http://www.malekal.com/fichiers/spywares/help.html

Exemple de fichier généré afin d'obtenir des informations sur le système :

FPort v2.0 - TCP/IP Process to Port Mapper
Copyright 2000 by Foundstone, Inc.
http://www.foundstone.com

Pid Process Port Proto Path
1804 -> 3001 TCP
1836 -> 3004 TCP
1232 -> 5000 TCP
4 System -> 1028 TCP
4 System -> 139 TCP
0 System -> 3068 TCP
0 System -> 3073 TCP
0 System -> 3074 TCP
4 System -> 445 TCP
1528 firefox -> 3008 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1528 firefox -> 3009 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1528 firefox -> 3070 TCP C:\Program Files\Mozilla Firefox\firefox.exe
1596 iexplore -> 3078 TCP C:\Program Files\Internet Explorer\iexplore.exe
1596 iexplore -> 3079 TCP C:\Program Files\Internet Explorer\iexplore.exe
1596 iexplore -> 3080 TCP C:\Program Files\Internet Explorer\iexplore.exe
244 outpost -> 803 TCP C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
1084 svchost -> 1025 TCP C:\WINDOWS\System32\svchost.exe
1028 svchost -> 135 TCP C:\WINDOWS\system32\svchost.exe
1084 svchost -> 3002 TCP C:\WINDOWS\System32\svchost.exe
1084 svchost -> 3003 TCP C:\WINDOWS\System32\svchost.exe

1836 -> 3077 UDP
4 System -> 1900 UDP
4 System -> 500 UDP
1528 firefox -> 123 UDP C:\Program Files\Mozilla Firefox\firefox.exe
1528 firefox -> 137 UDP C:\Program Files\Mozilla Firefox\firefox.exe
1596 iexplore -> 138 UDP C:\Program Files\Internet Explorer\iexplore.exe
1596 iexplore -> 1900 UDP C:\Program Files\Internet Explorer\iexplore.exe
244 outpost -> 1026 UDP C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
1084 svchost -> 123 UDP C:\WINDOWS\System32\svchost.exe
1028 svchost -> 445 UDP C:\WINDOWS\system32\svchost.exe

PsList 1.26 - Process Information Lister
Copyright (C) 1999-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

Process information for JULIEN-BS6QK9QX:

Name Pid Pri Thd Hnd VM WS Priv
Idle 0 0 1 0 0 20 0
System 4 8 57 294 1868 248 0
smss 724 11 3 21 3788 360 164
csrss 780 13 11 419 23828 3384 1600
winlogon 808 13 16 416 46592 6104 6728
services 852 9 19 301 21308 3360 1476
outpost 244 8 8 813 192396 37360 32832
SMAgent 336 8 2 30 21576 1700 448
svchost 408 8 7 107 17200 3140 1156
wdfmgr 444 8 4 58 12444 1476 428
svchost 1028 8 9 215 16812 2720 1032
svchost 1084 8 75 1250 103960 21076 12076
svchost 1204 8 5 60 12476 1816 632
svchost 1232 8 15 125 27120 3476 1448
spoolsv 1556 8 12 115 24644 3576 2592
alg 1804 8 6 122 30292 4132 1404
kavsvc 1836 8 0 765 109220 26524 22032
lsass 864 9 20 293 36132 5944 3496
ApntEx 272 8 2 22 13728 1076 264
explorer 1660 8 23 501 85100 27604 18032
Apoint 440 8 1 58 30888 5260 2340
kav 696 8 0 119 37736 1536 1952
cmd 1192 8 1 21 13500 1304 1440
pslist 268 13 2 81 17476 1568 704
firefox 1528 8 6 142 59964 24916 16788
iexplore 1596 8 12 282 72340 5484 8328

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
explorer.exe pid: 1660
Command line: C:\WINDOWS\Explorer.EXE

