cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

���������� | Shortcut_Module | g3n-h@ckm@n | 23.03.2014.5

����� XP | Vista | 7 | 8 - 32/64 bits ����� - Start 22:42:02 - 23/03/2014

Mis � jour le : 23/03/2014 | 17.05 par g3n-h@ckm@n

Contact : http://www.sosvirus.net

Boot : Normal

Syst�me : Windows Vista (TM) Home Premium (32 bits) HomePremium Service Pack 2

M�moire RAM = Total (MB) : 3142 | Libre (MB) : 1762
Pagefile = Total (MB) : 6491 | Libre (MB) : 5011
Virtuelle = Total (MB) : 2097 | Libre (MB) : 1953


Registre sauvegard� , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe

���������� | Mises � jour Windows

Derni�re(s) d�tection(s) : 2014-03-23 10:01:08
Derni�res T�l�charg�es : 2014-03-18 11:32:23
Derni�res install�es : 2014-03-19 02:11:04
Prochaine recherche : 2014-03-24 05:54:57

���������� | Navigateurs

IE : 9.0.8112.16540 (� Microsoft Corporation. Tous droits r�serv�s.)
GC : 31.0.1650.63 (Copyright 2012 Google Inc. All rights reserved.)

���������� | Processus tu�s

904 | C:\Windows\system32\nvvsvc.exe (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 175.53.) - (7.15.11.7553) -> C:\Windows\system32\nvvsvc.exe
1296 | C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe (.IDT, Inc. - IDT PC Audio.) - (1.0.6017.13) -> C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\STacSV.exe
1484 | C:\Windows\system32\SLsvc.exe (.Microsoft Corporation - Service de gestion des licences Microsoft.) - (6.0.6002.18005) -> C:\Windows\system32\SLsvc.exe
1556 | C:\Windows\system32\rundll32.exe (.Microsoft Corporation - Processus h�te Windows (Rundll32).) - (6.0.6000.16386) -> C:\Windows\system32\rundll32.exe C:\Windows\system32\NVSVC.DLL,nvsvcInitialize
1660 | C:\Windows\system32\Hpservice.exe (.Hewlett-Packard Corporation - HpService.) - (3.10.1.6) -> C:\Windows\system32\Hpservice.exe
1956 | C:\Windows\System32\spoolsv.exe (.Microsoft Corporation - Application sous-syst�me spouleur.) - (6.0.6002.18294) -> C:\Windows\System32\spoolsv.exe
544 | C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe (.Andrea Electronics Corporation - Andrea filters APO access service (32-bit).) - (1.0.32.3) -> C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\aestsrv.exe
644 | C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (.Apple Inc. - Apple Mobile Device Service.) - (2.50.39.0) -> "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
912 | C:\Program Files\Microsoft\BingBar\SeaPort.EXE (.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) - (3.1.163.0) -> "C:\Program Files\Microsoft\BingBar\SeaPort.EXE"
1100 | C:\Program Files\Bonjour\mDNSResponder.exe (.Apple Inc. - Bonjour Service.) - (1.0.6.2) -> "C:\Program Files\Bonjour\mDNSResponder.exe"
1676 | C:\Program Files\Common Files\LightScribe\LSSrvc.exe (.Hewlett-Packard Company - LightScribe Service.) - (1.12.33.2) -> "C:\Program Files\Common Files\LightScribe\LSSrvc.exe"
2060 | C:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe (.Nitro PDF Software - Nitro PDF Spool Service.) - (7.0.0.1) -> "C:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe"
2112 | C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe (. - CLCapSvc Module.) - (5.0.0.2922) -> "C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe"
2128 | C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe (. - CLSched Module.) - (5.0.0.2922) -> "C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe"
2224 | C:\Windows\SMINST\BLService.exe (. - STServices.) - (1.0.0.8) -> C:\Windows\SMINST\BLService.exe
2260 | C:\Program Files\CyberLink\Shared Files\RichVideo.exe (. - RichVideo Module.) - (2.0.0.1120) -> "C:\Program Files\CyberLink\Shared Files\RichVideo.exe"
2424 | C:\Program Files\SFR\Gestionnaire de Connexion\SFR.DashBoard.Service.exe (.SFR - SFR.DashBoard.Service.) - (3.0.0.0) -> "C:\Program Files\SFR\Gestionnaire de Connexion\SFR.DashBoard.Service.exe"
2584 | C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe (.WDC - WD Drive Manager Service.) - (3.1.0.8) -> "C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe"
