Aller au contenu

Alexisp72

Membres
 Afficher le profil  Afficher son activité

  • Compteur de contenus

    17

  • Inscription

  • Dernière visite

 Type de contenu 

Messages posté(e)s par Alexisp72

  2. [Résolu] « Mes Documents » ne s'affiche plus

    dans Windows 7

    Posté(e)

    Bonjour,

    Mon dossier "Mes documents" dans c:\utilisateurs\*user*\ ne s'affiche plus. Certains softs me demandent l'accès a ce dossier, mais ne peuvent y accéder. Premier test, recréer un répertoire "Mes documents". Impossible, W7 indique que le répertoire existe déjà.

    J'ai déjà eu ce problème auparavant, mais ne sais plus comment je m'en suis sortit. Le répertoire avait réapparu.

    Merci,

    Alexis

  3. WZC Service - Probleme de depedance

    dans Software

    Posté(e)

    Salut,

     

    J ai un probleme que je n arrive pas a resoudre. Mon reseau sans fil ne fonctionne plus. J ai reussi a indentifier que le service WZC ne tourne pas. Quand j essaye de le lancer, il plante avec erreur "The dependency service ou group failed to start"

     

    :P

     

    Merci pour votre aide,

    Alexis

  6. Besoin d'aide - Analyse rapports HijackThis

    dans Analyses et éradication malwares

    Posté(e)

    Et voilou... C'est impressionnant il y avait encore pas mal de merde...

     

     

     

     

     

    Adware:adware/commad

    No Désinfecté

    c:\windows\system32\atmtd.dll._

     

    Adware:adware/dollarrevenue

    No Désinfecté

    c:\windows\drsmartload2.dat

     

    Adware:adware/maxifiles

    No Désinfecté

    c:\program files\common files\Windows

     

    Spyware:Cookie/Xiti

    No Désinfecté

    C:\Documents and Settings\Compaq\Cookies\compaq@xiti[1].txt

     

    Outil indésirable:Application/Processor

    No Désinfecté

    C:\Documents and Settings\Compaq\Desktop\SmitfraudFix\Process.exe

     

    Outil indésirable:Application/Processor

    No Désinfecté

    C:\Documents and Settings\Compaq\Desktop\SmitfraudFix.zip[smitfraudFix/Process.exe]

     

    Adware:Adware/NewAds

    No Désinfecté

    C:\WINDOWS\system32\tpuninstall.exe

  7. PC freeze - servic~1.exe

    dans Software

    Posté(e)

    Salut,

     

    J’ai un problème avec mon PC / XP Pro. J’ai effectue toutes les opérations possibles pour vérifier que cela ne venait pas d’un virus.

     

    Au démarrage le PC freeze. Il ne me reste plus qu’a faire Ctrl Alt Del (CAD) pour ouvrir le task manager. A chaque click de souris je dois faire in CAD pour que l’opération s’effectue. Le problème est résolu si je suspends le service servic~1.exe. Le PC reste instable après cela.

     

    Merci pour votre aide.

    A+

    Alexis

  8. Besoin d'aide - Analyse rapports HijackThis

    dans Analyses et éradication malwares

    Posté(e)

    Regis,

     

    Tjs meme probleme. Au demarrage le PC freeze. Je ne peux que faire Ctrl Alt Del (CAD). J'ouvre le task manager. Click CAD encore. Selectionne Servic~1.exe. Re CAD. Je selectionne et suspends le service avec a chaque click de souris un CAD. Une fois le service suspendu le PC se remet a fonctionner mais reste instable.

     

    Le fait de suprimer les service permet-il d'etre verifier par les anti virus?

     

    Alexis

  9. Besoin d'aide - Analyse rapports HijackThis

    dans Analyses et éradication malwares

    Posté(e)

    Logfile of HijackThis v1.99.1

    Scan saved at 15:07:33, on 21/06/2006

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    C:\Program Files\ewido anti-spyware 4.0\guard.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    C:\WINDOWS\AGRSMMSG.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\WINDOWS\system32\dla\tfswctrl.exe

    C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\QuickTime\qttask.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

    C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    C:\Program Files\Common Files\Symantec Shared\ccApp.exe

    C:\Program Files\ewido anti-spyware 4.0\ewido.exe

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe

    C:\Program Files\HPQ\Shared\hpqwmi.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe

    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Documents and Settings\Compaq\Desktop\lookatthat.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/

    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

    O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

    O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    O4 - HKLM\..\Run: [soundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray

    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

    O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r

    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

    O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - HKLM\..\Run: [MMReminderService] C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray

    O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

    O4 - HKLM\..\Run: [urlLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe

    O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe

    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [pdfSaver3] "C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe"

    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

    O4 - HKCU\..\Run: [uniblue Registry Booster] C:\Program Files\Uniblue\Registry Booster\RegistryBooster.exe /S

    O4 - Global Startup: Bluetooth.lnk = ?

    O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

    O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://site.ebrary.com/lib/clcorp/support/...s/ebraryRdr.cab

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1148852151984

    O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/a...AdSignerADP.cab

    O17 - HKLM\System\CCS\Services\Tcpip\..\{5D60011C-1268-4AF9-872A-EFE76B2AD149}: NameServer = 213.255.201.9,213.255.201.10,212.255.201.8

    O17 - HKLM\System\CCS\Services\Tcpip\..\{622044B9-1216-4CAC-B795-039CDA5E9F9F}: NameServer = 212.27.54.252 213.228.0.168

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll

    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe

    O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

  10. Besoin d'aide - Analyse rapports HijackThis

    dans Analyses et éradication malwares

    Posté(e)

    Salut Regis,

     

    Voila ce que j'ai fait:

     

    1. Desinstal Antivir

     

    2. Install des easy clean and Edwido

     

    3. Edwido a trouve Adware.BookedSpace tout de suite a demande a le suprimer lors de l'update

     

    4. HijackThis en mode sans echec / Suprime les lignes indiques dans ton mail

     

    5. regsvr32 /u C:\WINDOWS\yzbdmmza.dll failed (je pense que edwido a fait le necessaire a l'update)

    J'ai quand meme edie la base de registre et efface toute ligne concernant yzbdmmza.dll. Il y en restait. Date et heure Mardi 23:34

     

    6. Suprimer yzbdmmza.dll: Fichier n'existait plus / J'ai efface le yzbdmmza.ini (23:36)

     

    7. Ecleaner effectue que ce matin... La vesrion que j'avais n'etait pas telechargee correctement.

     

    8. Resultat ewido

     

    ---------------------------------------------------------

    ewido anti-spyware - Scan Report

    ---------------------------------------------------------

     

    + Created at: 07:14:30 21/06/2006

    + Scan result:

     

    C:\WINDOWS\sopgvnoe.dll -> Adware.BookedSpace : No action taken.

    C:\Documents and Settings\Compaq\My Documents\UseNeXT\wizard\Norton Antivirus 2006 EN\Win9x\NAVSetup.exe -> Backdoor.Bandok.r : No action taken.

    C:\Documents and Settings\Compaq\My Documents\UseNeXT\wizard\Norton Antivirus 2006 EN\WinNT\NAVSetup.exe -> Backdoor.Bandok.r : No action taken.

    C:\Documents and Settings\Compaq\My Documents\UseNeXT\wizard\norton antivirus (2006) - full with activaton inst\Win9x\NAVSetup.exe -> Backdoor.Bandok.r : No action taken.