Base Size Version Path
0x01000000 0xf9000 6.00.2800.1106 C:\WINDOWS\Explorer.EXE
0x77f40000 0xae000 5.01.2600.1106 C:\WINDOWS\System32\ntdll.dll
*** Loaded C:\WINDOWS\system32\kernel32.dll differs from file image:
*** File timestamp: Thu Aug 29 20:44:41 2002
*** Loaded image timestamp: Thu Aug 29 20:44:42 2002
*** 0x77e40000 0xf6000 5.01.2600.1106 C:\WINDOWS\system32\kernel32.dll
0x77be0000 0x53000 7.00.2600.1106 C:\WINDOWS\system32\msvcrt.dll
0x77da0000 0x9e000 5.01.2600.1106 C:\WINDOWS\system32\ADVAPI32.dll
0x78000000 0x86000 5.01.2600.1106 C:\WINDOWS\system32\RPCRT4.dll
0x77c40000 0x40000 5.01.2600.1106 C:\WINDOWS\system32\GDI32.dll
0x77d10000 0x8c000 5.01.2600.1106 C:\WINDOWS\system32\USER32.dll
0x77290000 0x64000 6.00.2800.1106 C:\WINDOWS\system32\SHLWAPI.dll
0x77390000 0x800000 6.00.2800.1214 C:\WINDOWS\system32\SHELL32.dll
0x00260000 0x121000 5.01.2600.1106 C:\WINDOWS\system32\ole32.dll
0x770e0000 0x8b000 3.50.5016.0000 C:\WINDOWS\system32\OLEAUT32.dll
0x75f10000 0xfc000 6.00.2800.1106 C:\WINDOWS\System32\BROWSEUI.dll
0x76960000 0x14a000 6.00.2800.1106 C:\WINDOWS\System32\SHDOCVW.dll
0x5b090000 0x34000 6.00.2800.1106 C:\WINDOWS\System32\UxTheme.dll
0x78090000 0xe4000 6.00.2800.1106 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll
0x77300000 0x8b000 5.82.2800.1106 C:\WINDOWS\system32\comctl32.dll
0x75ed0000 0x1f000 5.01.2600.1106 C:\WINDOWS\system32\appHelp.dll
0x76f80000 0x78000 2001.12.4414.0042 C:\WINDOWS\System32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0042 C:\WINDOWS\System32\COMRes.dll
0x77bd0000 0x7000 5.01.2600.0000 C:\WINDOWS\system32\VERSION.dll
0x765b0000 0x51000 5.01.2600.1106 C:\WINDOWS\System32\cscui.dll
0x76590000 0x1b000 5.01.2600.0000 C:\WINDOWS\System32\CSCDLL.dll
0x5b950000 0x72000 6.00.2800.1106 C:\WINDOWS\System32\themeui.dll
0x76f40000 0x10000 5.01.2600.1106 C:\WINDOWS\System32\Secur32.dll
0x76310000 0x5000 5.01.2600.1106 C:\WINDOWS\System32\MSIMG32.dll
0x75a00000 0xa7000 5.01.2600.1106 C:\WINDOWS\system32\USERENV.dll
0x71ca0000 0x1b000 6.00.2600.0000 C:\WINDOWS\System32\actxprxy.dll
0x746e0000 0x8f000 6.00.2600.0000 C:\WINDOWS\System32\MLANG.dll
0x10000000 0x1c000 6.00.0001.0003 C:\Program Files\iTunes\iTunesMiniPlayer.dll
0x00f10000 0xe000 6.00.0000.0007 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\fr.lproj\iTunesMiniPlayerLocalized.dll
0x01100000 0x22000 6.00.0001.0003 C:\Program Files\iTunes\iTunesMiniPlayer.Resources\iTunesMiniPlayer.dll
0x71b80000 0x4e000 5.01.2600.1106 C:\WINDOWS\System32\netapi32.dll
0x76930000 0x25000 5.01.2600.1106 C:\WINDOWS\System32\ntshrui.dll
0x76ac0000 0x15000 3.00.9435.0000 C:\WINDOWS\System32\ATL.DLL
0x76610000 0xec000 5.01.2600.1106 C:\WINDOWS\System32\SETUPAPI.dll
0x76920000 0x7000 5.01.2600.0000 C:\WINDOWS\System32\LINKINFO.dll
0x75c80000 0x195000 5.01.2600.1331 C:\WINDOWS\system32\NETSHELL.dll
0x76bb0000 0x2e000 5.01.2600.1106 C:\WINDOWS\system32\credui.dll
0x719f0000 0x15000 5.01.2600.0000 C:\WINDOWS\system32\WS2_32.dll
0x719e0000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\WS2HELP.dll
0x76d10000 0x17000 5.01.2600.0002 C:\WINDOWS\system32\iphlpapi.dll
0x76080000 0x7a000 6.00.2800.1106 C:\WINDOWS\system32\urlmon.dll
