à la relance de HijackThis je n'ai aucune question,donc pas de séléction possible il démare et cré une nouvelle page log ?
bip41 a écrit :
logfile of random's system information tool 1.06 (written by random/random)
run by andre at 2009-08-08 16:59:08
microsoft® windows vista édition familiale basique service pack 1
system drive c: has 13 gb (18%) free of 70 gb
total ram: 2037 mb (46% free)
logfile of trend micro hijackthis v2.0.2
scan saved at 16:59:47, on 08/08/2009
platform: windows vista sp1 (winnt 6.00.1905)
msie: internet explorer v8.00 (8.00.6001.18813)
boot mode: normal
running processes:
c:\windows\system32\dwm.exe
c:\windows\explorer.exe
c:\windows\system32\taskeng.exe
c:\program files\zone labs\zonealarm\zlclient.exe
c:\windows\system32\igfxtray.exe
c:\windows\system32\hkcmd.exe
c:\windows\system32\igfxpers.exe
c:\program files\synaptics\syntp\syntpstart.exe
c:\program files\alwil software\avast4\ashdisp.exe
c:\program files\java\jre6\bin\jusched.exe
c:\program files\windows sidebar\sidebar.exe
c:\program files\vista start menu\vistastartmenu.exe
c:\program files\divers\pop peeper\poppeeper.exe
c:\program files\tomtom home 2\tomtomhomerunner.exe
c:\program files\spybot - search & destroy\teatimer.exe
c:\program files\orange\logiciel de synchronisation orange\voxsync.exe
c:\program files\windows media player\wmpnscfg.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\orange\logiciel de synchronisation orange\syncmanager.exe
c:\program files\windows sidebar\sidebar.exe
c:\program files\microsoft office\office11\outlook.exe
c:\program files\synaptics\syntp\syntpenh.exe
c:\program files\divers\superantispyware\superantispyware.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\windows live\toolbar\wltuser.exe
c:\windows\system32\taskeng.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\internet explorer\iexplore.exe
c:\windows\system32\macromed\flash\flashutil10b.exe
c:\users\andre\desktop\rsit.exe
c:\windows\system32\searchfilterhost.exe
c:\program files\trend micro\andre.exe
r1 - hkcu\software\microsoft\internet explorer\main,default_page_url =
http://go.microsoft.com/fwlink/?linkid=69157
r1 - hkcu\software\microsoft\internet explorer\main,search page =
http://go.microsoft.com/fwlink/?linkid=54896
r0 - hkcu\software\microsoft\internet explorer\main,start page =
http://www.orange.fr/
r1 - hklm\software\microsoft\internet explorer\main,default_page_url =
http://ie.redirect.hp.com/svs/rdr?type=3&tp=iehome&locale=fr_fr&c(...)
r1 - hklm\software\microsoft\internet explorer\main,default_search_url =
http://go.microsoft.com/fwlink/?linkid=54896
r1 - hklm\software\microsoft\internet explorer\main,search page =
http://go.microsoft.com/fwlink/?linkid=54896
r0 - hklm\software\microsoft\internet explorer\main,start page =
http://ie.redirect.hp.com/svs/rdr?type=3&tp=iehome&locale=fr_fr&c(...)