    C:\Documents and Settings\Compaq\My Documents\UseNeXT\wizard\norton antivirus (2006) - full with activaton inst\WinNT\NAVSetup.exe -> Backdoor.Bandok.r : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq27F.tmp -> TrackingCookie.247realmedia : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq12.tmp -> TrackingCookie.2o7 : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq280.tmp -> TrackingCookie.2o7 : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq13.tmp -> TrackingCookie.Adtech : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq281.tmp -> TrackingCookie.Adtech : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq282.tmp -> TrackingCookie.Advertising : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppqF2.tmp -> TrackingCookie.Advertising : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq283.tmp -> TrackingCookie.Atdmt : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq284.tmp -> TrackingCookie.Bfast : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq285.tmp -> TrackingCookie.Bluestreak : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppqF3.tmp -> TrackingCookie.Bluestreak : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq287.tmp -> TrackingCookie.Burstnet : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq288.tmp -> TrackingCookie.Casalemedia : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq289.tmp -> TrackingCookie.Com : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppqA0.tmp -> TrackingCookie.Coremetrics : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq1A.tmp -> TrackingCookie.Doubleclick : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq28A.tmp -> TrackingCookie.Doubleclick : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq14.tmp -> TrackingCookie.Falkag : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq28B.tmp -> TrackingCookie.Fastclick : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq15.tmp -> TrackingCookie.Hitbox : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq28D.tmp -> TrackingCookie.Hitbox : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq28E.tmp -> TrackingCookie.Hitbox : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq28F.tmp -> TrackingCookie.Hotlog : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq291.tmp -> TrackingCookie.Mediaplex : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq3A.tmp -> TrackingCookie.Mediaplex : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq297.tmp -> TrackingCookie.Onestat : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq3B.tmp -> TrackingCookie.Questionmarket : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq294.tmp -> TrackingCookie.Realtracker : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq295.tmp -> TrackingCookie.Revenue : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq296.tmp -> TrackingCookie.Serving-sys : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq298.tmp -> TrackingCookie.Statcounter : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq299.tmp -> TrackingCookie.Tradedoubler : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq29A.tmp -> TrackingCookie.Trafficmp : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq29B.tmp -> TrackingCookie.Tribalfusion : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq29C.tmp -> TrackingCookie.Weborama : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq29D.tmp -> TrackingCookie.Webtrendslive : No action taken.

    C:\Program Files\Yahoo!\YPSR\Quarantine\ppq29E.tmp -> TrackingCookie.Zedo : No action taken.

     

     

    ::Report end

     

     

    9. un scan en ligne???? Avec quel outil?

     

    Merci pour ton aide,

    Alexis

  12. Besoin d'aide - Analyse rapports HijackThis

    dans Analyses et éradication malwares

    Posté(e)

    Voila la suite,

    Merci,

    Alexis

     

    [Logfile of HijackThis v1.99.1

    Scan saved at 20:12:32, on 20/06/2006

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\WINDOWS\AGRSMMSG.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\WINDOWS\system32\dla\tfswctrl.exe

    C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\QuickTime\qttask.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

    C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    C:\Program Files\Common Files\Symantec Shared\ccApp.exe

    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe

    C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe

    C:\Program Files\HPQ\Shared\hpqwmi.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\WINDOWS\system32\notepad.exe

    C:\Documents and Settings\Compaq\Desktop\lookatthat.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/

    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

    O2 - BHO: (no name) - {251F97F8-72FC-FECF-AA73-FA7BD59E4889} - C:\WINDOWS\yzbdmmza.dll

    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

    O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O3 - Toolbar: Search - {D1E64F42-C13F-DEA0-21CC-49F187D186C7} - C:\WINDOWS\yzbdmmza.dll

    O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

    O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    O4 - HKLM\..\Run: [soundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray

    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

    O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r

    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

    O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - HKLM\..\Run: [MMReminderService] C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray

    O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

    O4 - HKLM\..\Run: [urlLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe

    O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe

    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [pdfSaver3] "C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe"

    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

    O4 - HKCU\..\Run: [uniblue Registry Booster] C:\Program Files\Uniblue\Registry Booster\RegistryBooster.exe /S

    O4 - Global Startup: Bluetooth.lnk = ?

    O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

    O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://site.ebrary.com/lib/clcorp/support/...s/ebraryRdr.cab

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1148852151984

    O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/a...AdSignerADP.cab

    O17 - HKLM\System\CCS\Services\Tcpip\..\{5D60011C-1268-4AF9-872A-EFE76B2AD149}: NameServer = 213.255.201.9,213.255.201.10,212.255.201.8

    O17 - HKLM\System\CCS\Services\Tcpip\..\{622044B9-1216-4CAC-B795-039CDA5E9F9F}: NameServer = 212.27.54.252 213.228.0.168

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll

    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

  13. Besoin d'aide - Analyse rapports HijackThis

    dans Analyses et éradication malwares

    Posté(e)

    La suite.....

     

     

    STATUS: FINISHEDComplete scanning result of "yzbdmmza.dll", received in VirusTotal at 06.20.2006, 20:04:04 (CET).

     

    Antivirus Version Update Result

    AntiVir 6.35.0.13 06.20.2006 ADSPY/BookedSpace.G.4

    Authentium 4.93.8 06.20.2006 no virus found

    Avast 4.7.844.0 06.20.2006 Win32:Startpage-175

    AVG 386 06.20.2006 Adware Generic.MDE

    BitDefender 7.2 06.20.2006 Adware.Bookedspace.G

    CAT-QuickHeal 8.00 06.20.2006 no virus found

    ClamAV devel-20060426 06.20.2006 no virus found

    DrWeb 4.33 06.20.2006 Adware.Bkspace

    eTrust-InoculateIT 23.72.43 06.20.2006 no virus found

    eTrust-Vet 12.6.2265 06.20.2006 no virus found

    Ewido 3.5 06.20.2006 Adware.BookedSpace

    Fortinet 2.77.0.0 06.20.2006 no virus found

    F-Prot 3.16f 06.20.2006 no virus found

    Ikarus 0.2.65.0 06.20.2006 AdWare.BookedSpace.G

    Kaspersky 4.0.2.24 06.20.2006 not-a-virus:AdWare.Win32.BookedSpace.g

    McAfee 4788 06.20.2006 potentially unwanted program Adware-BkdSpace

    Microsoft 1.1441 06.20.2006 no virus found

    NOD32v2 1.1611 06.20.2006 no virus found

    Norman 5.90.21 06.20.2006 W32/BookedSpace.S

    Panda 9.0.0.4 06.20.2006 Adware/BookedSpace

    Sophos 4.06.0 06.20.2006 no virus found

    Symantec 8.0 06.20.2006 no virus found

    TheHacker 5.9.8.162 06.20.2006 no virus found

    UNA 1.83 06.20.2006 Adware.BookedSpace

    VBA32 3.11.0 06.20.2006 no virus found

    VirusBuster 4.3.7:9 06.20.2006 no virus found

     

     

     

    http://virusscan.jotti.org/

     

    Service load: 0% 100%

     

    File: yzbdmmza.dll

    Status: INFECTED/MALWARE

    MD5 7ee750b226a0656146738362d20b06e8

    Packers detected: -

    Scanner results

    AntiVir Found Adware-Spyware/BookedSpace.G.4 adware

    ArcaVir Found nothing

    Avast Found Win32:Startpage-175

    AVG Antivirus Found Generic.MDE

    BitDefender Found nothing

    ClamAV Found nothing

    Dr.Web Found Adware.Bkspace

    F-Prot Antivirus Found nothing

    Fortinet Found nothing

    Kaspersky Anti-Virus Found not-a-virus:AdWare.Win32.BookedSpace.g

    NOD32 Found nothing

    Norman Virus Control Found W32/BookedSpace.S

    UNA Found nothing

    VirusBuster Found nothing

    VBA32 Found nothing

  14. Besoin d'aide - Analyse rapports HijackThis

    dans Analyses et éradication malwares

    Posté(e)

    Salut,

     

    D'abord merci pour ton aide... J'ai fait un 2eme message car je n'ai pas eu de reponse sur le premier.

