INFECTION

[joja4950]

bonjour

 

SOS amis informaticiens !!!!

 

j'ai depuis plusieurs mois des trojans et malgré avast et maintenan antivir je ne peux m'en débarasser

je ne comprends pas grand chose à l'informatque mais j'ai chargé spyware terminator sur les conseils d'une collègue et voici le rapport

j'ai dans les menaces

dangerosité très élevée (4/5) adware.MywebSearch.az (adware)

sypyware secure (programme de securité)

Affiliate tracking cookie(traquer les cookies)

Adtool.MywebSearch.az (Menace non classifiée)

Invalid startup items (invalide)

 

Soyez gentils de m'expliquer ce que je dois faire pas à pas carpour moi c'est de l'hébreu !

 

 

 

eLogfile of Spyware Terminator v2.1.1.314 (db:1.0.161.922)

Scan Time: 31/03/2008 19:56:31 length: 141 s

Platform: WXP (5.1.0.2600)

User: Admin

Boot Mode: Normal

Scan type: Fast_Spyware_Scan

Scanned Objects: 11205 (Critical:24)

Filter: No System items, No Safe items, No Invalid items

 

Running Processes

Ati2evxx.exe [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe

Ati2evxx.exe [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe

aawservice.exe [Lavasoft] : C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

MSCamS32.exe [Microsoft Corporation] : C:\Program Files\Microsoft LifeCam\MSCamS32.exe

StarWindServiceAE.exe [Rocket Division Software] : C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

avgnt.exe [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

hpqtra08.exe [Hewlett-Packard Co.] : C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

NkbMonitor.exe [Nikon Corporation] : C:\Program Files\Nikon\PictureProject\NkbMonitor.exe

GoogleUpdater.exe [Google] : C:\Program Files\Google\Google Updater\GoogleUpdater.exe

livecall.exe [Microsoft Corporation] : C:\Program Files\MSN Messenger\livecall.exe

 

Internet Settings

R - HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar = http://www.crawler.com/search/dispatcher.a...&tbid=60327

R - HKLM\Software\Microsoft\Internet Explorer\Main, SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327

R - HKLM\Software\Microsoft\Internet Explorer\Main, CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327

R - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = http://fr.msn.com/

R - HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327

R - HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327

R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain =

R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName =

 

BHO

02 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - [Ask.com] : C:\Program Files\AskTBar\SrchAstt\3.bin\A5SRCHAS.DLL

02 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - [Google Inc.] : C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll

02 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - [Ask.com] : C:\Program Files\AskTBar\bar\3.bin\ASKTBAR.DLL

 

Toolbars

03 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - [Ask.com] : C:\Program Files\AskTBar\bar\3.bin\ASKTBAR.DLL

 

StartUps

04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Acme.PCHButton : [Motive Communications, Inc.] : C:\Program Files\Help and Support Additions\HPQ\XPXWWPP5\plugin\bin\PCHButton.exe

04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, AlcoholAutomount : [Alcohol Soft Development Team] : C:\Program Files\ALCOHOL SOFT\ALCOHOL 120\AXCMD.EXE

04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, swg : [Google Inc.] : C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, avgnt : [Avira GmbH] : C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

04 - HKLM\System\CurrentControlSet\Control\Session Manager, BootExecute : : C:\WINDOWS\system32\lsdelete.exe

04 - Startup: %START_PROGRAMSALL%\Démarrage\HP Digital Imaging Monitor.lnk [Hewlett-Packard Co.] : C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

04 - Startup: %START_PROGRAMSALL%\Démarrage\NkbMonitor.exe.lnk [Nikon Corporation] : C:\Program Files\Nikon\PictureProject\NkbMonitor.exe

04 - Startup: %START_PROGRAMSALL%\Démarrage\Outil de mise à jour Google.lnk [Google] : C:\Program Files\Google\Google Updater\GoogleUpdater.exe

 

Shell Extensions

RecordNow! SendToExt - {DEE12703-6333-4D4E-8F34-738C4DCC2E04} - : C:\Program Files\Sonic RecordNow!\shlext.dll

iTunes - {B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} - [Apple Computer, Inc.] : C:\Program Files\iTunes\iTunesMiniPlayer.dll

