���������� | Shortcut_Module | g3n-h@ckm@n | 10.02.2014.1

����� XP | Vista | 7 | 8 - 32/64 bits ����� - Start 07:56:13 - 11/02/2014

Mis � jour le : 10/02/2014 | 05.45 par g3n-h@ckm@n

Contact : http://www.sosvirus.net

Boot : Normal

Syst�me : Windows 7 Home Premium (64 bits) HomePremium Service Pack 1

M�moire RAM = Total (MB) : 3984 | Libre (MB) : 2743
Pagefile = Total (MB) : 7966 | Libre (MB) : 6671
Virtuelle = Total (MB) : 4194 | Libre (MB) : 4050

���������� | Mises � jour Windows

Aucune mise � jour d�tect�e !!!


(1416) -- explorer.exe
(1456) -- spoolsv.exe
(1484) -- taskhost.exe
(1612) -- armsvc.exe
(1652) -- RIconMan.exe
(1696) -- LMS.exe
(1724) -- mbamscheduler.exe
(1912) -- sftvsa.exe
(2596) -- TODDSrv.exe
(2640) -- WLIDSVC.EXE
(2684) -- sftlist.exe
(2852) -- WLIDSVCM.EXE
(3000) -- CVHSVC.EXE
(3184) -- DaemonProcess.exe
(3460) -- SearchIndexer.exe
(3100) -- NASvc.exe
(3368) -- UNS.exe
(3540) -- wmpnetwk.exe
(1144) -- iexplore.exe
(3960) -- iexplore.exe
(4840) -- FlashUtil64_12_0_0_44_ActiveX.exe

���������� | D�tournements de raccourcis

D�sinfect� : C:\Users\greg\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk : C:\Program Files (x86)\Internet Explorer\iexplore.exe (hxxp://www.awesomehp.com/?type=sc&ts=1390753932&from=amt&uid=HitachiXHTS543232A7A384_120204E2M3423327WURMX)
D�sinfect� : C:\Users\greg\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer.lnk : C:\Program Files\Internet Explorer\iexplore.exe (hxxp://www.awesomehp.com/?type=sc&ts=1390753932&from=amt&uid=HitachiXHTS543232A7A384_120204E2M3423327WURMX)
D�sinfect� : C:\Users\greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk : C:\Program Files\Internet Explorer\iexplore.exe (hxxp://www.awesomehp.com/?type=sc&ts=1390753932&from=amt&uid=HitachiXHTS543232A7A384_120204E2M3423327WURMX)
D�sinfect� : C:\Users\greg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk : C:\Program Files\Internet Explorer\iexplore.exe (hxxp://www.awesomehp.com/?type=sc&ts=1390753932&from=amt&uid=HitachiXHTS543232A7A384_120204E2M3423327WURMX)

���������� | D�tournement internet Explorer

R�par� : [HKU\S-1-5-21-744279448-3970991682-1113186131-1000\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.google.com -> http://www.google.com/
R�par� : [HKU\S-1-5-21-744279448-3970991682-1113186131-1000\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\system32\blank.htm -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-21-744279448-3970991682-1113186131-1000\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://go.microsoft.com/fwlink/?LinkId=54896 -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.google.com -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : http://www.google.com -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://www.google.com -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://www.awesomehp.com/web/?type=ds&ts=1390753932&from=amt&uid=HitachiXHTS543232A7A384_120204E2M3423327WURMX&q={searchTerms} -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : http://www.google.com -> res://ieframe.dll/tabswelcome.htm
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.google.com -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\System32\blank.htm -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : http://www.awesomehp.com/web/?type=ds&ts=1390753932&from=amt&uid=HitachiXHTS543232A7A384_120204E2M3423327WURMX&q={searchTerms} -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://www.awesomehp.com/?type=hp&ts=1390753932&from=amt&uid=HitachiXHTS543232A7A384_120204E2M3423327WURMX -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://www.awesomehp.com/web/?type=ds&ts=1390753932&from=amt&uid=HitachiXHTS543232A7A384_120204E2M3423327WURMX&q={searchTerms} -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [HKU\S-1-5-21-744279448-3970991682-1113186131-1000\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[WarnonZoneCrossing] : 0 -> 1

���������� | D�tournement Google Chrome


���������� | D�tournement Firefox


���������� | D�tournement des cl�s StartMenuInternet

R�par� : [HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : iexplore.exe -> "C:\Program Files (x86)\Internet Explorer\iexplore.exe"

���������� | AppInit_DLLs


[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[AppInit_DLLS] :

R�par� : [HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[AppInit_DLLS] : C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll ->
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1

���������� | D�tournement Javascript


���������� | Fichiers temporaires

[All Users] Fichiers temporaires Supprim�s : 0 Ko
[Default User] Fichiers temporaires Supprim�s : 0 Ko
[Default] Fichiers temporaires Supprim�s : 0 Ko
[Public] Fichiers temporaires Supprim�s : 0 Ko
[greg] Fichiers temporaires Supprim�s : 3928 Ko


���������� |EOF| ����������