0x762f0000 0xf000 5.01.2600.1106 C:\WINDOWS\System32\WINSTA.dll
0x74aa0000 0x43000 6.00.2800.1106 C:\WINDOWS\System32\webcheck.dll
0x01360000 0x1a000 C:\WINDOWS\System32\ginuerep.dll
0x76190000 0x99000 6.00.2800.1106 C:\WINDOWS\system32\WININET.dll
0x76250000 0x8d000 5.131.2600.1106 C:\WINDOWS\system32\CRYPT32.dll
0x76230000 0xf000 5.01.2600.0000 C:\WINDOWS\system32\MSASN1.dll
0x74a70000 0x20000 5.01.2600.1106 C:\WINDOWS\System32\stobject.dll
0x74a60000 0x9000 6.00.2600.0000 C:\WINDOWS\System32\BatMeter.dll
0x74a40000 0x7000 6.00.2600.0000 C:\WINDOWS\System32\POWRPROF.dll
0x76f00000 0x8000 5.01.2600.1106 C:\WINDOWS\System32\WTSAPI32.dll
0x76ae0000 0x2e000 5.01.2600.1106 C:\WINDOWS\System32\WINMM.dll
0x6bd00000 0xd000 0.01.0002.0003 C:\WINDOWS\System32\SYNCOR11.DLL
0x72c70000 0x9000 5.01.2600.0000 C:\WINDOWS\System32\wdmaud.drv
0x72c60000 0x8000 5.01.2600.0000 C:\WINDOWS\System32\msacm32.drv
0x77bb0000 0x14000 5.01.2600.0000 C:\WINDOWS\System32\MSACM32.dll
0x71a10000 0x9000 5.01.2600.0000 C:\WINDOWS\System32\wsock32.dll
0x76e90000 0x37000 5.01.2600.1106 C:\WINDOWS\System32\RASAPI32.DLL
0x76e40000 0x11000 5.01.2600.1106 C:\WINDOWS\System32\rasman.dll
0x76e60000 0x2b000 5.01.2600.1106 C:\WINDOWS\System32\TAPI32.dll
0x76e30000 0xd000 5.01.2600.0000 C:\WINDOWS\System32\rtutils.dll
0x72220000 0x5000 5.01.2600.1106 C:\WINDOWS\System32\sensapi.dll
0x77ba0000 0x7000 5.01.2600.0000 C:\WINDOWS\System32\midimap.dll
0x71990000 0x3c000 5.01.2600.0000 C:\WINDOWS\System32\mswsock.dll
0x76ed0000 0x25000 5.01.2600.1106 C:\WINDOWS\System32\DNSAPI.dll
0x76f60000 0x7000 5.01.2600.0000 C:\WINDOWS\System32\winrnr.dll
0x76f10000 0x2d000 5.01.2600.1106 C:\WINDOWS\system32\WLDAP32.dll
0x76f70000 0x5000 5.01.2600.0000 C:\WINDOWS\System32\rasadhlp.dll
0x719d0000 0x8000 5.01.2600.0000 C:\WINDOWS\System32\wshtcpip.dll
0x01a90000 0x201000 2.00.2600.1106 C:\WINDOWS\System32\msi.dll
0x74af0000 0x86000 5.01.2600.1106 C:\WINDOWS\System32\printui.dll
0x72f50000 0x23000 5.01.2600.1106 C:\WINDOWS\System32\WINSPOOL.DRV
0x76df0000 0x2f000 5.01.2600.0000 C:\WINDOWS\System32\ACTIVEDS.dll
0x76dc0000 0x25000 5.01.2600.1106 C:\WINDOWS\System32\adsldpc.dll
0x74a50000 0x7000 5.01.2600.0000 C:\WINDOWS\System32\CFGMGR32.dll
0x71a60000 0x11000 5.01.2600.0000 C:\WINDOWS\system32\MPR.dll
0x723a0000 0x13000 6.00.2800.1106 C:\WINDOWS\System32\browselc.dll
0x6c650000 0x44000 5.01.2600.1106 C:\WINDOWS\System32\DUSER.dll
0x73af0000 0x13000 5.01.2600.1106 C:\WINDOWS\System32\sti.dll
0x75ef0000 0x6000 5.01.2600.0000 C:\WINDOWS\System32\drprov.dll
0x71b70000 0xd000 5.01.2600.1106 C:\WINDOWS\System32\ntlanman.dll
0x71c30000 0x16000 5.01.2600.0000 C:\WINDOWS\System32\NETUI0.dll
0x71bf0000 0x3c000 5.01.2600.0000 C:\WINDOWS\System32\NETUI1.dll
0x71be0000 0x6000 5.01.2600.0000 C:\WINDOWS\System32\NETRAP.dll
0x71b50000 0x11000 5.01.2600.1106 C:\WINDOWS\System32\SAMLIB.dll
0x75f00000 0x9000 5.01.2600.0000 C:\WINDOWS\System32\davclnt.dll
0x76be0000 0x2b000 5.131.2600.0000 C:\WINDOWS\System32\WINTRUST.dll
0x76c40000 0x22000 5.01.2600.1106 C:\WINDOWS\system32\IMAGEHLP.dll
0x0ffd0000 0x23000 5.01.2600.1029 C:\WINDOWS\System32\rsaenh.dll
0x016e0000 0x1c000 7.00.0000.0000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