r0 - hklm\software\microsoft\internet explorer\search,searchassistant =
r0 - hklm\software\microsoft\internet explorer\search,customizesearch =
r0 - hkcu\software\microsoft\internet explorer\toolbar,linksfoldername =
o1 - hosts: ::1 localhost
o2 - bho: acroiehelperstub - {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll
o2 - bho: askbar bho - {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askbar3.dll
o2 - bho: spybot-s&d ie protection - {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\sdhelper.dll
o2 - bho: (no name) - {5c255c8a-e604-49b4-9d64-90988571cecb} - (no file)
o2 - bho: eorezobho - {64f56fc1-1272-44cd-ba6e-39723696e350} - (no file)
o2 - bho: search helper - {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll
o2 - bho: programme d'aide de l'assistant de connexion windows live id - {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
o2 - bho: google toolbar helper - {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar2.dll
o2 - bho: java(tm) plug-in 2 ssv helper - {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
o2 - bho: windows live toolbar helper - {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
o2 - bho: (no name) - {fdd3b846-8d59-4ffb-8758-209b6ad74acc} - c:\program files\microsoft money\system\mnyviewer.dll
o3 - toolbar: &google - {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar2.dll
o3 - toolbar: mediadico familial - {cedda62b-5fbe-4ab2-ae2e-5e069f444444} - c:\program files\laventure\mdtoolbar\mdtoolbar.dll
o3 - toolbar: (no name) - {ed0e8ca5-42fb-4b18-997b-769e0408e79d} - (no file)
o3 - toolbar: &windows live toolbar - {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
o3 - toolbar: ask toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askbar3.dll
o4 - hklm\..\run: [zonealarm client] "c:\program files\zone labs\zonealarm\zlclient.exe"
o4 - hklm\..\run: [igfxtray] c:\windows\system32\igfxtray.exe
o4 - hklm\..\run: [hotkeyscmds] c:\windows\system32\hkcmd.exe
o4 - hklm\..\run: [persistence] c:\windows\system32\igfxpers.exe
o4 - hklm\..\run: [syntpstart] c:\program files\synaptics\syntp\syntpstart.exe
o4 - hklm\..\run: [avast!] c:\progra~1\alwils~1\avast4\ashdisp.exe
o4 - hklm\..\run: [sunjavaupdatesched] "c:\program files\java\jre6\bin\jusched.exe"
o4 - hklm\..\run: [adobe reader speed launcher] "c:\program files\adobe\reader 9.0\reader\reader_sl.exe"
o4 - hklm\..\runonce: [launcher] %windir%\sminst\launcher.exe
o4 - hkcu\..\run: [sidebar] c:\program files\windows sidebar\sidebar.exe /autorun
o4 - hkcu\..\run: [vistastartmenu] "c:\program files\vista start menu\vistastartmenu.exe"
o4 - hkcu\..\run: [epson stylus dx7400 series] c:\windows\system32\spool\drivers\w32x86\3\e_faticde.exe /fu "c:\windows\temp\e_saf72.tmp" /ef "hkcu"
o4 - hkcu\..\run: [pop peeper] "c:\program files\divers\pop peeper\poppeeper.exe" -min
o4 - hkcu\..\run: [superantispyware] c:\program files\divers\superantispyware\superantispyware.exe
o4 - hkcu\..\run: [tomtomhome.exe] "c:\program files\tomtom home 2\tomtomhomerunner.exe" -s
o4 - hkcu\..\run: [spybotsd teatimer] c:\program files\spybot - search & destroy\teatimer.exe
o4 - hkus\s-1-5-19\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'service local')
o4 - hkus\s-1-5-19\..\run: [windowswelcomecenter] rundll32.exe oobefldr.dll,showwelcomecenter (user 'service local')
o4 - hkus\s-1-5-20\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'service réseau')
o4 - hkus\s-1-5-18\..\run: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background (user 'system')
o4 - hkus\.default\..\run: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background (user 'default user')
o4 - global startup: logiciel de synchronisation orange.lnk = ?