2636 | C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe (. - WD File Management Engine.) - (1.4.5.2) -> "C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe"
2684 | C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe (. - WD Shadow Copy.) - (1.4.1.1) -> "C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe"
2764 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (.Microsoft Corp. - Microsoft� Windows Live ID Service.) - (7.250.4232.0) -> "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
2816 | C:\Windows\system32\SearchIndexer.exe (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - (7.0.6002.18005) -> C:\Windows\system32\SearchIndexer.exe /Embedding
2968 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (.Microsoft Corp. - Microsoft� Windows Live ID Service Monitor.) - (7.250.4232.0) -> WLIDSvcM.exe 2764
3272 | C:\Windows\System32\alg.exe (.Microsoft Corporation - Service de la passerelle de la couche Application.) - (6.0.6001.18000) -> C:\Windows\System32\alg.exe
3836 | C:\Windows\system32\taskeng.exe (.Microsoft Corporation - Moteur du Planificateur de t�ches.) - (6.0.6002.18342) -> taskeng.exe {F7511374-6795-4AED-9633-3328A7E5ADF1}
3852 | C:\Windows\Explorer.EXE (.Microsoft Corporation - Explorateur Windows.) - (6.0.6002.18005) -> C:\Windows\Explorer.EXE
3896 | C:\Windows\system32\taskeng.exe (.Microsoft Corporation - Moteur du Planificateur de t�ches.) - (6.0.6002.18342) -> taskeng.exe {35E0D6DB-6A2D-4693-810D-58A763972349}
4048 | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) - (10.2.4.0) -> "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
4076 | C:\Program Files\HP\QuickPlay\QPService.exe (.CyberLink Corp. - HP QuickPlay Resident Program.) - (4.5.0.1) -> "C:\Program Files\HP\QuickPlay\QPService.exe"
2076 | C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe (. Hewlett-Packard Development Company, L.P. - Quick Launch Buttons.) - (6.4.4.1) -> "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe" /Start
2400 | C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe (. Hewlett-Packard Development Company, L.P. - HP QuickTouch On Screen Display.) - (1.0.8.0) -> "C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe"
3252 | C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (.Hewlett-Packard - hpwuSchd Application.) - (80.1.0.0) -> "C:\Program Files\HP\HP Software Update\hpwuSchd2.exe"
2292 | C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (.Hewlett-Packard Development Company, L.P. - HPWAMain Module.) - (3.0.9.1) -> "C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe"
2340 | C:\Program Files\iTunes\iTunesHelper.exe (.Apple Inc. - iTunesHelper.) - (9.0.2.25) -> "C:\Program Files\iTunes\iTunesHelper.exe"
832 | C:\Windows\System32\rundll32.exe (.Microsoft Corporation - Processus h�te Windows (Rundll32).) - (6.0.6000.16386) -> "C:\Windows\System32\rundll32.exe" C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
3416 | C:\Program Files\Microsoft Security Client\msseces.exe (.Microsoft Corporation - Microsoft Security Client User Interface.) - (4.4.304.0) -> "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
2736 | C:\Program Files\DivX\DivX Update\DivXUpdate.exe (. - DivX Update.) - (1.0.6.87) -> "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
1136 | C:\Program Files\Common Files\Java\Java Update\jusched.exe (.Oracle Corporation - Java(TM) Update Scheduler.) - (2.1.9.4) -> "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
1152 | C:\Program Files\IDT\WDM\sttray.exe (.IDT, Inc. - IDT PC Audio.) - (1.0.6017.13) -> "C:\Program Files\IDT\WDM\sttray.exe"
1132 | C:\Program Files\Windows Sidebar\sidebar.exe (.Microsoft Corporation - Volet Windows.) - (6.0.6002.18005) -> "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
1420 | C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (.Hewlett-Packard Company - .) - (1.12.33.2) -> "C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe" -hidden
1080 | C:\Windows\ehome\ehtray.exe (.Microsoft Corporation - Media Center Tray Applet.) - (6.0.6001.18000) -> "C:\Windows\ehome\ehtray.exe"