SampleView - {7F67036B-66F1-411A-AD85-759FB9C5B0DB} - [XSS] : C:\WINDOWS\system32\ShellvRTF.dll

WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} - : C:\Program Files\WinRAR\rarext.dll

Outlook File Icon Extension - {0006F045-0000-0000-C000-000000000046} - [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office10\OLKFSTUB.DLL

NeroCoverEdLiveIcons Class - {97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2} - [Nero AG] : C:\Program Files\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll

QuickParContextMenu Class - {D120D80B-BD26-4A74-8E43-2C2AF0966139} - [Peter B Clements] : C:\Program Files\QuickPar\QuickParShlExt.dll

 

Protocol Handler

Data Page Pluggable Protocol mso-offdap Handler - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - [Microsoft Corporation] : C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL

 

Services

23 - [Lavasoft] : C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

23 - [Agere Systems] : C:\WINDOWS\system32\DRIVERS\AGRSM.sys

23 - [Realtek Semiconductor Corp.] : C:\WINDOWS\system32\drivers\ALCXWDM.SYS

23 - [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe

23 - [AVIRA GmbH] : C:\WINDOWS\system32\DRIVERS\avipbb.sys

23 - [GEAR Software Inc.] : C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys

23 - [HP] : C:\WINDOWS\system32\DRIVERS\HPZid412.sys

23 - [HP] : C:\WINDOWS\system32\DRIVERS\HPZipr12.sys

23 - [HP] : C:\WINDOWS\system32\DRIVERS\HPZius12.sys

23 - [interVideo, Inc.] : C:\WINDOWS\system32\drivers\iviaspi.sys

23 - [Microsoft Corporation] : C:\Program Files\Microsoft LifeCam\MSCamS32.exe

23 - [Hewlett-Packard Company] : C:\WINDOWS\system32\DRIVERS\PS2.sys

23 - [Realtek Semiconductor Corporation ] : C:\WINDOWS\system32\DRIVERS\R8139n51.SYS

23 - : C:\WINDOWS\system32\Drivers\sptd.sys

23 - [Avira GmbH] : C:\WINDOWS\system32\DRIVERS\ssmdrv.sys

23 - [Rocket Division Software] : C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

23 - [Microsoft Corporation] : C:\WINDOWS\system32\DRIVERS\VX3000.sys

 

Winlogon Notify

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent, DLLName : [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.dll

 

Threat Files

<Adware.MyWebSearch.az> [Ask.com] : C:\Program Files\AskTBar\SrchAstt\3.bin\A5SRCHAS.DLL

<Adware.MyWebSearch.az> : C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL

 

Advanced Files Report

%SYSDIR%\Ati2evxx.dll [ATI Technologies Inc.] [ATI External Event Utility for NT, W2K and W9X] MD5=2470A87BCB6AF11A140F6161A4FE863A SIZE=90112

%SYSDIR%\Ati2evxx.exe [ATI Technologies Inc.] [ATI External Event Utility for WindowsNT and Windows9X] MD5=8F1BA35B4238610B3F2CB31637E59C2F SIZE=413696

%SYSDIR%\Ati2edxx.dll [ATI Technologies, Inc.] [ATI External Device Utility] MD5=BEECDDF3649C3F0771677E2AC162EBD1 SIZE=30720

%COMMONFILES%\Ahead\Lib\NeroSearchBar.dll [Nero AG] [Nero File Dialog] MD5=A472046187002BCBFF49EE8464E757DD SIZE=1261568

%COMMONFILES%\Ahead\Lib\BCGCBPRO860un71.dll [bCGSoft Ltd] [bCGControlBar Professional Dynamic Link Library] MD5=C4D8E6BE798A13F32E56CBF136343B71 SIZE=2830336

%PROGRAMFILES%\Nero\Nero 7\Nero BackItUp\NBShell.dll [Nero AG] [Nero BackItUp] MD5=C700F136CC146CE951348DC788243815 SIZE=73728

%PROGRAMFILES%\WinRAR\rarext.dll [] MD5=7801791108C9FA442DD48BCD98869F21 SIZE=126464

%PROGRAMFILES%\QuickPar\QuickParShlExt.dll [Peter B Clements] [Quick Par] MD5=E6F9C560D1E0A64C4FB6BC2CDC6083A7 SIZE=94208