o8 - extra context menu item: add to google photos screensa&ver -
res://c:\windows\system32\gphotos.scr/200
o8 - extra context menu item: add to windows &live favorites -
http://favorites.live.com/quickadd.aspx
o8 - extra context menu item: e&xporter vers microsoft excel -
res://c:\progra~1\micros~3\office12\excel.exe/3000
o9 - extra button: freshdownload - {07cc7f05-1d78-4347-afb4-718d64fa43d0} - c:\program files\divers\freshdownload\fd.exe (file missing)
o9 - extra button: ajout direct - {219c3416-8cb2-491a-a3c7-d9fcddc9d600} - c:\program files\windows live\writer\writerbrowserextension.dll
o9 - extra 'tools' menuitem: &ajout direct dans windows live writer - {219c3416-8cb2-491a-a3c7-d9fcddc9d600} - c:\program files\windows live\writer\writerbrowserextension.dll
o9 - extra button: recherche - {92780b25-18cc-41c8-b9be-3c9c571a8263} - c:\progra~1\micros~3\office11\refiebar.dll
o9 - extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - c:\program files\spybot - search & destroy\sdhelper.dll
o9 - extra 'tools' menuitem: spybot - search && destroy configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - c:\program files\spybot - search & destroy\sdhelper.dll
o9 - extra button: moneyside - {e023f504-0c5a-4750-a1e7-a9046dea8a21} - c:\program files\microsoft money\system\mnyviewer.dll
o13 - gopher prefix:
o20 - winlogon notify: !saswinlogon - c:\program files\divers\superantispyware\saswinlo.dll
o23 - service: ad-aware 2007 service (aawservice) - lavasoft - c:\program files\lavasoft\ad-aware 2007\aawservice.exe
o23 - service: arcsoft connect daemon (acdaemon) - arcsoft inc. - c:\program files\common files\arcsoft\connection service\bin\acservice.exe
o23 - service: avast! iavs4 control service (aswupdsv) - alwil software - c:\program files\alwil software\avast4\aswupdsv.exe
o23 - service: avast! antivirus - alwil software - c:\program files\alwil software\avast4\ashserv.exe
o23 - service: avast! mail scanner - alwil software - c:\program files\alwil software\avast4\ashmaisv.exe
o23 - service: avast! web scanner - alwil software - c:\program files\alwil software\avast4\ashwebsv.exe
o23 - service: boonty games - boonty - c:\program files\common files\boonty shared\service\boonty.exe
o23 - service: com4qlb - hewlett-packard development company, l.p. - c:\program files\hewlett-packard\hp quick launch buttons\com4qlb.exe
o23 - service: easybits magic desktop services for windows nt (ezntsvc) - easybits software corp. - c:\windows\system32\ezntsvc.exe
o23 - service: google updater service (gusvc) - google - c:\program files\google\common\google updater\googleupdaterservice.exe
o23 - service: hp health check service - hewlett-packard - c:\program files\hewlett-packard\hp health check\hphc_service.exe
o23 - service: hpqwmiex - hewlett-packard development company, l.p. - c:\program files\hewlett-packard\shared\hpqwmiex.exe
o23 - service: installdriver table manager (idrivert) - macrovision corporation - c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe
o23 - service: lightscribeservice direct disc labeling service (lightscribeservice) - hewlett-packard company - c:\program files\common files\lightscribe\lssrvc.exe
o23 - service: planificateur liveupdate automatique - unknown owner - c:\program files\symantec\liveupdate\aluschedulersvc.exe (file missing)
o23 - service: roxmediadb9 - sonic solutions - c:\program files\common files\roxio shared\9.0\sharedcom\roxmediadb9.exe
o23 - service: servicelayer - nokia. - c:\program files\pc connectivity solution\servicelayer.exe
o23 - service: stllssvr - microvision development, inc. - c:\program files\common files\surething shared\stllssvr.exe
o23 - service: symantec core lc - symantec corporation - c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe
o23 - service: tomtomhomeservice - tomtom - c:\program files\tomtom home 2\tomtomhomeservice.exe
o23 - service: @%systemroot%\system32\tuneupdefragservice.exe,-1 (tuneup.defrag) - tuneup software gmbh - c:\windows\system32\tuneupdefragservice.exe
o23 - service: truevector internet monitor (vsmon) - check point software technologies ltd - c:\windows\system32\zonelabs\vsmon.exe
o23 - service: xaudioservice - conexant systems, inc. - c:\windows\system32\drivers\xaudio.exe
--
end of file - 11244 bytes
======scheduled tasks folder======
c:\windows\tasks\glaryinitialize.job
c:\windows\tasks\maintenance en 1 clic.job
c:\windows\tasks\user_feed_synchronization-{c221eab5-0c91-4f5b-a7ff-2bb0e7e40658}.job
======registry dump======
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{18df081c-e8ad-4283-a596-fa578c2ebdc3}]
adobe pdf link helper - c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll [2009-02-27 75128]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
askbar bho - c:\program files\askbardis\bar\bin\askbar3.dll [2008-07-17 279944]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{53707962-6f74-2d53-2644-206d7942484f}]
spybot-s&d ie protection - c:\program files\spybot - search & destroy\sdhelper.dll [2009-01-26 1879896]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{5c255c8a-e604-49b4-9d64-90988571cecb}]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{64f56fc1-1272-44cd-ba6e-39723696e350}]
eobho class
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{6ebf7485-159f-4bff-a14f-b9e3aac4465b}]
search helper - c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll [2009-05-19 137600]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030d464-4c02-4abf-8ecc-5164760863c6}]
programme d'aide de l'assistant de connexion windows live id - c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll [2009-03-30 403824]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{aa58ed58-01dd-4d91-8333-cf10577473f7}]
google toolbar helper - c:\program files\google\googletoolbar2.dll [2007-08-16 2436160]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{dbc80044-a445-435b-bc74-9c25c1c588a9}]
java(tm) plug-in 2 ssv helper - c:\program files\java\jre6\bin\jp2ssv.dll [2009-03-09 35840]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{e15a8dc0-8516-42a1-81ea-dc94ec1acf10}]
windows live toolbar helper - c:\program files\windows live\toolbar\wltcore.dll [2009-02-06 1068904]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{fdd3b846-8d59-4ffb-8758-209b6ad74acc}]
c:\program files\microsoft money\system\mnyviewer.dll [2001-07-25 143420]
[hkey_local_machine\software\microsoft\internet explorer\toolbar]
{2318c2b1-4965-11d4-9b18-009027a5cd4f} - &google - c:\program files\google\googletoolbar2.dll [2007-08-16 2436160]
{cedda62b-5fbe-4ab2-ae2e-5e069f444444} - mediadico familial - c:\program files\laventure\mdtoolbar\mdtoolbar.dll [2007-06-09 811008]
{ed0e8ca5-42fb-4b18-997b-769e0408e79d}
{21fa44ef-376d-4d53-9b0f-8a89d3229068} - &windows live toolbar - c:\program files\windows live\toolbar\wltcore.dll [2009-02-06 1068904]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - ask toolbar - c:\program files\askbardis\bar\bin\askbar3.dll [2008-07-17 279944]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"zonealarm client"=c:\program files\zone labs\zonealarm\zlclient.exe [2008-03-03 959976]
"igfxtray"=c:\windows\system32\igfxtray.exe [2008-02-11 141848]
"hotkeyscmds"=c:\windows\system32\hkcmd.exe [2008-02-11 166424]
"persistence"=c:\windows\system32\igfxpers.exe [2008-02-11 133656]
"syntpstart"=c:\program files\synaptics\syntp\syntpstart.exe [2007-09-15 102400]
"avast!"=c:\progra~1\alwils~1\avast4\ashdisp.exe [2009-02-05 81000]