2388 | C:\Program Files\Windows Media Player\wmpnscfg.exe (.Microsoft Corporation - Application de configuration du service Partage r�seau du Lecteur Windows Media.) - (11.0.6001.7000) -> "C:\Program Files\Windows Media Player\wmpnscfg.exe"
2344 | C:\Users\Hugo\AppData\Roaming\uTorrent\uTorrent.exe (.BitTorrent Inc. - �Torrent.) - (3.3.0.29333) -> "C:\Users\Hugo\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
3476 | C:\Program Files\Skype\Phone\Skype.exe (.Skype Technologies S.A. - Skype .) - (6.14.59.104) -> "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
1440 | C:\Program Files\File Extensions\File-Extensions.org-Search.exe (.Digidy, s.r.o. - File-Extensions.org Search.) - (0.2.0.0) -> "C:\Program Files\File Extensions\File-Extensions.org-Search.exe" -nowindow
3240 | C:\Program Files\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe (.Panasonic Corporation - .) - (3.2.1012.2118) -> "C:\Program Files\Common Files\Panasonic\HD Writer AutoStart\HDWriterAutoStart.exe"
2980 | C:\Windows\system32\wbem\unsecapp.exe (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.0.6002.18005) -> C:\Windows\system32\wbem\unsecapp.exe -Embedding
3540 | C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (.Western Digital Technologies, Inc. - WD Drive Manager Status.) - (3.1.0.15) -> "C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe"
1504 | C:\Users\Hugo\AppData\Roaming\Dropbox\bin\Dropbox.exe (.Dropbox, Inc. - Dropbox.) - (2.4.11.0) -> "C:\Users\Hugo\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
3740 | C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (.Hewlett-Packard Development Company, L.P. - hpqwmiex Module.) - (2.0.2.4) -> "C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe"
1112 | C:\Program Files\Windows Media Player\wmpnetwk.exe (.Microsoft Corporation - Service Partage r�seau du Lecteur Windows Media.) - (11.0.6001.7000) -> "C:\Program Files\Windows Media Player\wmpnetwk.exe"
4660 | C:\Windows\ehome\ehmsas.exe (.Microsoft Corporation - Media Center Media Status Aggregator Service.) - (6.0.6001.18000) -> C:\Windows\ehome\ehmsas.exe -Embedding
4692 | C:\Program Files\iPod\bin\iPodService.exe (.Apple Inc. - iPodService Module (32-bit).) - (9.0.2.25) -> "C:\Program Files\iPod\bin\iPodService.exe"
4764 | C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE (.Hewlett-Packard Development Company, L.P. - Module to process WiFi messages..) - (3.0.4.1) -> "C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE"
5040 | C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe (. - HpqToaster Module.) - (1.10.1.6) -> "C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe" -Embedding
5648 | C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe (.Hewlett-Packard Development Company, L.P. - Com for QLB application.) - (6.4.3.1) -> "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe"
6064 | C:\Program Files\Google\Update\GoogleUpdate.exe (.Google Inc. - Programme d'installation de Google.) - (1.2.131.7) -> "C:\Program Files\Google\Update\GoogleUpdate.exe" /c
4436 | c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe (.Hewlett-Packard - HP Health Check Service.) - (3.1.4.1) -> "c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe"
2824 | C:\Program Files\Common Files\Java\Java Update\jucheck.exe (.Oracle Corporation - Java(TM) Update Checker.) - (2.1.9.4) -> "C:\Program Files\Common Files\Java\Java Update\jucheck.exe" -auto -critical
8080 | C:\Windows\system32\SearchProtocolHost.exe (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) - (7.0.6002.18005) -> "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe16_ Global\UsGthrCtrlFltPipeMssGthrPipe16 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
6952 | C:\Windows\system32\SearchFilterHost.exe (.Microsoft Corporation - Microsoft Windows Search Filter Host.) - (7.0.6002.18005) -> "C:\Windows\system32\SearchFilterHost.exe" 0 628 632 640 65536 636
5328 | C:\Windows\system32\conime.exe (.Microsoft Corporation - Console IME.) - (6.0.6002.18005) -> C:\Windows\system32\conime.exe