%PROGRAMFILES%\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll [Nero AG] [Cover Designer] MD5=3538FF8336AD44E1BB51A4493BB34C32 SIZE=1953792

%COMMONFILES%\Adobe\Acrobat\ActiveX\PDFShell.FRA [Adobe Systems, Inc.] [Adobe PDF Shell Extension] MD5=17C964594AC92EE0B67D9EA08F8A8FD0 SIZE=311296

%PROGRAMFILES%\Lavasoft\Ad-Aware 2007\aawservice.exe [Lavasoft] [Ad-Aware 2007 Service] MD5=0629361FAC4576BA48AB39F4903DCE9E SIZE=587096

%PROGRAMFILES%\Lavasoft\Ad-Aware 2007\CEAPI.dll [Lavasoft] [CEAPI Dynamic Link Library] MD5=759C45CA544A92DE4B88618894A15587 SIZE=738664

%PROGRAMFILES%\Lavasoft\Ad-Aware 2007\PKArchive85u.dll [PKWARE, Inc.] [PKWARE Archive API] MD5=46374252AFA0A37F4F7AF528F6F16B96 SIZE=907096

%PROGRAMFILES%\Lavasoft\Ad-Aware 2007\Update.dll [] [ Update Dynamic Link Library] MD5=7C2B6AB58E2C859138806F90D1346482 SIZE=525664

%SYSDIR%\hpzsnt10.dll [HP] [HP DeskJet] MD5=900E7E6601B14C8D8640D02A70D37E59 SIZE=180315

%SYSDIR%\spool\DRIVERS\W32X86\3\hpzpm310.dll [HP] [Printer Property UI dll] MD5=7515CB127AF53BF7EB18D49314007C02 SIZE=487424

%SYSDIR%\spool\DRIVERS\W32X86\3\hpz2ku10.dll [HP] [HP DeskJet] MD5=B79DFC03561B3C5F3260875B865204D2 SIZE=196608

%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\sqlite3.dll [] [sqlite Database] MD5=27EBFAA2F4C2611655534A73D2F62A3F SIZE=339968

%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\AVPACK32.DLL [Avira GmbH] [AntiVir archive decompression library] MD5=4F85F42293C7A19E578F8915F9184173 SIZE=360488

%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\unacev2.dll [ACE Compression Software] [uNACE - freeware ACE extraction component] MD5=DE02C4D04088B69E64ECC30A3D9E22E5 SIZE=77312

%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\AVEWIN32.DLL [Avira GmbH] MD5=44679483A8B373DAD7F039E343B1866F SIZE=3408384

%PROGRAMFILES%\Avira\AntiVir PersonalEdition Classic\avipc.dll [Avira GmbH] MD5=5C9F889BA6D8B232EDC51D3BE271BE88 SIZE=73768

%PROGRAMFILES%\Microsoft LifeCam\MSCamS32.exe [Microsoft Corporation] [Microsoft LifeCam] MD5=AF661F9EAF65C024EE85AC531FDAD9FA SIZE=207664

%PROGRAMFILES%\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [Rocket Division Software] [starWind Alcohol Edition] MD5=B1691AF4A072CB674D600DB16DD7308E SIZE=275968

%SYSDIR%\hpotscl.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=5B8B4E13C3B086B99F3DBB0E84E6DFAD SIZE=581632

%PROGRAMFILES%\HP\Digital Imaging\bin\hpqtra08.exe [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=C519CEC624CF9BCBA3059F32266C8FFF SIZE=258048

%PROGRAMFILES%\HP\Digital Imaging\bin\hpqcxm08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=2BB391A3E24991F303DBEF3C0B99BEB6 SIZE=143360

%PROGRAMFILES%\HP\Digital Imaging\bin\hpquio08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=CF044EABD7510F6A50A584B814065D7D SIZE=102400

%PROGRAMFILES%\HP\Digital Imaging\bin\hpqtra08.rsc [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=069757FCCCB66B2922748BBE2B5894C0 SIZE=45056

%PROGRAMFILES%\HP\Digital Imaging\bin\hpqtao08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=A7BE8CDFE0F9C3799F014FB5F6810848 SIZE=65536