     

    Dans le desordre:

     

    Mon fournisseur en France que j'utilise en ce moment est Free. Mais je suis resident au Nigeria. Donc j'ai un provider localement. L'allemangne je ne vois que USENEXT que j'utilise de temps en temps.

     

     

    -------------------------------------

    - Startup list HijackThis -

    -------------------------------------

     

    StartupList report, 20/06/2006, 20:09:38

    StartupList version: 1.52.2

    Started from : C:\Documents and Settings\Compaq\Desktop\HijackThis.EXE

    Detected: Windows XP SP2 (WinNT 5.01.2600)

    Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    * Using default options

    * Including empty and uninteresting sections

    * Showing rarely important sections

    ==================================================

     

    Running processes:

     

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\WINDOWS\AGRSMMSG.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\WINDOWS\system32\dla\tfswctrl.exe

    C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\QuickTime\qttask.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

    C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    C:\Program Files\Common Files\Symantec Shared\ccApp.exe

    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe

    C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe

    C:\Program Files\HPQ\Shared\hpqwmi.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Documents and Settings\Compaq\Desktop\HijackThis.exe

     

    --------------------------------------------------

     

    Listing of startup folders:

     

    Shell folders Startup:

    [C:\Documents and Settings\Compaq\Start Menu\Programs\Startup]

    *No files*

     

    Shell folders AltStartup:

    *Folder not found*

     

    User shell folders Startup:

    *Folder not found*

     

    User shell folders AltStartup:

    *Folder not found*

     

    Shell folders Common Startup:

    [C:\Documents and Settings\All Users\Start Menu\Programs\Startup]

    Bluetooth.lnk = ?

    DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

     

    Shell folders Common AltStartup:

    *Folder not found*

     

    User shell folders Common Startup:

    *Folder not found*

     

    User shell folders Alternate Common Startup:

    *Folder not found*

     

    --------------------------------------------------

     

    Checking Windows NT UserInit:

     

    [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

    UserInit = C:\WINDOWS\system32\userinit.exe,

     

    [HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon]

    *Registry key not found*

     

    [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

    *Registry value not found*

     

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon]

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

     

    IMJPMIG8.1 = "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

    PHIME2002ASync = C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

    PHIME2002A = C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

    SoundMAXPnP = C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    SoundMAX = C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray

    AGRSMMSG = AGRSMMSG.exe

    SynTPEnh = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    IgfxTray = C:\WINDOWS\system32\igfxtray.exe

    HotKeysCmds = C:\WINDOWS\system32\hkcmd.exe

    Persistence = C:\WINDOWS\system32\igfxpers.exe

    UpdateManager = "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r

    dla = C:\WINDOWS\system32\dla\tfswctrl.exe

    hpWirelessAssistant = C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    WatchDog = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    pdfSaver3 =

    MMReminderService = C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    iTunesHelper = "C:\Program Files\iTunes\iTunesHelper.exe"

    QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime

    PCSuiteTrayApplication = C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -

     

    onlytray

    DataLayer = C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    HP Software Update = C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    ccApp = "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

    URLLSTCK.exe = C:\Program Files\Norton Internet Security\UrlLstCk.exe

    Symantec NetDriver Monitor = C:\PROGRA~1\SYMNET~1\SNDMon.exe

    avgnt = "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

     

    *No values found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

     

    *No values found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

     

    *No values found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

     

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKCU\Software\Microsoft\Windows\CurrentVersion\Run

     

    MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background

    pdfSaver3 = "C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe"

    PcSync = C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

    Uniblue Registry Booster = C:\Program Files\Uniblue\Registry Booster\RegistryBooster.exe /S

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

     

    *No values found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

     

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

     

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

     

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run

     

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run

     

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

     

    [OptionalComponents]

    *No values found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

    *No subkeys found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

    *No subkeys found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

    *No subkeys found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKCU\Software\Microsoft\Windows\CurrentVersion\Run

    *No subkeys found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

    *No subkeys found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries in Registry subkeys of:

    HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run

    *Registry key not found*

     

    --------------------------------------------------

     

    File association entry for .EXE:

    HKEY_CLASSES_ROOT\exefile\shell\open\command

     

    (Default) = "%1" %*

     

    --------------------------------------------------

     

    File association entry for .COM:

    HKEY_CLASSES_ROOT\comfile\shell\open\command

     

    (Default) = "%1" %*

     

    --------------------------------------------------

     

    File association entry for .BAT:

    HKEY_CLASSES_ROOT\batfile\shell\open\command

     

    (Default) = "%1" %*

     

    --------------------------------------------------

     

    File association entry for .PIF:

    HKEY_CLASSES_ROOT\piffile\shell\open\command

     

    (Default) = "%1" %*

     

    --------------------------------------------------

     

    File association entry for .SCR:

    HKEY_CLASSES_ROOT\scrfile\shell\open\command

     

    (Default) = "%1" /S

     

    --------------------------------------------------

     

    File association entry for .HTA:

    HKEY_CLASSES_ROOT\htafile\shell\open\command

     

    (Default) = C:\WINDOWS\system32\mshta.exe "%1" %*

     

    --------------------------------------------------

     

    File association entry for .TXT:

    HKEY_CLASSES_ROOT\txtfile\shell\open\command

     

    (Default) = %SystemRoot%\system32\NOTEPAD.EXE %1

     

    --------------------------------------------------

     

    Enumerating Active Setup stub paths:

    HKLM\Software\Microsoft\Active Setup\Installed Components

    (* = disabled by HKCU twin)

     

    [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]

    StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

     

    [>{26923b43-4d38-484f-9b9e-de460746276c}] *

    StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

     

    [>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] *

    StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

     

    [>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] *

    StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

     

    [{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] *

    StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32

     

    \themeui.dll

     

    [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *

    StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

     

    [{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] *

    StubPath = rundll32.exe advpack.dll,LaunchINFSection

     

    C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

     

    [{4b218e3e-bc98-4770-93d3-2731b9329278}] *

    StubPath = %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection

     

    MarketplaceLinkInstall 896 %systemroot%\inf\ie.inf

     

    [{5945c046-1e7d-11d1-bc44-00c04fd912be}] *

    StubPath = rundll32.exe advpack.dll,LaunchINFSection

     

    C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

     

    [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] *

    StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub

     

    [{7790769C-0471-11d2-AF11-00C04FA35D02}] *

    StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user

     

    /install

     

    [{89820200-ECBD-11cf-8B85-00AA005B4340}] *

    StubPath = regsvr32.exe /s /n /i:U shell32.dll

     

    [{89820200-ECBD-11cf-8B85-00AA005B4383}] *

    StubPath = %SystemRoot%\system32\ie4uinit.exe

     