���������� | Processus d�marr�s


[10/04/2013 15:28:34] - 436 | C:\Windows\System32\smss.exe (.Microsoft Corporation - Windows Session Manager.) - (6.0.6002.18805) -> \SystemRoot\System32\smss.exe
[21/01/2008 03:24:54] - 572 | C:\Windows\system32\csrss.exe (.Microsoft Corporation - Processus d'ex�cuttion client-serveur.) - (6.0.6001.18000) -> C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
[21/01/2008 03:23:42] - 624 | C:\Windows\system32\wininit.exe (.Microsoft Corporation - Application de d�marrage de Windows.) - (6.0.6001.18000) -> wininit.exe
[21/01/2008 03:24:54] - 636 | C:\Windows\system32\csrss.exe (.Microsoft Corporation - Processus d'ex�cuttion client-serveur.) - (6.0.6001.18000) -> C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
[19/04/2012 20:41:34] - 672 | C:\Windows\system32\services.exe (.Microsoft Corporation - Applications Services et Contr�leur.) - (6.0.6002.18005) -> C:\Windows\system32\services.exe
[20/04/2012 09:15:02] - 684 | C:\Windows\system32\lsass.exe (.Microsoft Corporation - Processus de l�autorit� de s�curit� locale.) - (6.0.6002.18541) -> C:\Windows\system32\lsass.exe
[21/01/2008 03:23:44] - 692 | C:\Windows\system32\lsm.exe (.Microsoft Corporation - Service du gestionnaire de session locale.) - (6.0.6001.18000) -> C:\Windows\system32\lsm.exe
[21/01/2008 03:23:43] - 860 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k DcomLaunch
[19/04/2012 20:39:56] - 944 | C:\Windows\system32\winlogon.exe (.Microsoft Corporation - Application d'ouverture de session Windows.) - (6.0.6002.18005) -> winlogon.exe
[21/01/2008 03:23:43] - 964 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k rpcss
[23/10/2013 15:01:10] - 1028 | c:\Program Files\Microsoft Security Client\MsMpEng.exe (.Microsoft Corporation - Antimalware Service Executable.) - (4.4.304.0) -> "c:\Program Files\Microsoft Security Client\MsMpEng.exe"
[21/01/2008 03:23:43] - 1192 | C:\Windows\System32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
[21/01/2008 03:23:43] - 1228 | C:\Windows\System32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
[21/01/2008 03:23:43] - 1260 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k netsvcs
[21/01/2008 03:23:43] - 1464 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k GPSvcGroup
[21/01/2008 03:23:43] - 1528 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k LocalService
[21/01/2008 03:23:43] - 1780 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k NetworkService
[21/01/2008 03:23:43] - 1984 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
[21/01/2008 03:23:43] - 1272 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k bthsvcs
[21/01/2008 03:23:43] - 2100 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
[21/01/2008 03:23:43] - 2484 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k imgsvc
[21/01/2008 03:23:43] - 2724 | C:\Windows\System32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\System32\svchost.exe -k WerSvcGroup
[19/04/2012 20:41:25] - 3804 | C:\Windows\system32\Dwm.exe (.Microsoft Corporation - Gestionnaire de fen�tres du Bureau.) - (6.0.6002.18005) -> "C:\Windows\system32\Dwm.exe"
[23/10/2013 15:01:10] - 2868 | c:\Program Files\Microsoft Security Client\NisSrv.exe (.Microsoft Corporation - Microsoft Network Realtime Inspection Service.) - (4.4.304.0) -> "c:\Program Files\Microsoft Security Client\NisSrv.exe"
[19/04/2012 20:39:56] - 2864 | C:\Windows\system32\wbem\wmiprvse.exe (.Microsoft Corporation - WMI Provider Host.) - (6.0.6002.18005) -> C:\Windows\system32\wbem\wmiprvse.exe
[21/01/2008 03:23:43] - 4504 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.0.6001.18000) -> C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
[19/04/2012 20:39:56] - 5364 | C:\Windows\system32\wbem\wmiprvse.exe (.Microsoft Corporation - WMI Provider Host.) - (6.0.6002.18005) -> C:\Windows\system32\wbem\wmiprvse.exe
[18/06/2009 21:06:42] - 6064 | C:\Program Files\Google\Update\GoogleUpdate.exe (.Google Inc. - Programme d'installation de Google.) - (1.2.131.7) -> "C:\Program Files\Google\Update\GoogleUpdate.exe" /c
[18/03/2014 23:10:36] - 7336 | C:\Users\Hugo\Desktop\Shortcut_Module.exe (. - Shortcut_Module.) - (23.3.2014.5) -> "C:\Users\Hugo\Desktop\Shortcut_Module.exe"