"sunjavaupdatesched"=c:\program files\java\jre6\bin\jusched.exe [2009-03-09 148888]
"adobe reader speed launcher"=c:\program files\adobe\reader 9.0\reader\reader_sl.exe [2009-02-27 35696]
[hkey_local_machine\software\microsoft\windows\currentversion\runonce]
"launcher"=c:\windows\sminst\launcher.exe [2006-11-07 44128]
[hkey_current_user\software\microsoft\windows\currentversion\run]
"sidebar"=c:\program files\windows sidebar\sidebar.exe [2008-01-19 1233920]
"vistastartmenu"=c:\program files\vista start menu\vistastartmenu.exe [2009-04-13 2171392]
"epson stylus dx7400 series"=c:\windows\system32\spool\drivers\w32x86\3\e_faticde.exe [2007-04-12 182272]
"pop peeper"=c:\program files\divers\pop peeper\poppeeper.exe [2009-01-22 1470464]
"superantispyware"=c:\program files\divers\superantispyware\superantispyware.exe [2009-08-08 1830128]
"tomtomhome.exe"=c:\program files\tomtom home 2\tomtomhomerunner.exe [2009-04-08 251240]
"spybotsd teatimer"=c:\program files\spybot - search & destroy\teatimer.exe [2009-03-05 2260480]
[hkey_local_machine\software\microsoft\shared tools\msconfig\startupreg\egrkhsnprz]
[]
c:\programdata\microsoft\windows\start menu\programs\startup
logiciel de synchronisation orange.lnk - c:\program files\orange\logiciel de synchronisation orange\voxsync.exe
[hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon\notify\!saswinlogon]
c:\program files\divers\superantispyware\saswinlo.dll [2008-12-31 356352]
[hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon\notify\igfxcui]
c:\windows\system32\igfxdev.dll [2008-02-11 204800]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5ae067d3-9afb-48e0-853a-ebb7f4a000da}"=c:\program files\divers\superantispyware\sasseh.dll [2008-05-13 77824]
[hkey_local_machine\system\currentcontrolset\control\safeboot\minimal\aawservice]
[hkey_local_machine\system\currentcontrolset\control\safeboot\network\aawservice]
[hkey_current_user\software\microsoft\windows\currentversion\policies\system]
"disablelockworkstation"=0
"disablechangepassword"=0
[hkey_local_machine\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"enableuiadesktoptoggle"=0
[hkey_current_user\software\microsoft\windows\currentversion\policies\explorer]
"nologoff"=0
"noclose"=0
[hkey_local_machine\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[hkey_local_machine\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[hkey_current_user\software\microsoft\windows\currentversion\explorer\mountpoints2\{448586e8-98ec-11dd-9d9e-0016d4f08416}]
shell\autorun\command - f:\installtomtomhome.exe
[hkey_current_user\software\microsoft\windows\currentversion\explorer\mountpoints2\{a3e1d3d5-b394-11dc-84d7-0016d4f08416}]
shell\autorun\command - f:\installtomtomhome.exe
======file associations======
.js - edit - c:\windows\system32\notepad.exe %1
.js - open - c:\windows\system32\wscript.exe "%1" %*
======list of files/folders created in the last 1 months======
2009-08-08 16:59:11 ----d---- c:\program files\trend micro
2009-08-08 16:59:08 ----d---- c:\rsit
2009-08-08 16:36:14 ----a---- c:\windows\isrs-000.tmp
2009-07-29 21:24:30 ----a---- c:\windows\system32\mshtml.dll
2009-07-29 21:24:28 ----a---- c:\windows\system32\ieframe.dll
2009-07-29 21:24:27 ----a---- c:\windows\system32\urlmon.dll
2009-07-29 21:24:27 ----a---- c:\windows\system32\iertutil.dll
2009-07-29 21:24:26 ----a---- c:\windows\system32\wininet.dll
2009-07-29 21:24:26 ----a---- c:\windows\system32\msfeeds.dll
2009-07-29 21:24:25 ----a---- c:\windows\system32\occache.dll
2009-07-29 21:24:25 ----a---- c:\windows\system32\iedkcs32.dll
2009-07-29 21:24:23 ----a---- c:\windows\system32\msfeedsbs.dll
2009-07-29 21:24:23 ----a---- c:\windows\system32\jsproxy.dll