    [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] *

    StubPath = C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install

     

    [{9B71D88C-C598-4935-C5D1-43AA4DB90836}]

    StubPath = C:\WINDOWS\system32\winupdate.exe s

     

    --------------------------------------------------

     

    Enumerating ICQ Agent Autostart apps:

    HKCU\Software\Mirabilis\ICQ\Agent\Apps

     

    *Registry key not found*

     

    --------------------------------------------------

     

    Load/Run keys from C:\WINDOWS\WIN.INI:

     

    load=*INI section not found*

    run=*INI section not found*

     

    Load/Run keys from Registry:

     

    HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*

    HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*

    HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*

    HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*

    HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*

    HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*

    HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*

    HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*

    HKCU\..\Windows NT\CurrentVersion\Windows: load=

    HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*

    HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*

    HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*

    HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=

     

    --------------------------------------------------

     

    Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

     

    Shell=*INI section not found*

    SCRNSAVE.EXE=*INI section not found*

    drivers=*INI section not found*

     

    Shell & screensaver key from Registry:

     

    Shell=Explorer.exe

    SCRNSAVE.EXE=*Registry value not found*

    drivers=*Registry value not found*

     

    Policies Shell key:

     

    HKCU\..\Policies: Shell=*Registry value not found*

    HKLM\..\Policies: Shell=*Registry value not found*

     

    --------------------------------------------------

     

    Checking for EXPLORER.EXE instances:

     

    C:\WINDOWS\Explorer.exe: PRESENT!

     

    C:\Explorer.exe: not present

    C:\WINDOWS\Explorer\Explorer.exe: not present

    C:\WINDOWS\System\Explorer.exe: not present

    C:\WINDOWS\System32\Explorer.exe: not present

    C:\WINDOWS\Command\Explorer.exe: not present

    C:\WINDOWS\Fonts\Explorer.exe: not present

     

    --------------------------------------------------

     

    Checking for superhidden extensions:

     

    .lnk: HIDDEN! (arrow overlay: yes)

    .pif: HIDDEN! (arrow overlay: yes)

    .exe: not hidden

    .com: not hidden

    .bat: not hidden

    .hta: not hidden

    .scr: not hidden

    .shs: HIDDEN!

    .shb: HIDDEN!

    .vbs: not hidden

    .vbe: not hidden

    .wsh: not hidden

    .scf: HIDDEN! (arrow overlay: NO!)

    .url: HIDDEN! (arrow overlay: yes)

    .js: not hidden

    .jse: not hidden

     

    --------------------------------------------------

     

    Verifying REGEDIT.EXE integrity:

     

    - Regedit.exe found in C:\WINDOWS

    - .reg open command is normal (regedit.exe %1)

    - Company name OK: 'Microsoft Corporation'

    - Original filename OK: 'REGEDIT.EXE'

    - File description: 'Registry Editor'

     

    Registry check passed

     

    --------------------------------------------------

     

    Enumerating Browser Helper Objects:

     

    (no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll - {02478D38-C3F9-4EFB-

     

    9B51-7695ECA05670}

    (no name) - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll - {06849E9F-

     

    C8D7-4D59-B87D-784B7D6BE0B3}

    (no name) - C:\WINDOWS\yzbdmmza.dll - {251F97F8-72FC-FECF-AA73-FA7BD59E4889}

    (no name) - C:\WINDOWS\system32\dla\tfswshx.dll - {5CA3D70E-1895-11CF-8E15-001234567890}

    (no name) - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-

     

    D4DAF1D92D43}

    Web assistant - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll -

     

    {9ECB9560-04F9-4bbc-943D-298DDF1699E1}

    (no name) - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll - {AC41D38F-B56D

     

    -40AD-94E0-B493D130C959}

    NAV Helper - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll -

     

    {BDF3E430-B101-42AD-A544-FADC6B084872}

     

    --------------------------------------------------

     

    Enumerating Task Scheduler jobs:

     

    Norton AntiVirus - Analyser mon ordinateur.job

    Symantec NetDetect.job

     

    --------------------------------------------------

     

    Enumerating Download Program Files:

     

    [infotl Control]

    InProcServer32 = C:\WINDOWS\DOWNLO~1\EBRARY~1.OCX

    CODEBASE = http://site.ebrary.com/lib/clcorp/support/...s/ebraryRdr.cab

     

    [Windows Genuine Advantage Validation Tool]

    InProcServer32 = C:\WINDOWS\system32\legitcheckcontrol.dll

    CODEBASE = http://go.microsoft.com/fwlink/?linkid=39204

     

    [YInstStarter Class]

    InProcServer32 = C:\Program Files\Yahoo!\Common\yinsthelper.dll

    CODEBASE = C:\Program Files\Yahoo!\Common\yinsthelper.dll

     

    [WUWebControl Class]

    InProcServer32 = C:\WINDOWS\system32\wuweb.dll

    CODEBASE =

     

    http://update.microsoft.com/windowsupdate/.../wuweb_site.cab?

     

    1148852151984

     

    [Java Plug-in]

    InProcServer32 = C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    CODEBASE = http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab

     

    [AdSignerLCContrl Class]

    InProcServer32 = C:\WINDOWS\Downloaded Program Files\AdSignerADP.dll

    CODEBASE = https://static.impots.gouv.fr/tdir/static/a...AdSignerADP.cab

     

    [Java Plug-in]

    InProcServer32 = C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    CODEBASE = http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab

     

    [Java Plug-in 1.5.0_07]

    InProcServer32 = C:\Program Files\Java\jre1.5.0_07\bin\npjpi150_07.dll

    CODEBASE = http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab

     

    [shockwave Flash Object]

    InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx

    CODEBASE = http://download.macromedia.com/pub/shockwa...ash/swflash.cab

     

    --------------------------------------------------

     

    Enumerating Winsock LSP files:

     

    NameSpace #1: C:\WINDOWS\System32\mswsock.dll

    NameSpace #2: C:\WINDOWS\System32\winrnr.dll

    NameSpace #3: C:\WINDOWS\System32\mswsock.dll

    Protocol #1: C:\WINDOWS\system32\mswsock.dll

    Protocol #2: C:\WINDOWS\system32\mswsock.dll

    Protocol #3: C:\WINDOWS\system32\mswsock.dll

    Protocol #4: C:\WINDOWS\system32\rsvpsp.dll

    Protocol #5: C:\WINDOWS\system32\rsvpsp.dll

    Protocol #6: C:\WINDOWS\system32\mswsock.dll

    Protocol #7: C:\WINDOWS\system32\mswsock.dll

    Protocol #8: C:\WINDOWS\system32\mswsock.dll

    Protocol #9: C:\WINDOWS\system32\mswsock.dll

    Protocol #10: C:\WINDOWS\system32\mswsock.dll

    Protocol #11: C:\WINDOWS\system32\mswsock.dll

    Protocol #12: C:\WINDOWS\system32\mswsock.dll

    Protocol #13: C:\WINDOWS\system32\mswsock.dll

    Protocol #14: C:\WINDOWS\system32\mswsock.dll

    Protocol #15: C:\WINDOWS\system32\mswsock.dll

    Protocol #16: C:\WINDOWS\system32\mswsock.dll

    Protocol #17: C:\WINDOWS\system32\mswsock.dll

    Protocol #18: C:\WINDOWS\system32\mswsock.dll

    Protocol #19: C:\WINDOWS\system32\mswsock.dll

    Protocol #20: C:\WINDOWS\system32\mswsock.dll

    Protocol #21: C:\WINDOWS\system32\mswsock.dll

     