0x01de0000 0x6c000 C:\PROGRA~1\ULTIMA~1\uzshlex.dll
0x012e0000 0x21000 5.00.0388.0001 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\shellex.dll
0x01420000 0x22000 3.00.0557.5918 C:\Program Files\Agnitum\Outpost Firewall\op_shell.dll
0x76340000 0x46000 6.00.2800.1106 C:\WINDOWS\system32\comdlg32.dll
0x01e70000 0x23000 4.32.0000.0000 C:\Program Files\7-Zip\7-zip.dll
0x75900000 0xf3000 5.01.2600.1106 C:\WINDOWS\System32\MSGINA.dll
0x1f7b0000 0x31000 3.520.9030.0000 C:\WINDOWS\System32\ODBC32.dll
0x1f850000 0x18000 3.520.7713.0000 C:\WINDOWS\System32\odbcint.dll
0x75e20000 0xa8000 5.01.2600.1106 C:\WINDOWS\System32\SXS.DLL
0x72380000 0x19000 6.00.2600.0000 C:\WINDOWS\System32\mydocs.dll
0x76100000 0x8e000 6.00.2600.0000 C:\WINDOWS\System32\shdoclc.dll
0x732d0000 0x52000 6.00.2800.1106 C:\WINDOWS\System32\zipfldr.dll
0x01f30000 0x8c000 C:\PROGRA~1\ULTIMA~1\uzshldr.dll
0x5f140000 0x1a000 5.00.5014.0000 C:\WINDOWS\System32\olepro32.dll
0x76c90000 0x1f000 5.01.2600.1106 C:\WINDOWS\System32\NTMARTA.DLL
0x5c3b0000 0xc4000 1.00.0000.2714 c:\windows\srchasst\srchui.dll
0x74bf0000 0x2c000 4.02.5406.0000 C:\WINDOWS\System32\OLEACC.dll
0x76010000 0x61000 6.00.8972.0000 C:\WINDOWS\System32\MSVCP60.dll
0x5c480000 0x1b000 1.00.0000.2008 c:\windows\srchasst\srchctls.dll
0x72d50000 0x115000 8.30.9926.0000 C:\WINDOWS\System32\msxml3.dll
0x02d70000 0x13000 5.00.0001.0018 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrchpg.dll
0x75be0000 0x91000 5.06.0000.6626 C:\WINDOWS\System32\jscript.dll
0x02de0000 0xc000 5.00.0388.0001 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrch_ag.dll
0x02df0000 0xc000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\FSSync.dll
0x02e00000 0x1d000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\pr_rmt.dll
0x02e20000 0x9000 5.00.0388.0001 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ccclient.dll
0x02e30000 0x8000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\klipc.dll
0x20000000 0x24000 5.00.0388.0001 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\KLUtil.dll
0x20500000 0x11000 5.00.0388.0002 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\rpt.dll
0x20200000 0x76000 5.00.0388.0001 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\CCIFACE.dll
0x5dd00000 0x20000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prloader.dll
0x02f60000 0x24000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prkernel.ppl
0x5da00000 0xc000 5.00.0388.0000 c:\program files\kaspersky lab\kaspersky anti-virus personal pro\prstring.ppl
0x03010000 0x17000 5.00.0388.0000 c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_srv.ppl
0x03030000 0x18000 5.00.0388.0000 c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_clnt.ppl
0x5db00000 0x7000 5.00.0388.0000 c:\program files\kaspersky lab\kaspersky anti-virus personal pro\tempfile.ppl
0x70ee0000 0x7000 1.01.0000.3917 C:\WINDOWS\System32\asfsipc.dll
0x60990000 0xd000 2.00.2600.0000 C:\WINDOWS\System32\MSISIP.DLL
0x74e10000 0x10000 5.06.0000.6626 C:\WINDOWS\System32\wshext.dll
0x59000000 0xe000 5.06.0000.6626 C:\WINDOWS\System32\wshFR.DLL
0x365a0000 0x16000 10.00.4128.0000 C:\PROGRA~1\MICROS~2\Office10\MCPS.DLL