2009-07-29 21:24:23 ----a---- c:\windows\system32\ieunatt.exe
2009-07-29 21:24:23 ----a---- c:\windows\system32\ieui.dll
2009-07-29 21:24:23 ----a---- c:\windows\system32\iesysprep.dll
2009-07-29 21:24:23 ----a---- c:\windows\system32\iepeers.dll
2009-07-29 21:24:22 ----a---- c:\windows\system32\msfeedssync.exe
2009-07-29 21:24:22 ----a---- c:\windows\system32\iesetup.dll
2009-07-29 21:24:22 ----a---- c:\windows\system32\iernonce.dll
2009-07-29 21:24:22 ----a---- c:\windows\system32\ie4uinit.exe
2009-07-26 11:53:42 ----hd---- c:\program files\installjammer registry
2009-07-26 11:53:00 ----d---- c:\program files\virtual agc
2009-07-23 14:19:16 ----d---- c:\programdata\daussy dominique
2009-07-20 17:08:16 ----d---- c:\program files\safer networking
2009-07-20 16:48:39 ----d---- c:\program files\spybot - search & destroy
2009-07-18 10:10:54 ----a---- c:\windows\system32\t2embed.dll
2009-07-18 10:10:53 ----a---- c:\windows\system32\fontsub.dll
2009-07-18 10:10:53 ----a---- c:\windows\system32\dciman32.dll
2009-07-18 10:10:53 ----a---- c:\windows\system32\atmfd.dll
======list of files/folders modified in the last 1 months======
2009-08-08 16:59:16 ----d---- c:\windows\temp
2009-08-08 16:59:11 ----d---- c:\program files
2009-08-08 16:58:07 ----d---- c:\windows\internet logs
2009-08-08 16:43:13 ----d---- c:\program files\askbardis
2009-08-08 16:42:58 ----d---- c:\windows\tasks
2009-08-08 16:42:57 ----d---- c:\program files\glary utilities
2009-08-08 16:39:50 ----d---- c:\windows
2009-08-08 16:39:48 ----d---- c:\windows\sminst
2009-08-08 16:33:49 ----shd---- c:\system volume information
2009-08-08 16:25:52 ----d---- c:\programdata\is-m313k
2009-08-08 16:25:52 ----d---- c:\programdata\is-29t9e
2009-08-07 12:04:27 ----d---- c:\users\andre\appdata\roaming\vista start menu
2009-08-06 16:32:55 ----shd---- c:\windows\installer
2009-08-06 16:32:52 ----d---- c:\program files\jeux
2009-08-06 16:08:18 ----d---- c:\program files\divers
2009-08-04 17:20:30 ----d---- c:\windows\system32
2009-08-04 17:20:30 ----d---- c:\windows\inf
2009-08-04 17:20:30 ----a---- c:\windows\system32\perfstringbackup.ini
2009-08-04 10:29:06 ----d---- c:\program files\microsoft silverlight
2009-08-04 08:27:36 ----d---- c:\program files\common files\microsoft shared
2009-08-01 11:37:38 ----d---- c:\windows\system32\migration
2009-08-01 11:37:38 ----d---- c:\program files\internet explorer
2009-08-01 10:26:50 ----d---- c:\windows\winsxs
2009-07-30 21:29:43 ----d---- c:\windows\system32\catroot2
2009-07-29 22:04:50 ----d---- c:\windows\system32\drivers
2009-07-29 21:20:27 ----d---- c:\windows\system32\catroot
2009-07-23 14:19:16 ----d---- c:\programdata
2009-07-20 17:03:15 ----d---- c:\programdata\spybot - search & destroy
2009-07-18 16:44:55 ----d---- c:\users\andre\appdata\roaming\wormux
2009-07-18 10:19:38 ----d---- c:\program files\windows mail
2009-07-18 10:19:32 ----d---- c:\programdata\microsoft help
2009-07-09 14:58:19 ----d---- c:\windows\prefetch
======list of drivers (r=running, s=stopped, 0=boot, 1=system, 2=auto, 3=demand, 4=disabled)======
r1 aswrdr;aswrdr; c:\windows\system32\drivers\aswrdr.sys [2009-02-05 23152]
r1 aswsp;avast! self protection; c:\windows\system32\drivers\aswsp.sys [2009-02-05 114768]
r1 aswtdi;avast! network shield support; c:\windows\system32\drivers\aswtdi.sys [2009-02-05 51376]
r1 eabfiltr;eabfiltr; c:\windows\system32\drivers\eabfiltr.sys [2006-11-30 8192]
r1 saskutil;saskutil; \??\c:\program files\divers\superantispyware\saskutil.sys [2009-08-08 74480]
r1 vsdatant;zone alarm firewall driver; c:\windows\system32\drivers\vsdatant.sys [2008-03-03 279440]
r2 aswfsblk;aswfsblk; c:\windows\system32\drivers\aswfsblk.sys [2009-02-05 20560]
r2 aswmonflt;aswmonflt; c:\windows\system32\drivers\aswmonflt.sys [2009-02-05 51792]