%PROGRAMFILES%\HP\Digital Imaging\Unload\hpiCamTA.dll [Hewlett-Packard] [TrayAppPlugin Module] MD5=780505BD58FAE7F9B2EB79F163E51503 SIZE=122880

%PROGRAMFILES%\HP\Digital Imaging\Unload\HpqUnRes.dll [Hewlett-Packard] [HpqUnRes Dynamic Link Library] MD5=39C98C8BBB040CBB68014838600955FD SIZE=118784

%PROGRAMFILES%\HP\Digital Imaging\bin\hpotra08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=8ABDEB0B196184CB2EE216783730C31B SIZE=208896

%PROGRAMFILES%\HP\Digital Imaging\bin\hpotra08.rsc [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=75F0E86C15DC201BFB9563491BC660AA SIZE=28672

%PROGRAMFILES%\HP\Digital Imaging\bin\hpodio08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=DF7D9732BB8AE96410DEBB043AD7BD33 SIZE=638976

%PROGRAMFILES%\HP\Digital Imaging\bin\hpotradd.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=A3D80DA659793A7C7499AAD629056252 SIZE=53248

%PROGRAMFILES%\HP\Digital Imaging\bin\HpqUtil.dll [] [HpqUtil Module] MD5=C897A08C4CCEBC615326EF4E28A2339F SIZE=196608

%PROGRAMFILES%\HP\Digital Imaging\bin\hpoSTD08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=33355FE9F003CB8962D1CEC4F49FD66B SIZE=344064

%PROGRAMFILES%\HP\Digital Imaging\bin\hpqtap08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=03DB9F2C54A0935CA0D637DB58E6BA5B SIZE=53248

%PROGRAMFILES%\HP\Digital Imaging\bin\hpoSTD08.rsc [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=CE000B51651C4E9A2AA32EB669376249 SIZE=274432

%SYSDIR%\hpzidr12.dll [HP] [HP Dot4Rtl] MD5=40AA9795F60E730FE10434AA11960ECB SIZE=278584

%SYSDIR%\hpzipr12.dll [HP] [HP PmlRtl] MD5=C759B42B15D2C617DB3CBA91F4122B61 SIZE=204800

%PROGRAMFILES%\HP\Digital Imaging\bin\hpodev08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=D52C826350942A22FF8C556962F619F8 SIZE=73728

%PROGRAMFILES%\HP\Digital Imaging\bin\hpqcob08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=C7B04879F5C16564110282E24FE7A470 SIZE=53248

%PROGRAMFILES%\HP\Digital Imaging\bin\hpodeb08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=96018E6C21228BE7B20BCE7874550D67 SIZE=204800

%PROGRAMFILES%\HP\Digital Imaging\bin\hposcn08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=D114CBEE355D922900688F56CFF3D207 SIZE=114688

%PROGRAMFILES%\HP\Digital Imaging\bin\hpoSCN08.rsc [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=2E82815F60A542EDD357A3428D6E86CC SIZE=24576

%PROGRAMFILES%\HP\Digital Imaging\bin\hpocxi08.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=3FB923C2EAEEFA57D68C5435B731D227 SIZE=266240

%PROGRAMFILES%\HP\Digital Imaging\bin\hpodvd09.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=E7190A1E0A65C93EF1D770D1A1736A7F SIZE=62976

%PROGRAMFILES%\HP\Digital Imaging\bin\hpoddcomm09.dll [Hewlett-Packard Co.] [hp digital imaging - hp all-in-one series] MD5=0DE493B611F5CA052C8246731DE5A59D SIZE=91136

%PROGRAMFILES%\Nikon\PictureProject\NkbMonitor.exe [Nikon Corporation] [PictureProject Monitor] MD5=70B9B7C5C5B3CDB1DF2E8DFB5DCC3B52 SIZE=118784

%PROGRAMFILES%\Google\Google Updater\GoogleUpdater.exe [Google] [Google Updater] MD5=D5CBD60C6863D68D61A4205429594AF9 SIZE=124400

%PROGRAMFILES%\Google\Google Updater\2.2.1070.1219\ci.dll [Google] [Google Updater] MD5=655C077DA96297718E4C47BDABB5D92B SIZE=874496

%PROGRAMFILES%\MSN Messenger\livecall.exe [Microsoft Corporation] [Windows Live Call] MD5=7C4313105E0E459CE97DFFD40C17A39E SIZE=297752