    --------------------------------------------------

     

    Enumerating Windows NT/2000/XP services

     

    Microsoft ACPI Driver: system32\DRIVERS\ACPI.sys (system)

    Microsoft Embedded Controller Driver: system32\DRIVERS\ACPIEC.sys (system)

    aeaudio: system32\drivers\aeaudio.sys (manual start)

    Microsoft Kernel Acoustic Echo Canceller: system32\drivers\aec.sys (manual start)

    AFD: \SystemRoot\System32\drivers\afd.sys (system)

    Agere Systems Soft Modem: system32\DRIVERS\AGRSM.sys (manual start)

    Alerter: %SystemRoot%\system32\svchost.exe -k LocalService (disabled)

    Application Layer Gateway Service: %SystemRoot%\System32\alg.exe (manual start)

    AntiVir PersonalEdition Classic Scheduler: C:\Program Files\AntiVir PersonalEdition

     

    Classic\sched.exe (autostart)

    AntiVir PersonalEdition Classic Guard: C:\Program Files\AntiVir PersonalEdition

     

    Classic\avguard.exe (autostart)

    Application Management: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)

    1394 ARP Client Protocol: system32\DRIVERS\arp1394.sys (manual start)

    ASP.NET State Service: %SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe

     

    (manual start)

    RAS Asynchronous Media Driver: system32\DRIVERS\asyncmac.sys (manual start)

    Standard IDE/ESDI Hard Disk Controller: system32\DRIVERS\atapi.sys (system)

    ATM ARP Client Protocol: system32\DRIVERS\atmarpc.sys (manual start)

    Windows Audio: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    Audio Stub Driver: system32\DRIVERS\audstub.sys (manual start)

    avgio: \??\C:\Program Files\AntiVir PersonalEdition Classic\avgio.sys (system)

    avgntflt: \??\C:\Program Files\AntiVir PersonalEdition Classic\avgntflt.sys (manual start)

    Broadcom 440x 10/100 Integrated Controller: system32\DRIVERS\bcm4sbxp.sys (manual start)

    Background Intelligent Transfer Service: %SystemRoot%\system32\svchost.exe -k netsvcs

     

    (autostart)

    Computer Browser: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)

    Bluetooth Audio Device: system32\drivers\btaudio.sys (manual start)

    Bluetooth Virtual Communications Driver: system32\DRIVERS\btport.sys (manual start)

    Bluetooth Bus Enumerator: system32\DRIVERS\btkrnl.sys (manual start)

    Bluetooth Service: C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (autostart)

    Bluetooth LAN Access Server: system32\DRIVERS\btwdndis.sys (manual start)

    Bluetooth Modem: system32\DRIVERS\btwmodem.sys (manual start)

    WIDCOMM USB Bluetooth Driver: System32\Drivers\btwusb.sys (manual start)

    Symantec Event Manager: "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"

     

    (autostart)

    Symantec Network Proxy: "C:\Program Files\Common Files\Symantec Shared\ccProxy.exe"

     

    (autostart)

    Symantec Password Validation: "C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"

     

    (manual start)

    Symantec Settings Manager: "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"

     

    (autostart)

    CD-ROM Driver: system32\DRIVERS\cdrom.sys (system)

    Indexing Service: %SystemRoot%\system32\cisvc.exe (manual start)

    ClipBook: %SystemRoot%\system32\clipsrv.exe (disabled)

    Microsoft ACPI Control Method Battery Driver: system32\DRIVERS\CmBatt.sys (manual start)

    Microsoft Composite Battery Driver: system32\DRIVERS\compbatt.sys (system)

    COM+ System Application: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-

     

    960D-00805FC79235} (manual start)

    Cryptographic Services: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)

    DCOM Server Process Launcher: %SystemRoot%\system32\svchost -k DcomLaunch (autostart)

    DHCP Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)

    Disk Driver: system32\DRIVERS\disk.sys (system)

    Logical Disk Manager Administrative Service: %SystemRoot%\System32\dmadmin.exe /com (manual

     

    start)

    dmboot: System32\drivers\dmboot.sys (disabled)

    Logical Disk Manager Driver: System32\drivers\dmio.sys (system)

    dmload: System32\drivers\dmload.sys (system)

    Logical Disk Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    Microsoft Kernel DLS Syntheiszer: system32\drivers\DMusic.sys (manual start)

    DNS Client: %SystemRoot%\system32\svchost.exe -k NetworkService (autostart)

    Microsoft Kernel DRM Audio Descrambler: system32\drivers\drmkaud.sys (manual start)

    drvmcdb: system32\drivers\drvmcdb.sys (system)

    drvnddm: system32\drivers\drvnddm.sys (autostart)

    Error Reporting Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    Event Log: %SystemRoot%\system32\services.exe (autostart)

    COM+ Event System: C:\WINDOWS\system32\svchost.exe -k netsvcs (manual start)

    Fast User Switching Compatibility: %SystemRoot%\System32\svchost.exe -k netsvcs (manual

     

    start)

    FltMgr: system32\DRIVERS\fltMgr.sys (system)

    Volume Manager Driver: system32\DRIVERS\ftdisk.sys (system)

    GEARAspiWDM: System32\Drivers\GEARAspiWDM.sys (manual start)

    Generic Packet Classifier: system32\DRIVERS\msgpc.sys (manual start)

    Help and Support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    Human Interface Device Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)

    HP WMI Interface: C:\Program Files\HPQ\Shared\hpqwmi.exe (manual start)

    IEEE-1284.4 Driver HPZid412: system32\DRIVERS\HPZid412.sys (manual start)

    Print Class Driver for IEEE-1284.4 HPZipr12: system32\DRIVERS\HPZipr12.sys (manual start)

    USB to IEEE-1284.4 Translation Driver HPZius12: system32\DRIVERS\HPZius12.sys (manual start)

    HTTP: System32\Drivers\HTTP.sys (manual start)

    HTTP SSL: %SystemRoot%\System32\svchost.exe -k HTTPFilter (manual start)

    i8042 Keyboard and PS/2 Mouse Port Driver: system32\DRIVERS\i8042prt.sys (system)

    ialm: system32\DRIVERS\ialmnt5.sys (manual start)

    InstallDriver Table Manager: "C:\Program Files\Common Files\InstallShield\Driver\11\Intel

     

    32\IDriverT.exe" (manual start)

    CD-Burning Filter Driver: system32\DRIVERS\imapi.sys (system)

    IMAPI CD-Burning COM Service: C:\WINDOWS\system32\imapi.exe (manual start)

    IntelIde: system32\DRIVERS\intelide.sys (system)

    Intel Processor Driver: system32\DRIVERS\intelppm.sys (system)

    IPv6 Windows Firewall Driver: system32\DRIVERS\Ip6Fw.sys (manual start)

    IP Traffic Filter Driver: system32\DRIVERS\ipfltdrv.sys (manual start)

    IP in IP Tunnel Driver: system32\DRIVERS\ipinip.sys (manual start)

    IP Network Address Translator: system32\DRIVERS\ipnat.sys (manual start)

    iPodService: C:\Program Files\iPod\bin\iPodService.exe (manual start)

    IPSEC driver: system32\DRIVERS\ipsec.sys (system)