r2 mdmxsdk;mdmxsdk; c:\windows\system32\drivers\mdmxsdk.sys [2006-06-19 12672]
r2 xaudio;xaudio; c:\windows\system32\drivers\xaudio.sys [2007-07-10 8704]
r3 afc;ppdus aspi shell; c:\windows\system32\drivers\afc.sys [2006-11-10 18688]
r3 bcm43xx;pilote pour carte réseau broadcom 802.11; c:\windows\system32\drivers\bcmwl6.sys [2007-01-03 534016]
r3 cmbatt;pilote pour batterie à méthode de contrôle acpi microsoft; c:\windows\system32\drivers\cmbatt.sys [2008-01-19 14208]
r3 cnxthdaudservice;conexant uaa function driver for high definition audio service; c:\windows\system32\drivers\chdrt32.sys [2008-03-04 188416]
r3 hbtnkey;hbtnkey; c:\windows\system32\drivers\cpqbttn.sys [2006-06-28 9472]
r3 hsf_dpv;hsf_dpv; c:\windows\system32\drivers\hsx_dpv.sys [2007-06-20 984064]
r3 hsxhwazl;hsxhwazl; c:\windows\system32\drivers\hsxhwazl.sys [2007-06-20 208896]
r3 igfx;igfx; c:\windows\system32\drivers\igdkmd32.sys [2008-02-11 2302976]
r3 rtl8023xp;realtek 10/100 nic family ndis x86 driver; c:\windows\system32\drivers\rtnicxp.sys [2007-02-16 50176]
r3 sasenum;sasenum; \??\c:\program files\divers\superantispyware\sasenum.sys [2008-05-13 7408]
r3 syntp;synaptics touchpad driver; c:\windows\system32\drivers\syntp.sys [2007-09-15 191408]
r3 winachsf;winachsf; c:\windows\system32\drivers\hsx_cnxt.sys [2007-06-20 660480]
r3 wmiacpi;microsoft windows management interface for acpi; c:\windows\system32\drivers\wmiacpi.sys [2008-01-19 11264]
s1 as6eio;as6eio; c:\windows\system32\drivers\as6eio.sys []
s1 sasdifsv;sasdifsv; \??\c:\program files\divers\superantispyware\sasdifsv.sys [2009-03-27 9968]
s2 gt680x;usb flatbed scanner; c:\windows\system32\drivers\gt680x.sys [2000-11-17 17168]
s3 bcm43xv;pilote de la carte réseau extensible broadcom 802.11; c:\windows\system32\drivers\bcmwl6.sys [2007-01-03 534016]
s3 drmkaud;filtre de décodeur drm (noyau microsoft); c:\windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
s3 e100b;pilote de carte intel (r) pro; c:\windows\system32\drivers\e100b325.sys [2006-11-02 163328]
s3 hdaudaddservice;microsoft uaa function driver for high definition audio service; c:\windows\system32\drivers\chdart.sys [2007-02-22 159232]
s3 hsfhwazl;hsfhwazl; c:\windows\system32\drivers\vstazl3.sys [2006-11-02 200704]
s3 ialm;ialm; c:\windows\system32\drivers\igdkmd32.sys [2008-02-11 2302976]
s3 mskssrv;proxy de service de répartition microsoft; c:\windows\system32\drivers\mskssrv.sys [2008-01-19 8192]
s3 mspclock;proxy d'horloge de répartition microsoft; c:\windows\system32\drivers\mspclock.sys [2008-01-19 5888]
s3 mspqm;proxy de gestion de qualité de répartition microsoft; c:\windows\system32\drivers\mspqm.sys [2008-01-19 5504]
s3 mstee;convertisseur en t/site-à-site de répartition microsoft; c:\windows\system32\drivers\mstee.sys [2008-01-19 6016]
s3 netw3v32;pilote de carte réseau intel(r) pro/wireless 3945abg pour windows vista 32 bits; c:\windows\system32\drivers\netw3v32.sys [2007-02-07 1786880]
s3 nmwcd;nokia usb phone parent; c:\windows\system32\drivers\ccdcmb.sys [2009-02-09 17664]
s3 nmwcdc;nokia usb generic; c:\windows\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
s3 pccsmcfd;pccs mode change filter driver; c:\windows\system32\drivers\pccsmcfd.sys [2007-09-17 21632]
s3 ultradfg;ultradfg; c:\windows\system32\drivers\ultradfg.sys [2008-10-02 24576]
s3 upperdev;upperdev; c:\windows\system32\drivers\usbser_lowerflt.sys [2009-02-09 7808]
s3 usbscan;pilote de scanneur usb; c:\windows\system32\drivers\usbscan.sys [2008-01-19 35328]
s3 usbser;usb modem driver; c:\windows\system32\drivers\usbser.sys [2008-01-19 28160]
s3 usbserfilt;usbserfilt; c:\windows\system32\drivers\usbser_lowerfltj.sys [2009-02-09 7808]
