[Résolu] Infection par HTML/Infected.WebPage.Gen

bluesboy · le 7 septembre 2009

Bonjour à tous,

Mon portable Acer qui tourne sous Windows Vista Home Edition est infecté.

La version gratuite d'Antivir m'indique la présence de ce virus HTML/Infected.WebPage.Gen sur mon disque et "bip" en permanence.

Impossible de le supprimer par l'intermédiaire d'Antivir, ni d'ailleurs grâce à un boot scan effectué sur Avast.

Les messages d'alertes incessants commencent à me rendre dingo.

J'ai à ma disposition sur le PC les logiciels suivants :

TuneUp Utilities 2008

SpyBot S&D

CCleaner

Antivir

Avast

... mais j'ignore la marche à suivre !

Merci de bien vouloir me venir en aide

Modifié le 21 septembre 2009 par bluesboy

Thanos · le 9 septembre 2009

Salut et bienvenue sur le forum

Quelques liens pour t'aider à commencer :

On va voir ensemble ce qui se passe sur ton PC ; comme tous les intervenants ici, nous aidons bénévolement en fonction de nos activités personnelles. On va essayer d'aller au plus vite, mais il faudra peut-être parfois être patient pour attendre une réponse, pas d'affolement

Pour répondre ou ajouter un post, un rapport, etc, utilise le bouton .

(bouton qui se trouve entre "Flash" et "Nouveau")

*********

Tu peux commencer par désinstaller Avast pour commencer Celui ci est moins efficace qu'Antivir d'une part, et d'autre part il ne faut conserver qu'un seul antivirus sur ton pc sous peine de le faire planter.

Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.
Clique Continue à l'écran Disclaimer.
Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).
Si tu ne vois pas ces deux rapports, tu les trouveras dans le dossier C:\rsit

bluesboy · le 9 septembre 2009

Merci pour ton aide

Voici le log :

Logfile of random's system information tool 1.06 (written by random/random)

Run by John at 2009-09-09 01:03:13

Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1

System drive C: has 27 GB (18%) free of 147 GB

Total RAM: 3070 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 01:03:50, on 09/09/2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v8.00 (8.00.6001.18813)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Windows\RtHDVCpl.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Windows\System32\rundll32.exe

C:\Acer\Empowering Technology\eAudio\eAudio.exe

C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe

C:\Program Files\EPSON\EPSON SMART PANEL for Scanner\ESPmain.exe

C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE

C:\Users\John\AppData\Local\Temp\RtkBtMnt.exe

C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE

C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE

C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE

C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe

C:\Windows\system32\wuauclt.exe

C:\Program Files\BitDefender\BitDefender 2009\uiscan.exe

C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLED.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe

C:\Users\John\Documents\Downloads\RSIT.exe

C:\Program Files\Trend Micro\HijackThis\John.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE RÉSEAU')

O4 - Startup: Center.lnk = C:\Windows\System32\Center.exe

O4 - Global Startup: Empowering Technology Launcher.lnk = ?

O4 - Global Startup: EPSON SMART PANEL for Scanner.lnk = C:\Program Files\EPSON\EPSON SMART PANEL for Scanner\ESPmain.exe

O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O13 - Gopher Prefix:

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab

O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (file missing)

O23 - Service: Brother Resource manager service (brmfrsmg) - Brother Industries, Ltd. - C:\Windows\system32\BrmfRsmg.exe

O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

O23 - Service: Raw Socket Service (RS_Service) - Acer Inc. - C:\Program Files\Acer\Acer VCM\RS_Service.exe

O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe

O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--

End of file - 11425 bytes

======Scheduled tasks folder======

C:\Windows\tasks\1-Click Maintenance.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2007-09-05 816400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-12-10 304736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96}]

ShowBarObj Class - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll [2008-01-03 312368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]

Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-01-03 155184]

{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2007-09-05 816400]

{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10 321120]

{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

""= []

"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]

"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-24 4702208]

"NvSvc"=C:\Windows\system32\nvsvc.dll [2008-01-30 86016]

"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-01-30 81920]

"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-01-30 8501792]

"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-11-22 178712]

"eAudio"=C:\Acer\Empowering Technology\eAudio\eAudio.exe [2007-10-10 1286144]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]

"BDAgent"=C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [2009-03-19 778240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]