%PROGRAMFILES%\Spybot - Search & Destroy\TeaTimer.exe []

%SystemDiskRoot%\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe []

deskpan.dll []

%PROGRAMFILES%\Sonic RecordNow!\shlext.dll [] [RecordNow!] MD5=9082AB0613B82EBFC0B0B88B8C25F227 SIZE=73728

%PROGRAMFILES%\iTunes\iTunesMiniPlayer.dll [Apple Computer, Inc.] [iTunes] MD5=DAD24D2B77AB846BAEC45F2EC49D4229 SIZE=102400

%SYSDIR%\ShellvRTF.dll [XSS] [XSS ShellvRTF] MD5=8305E5132173A9E9CE591CAD4EB5C9B4 SIZE=122880

%PROGRAMFILES%\Microsoft Office\Office10\OLKFSTUB.DLL [Microsoft Corporation] [Microsoft Outlook] MD5=7ABE34D100CD36B05E6B300345F78D65 SIZE=56032

%SYSDIR%\DRIVERS\AGRSM.sys [Agere Systems] [Agere SoftModem Driver] MD5=593AEFC67283D409F34CC1245D00A509 SIZE=1268204

%SYSDIR%\drivers\ALCXWDM.SYS [Realtek Semiconductor Corp.] [Windows ® WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab)] MD5=8D6C30E515717248E0E52B85FD7AC466 SIZE=2279424

%SYSDIR%\svchost.exe -k netsvcs []

%SYSDIR%\DRIVERS\avipbb.sys [AVIRA GmbH] MD5=F2842C754AA6C8C93F852636D1117813 SIZE=61632

%SYSDIR%\svchost -k DcomLaunch []

%SYSDIR%\svchost.exe -k NetworkService []

%SYSDIR%\DRIVERS\GEARAspiWDM.sys [GEAR Software Inc.] [GEAR.wrks] MD5=2FB04DB459C71F416EE8B05448CA4AC3 SIZE=13872

%SYSDIR%\DRIVERS\HPZid412.sys [HP] [HP Dot4 Windows 2000] MD5=5FABA4775D4C61E55EC669D643FFC71F SIZE=51088

%SYSDIR%\DRIVERS\HPZipr12.sys [HP] [HP Dot4Print] MD5=A3C43980EE1F1BEAC778B44EA65DBDD4 SIZE=16496

%SYSDIR%\DRIVERS\HPZius12.sys [HP] [HP Dot4Usb Windows 2000] MD5=2906949BD4E206F2BB0DD1896CE9F66F SIZE=21744

%SYSDIR%\drivers\iviaspi.sys [interVideo, Inc.] [interVideo ASPI Shell] MD5=F59C3569A2F2C464BB78CB1BDCDCA55E SIZE=21060

%SYSDIR%\svchost.exe -k LocalService []

%SYSDIR%\DRIVERS\PS2.sys [Hewlett-Packard Company] [Hewlett-Packard Company PS2 SYS] MD5=BFFDB363485501A38F0BCA83AEC810DB SIZE=14112

%SYSDIR%\svchost -k rpcss []

%SYSDIR%\DRIVERS\R8139n51.SYS [Realtek Semiconductor Corporation ] [Realtek RTL8139/810x Family Fast Ethernet NIC ] MD5=2EF9C0DC26B30B2318B1FC3FAA1F0AE7 SIZE=46976

%SYSDIR%\Drivers\sptd.sys [] SIZE=715248

%SYSDIR%\DRIVERS\ssmdrv.sys [Avira GmbH] MD5=3D2829FDE1C52FC64DA5413889CE4DEE SIZE=28352

%SYSDIR%\svchost.exe -k imgsvc []

%SYSDIR%\DRIVERS\VX3000.sys [Microsoft Corporation] [Microsoft LifeCam] MD5=45798EC03C6AEB45AA2F2084F7842F6C SIZE=1966384

%SYSDIR%\svchost.exe -k WudfServiceGroup []

%COMMONFILES%\Microsoft Shared\Web Components\10\OWC10.DLL [Microsoft Corporation] [Microsoft Office XP] MD5=AA2204BD7F9FBFAA09EF15C212A67D69 SIZE=7255384

 

End of Report