05DC1548B97920 : C:\DOCUME~1\lionel\LOCALS~1\Temp\Microsoft .NET Framework 4 Setup_4.0.30319\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\05CA691F59C71E249974DBBA81FBC3C8 : C:\DOCUME~1\lionel\LOCALS~1\Temp\IXP000.TMP\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\243493A986A4ABE4586A555B954F7E00 : C:\DOCUME~1\lionel\LOCALS~1\Temp\IXP000.TMP\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\487EA05EEBAFAD641A8FB7B665CD2BE2 : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{B6520772-3C83-46CD-92AC-D6351EF25828}\
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Products\B64ADB9B71E234F4D9A7B9E1900A4A8D : C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\{301A1609-591B-41E9-BDA4-3D191C4057B0}\
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01FB9D36515EA62478C46E3C3515AABD] : 01:\Software\Tracker Software\LiveUpdate\StartMenuShortCut
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E52E3A99F2B1D6B42947AB0549128B54] : C:\Program Files\Tracker Software\Live Update\LiveUpdate.exe
Supprim� avec succ�s : [HKLM\Software\Microsoft\Command Processor]|[AutoRun] :
Supprim� avec succ�s : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Windows\CurrentVersion\Run]|[ISUSPM] : C:\Documents and Settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe -scheduler
Supprim� avec succ�s : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\temp\janinblr\iTunnel\iTunnel.exe] : C:\temp\janinblr\iTunnel\iTunnel.exe:*:Enabled:iTunnel
Supprim� avec succ�s : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-4.1.13.exe] : C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-4.1.13.exe:*:Enabled:TinyUmbrella - Save your SHSH!
Supprim� avec succ�s : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-5.10.07.exe] : C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-5.10.07.exe:*:Enabled:TinyUmbrella - Save your SHSH!
Supprim� avec succ�s : [HKLM\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]|[C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-6.01.00.exe] : C:\Documents and Settings\lionel\Mes documents\T�l�chargements\tinyumbrella-6.01.00.exe:*:Enabled:TinyUmbrella - Save your SHSH!
���������� | IFEO
���������� | Dossiers
Supprim� avec succ�s : C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
Supprim� avec succ�s : C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2681073451-2210917993-591611826-1005Core.job
Supprim� avec succ�s : C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2681073451-2210917993-591611826-1005UA.job
Supprim� avec succ�s : C:\Documents and Settings\All Users\Menu D�marrer\LiveUpdate.lnk
Supprim� avec succ�s : C:\Documents and Settings\All Users\Application Data\FLEXnet\Connect\Database\{2BA4F03E-3B47-4ed2-BA5E-A44DECC8A182}.ini
Supprim� avec succ�s : C:\Documents and Settings\lionel\Application Data\FLEXnet\Connect\Database\isuspm.ini
Supprim� avec succ�s : C:\Documents and Settings\lionel\Application Data\FLEXnet\Connect\Database\update.ini
Supprim� avec succ�s : C:\Documents and Settings\lionel\Application Data\Microsoft\CLView\Toolbars.dat
Supprim� avec succ�s : C:\Documents and Settings\lionel\Local Settings\Temp\conduitinstaller.exe
Supprim� avec succ�s : C:\Documents and Settings\lionel\Local Settings\Temp\e4j1D9.tmp_dir\umbrella-win.jar
Supprim� avec succ�s : C:\Documents and Settings\lionel\Local Settings\Temp\e4j209.tmp_dir\umbrella-win.jar
Supprim� avec succ�s : C:\Documents and Settings\lionel\Local Settings\Temp\e4jFB.tmp_dir\umbrella-win.jar
Supprim� avec succ�s : C:\WINDOWS\Installer\wix{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}.SchedServiceConfig.rmi
Supprim� avec succ�s : C:\WINDOWS\Installer\{38E5A3B1-ADF1-47E0-8024-76310A30EB36}\LiveUpdate.exe_159D431DD2094A75A6EE2B7624A40520.exe
Supprim� avec succ�s : C:\WINDOWS\Installer\{EF8CCDB9-8AF2-4B45-9C27-B892CC33793A}\_80A27599615A97912540AE.exe
Supprim� avec succ�s : C:\Documents and Settings\All Users\Application Data\FLEXnet
Supprim� avec succ�s : C:\Documents and Settings\lionel\Application Data\FLEXnet