���������� | Services


���������� | Hosts

C:\Windows\System32\Drivers\etc\hosts : Remis a z�ro avec succ�s

���������� | Registre

Supprim� avec succ�s : HKLM\Software\Classes\AppID\protector_dll.DLL
Supprim� avec succ�s : HKLM\Software\Classes\AppID\SoftwareUpdate.exe
Supprim� avec succ�s : HKLM\Software\Classes\TypeLib\{7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4} : SoftwareUpdate
Supprim� avec succ�s : HKLM\Software\Classes\Interface\{422CA428-AACB-496A-8FDD-86758BCFB756} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}
Supprim� avec succ�s : HKLM\Software\Classes\Interface\{995E123A-2A19-4E52-872F-774C5589459C} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}
Supprim� avec succ�s : HKLM\Software\Classes\Interface\{A52621AD-E10F-477B-9ACB-B6181610788B} : {7C1E4FCC-B47E-44AE-8EA7-FA66EBC8BAC4}
Supprim� avec succ�s : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Iminent
Supprim� avec succ�s : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WebCakeUpdaterService
Supprim� avec succ�s : HKU\S-1-5-21-3449159410-2524389367-1203783606-1000\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0 : C:\Users\Hugo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
Supprim� avec succ�s : HKU\S-1-5-21-3449159410-2524389367-1203783606-1000\Software\Trolltech
Supprim� avec succ�s : HKLM\Software\Classes\Installer\Features\5E37777EA449F354793F6467A70E2A35 : gm_Optional
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3312062B09 : C:\Program Files\Java\jre6\zipper.exe
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3312062F09 : C:\Program Files\Java\jre6\zipper.exe
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-3449159410-2524389367-1203783606-1000\Products\B55E73991336408439FE779E292F40DB : Kreapixel
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files\Ask.com\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files\Ask.com\Updater\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files\Ask.com\assets\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Kreapixel\Webplayer\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Firefox\toolbar@ask.com\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Firefox\toolbar@ask.com\chrome\content\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Firefox\toolbar@ask.com\chrome\skin\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Firefox\toolbar@ask.com\defaults\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Program Files\Ask.com\assets\oobe\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Kreapixel\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Firefox\toolbar@ask.com\chrome\]
Supprim� avec succ�s : [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders]|[C:\Firefox\toolbar@ask.com\searchplugins\]
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{085D09F3-AB37-4C0E-9A01-B5D4F4CC5696} : C:\Users\Hugo\AppData\Roaming\OpenCandy\FE1F953E4F324EA593B5974F59C998C1\
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BitGuard
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EPUpdater
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore
Supprim� avec succ�s : HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA

���������� | IFEO


���������� | Dossiers

Supprim� avec succ�s : C:\Users\All Users\gjfddhbiipgnmlgiomfkkjjecgebabgo
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjfddhbiipgnmlgiomfkkjjecgebabgo
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gjfddhbiipgnmlgiomfkkjjecgebabgo_0.localstorage
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gjfddhbiipgnmlgiomfkkjjecgebabgo_0.localstorage-journal
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_a.adorika.net_0.localstorage
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_a.adorika.net_0.localstorage-journal
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_forum.telecharger.01net.com_0.localstorage
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_forum.telecharger.01net.com_0.localstorage-journal
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.01net.com_0.localstorage
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.01net.com_0.localstorage-journal
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CLARX3RZ\smartwareupdate[1].htm
Supprim� avec succ�s : C:\Users\Hugo\AppData\Local\Microsoft\XLive\Updates\5454083b\Content\UpdateTitle.exe (� Microsoft Corporation. All rights reserved.) -> Microsoft� Games for Windows� - LIVE [OFN : TitleUpdateSetup.exe]

���������� | D�tournements de raccourcis


���������� | Proxy


���������� | D�tournement internet Explorer

R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : -> http://www.google.com/ie
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : -> res://ieframe.dll/tabswelcome.htm
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Search Bar] : -> http://www.google.com/
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Start Page] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Local Page] : -> C:\Windows\system32\blank.htm
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Default_Search_URL] : -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Default_Page_URL] : -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Search]|[Search Page] : -> http://go.microsoft.com/fwlink/?LinkId=54896

���������� | D�tournement Google Chrome

[Hugo] Remis a z�ro avec succ�s : SearchURL
[Hugo] Remis a z�ro avec succ�s : Preferences

����� | Heuristique


���������� | D�tournement Firefox


���������� | D�tournement des cl�s StartMenuInternet


���������� | AppInit_DLLs


[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1

���������� | D�tournement Javascript


���������� | Firewall

R�par� : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]|[EnableFirewall] : 1 -> 0
R�par� : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]|[EnableFirewall] : 1 -> 0
R�par� : [HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]|[EnableFirewall] : 1 -> 0


���������� | Fichiers temporaires

[All Users] Fichiers temporaires Supprim�s : 0 Ko
[Default User] Fichiers temporaires Supprim�s : 0 Ko
[Default] Fichiers temporaires Supprim�s : 0 Ko
[Public] Fichiers temporaires Supprim�s : 0 Ko
[Hugo] Fichiers temporaires Supprim�s : 6331 Ko

Autre rapport

C:\Shortcut_Module\Shortcut_Module_19_03_2014_00_11_59.txt [71813 o]
C:\Shortcut_Module\Shortcut_Module_19_03_2014_20_29_11.txt [21250 o]

[X] : [6933 Ko]

���������� |EOF| ���������� | 00:28:12 | [29 Ko]

Publicité


Signaler le contenu de ce document

Publicité