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
iexplore.exe pid: 1596
Command line: "C:\Program Files\Internet Explorer\iexplore.exe"

Base Size Version Path
0x00400000 0x19000 6.00.2800.1106 C:\Program Files\Internet Explorer\iexplore.exe
0x77f40000 0xae000 5.01.2600.1106 C:\WINDOWS\System32\ntdll.dll
*** Loaded C:\WINDOWS\system32\kernel32.dll differs from file image:
*** File timestamp: Thu Aug 29 20:44:41 2002
*** Loaded image timestamp: Thu Aug 29 20:44:42 2002
*** 0x77e40000 0xf6000 5.01.2600.1106 C:\WINDOWS\system32\kernel32.dll
0x77be0000 0x53000 7.00.2600.1106 C:\WINDOWS\system32\msvcrt.dll
0x77d10000 0x8c000 5.01.2600.1106 C:\WINDOWS\system32\USER32.dll
0x77c40000 0x40000 5.01.2600.1106 C:\WINDOWS\system32\GDI32.dll
0x77da0000 0x9e000 5.01.2600.1106 C:\WINDOWS\system32\ADVAPI32.dll
0x78000000 0x86000 5.01.2600.1106 C:\WINDOWS\system32\RPCRT4.dll
0x77290000 0x64000 6.00.2800.1106 C:\WINDOWS\system32\SHLWAPI.dll
0x76960000 0x14a000 6.00.2800.1106 C:\WINDOWS\System32\SHDOCVW.dll
0x78090000 0xe4000 6.00.2800.1106 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll
0x77390000 0x800000 6.00.2800.1214 C:\WINDOWS\system32\SHELL32.dll
0x77300000 0x8b000 5.82.2800.1106 C:\WINDOWS\system32\comctl32.dll
0x00900000 0x121000 5.01.2600.1106 C:\WINDOWS\system32\ole32.dll
0x75f10000 0xfc000 6.00.2800.1106 C:\WINDOWS\System32\BROWSEUI.dll
0x723a0000 0x13000 6.00.2800.1106 C:\WINDOWS\System32\browselc.dll
0x75ed0000 0x1f000 5.01.2600.1106 C:\WINDOWS\system32\appHelp.dll
0x76f80000 0x78000 2001.12.4414.0042 C:\WINDOWS\System32\CLBCATQ.DLL
0x770e0000 0x8b000 3.50.5016.0000 C:\WINDOWS\system32\OLEAUT32.dll
0x77000000 0xd4000 2001.12.4414.0042 C:\WINDOWS\System32\COMRes.dll
0x77bd0000 0x7000 5.01.2600.0000 C:\WINDOWS\system32\VERSION.dll
0x5b090000 0x34000 6.00.2800.1106 C:\WINDOWS\System32\UxTheme.dll
0x76190000 0x99000 6.00.2800.1106 C:\WINDOWS\system32\WININET.dll
0x76250000 0x8d000 5.131.2600.1106 C:\WINDOWS\system32\CRYPT32.dll
0x76230000 0xf000 5.01.2600.0000 C:\WINDOWS\system32\MSASN1.dll
0x76f40000 0x10000 5.01.2600.1106 C:\WINDOWS\System32\Secur32.dll
0x765b0000 0x51000 5.01.2600.1106 C:\WINDOWS\System32\cscui.dll
0x76590000 0x1b000 5.01.2600.0000 C:\WINDOWS\System32\CSCDLL.dll
0x76610000 0xec000 5.01.2600.1106 C:\WINDOWS\System32\SETUPAPI.dll
0x75a00000 0xa7000 5.01.2600.1106 C:\WINDOWS\system32\USERENV.dll
0x76100000 0x8e000 6.00.2600.0000 C:\WINDOWS\System32\shdoclc.dll
0x76080000 0x7a000 6.00.2800.1106 C:\WINDOWS\system32\urlmon.dll
0x746e0000 0x8f000 6.00.2600.0000 C:\WINDOWS\System32\mlang.dll
0x71a10000 0x9000 5.01.2600.0000 C:\WINDOWS\System32\wsock32.dll
0x719f0000 0x15000 5.01.2600.0000 C:\WINDOWS\System32\WS2_32.dll
0x719e0000 0x8000 5.01.2600.0000 C:\WINDOWS\System32\WS2HELP.dll
0x71990000 0x3c000 5.01.2600.0000 C:\WINDOWS\system32\mswsock.dll
0x719d0000 0x8000 5.01.2600.0000 C:\WINDOWS\System32\wshtcpip.dll