    IR Enumerator Service: system32\DRIVERS\irenum.sys (manual start)

    PnP ISA/EISA Bus Driver: system32\DRIVERS\isapnp.sys (system)

    Keyboard Class Driver: system32\DRIVERS\kbdclass.sys (system)

    Microsoft Kernel Wave Audio Mixer: system32\drivers\kmixer.sys (manual start)

    Server: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)

    Workstation: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)

    TCP/IP NetBIOS Helper: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)

    Messenger: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled)

    NetMeeting Remote Desktop Sharing: C:\WINDOWS\system32\mnmsrvc.exe (manual start)

    Mouse Class Driver: system32\DRIVERS\mouclass.sys (system)

    WebDav Client Redirector: system32\DRIVERS\mrxdav.sys (manual start)

    MRXSMB: system32\DRIVERS\mrxsmb.sys (system)

    Distributed Transaction Coordinator: C:\WINDOWS\system32\msdtc.exe (manual start)

    Windows Installer: C:\WINDOWS\system32\msiexec.exe /V (manual start)

    Microsoft Streaming Service Proxy: system32\drivers\MSKSSRV.sys (manual start)

    Microsoft Streaming Clock Proxy: system32\drivers\MSPCLOCK.sys (manual start)

    Microsoft Streaming Quality Manager Proxy: system32\drivers\MSPQM.sys (manual start)

    Microsoft System Management BIOS Driver: system32\DRIVERS\mssmbios.sys (manual start)

    Service Norton AntiVirus Auto-Protect: "C:\Program Files\Norton Internet Security\Norton

     

    AntiVirus\navapsvc.exe" (autostart)

    NAVENG: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060614.035\NAVENG.Sys (manual start)

    NAVEX15: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060614.035\NavEx15.Sys (manual start)

    Remote Access NDIS TAPI Driver: system32\DRIVERS\ndistapi.sys (manual start)

    NDIS Usermode I/O Protocol: system32\DRIVERS\ndisuio.sys (manual start)

    Remote Access NDIS WAN Driver: system32\DRIVERS\ndiswan.sys (manual start)

    NetBIOS Interface: system32\DRIVERS\netbios.sys (system)

    NetBios over Tcpip: system32\DRIVERS\netbt.sys (system)

    Network DDE: %SystemRoot%\system32\netdde.exe (disabled)

    Network DDE DSDM: %SystemRoot%\system32\netdde.exe (disabled)

    Net Logon: %SystemRoot%\system32\lsass.exe (manual start)

    Network Connections: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)

    1394 Net Driver: system32\DRIVERS\nic1394.sys (manual start)

    Network Location Awareness (NLA): %SystemRoot%\system32\svchost.exe -k netsvcs (manual

     

    start)

    Nokia USB Generic: system32\drivers\nmwcdc.sys (manual start)

    Nokia USB Modem: system32\drivers\nmwcdcm.sys (manual start)

    Nokia USB Phone Parent: system32\drivers\nmwcd.sys (manual start)

    NT LM Security Support Provider: %SystemRoot%\system32\lsass.exe (manual start)

    Removable Storage: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)

    IPX Traffic Filter Driver: system32\DRIVERS\nwlnkflt.sys (manual start)

    IPX Traffic Forwarder Driver: system32\DRIVERS\nwlnkfwd.sys (manual start)

    Texas Instruments OHCI Compliant IEEE 1394 Host Controller: system32\DRIVERS\ohci1394.sys

     

    (system)

    Office Source Engine: "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"

     

    (manual start)

    PCANDIS5 NDIS Protocol Driver: \??\C:\WINDOWS\system32\PCANDIS5.SYS (manual start)

    PCI Bus Driver: system32\DRIVERS\pci.sys (system)

    Pcmcia: system32\DRIVERS\pcmcia.sys (system)

    Plug and Play: %SystemRoot%\system32\services.exe (autostart)

    Pml Driver HPZ12: C:\WINDOWS\system32\HPZipm12.exe (autostart)

    IPSEC Services: %SystemRoot%\system32\lsass.exe (autostart)

    WAN Miniport (PPTP): system32\DRIVERS\raspptp.sys (manual start)

    Protected Storage: %SystemRoot%\system32\lsass.exe (autostart)

    QoS Packet Scheduler: system32\DRIVERS\psched.sys (manual start)

    Direct Parallel Link Driver: system32\DRIVERS\ptilink.sys (manual start)

    PxHelp20: System32\Drivers\PxHelp20.sys (system)

    Remote Access Auto Connection Driver: system32\DRIVERS\rasacd.sys (system)

    Remote Access Auto Connection Manager: %SystemRoot%\system32\svchost.exe -k netsvcs (manual

     

    start)

    WAN Miniport (L2TP): system32\DRIVERS\rasl2tp.sys (manual start)

    Remote Access Connection Manager: %SystemRoot%\system32\svchost.exe -k netsvcs (manual

     

    start)

    Remote Access PPPOE Driver: system32\DRIVERS\raspppoe.sys (manual start)

    Direct Parallel: system32\DRIVERS\raspti.sys (manual start)

    Rdbss: system32\DRIVERS\rdbss.sys (system)

    RDPCDD: System32\DRIVERS\RDPCDD.sys (system)

    Terminal Server Device Redirector Driver: system32\DRIVERS\rdpdr.sys (manual start)

    Remote Desktop Help Session Manager: C:\WINDOWS\system32\sessmgr.exe (manual start)

    Digital CD Audio Playback Filter Driver: system32\DRIVERS\redbook.sys (system)

    Routing and Remote Access: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled)

    Remote Registry: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)

    Remote Procedure Call (RPC) Locator: %SystemRoot%\system32\locator.exe (manual start)

    Remote Procedure Call (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart)

    QoS RSVP: %SystemRoot%\system32\rsvp.exe (manual start)

    Security Accounts Manager: %SystemRoot%\system32\lsass.exe (autostart)

    SAVRT: \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRT.SYS (system)

    SAVRTPEL: \??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRTPEL.SYS

     

    (system)

    SAVScan: "C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe"

     

    (autostart)

    ScriptBlocking Service: C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe (autostart)

    Smart Card: %SystemRoot%\System32\SCardSvr.exe (manual start)

    Task Scheduler: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    Secdrv: system32\DRIVERS\secdrv.sys (autostart)

    Secondary Logon: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    System Event Notification: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)

    Windows Firewall/Internet Connection Sharing (ICS): %SystemRoot%\system32\svchost.exe -k

     

    netsvcs (autostart)

    Shell Hardware Detection: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    smwdm: system32\drivers\smwdm.sys (manual start)

    Symantec Network Drivers Service: "C:\Program Files\Common Files\Symantec

     

    Shared\SNDSrvc.exe" (autostart)

    SoundMAX Agent Service: C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (autostart)

    Microsoft Kernel Audio Splitter: system32\drivers\splitter.sys (manual start)

    Print Spooler: %SystemRoot%\system32\spoolsv.exe (autostart)

    System Restore Filter Driver: system32\DRIVERS\sr.sys (system)

    System Restore Service: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)

    Srv: system32\DRIVERS\srv.sys (manual start)

    sscdbhk5: system32\drivers\sscdbhk5.sys (system)

    SSDP Discovery Service: %SystemRoot%\system32\svchost.exe -k LocalService (manual start)

    ssrtln: system32\drivers\ssrtln.sys (system)