C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2008-01-11 623992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0EYTHM]

C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cmds]

C:\Users\John\AppData\Local\Temp\ssqPjhii.dll,c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]

C:\Program Files\DAEMON Tools Pro\DTProAgent.exe [2007-09-06 136136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSServer]

C:\Users\John\AppData\Local\Temp\jkkKddbx.dll,#1 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie]

C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSet]

C:\Windows\PLFSet.dll [2007-04-25 45056]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe

EPSON SMART PANEL for Scanner.lnk - C:\Program Files\EPSON\EPSON SMART PANEL for Scanner\ESPmain.exe

C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Center.lnk - C:\Windows\System32\Center.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=95000000

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{44354351-567e-11dd-8256-a78c4a816be1}]

shell\AutoRun\command - E:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{65d75ce4-64bd-11dd-92a9-d1b2eecc8e6d}]

shell\AutoRun\command - E:\setup.exe

======File associations======

.js - edit -

.js - open -

.txt - open -

======List of files/folders created in the last 1 months======

2009-09-09 01:03:13 ----D---- C:\rsit

2009-09-08 22:12:31 ----D---- C:\Users\John\AppData\Roaming\BitDefender

2009-09-08 22:11:31 ----D---- C:\ProgramData\BitDefender

2009-09-08 22:11:31 ----D---- C:\Program Files\BitDefender

2009-09-08 22:10:26 ----D---- C:\Program Files\Common Files\BitDefender

2009-09-08 20:37:52 ----D---- C:\Windows\BDOSCAN8

2009-09-08 17:42:41 ----SHD---- C:\Config.Msi

2009-09-08 15:09:48 ----A---- C:\Windows\ntbtlog.txt

2009-09-08 14:04:34 ----D---- C:\Users\John\AppData\Roaming\Malwarebytes

2009-09-08 14:04:25 ----D---- C:\ProgramData\Malwarebytes

2009-09-08 14:04:24 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2009-09-08 13:54:33 ----D---- C:\GenProc