s3 wimfltr;wimfltr; c:\windows\system32\drivers\wimfltr.sys [2008-01-19 131000]
s3 wpdusb;wpdusb; c:\windows\system32\drivers\wpdusb.sys [2008-01-19 39936]
s3 wudfrd;wudfrd; c:\windows\system32\drivers\wudfrd.sys [2008-01-19 83328]
======list of services (r=running, s=stopped, 0=boot, 1=system, 2=auto, 3=demand, 4=disabled)======
r2 aawservice;ad-aware 2007 service; c:\program files\lavasoft\ad-aware 2007\aawservice.exe [2008-03-19 607576]
r2 acdaemon;arcsoft connect daemon; c:\program files\common files\arcsoft\connection service\bin\acservice.exe [2008-02-22 104960]
r2 aswupdsv;avast! iavs4 control service; c:\program files\alwil software\avast4\aswupdsv.exe [2009-02-05 18752]
r2 avast! antivirus;avast! antivirus; c:\program files\alwil software\avast4\ashserv.exe [2009-02-05 138680]
r2 ezntsvc;easybits magic desktop services for windows nt; c:\windows\system32\ezntsvc.exe [2007-08-03 33792]
r2 hp health check service;hp health check service; c:\program files\hewlett-packard\hp health check\hphc_service.exe [2007-03-14 62984]
r2 hpqwmiex;hpqwmiex; c:\program files\hewlett-packard\shared\hpqwmiex.exe [2006-05-02 135168]
r2 lightscribeservice;lightscribeservice direct disc labeling service; c:\program files\common files\lightscribe\lssrvc.exe [2006-12-14 61440]
r2 mdm;machine debug manager; c:\program files\common files\microsoft shared\vs7debug\mdm.exe [2006-10-26 335872]
r2 seaport;seaport; c:\program files\microsoft\search enhancement pack\seaport\seaport.exe [2009-05-19 240512]
r2 tomtomhomeservice;tomtomhomeservice; c:\program files\tomtom home 2\tomtomhomeservice.exe [2009-04-08 92008]
r2 uxtuneup;@%systemroot%\system32\uxtuneup.dll,-4096; c:\windows\system32\svchost.exe [2008-01-19 21504]
r2 vsmon;truevector internet monitor; c:\windows\system32\zonelabs\vsmon.exe [2008-03-03 79400]
r2 wlidsvc;windows live id sign-in assistant; c:\program files\common files\microsoft shared\windows live\wlidsvc.exe [2009-03-30 1533808]
r2 xaudioservice;xaudioservice; c:\windows\system32\drivers\xaudio.exe [2007-07-10 386560]
r3 avast! mail scanner;avast! mail scanner; c:\program files\alwil software\avast4\ashmaisv.exe [2009-02-05 254040]
r3 avast! web scanner;avast! web scanner; c:\program files\alwil software\avast4\ashwebsv.exe [2009-02-05 352920]
s2 planificateur liveupdate automatique;planificateur liveupdate automatique; c:\program files\symantec\liveupdate\aluschedulersvc.exe []
s3 boonty games;boonty games; c:\program files\common files\boonty shared\service\boonty.exe [2008-08-18 69120]
s3 com4qlb;com4qlb; c:\program files\hewlett-packard\hp quick launch buttons\com4qlb.exe [2007-03-05 110592]
s3 gusvc;google updater service; c:\program files\google\common\google updater\googleupdaterservice.exe [2007-08-16 138168]
s3 idrivert;installdriver table manager; c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe [2004-10-22 73728]
s3 odserv;microsoft office diagnostics service; c:\program files\common files\microsoft shared\office12\odserv.exe [2008-11-04 441712]
s3 ose;office source engine; c:\program files\common files\microsoft shared\source engine\ose.exe [2006-10-26 145184]
s3 roxmediadb9;roxmediadb9; c:\program files\common files\roxio shared\9.0\sharedcom\roxmediadb9.exe [2007-02-12 880640]
s3 servicelayer;servicelayer; c:\program files\pc connectivity solution\servicelayer.exe [2008-08-07 575488]
s3 stllssvr;stllssvr; c:\program files\common files\surething shared\stllssvr.exe [2007-02-17 74656]
s3 symantec core lc;symantec core lc; c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe [2007-04-25 1174664]
s3 tuneup.defrag;@%systemroot%\system32\tuneupdefragservice.exe,-1; c:\windows\system32\tuneupdefragservice.exe [2008-12-11 355584]
-----------------eof-----------------