b1venue

salut , Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:10:53, on 28/12/2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16700) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Windows\RtHDVCpl.exe C:\Windows\system32\taskhost.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Internet Download Manager\IDMan.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Internet Download Manager\IEMonitor.exe C:\Users\kad\Desktop\HiJackThis.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtblfs.exe C:\Program Files\Internet Explorer\iexplore.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=192.168.1.1:808;http=192.168.1.1:808;https=192.168.1.1:808 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: 203.60.167.32 iniciorapido.info O1 - Hosts: 249.230.32.115 www.iniciorapido.info O1 - Hosts: 188.38.233.23 buscalo.in O1 - Hosts: 140.114.3.12 www.buscalo.in O1 - Hosts: 173.16.43.82 buscafacil.com O1 - Hosts: 31.186.231.234 www.buscafacil.com O1 - Hosts: 225.250.108.142 emsisoft.com O1 - Hosts: 68.143.106.28 antiy.net O1 - Hosts: 2.84.215.212 gdata.es O1 - Hosts: 81.224.119.109 jiangmin.com O1 - Hosts: 9.252.222.56 nprotect.com O1 - Hosts: 15.165.40.225 hacksoft.com.pe O1 - Hosts: 162.49.200.122 anti-virus.by O1 - Hosts: 101.44.145.98 hauri.net O1 - Hosts: 85.22.211.89 www.emsisoft.com O1 - Hosts: 70.0.21.148 www.antivir.es O1 - Hosts: 90.77.47.137 www.antiy.net O1 - Hosts: 92.191.29.1 www.quickheal.com O1 - Hosts: 144.169.95.61 www.comodo.com O1 - Hosts: 24.18.156.65 www.gdata.es O1 - Hosts: 103.158.128.218 www.jiangmin.com O1 - Hosts: 37.99.237.78 www.hacksoft.com.pe O1 - Hosts: 184.239.209.43 www.anti-virus.by O1 - Hosts: 216.73.248.45 www.hauri.net O1 - Hosts: 13.51.58.104 www.emsisoft.com O1 - Hosts: 221.195.84.93 www.anti-trojan.net O1 - Hosts: 254.29.124.163 malwarescan.emsisoft.com O1 - Hosts: 112.11.244.247 forum.emsisoft.com O1 - Hosts: 238.7.189.223 www.emsisoft.net O1 - Hosts: 2.84.215.212 www.emsisoft.it O1 - Hosts: 35.241.255.214 www.emsisoft.de O1 - Hosts: 81.224.119.109 www.anti-trojan-software.net O1 - Hosts: 20.219.64.17 mamutu.com O1 - Hosts: 227.40.91.6 www.emsisoft.es O1 - Hosts: 4.197.198.76 malwarescan.emsisoft.de O1 - Hosts: 118.180.62.159 ww.emsisoft.com O1 - Hosts: 57.175.8.67 www.emsisoft.fr O1 - Hosts: 9.252.222.56 www.emsisoft.nl O1 - Hosts: 26.132.139.185 www.emsisoft.org O1 - Hosts: 46.208.97.174 scan.anti-trojan.net O1 - Hosts: 79.110.204.244 www.trojaner.info O1 - Hosts: 15.165.40.225 blitzblank.com O1 - Hosts: 48.66.80.39 www.emsisoft.at O1 - Hosts: 162.49.200.122 www.emsisoft.jp O1 - Hosts: 101.44.145.98 www.mamutu.com O1 - Hosts: 52.121.172.87 malwarescan.emsisoft.es O1 - Hosts: 85.22.211.89 www.mamutu.de O1 - Hosts: 236.217.19.34 www.hackshields.com O1 - Hosts: 107.213.220.10 www.internationalservicecheck.com O1 - Hosts: 59.33.178.255 www.irangoals.com O1 - Hosts: 92.191.29.1 ixomodels.com O1 - Hosts: 206.105.150.153 www.indielisboa.com O1 - Hosts: 144.169.95.61 www.latin-mass-society.org O1 - Hosts: 96.246.53.50 www.arpia.be O1 - Hosts: 129.147.161.120 www.owen.org O1 - Hosts: 243.62.25.203 www.prdouglas.co.uk O1 - Hosts: 114.125.226.111 www.zarya.info O1 - Hosts: 133.202.253.100 www.willsee.com O1 - Hosts: 166.103.36.170 halmapr.com O1 - Hosts: 24.18.156.65 karuna-shechen.org O1 - Hosts: 151.81.102.229 www.barder.com O1 - Hosts: 103.158.128.218 www.antivir.es O1 - Hosts: 203.60.167.32 www.buraka.tv O1 - Hosts: 249.230.32.115 www.dr-bull.com O1 - Hosts: 188.38.233.23 www.manchester-offices.co.uk O1 - Hosts: 140.114.3.12 saverssite.com O1 - Hosts: 173.16.43.82 canada.karuna-shechen.org O1 - Hosts: 31.186.231.234 developmentdrums.org O1 - Hosts: 225.250.108.142 www.imddomains.co.uk O1 - Hosts: 177.71.134.131 cutlines.org O1 - Hosts: 210.228.242.201 elblogdemanu.com O1 - Hosts: 68.143.106.28 ruben.bzin.net O1 - Hosts: 195.206.51.192 welkam.co.jp O1 - Hosts: 214.27.10.181 www.cambridge-steiner-school.co.uk O1 - Hosts: 247.116.117.251 naturesimages.net O1 - Hosts: 37.99.237.78 www.1stavenuelimousines.co.uk O1 - Hosts: 232.94.183.54 www.mtr-design.com O1 - Hosts: 184.239.209.43 dev.depeuter.org O1 - Hosts: 216.73.248.45 www.emeraldclassic.co.uk O1 - Hosts: 74.55.113.196 www.peterhearnwaste.co.uk O1 - Hosts: 13.51.58.104 etrr.co.uk O1 - Hosts: 221.195.84.93 www.avoncourt.com O1 - Hosts: 254.29.124.163 sarahmcconnellphotography.net O1 - Hosts: 112.11.244.247 www.ixomodels.com O1 - Hosts: 238.7.189.223 natsko.com O1 - Hosts: 2.84.215.212 www.nottinghampoetryseries.com O1 - Hosts: 35.241.255.214 www.sheffieldmind.co.uk O1 - Hosts: 81.224.119.109 ixostore.ixomodels.com O1 - Hosts: 20.219.64.17 www.flairweddings.co.uk O1 - Hosts: 227.40.91.6 www.fimasys.com O1 - Hosts: 4.197.198.76 cohartuk.com O1 - Hosts: 118.180.62.159 qqjkw.net O1 - Hosts: 57.175.8.67 vivo-austin.com O1 - Hosts: 9.252.222.56 www.freeality.com O1 - Hosts: 41.154.73.126 bestofewan.com O1 - Hosts: 155.136.194.21 www.handwritingforkids.com O1 - Hosts: 26.132.139.185 cowsmo.com O1 - Hosts: 46.208.97.174 www.2xlgames.com O1 - Hosts: 79.110.204.244 kimzimmer.net O1 - Hosts: 193.92.69.72 basetendencies.com O1 - Hosts: 63.88.14.236 trackingtheworld.com O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [iDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU') O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Ajouter à l'Anti-bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Clavier &virtuel - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Analyse des &liens - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll O13 - Gopher Prefix: O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe -- End of file - 10867 bytes