���������� | D�tournements de raccourcis
Supprim� avec succ�s : C:\Documents and Settings\All Users\Menu D�marrer\Programmes\Vivia - The Video Editor.lnk : C:\WINDOWS\Installer\{EF8CCDB9-8AF2-4B45-9C27-B892CC33793A}\_80A27599615A97912540AE.exe
Supprim� avec succ�s : C:\Documents and Settings\All Users\Menu D�marrer\Programmes\PDF-XChange\Check for Updates.lnk : C:\Program Files\Tracker Software\Live Update\LiveUpdate.exe
Supprim� avec succ�s : C:\Documents and Settings\lionel\Recent\hosts.umbrella.lnk : C:\WINDOWS\system32\drivers\etc\hosts.umbrella
���������� | D�tournement internet Explorer
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : http://www.google.com/ie -> http://www.google.com/
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://eeepc.asus.com/global -> http://www.google.com/
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://www.google.com -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : http://www.google.com/ie -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-21-2681073451-2210917993-591611826-1005\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : http://www.google.com/ie -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> http://www.google.com/ie
R�par� : [HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[MigrateProxy] : 0 -> 1
R�par� : [HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[MigrateProxy] : 0 -> 1
���������� | D�tournement Google Chrome
[lionel] Remis a z�ro avec succ�s : SearchURL
[lionel] Remis a z�ro avec succ�s : Preferences
���������� | D�tournement Firefox
[lionel] Supprim� avec succ�s : user_pref("extensions.testpilot.alreadyCustomizedToolbar", true);
[lionel] Supprim� avec succ�s : user_pref("weboftrust.search.ask.display", "Ask.com Web Search");
[lionel] Supprim� avec succ�s : user_pref("weboftrust.search.dogpile.prestyle", ".paidSearchResult [ATTR] { display: none ! important; } .searchResultsPane { max-width: 44.08em; } [ATTR] { position: absolute; visibility: hidden; }");
[lionel] Supprim� avec succ�s : user_pref("weboftrust.search.google.urlign", "^http(s)?\\:\\/\\/((www|encrypted)\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/(a\\/|accounts|ad(s|manager|planner|sense|words)|alerts|analytics|apps|appserve|base|calendar|chrome(frame)?|codesearch|comparisonads|corporate|datacenter|dfp|dictionary|doodle|educators|enterprise|events|experimental|familysafety|finance|flutrends|friendconnect|goog411|googlebooks|googlenotebook|gwt|help|history|images|imgres|ime|insights|landing|local|logos|maps|mobile|moon|music|newproducts|news|notebook|patents|phone|postini|powermeter|press|profiles|publicdata|puzzles|onlinechallenge|reader|relief|services|s2|sitesearch|sky|smallbusinessnetwork|squared|submit|support|sync|talk|toolbar|ventures|voice|web(masters|elements)|intl\\/[^\\/]+\\/.+)");
[lionel] Supprim� avec succ�s : user_pref("weboftrust.search.mailru.style", "#searchResultsWrap .res-head a[id] ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 2px; position: relative; visibility: visible; }");
���������� | D�tournement des cl�s StartMenuInternet
R�par� : [HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : C:\Program Files\Internet Explorer\iexplore.exe -> "C:\Program Files\Internet Explorer\iexplore.exe"
R�par� : [HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command] : "C:\Documents and Settings\lionel\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" -> "C:\Program Files\Google\Chrome\Application\chrome.exe"
���������� | AppInit_DLLs
���������� | D�tournement Javascript
���������� | Firewall
���������� | Fichiers temporaires
[Default User] Fichiers temporaires Supprim�s : 0 Ko
[Administrateur] Fichiers temporaires Supprim�s : 31 Ko
[NetworkService] Fichiers temporaires Supprim�s : 0 Ko
[All Users] Fichiers temporaires Supprim�s : 0 Ko
[LocalService] Fichiers temporaires Supprim�s : 0 Ko
[lionel] Fichiers temporaires Supprim�s : 2649 Ko
Autre rapport
���������� |EOF| ���������� | 11:27:46