    Windows Image Acquisition (WIA): %SystemRoot%\system32\svchost.exe -k imgsvc (autostart)

    Software Bus Driver: system32\DRIVERS\swenum.sys (manual start)

    Microsoft Kernel GS Wavetable Synthesizer: system32\drivers\swmidi.sys (manual start)

    MS Software Shadow Copy Provider: C:\WINDOWS\system32\dllhost.exe /Processid:{03A34DC8-CB9B

     

    -42E0-943B-AF195EF42E10} (manual start)

    SYMDNS: \SystemRoot\System32\Drivers\SYMDNS.SYS (manual start)

    SymEvent: \??\C:\Program Files\Symantec\SYMEVENT.SYS (manual start)

    SYMFW: \SystemRoot\System32\Drivers\SYMFW.SYS (manual start)

    SYMIDS: \SystemRoot\System32\Drivers\SYMIDS.SYS (manual start)

    SYMIDSCO: \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\idsdefs\20060614.094\symidsco.sys

     

    (manual start)

    SYMNDIS: \SystemRoot\System32\Drivers\SYMNDIS.SYS (manual start)

    SYMREDRV: \SystemRoot\System32\Drivers\SYMREDRV.SYS (manual start)

    SYMTDI: \SystemRoot\System32\Drivers\SYMTDI.SYS (system)

    Synaptics TouchPad Driver: system32\DRIVERS\SynTP.sys (manual start)

    Microsoft Kernel System Audio Device: system32\drivers\sysaudio.sys (manual start)

    Performance Logs and Alerts: %SystemRoot%\system32\smlogsvc.exe (manual start)

    Telephony: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)

    TCP/IP Protocol Driver: system32\DRIVERS\tcpip.sys (system)

    Terminal Device Driver: system32\DRIVERS\termdd.sys (system)

    Terminal Services: %SystemRoot%\System32\svchost -k DComLaunch (manual start)

    tfsnboio: system32\dla\tfsnboio.sys (autostart)

    tfsncofs: system32\dla\tfsncofs.sys (autostart)

    tfsndrct: system32\dla\tfsndrct.sys (autostart)

    tfsndres: system32\dla\tfsndres.sys (autostart)

    tfsnifs: system32\dla\tfsnifs.sys (autostart)

    tfsnopio: system32\dla\tfsnopio.sys (autostart)

    tfsnpool: system32\dla\tfsnpool.sys (autostart)

    tfsnudf: system32\dla\tfsnudf.sys (autostart)

    tfsnudfa: system32\dla\tfsnudfa.sys (autostart)

    Themes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    Telnet: C:\WINDOWS\system32\tlntsvr.exe (disabled)

    Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)

    Windows User Mode Driver Framework: C:\WINDOWS\system32\wdfmgr.exe (autostart)

    Microcode Update Driver: system32\DRIVERS\update.sys (manual start)

    Universal Plug and Play Device Host: %SystemRoot%\system32\svchost.exe -k LocalService

     

    (manual start)

    Uninterruptible Power Supply: %SystemRoot%\System32\ups.exe (manual start)

    Microsoft USB Generic Parent Driver: system32\DRIVERS\usbccgp.sys (manual start)

    Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: system32\DRIVERS\usbehci.sys

     

    (manual start)

    USB2 Enabled Hub: system32\DRIVERS\usbhub.sys (manual start)

    Microsoft USB PRINTER Class: system32\DRIVERS\usbprint.sys (manual start)

    USB Scanner Driver: system32\DRIVERS\usbscan.sys (manual start)

    USB Mass Storage Driver: system32\DRIVERS\USBSTOR.SYS (manual start)

    Microsoft USB Universal Host Controller Miniport Driver: system32\DRIVERS\usbuhci.sys

     

    (manual start)

    VgaSave: \SystemRoot\System32\drivers\vga.sys (system)

    Volume Shadow Copy: %SystemRoot%\System32\vssvc.exe (manual start)

    Intel® PRO/Wireless 2200BG Network Connection Driver for Windows XP: system32

     

    \DRIVERS\w29n51.sys (manual start)

    Windows Time: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    Remote Access IP ARP Driver: system32\DRIVERS\wanarp.sys (manual start)

    Microsoft WINMM WDM Audio Compatibility Driver: system32\drivers\wdmaud.sys (manual start)

    WebClient: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)

    Windows Management Instrumentation: %systemroot%\system32\svchost.exe -k netsvcs (autostart)

    Portable Media Serial Number Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual

     

    start)

    Windows Management Instrumentation Driver Extensions: %SystemRoot%\System32\svchost.exe -k

     

    netsvcs (manual start)

    Microsoft Windows Management Interface for ACPI: system32\DRIVERS\wmiacpi.sys (system)

    WMI Performance Adapter: C:\WINDOWS\system32\wbem\wmiapsrv.exe (manual start)

    Security Center: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    Automatic Updates: %systemroot%\system32\svchost.exe -k netsvcs (autostart)

    Wireless Zero Configuration: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)

    Network Provisioning Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)

     

     

    --------------------------------------------------

     

    Enumerating Windows NT logon/logoff scripts:

    *No scripts set to run*

     

    Windows NT checkdisk command:

    BootExecute = autocheck autochk *

     

    Windows NT 'Wininit.ini':

    PendingFileRenameOperations: C:\Program Files\HPQ\Shared\hpqwmi.events|||\

     

    --------------------------------------------------

     

    Enumerating ShellServiceObjectDelayLoad items:

     

    PostBootReminder: C:\WINDOWS\system32\SHELL32.dll

    CDBurn: C:\WINDOWS\system32\SHELL32.dll

    WebCheck: C:\WINDOWS\system32\webcheck.dll

    SysTray: C:\WINDOWS\system32\stobject.dll

     

    --------------------------------------------------

    Autorun entries from Registry:

    HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

     

    *Registry key not found*

     

    --------------------------------------------------

     

    Autorun entries from Registry:

    HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

     

    *No values found*

     

    --------------------------------------------------

     

    End of report, 40,133 bytes

    Report generated in 0.328 seconds

     

    Command line options:

    /verbose - to add additional info on each section

    /complete - to include empty sections and unsuspicious data

    /full - to include several rarely-important sections

    /force9x - to include Win9x-only startups even if running on WinNT

    /forcent - to include WinNT-only startups even if running on Win9x

    /forceall - to include all Win9x and WinNT startups, regardless of platform

    /history - to list version history only

     

     

     

     

     

    -------------------------------------

    - Log file HijackThis -

    -------------------------------------

     

    Logfile of HijackThis v1.99.1

    Scan saved at 20:12:32, on 20/06/2006

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\WINDOWS\AGRSMMSG.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\WINDOWS\system32\dla\tfswctrl.exe

    C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\QuickTime\qttask.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

    C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    C:\Program Files\Common Files\Symantec Shared\ccApp.exe

    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe

    C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe

    C:\Program Files\HPQ\Shared\hpqwmi.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\WINDOWS\system32\notepad.exe

    C:\Documents and Settings\Compaq\Desktop\lookatthat.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/

    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program

     

    Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

     

    Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

    O2 - BHO: (no name) - {251F97F8-72FC-FECF-AA73-FA7BD59E4889} - C:\WINDOWS\yzbdmmza.dll

    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32

     

    \dla\tfswshx.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

     

    Files\Java\jre1.5.0_07\bin\ssv.dll

    O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common

     