2009-09-08 13:20:52 ----A---- C:\lopR.txt

2009-09-08 13:19:55 ----D---- C:\Lop SD

2009-09-08 13:12:13 ----D---- C:\Program Files\Trend Micro

2009-09-08 11:59:40 ----A---- C:\Windows\system32\uxtuneup.dll

2009-09-08 11:59:40 ----A---- C:\Windows\system32\TuneUpDefragService.exe

2009-09-08 11:59:40 ----A---- C:\Windows\system32\authuitu.dll

2009-09-08 11:10:42 ----D---- C:\Users\John\AppData\Roaming\Intel

2009-09-08 11:10:42 ----D---- C:\ProgramData\Roaming

2009-09-08 11:09:32 ----D---- C:\Program Files\Cisco

2009-09-08 11:09:23 ----D---- C:\Program Files\Common Files\Intel

2009-09-08 11:09:20 ----D---- C:\ProgramData\Intel

2009-09-08 10:24:15 ----D---- C:\Program Files\Microsoft Sync Framework

2009-09-08 10:22:54 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition

2009-09-08 10:20:56 ----D---- C:\Program Files\Windows Live SkyDrive

2009-09-08 09:39:54 ----D---- C:\Program Files\Microsoft

2009-09-08 02:19:35 ----A---- C:\Windows\system32\tzres.dll

2009-09-08 02:08:03 ----A---- C:\Windows\system32\occache.dll

2009-09-08 02:08:03 ----A---- C:\Windows\system32\jsproxy.dll

2009-09-08 02:08:02 ----A---- C:\Windows\system32\msfeeds.dll

2009-09-08 02:08:02 ----A---- C:\Windows\system32\iepeers.dll

2009-09-08 02:08:01 ----A---- C:\Windows\system32\msfeedsbs.dll

2009-09-08 02:08:01 ----A---- C:\Windows\system32\ieui.dll

2009-09-08 02:08:01 ----A---- C:\Windows\system32\iesetup.dll

2009-09-08 02:08:00 ----A---- C:\Windows\system32\wininet.dll

2009-09-08 02:08:00 ----A---- C:\Windows\system32\iernonce.dll

2009-09-08 02:07:59 ----A---- C:\Windows\system32\msfeedssync.exe

2009-09-08 02:07:58 ----A---- C:\Windows\system32\iertutil.dll

2009-09-08 02:07:58 ----A---- C:\Windows\system32\ie4uinit.exe

2009-09-08 02:07:57 ----A---- C:\Windows\system32\ieUnatt.exe

2009-09-08 02:07:57 ----A---- C:\Windows\system32\iesysprep.dll

2009-09-08 02:07:57 ----A---- C:\Windows\system32\iedkcs32.dll

2009-09-08 02:07:56 ----A---- C:\Windows\system32\urlmon.dll

2009-09-08 02:07:53 ----A---- C:\Windows\system32\ieframe.dll

2009-09-08 02:07:51 ----A---- C:\Windows\system32\mshtml.dll

2009-09-08 02:05:26 ----A---- C:\Windows\system32\mshtmled.dll

2009-09-08 02:05:26 ----A---- C:\Windows\system32\icardie.dll

2009-09-08 02:05:25 ----A---- C:\Windows\system32\msls31.dll

2009-09-08 02:05:25 ----A---- C:\Windows\system32\mshtmler.dll

2009-09-08 02:05:25 ----A---- C:\Windows\system32\admparse.dll

2009-09-08 02:05:24 ----A---- C:\Windows\system32\imgutil.dll

2009-09-08 02:05:24 ----A---- C:\Windows\system32\ieakeng.dll

2009-09-08 02:05:24 ----A---- C:\Windows\system32\corpol.dll

2009-09-08 02:05:23 ----A---- C:\Windows\system32\dxtrans.dll

2009-09-08 02:05:23 ----A---- C:\Windows\system32\dxtmsft.dll

2009-09-08 02:05:22 ----A---- C:\Windows\system32\licmgr10.dll

2009-09-08 02:05:22 ----A---- C:\Windows\system32\inseng.dll

2009-09-08 02:05:21 ----A---- C:\Windows\system32\webcheck.dll

2009-09-08 02:05:21 ----A---- C:\Windows\system32\msrating.dll

2009-09-08 02:05:21 ----A---- C:\Windows\system32\ieaksie.dll

2009-09-08 02:05:20 ----A---- C:\Windows\system32\WinFXDocObj.exe

2009-09-08 02:05:20 ----A---- C:\Windows\system32\wextract.exe

2009-09-08 02:05:20 ----A---- C:\Windows\system32\mstime.dll

2009-09-08 02:05:20 ----A---- C:\Windows\system32\ieakui.dll

2009-09-08 02:05:19 ----A---- C:\Windows\system32\pngfilt.dll

2009-09-08 02:05:19 ----A---- C:\Windows\system32\advpack.dll

2009-09-08 02:05:18 ----A---- C:\Windows\system32\ieapfltr.dll

2009-09-08 02:05:17 ----A---- C:\Windows\system32\vbscript.dll

2009-09-08 02:05:17 ----A---- C:\Windows\system32\url.dll

2009-09-08 02:05:17 ----A---- C:\Windows\system32\jscript.dll

2009-09-08 02:05:14 ----A---- C:\Windows\system32\SetIEInstalledDate.exe

2009-09-08 02:05:14 ----A---- C:\Windows\system32\SetDepNx.exe

2009-09-08 02:05:14 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2009-09-08 02:05:14 ----A---- C:\Windows\system32\PDMSetup.exe