0x76e90000 0x37000 5.01.2600.1106 C:\WINDOWS\System32\RASAPI32.DLL
0x76e40000 0x11000 5.01.2600.1106 C:\WINDOWS\System32\rasman.dll
0x71b80000 0x4e000 5.01.2600.1106 C:\WINDOWS\System32\NETAPI32.dll
0x76e60000 0x2b000 5.01.2600.1106 C:\WINDOWS\System32\TAPI32.dll
0x76e30000 0xd000 5.01.2600.0000 C:\WINDOWS\System32\rtutils.dll
0x76ae0000 0x2e000 5.01.2600.1106 C:\WINDOWS\System32\WINMM.dll
0x6bd00000 0xd000 0.01.0002.0003 C:\WINDOWS\System32\SYNCOR11.DLL
0x012c0000 0x201000 2.00.2600.1106 C:\WINDOWS\System32\msi.dll
0x75e20000 0xa8000 5.01.2600.1106 C:\WINDOWS\System32\SXS.DLL
0x72220000 0x5000 5.01.2600.1106 C:\WINDOWS\System32\sensapi.dll
0x76ed0000 0x25000 5.01.2600.1106 C:\WINDOWS\System32\DNSAPI.dll
0x76f60000 0x7000 5.01.2600.0000 C:\WINDOWS\System32\winrnr.dll
0x76f10000 0x2d000 5.01.2600.1106 C:\WINDOWS\system32\WLDAP32.dll
0x76f70000 0x5000 5.01.2600.0000 C:\WINDOWS\System32\rasadhlp.dll
0x74780000 0x2b7000 6.00.2800.1106 C:\WINDOWS\System32\mshtml.dll
0x74660000 0x26000 5.01.2600.1106 C:\WINDOWS\System32\msimtf.dll
0x74690000 0x44000 5.01.2600.1106 C:\WINDOWS\System32\MSCTF.dll
0x76320000 0x1c000 5.01.2600.1106 C:\WINDOWS\System32\IMM32.DLL
0x10000000 0x13000 5.00.0001.0018 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrchpg.dll
0x75be0000 0x91000 5.06.0000.6626 C:\WINDOWS\System32\jscript.dll
0x01f40000 0xc000 5.00.0388.0001 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrch_ag.dll
0x01f50000 0xc000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\FSSync.dll
0x01f60000 0x1d000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\pr_rmt.dll
0x76010000 0x61000 6.00.8972.0000 C:\WINDOWS\System32\MSVCP60.dll
0x01f80000 0x9000 5.00.0388.0001 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ccclient.dll
0x01f90000 0x8000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\klipc.dll
0x20000000 0x24000 5.00.0388.0001 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\KLUtil.dll
0x20500000 0x11000 5.00.0388.0002 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\rpt.dll
0x20200000 0x76000 5.00.0388.0001 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\CCIFACE.dll
0x5dd00000 0x20000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prloader.dll
0x020c0000 0x24000 5.00.0388.0000 C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prkernel.ppl
0x5da00000 0xc000 5.00.0388.0000 c:\program files\kaspersky lab\kaspersky anti-virus personal pro\prstring.ppl
0x02230000 0x17000 5.00.0388.0000 c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_srv.ppl
0x02250000 0x18000 5.00.0388.0000 c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_clnt.ppl
0x5db00000 0x7000 5.00.0388.0000 c:\program files\kaspersky lab\kaspersky anti-virus personal pro\tempfile.ppl
0x74630000 0x27000 3.10.0349.0000 C:\WINDOWS\System32\MSLS31.DLL
0x672b0000 0x3b000 6.00.2800.1106 C:\WINDOWS\System32\iepeers.dll
0x72f50000 0x23000 5.01.2600.1106 C:\WINDOWS\System32\WINSPOOL.DRV