    Files\Symantec Shared\AdBlocking\NISShExt.dll

    O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} -

     

    C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton

     

    Internet Security\Norton AntiVirus\NavShExt.dll

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program

     

    Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O3 - Toolbar: Search - {D1E64F42-C13F-DEA0-21CC-49F187D186C7} - C:\WINDOWS\yzbdmmza.dll

    O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program

     

    Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program

     

    Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

    O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef

     

    /Migration32

    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    O4 - HKLM\..\Run: [soundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray

    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

    O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Common Files\Sonic\Update

     

    Manager\sgtray.exe" /r

    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

    O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP

     

    Wireless Assistant.exe

    O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - HKLM\..\Run: [MMReminderService] C:\Program Files\Mindjet\MindManager 6

     

    \MMReminderService.exe

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6

     

    \LaunchApplication.exe -onlytray

    O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

    O4 - HKLM\..\Run: [urlLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe

    O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe

    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [pdfSaver3] "C:\Program Files\Tracker Software\PDF-XChange 3

     

    \pdfSaver\pdfSaver3.exe"

    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

    O4 - HKCU\..\Run: [uniblue Registry Booster] C:\Program Files\Uniblue\Registry

     

    Booster\RegistryBooster.exe /S

    O4 - Global Startup: Bluetooth.lnk = ?

    O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital

     

    Imaging\bin\hpqtra08.exe

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2

     

    \OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth

     

    Software\btsendto_ie_ctx.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

     

    Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

     

    C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!

     

    \Common\yhexbmesfr.dll

    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} -

     

    C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

    O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} -

     

    C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2

     

    \OFFICE11\REFIEBAR.DLL

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program

     

    Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} -

     

    C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

     

    Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

     

    C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) -

     

    http://site.ebrary.com/lib/clcorp/support/...s/ebraryRdr.cab

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation

     

    Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program

     

    Files\Yahoo!\Common\yinsthelper.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

     

    http://update.microsoft.com/windowsupdate/.../wuweb_site.cab?

     

    1148852151984

    O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) -

     

    https://static.impots.gouv.fr/tdir/static/a...AdSignerADP.cab

    O17 - HKLM\System\CCS\Services\Tcpip\..\{5D60011C-1268-4AF9-872A-EFE76B2AD149}: NameServer =

     

    213.255.201.9,213.255.201.10,212.

  15. Besoin d'aide - Analyse rapports HijackThis

    dans Analyses et éradication malwares

    Posté(e)

    Salut,

     

    Mon PC plante maintenant systematiquement au demarrage. J'ai fait touner SmitfraudFix en safe mode. Cela n'a pas resolu le probleme. Norton ne voit rien non plus. Voici le resultat du log apres tous ces essais. Qqu'un peut-il m'aiguiller?

     

    Le seul truc qui me permet d'utiliser la machine partiellement c'est de suspendre le Servic~1.exe.

     

    Merci,

    Alexis

     

    Logfile of HijackThis v1.99.1

    Scan saved at 14:18:44, on 20/06/2006

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    C:\WINDOWS\AGRSMMSG.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\WINDOWS\system32\dla\tfswctrl.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\QuickTime\qttask.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

    C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    C:\Program Files\Common Files\Symantec Shared\ccApp.exe

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe

    C:\Program Files\HPQ\Shared\hpqwmi.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE

    C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

    C:\Documents and Settings\Compaq\Desktop\HijackThis.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/

    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

    O2 - BHO: (no name) - {251F97F8-72FC-FECF-AA73-FA7BD59E4889} - C:\WINDOWS\yzbdmmza.dll

    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

    O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O3 - Toolbar: Search - {D1E64F42-C13F-DEA0-21CC-49F187D186C7} - C:\WINDOWS\yzbdmmza.dll

    O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

    O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    O4 - HKLM\..\Run: [soundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray

    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

    O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r

    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

    O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - HKLM\..\Run: [MMReminderService] C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray

    O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

    O4 - HKLM\..\Run: [urlLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe

    O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [pdfSaver3] "C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe"

    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

    O4 - HKCU\..\Run: [uniblue Registry Booster] C:\Program Files\Uniblue\Registry Booster\RegistryBooster.exe /S

    O4 - Global Startup: Bluetooth.lnk = ?

    O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

    O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://site.ebrary.com/lib/clcorp/support/...s/ebraryRdr.cab

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1148852151984

    O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/a...AdSignerADP.cab

    O17 - HKLM\System\CCS\Services\Tcpip\..\{5D60011C-1268-4AF9-872A-EFE76B2AD149}: NameServer = 213.255.201.9,213.255.201.10,212.255.201.8

    O17 - HKLM\System\CCS\Services\Tcpip\..\{622044B9-1216-4CAC-B795-039CDA5E9F9F}: NameServer = 212.27.54.252 213.228.0.168

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll

    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

  17. servic~1.exe - PC instable au demarrage

    dans Analyses et éradication malwares

    Posté(e)

    Bonjour,

     

    Mon PC se freeze au démarrage. La seule solution que j’ai pour continuer est de lancer task manager et de stopper le service servic~1.exe. Cela me permet de continuer mais le PC reste instable.

     

    Le log Hijackthis en mode normal (apres arret du service) est le suivant :

     

    Logfile of HijackThis v1.99.1

    Scan saved at 09:31:45, on 20/06/2006

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    C:\WINDOWS\AGRSMMSG.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\WINDOWS\system32\dla\tfswctrl.exe

    C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\QuickTime\qttask.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

    C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    C:\Program Files\Common Files\Symantec Shared\ccApp.exe

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe

    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe

    C:\Program Files\HPQ\Shared\hpqwmi.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE

    C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Documents and Settings\Compaq\Desktop\HijackThis.exe

    C:\Program Files\Internet Explorer\iexplore.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/

    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

    O2 - BHO: (no name) - {251F97F8-72FC-FECF-AA73-FA7BD59E4889} - C:\WINDOWS\yzbdmmza.dll

    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

    O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

    O3 - Toolbar: Search - {D1E64F42-C13F-DEA0-21CC-49F187D186C7} - C:\WINDOWS\yzbdmmza.dll

    O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll

    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll

    O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

    O4 - HKLM\..\Run: [soundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray

    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

    O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r

    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

    O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

    O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - HKLM\..\Run: [MMReminderService] C:\Program Files\Mindjet\MindManager 6\MMReminderService.exe

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray

    O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe

    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

    O4 - HKLM\..\Run: [urlLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe

    O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [pdfSaver3] "C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe"

    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

    O4 - HKCU\..\Run: [uniblue Registry Booster] C:\Program Files\Uniblue\Registry Booster\RegistryBooster.exe /S

    O4 - Global Startup: Bluetooth.lnk = ?

    O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll

    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

    O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - C:\Program Files\Mindjet\MindManager 6\Mm6InternetExplorer.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://site.ebrary.com/lib/clcorp/support/...s/ebraryRdr.cab

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1148852151984

    O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/a...AdSignerADP.cab

    O17 - HKLM\System\CCS\Services\Tcpip\..\{5D60011C-1268-4AF9-872A-EFE76B2AD149}: NameServer = 213.255.201.9,213.255.201.10,212.255.201.8

    O17 - HKLM\System\CCS\Services\Tcpip\..\{622044B9-1216-4CAC-B795-039CDA5E9F9F}: NameServer = 212.27.54.252 213.228.0.168

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll

    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe

    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

×
×
  • Créer...