Streams v1.53 - Enumerate alternate NTFS data streams
Copyright (C) 1999-2005 Mark Russinovich
Sysinternals - www.sysinternals.com

C:\WINDOWS\Thumbs.db:
:encryptable:$DATA 0
...

...

...

..
Error opening C:\WINDOWS\system32\config\default:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

Error opening C:\WINDOWS\system32\config\default.LOG:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

Error opening C:\WINDOWS\system32\config\SAM:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

Error opening C:\WINDOWS\system32\config\SAM.LOG:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

Error opening C:\WINDOWS\system32\config\SECURITY:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

Error opening C:\WINDOWS\system32\config\SECURITY.LOG:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

Error opening C:\WINDOWS\system32\config\software:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

Error opening C:\WINDOWS\system32\config\software.LOG:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

Error opening C:\WINDOWS\system32\config\system:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

Error opening C:\WINDOWS\system32\config\system.LOG:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

.

...

Error opening C:\WINDOWS\temp\JETC4A7.tmp:
Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.

.
Streams v1.53 - Enumerate alternate NTFS data streams
Copyright (C) 1999-2005 Mark Russinovich
Sysinternals - www.sysinternals.com

...

...

...

C:\Program Files\Fichiers communs\Services\Thumbs.db:
:encryptable:$DATA 0
...

...

...