2009-09-08 02:05:14 ----A---- C:\Windows\system32\mshta.exe

2009-09-08 02:05:14 ----A---- C:\Windows\system32\iexpress.exe

2009-09-08 01:42:05 ----A---- C:\Windows\system32\localspl.dll

2009-09-08 01:42:00 ----A---- C:\Windows\system32\wkssvc.dll

2009-09-08 01:41:48 ----A---- C:\Windows\system32\EncDec.dll

2009-09-08 01:41:44 ----A---- C:\Windows\system32\psisdecd.dll

2009-09-08 01:41:25 ----A---- C:\Windows\system32\rpcss.dll

2009-09-08 01:41:25 ----A---- C:\Windows\system32\ntkrnlpa.exe

2009-09-08 01:41:24 ----A---- C:\Windows\system32\ntoskrnl.exe

2009-09-08 01:41:22 ----A---- C:\Windows\system32\sdohlp.dll

2009-09-08 01:41:22 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe

2009-09-08 01:41:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll

2009-09-08 01:41:22 ----A---- C:\Windows\system32\iasrecst.dll

2009-09-08 01:41:22 ----A---- C:\Windows\system32\iashost.exe

2009-09-08 01:41:22 ----A---- C:\Windows\system32\iasdatastore.dll

2009-09-08 01:41:22 ----A---- C:\Windows\system32\iasads.dll

2009-09-08 01:41:15 ----A---- C:\Windows\system32\kernel32.dll

2009-09-08 01:41:15 ----A---- C:\Windows\system32\apilogen.dll

2009-09-08 01:41:15 ----A---- C:\Windows\system32\amxread.dll

2009-09-08 01:41:08 ----A---- C:\Windows\system32\wdigest.dll

2009-09-08 01:41:08 ----A---- C:\Windows\system32\kerberos.dll

2009-09-08 01:41:07 ----A---- C:\Windows\system32\schannel.dll

2009-09-08 01:41:07 ----A---- C:\Windows\system32\msv1_0.dll

2009-09-08 01:41:07 ----A---- C:\Windows\system32\lsasrv.dll

2009-09-08 01:41:06 ----A---- C:\Windows\system32\secur32.dll

2009-09-08 01:41:06 ----A---- C:\Windows\system32\lsass.exe

2009-09-08 01:41:02 ----A---- C:\Windows\system32\t2embed.dll

2009-09-08 01:41:01 ----A---- C:\Windows\system32\fontsub.dll

2009-09-08 01:41:01 ----A---- C:\Windows\system32\dciman32.dll

2009-09-08 01:41:01 ----A---- C:\Windows\system32\atmfd.dll

2009-09-08 01:40:51 ----A---- C:\Windows\system32\mstscax.dll

2009-09-08 01:40:48 ----A---- C:\Windows\system32\xolehlp.dll

2009-09-08 01:40:48 ----A---- C:\Windows\system32\msdtcprx.dll

2009-09-08 01:40:46 ----A---- C:\Windows\system32\atl.dll

2009-09-08 01:40:43 ----A---- C:\Windows\system32\avifil32.dll

2009-09-08 01:40:40 ----A---- C:\Windows\system32\winhttp.dll

2009-09-08 01:40:24 ----A---- C:\Windows\system32\Apphlpdm.dll

2009-09-08 01:40:22 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll

2009-09-08 01:38:49 ----A---- C:\Windows\system32\wmp.dll

2009-09-08 01:38:47 ----A---- C:\Windows\system32\wmpdxm.dll

2009-09-08 01:38:46 ----A---- C:\Windows\system32\spwmp.dll

2009-09-08 01:38:45 ----A---- C:\Windows\system32\dxmasf.dll

2009-09-08 01:38:44 ----A---- C:\Windows\system32\wmploc.DLL

2009-09-08 01:32:11 ----A---- C:\Windows\system32\rpcrt4.dll

2009-09-07 22:29:31 ----A---- C:\ARK847F.tmp

2009-09-07 22:29:17 ----A---- C:\ARK4E52.tmp

2009-09-07 22:29:05 ----A---- C:\ARK1E7B.tmp

======List of files/folders modified in the last 1 months======

2009-09-09 01:03:20 ----D---- C:\Windows\Temp

2009-09-08 22:33:23 ----D---- C:\Windows\System32

2009-09-08 22:33:23 ----D---- C:\Windows\inf

2009-09-08 22:33:23 ----A---- C:\Windows\system32\PerfStringBackup.INI

2009-09-08 22:23:12 ----D---- C:\Windows\system32\drivers

2009-09-08 22:12:58 ----SHD---- C:\Windows\Installer

2009-09-08 22:12:57 ----D---- C:\Windows\winsxs

2009-09-08 22:11:31 ----RD---- C:\Program Files

2009-09-08 22:11:31 ----HD---- C:\ProgramData

2009-09-08 22:11:08 ----SHD---- C:\System Volume Information

2009-09-08 22:10:26 ----D---- C:\Program Files\Common Files

2009-09-08 22:05:34 ----D---- C:\Windows\rescache

2009-09-08 21:47:23 ----D---- C:\Windows\system32\migration

2009-09-08 21:47:23 ----D---- C:\Windows\system32\fr-FR

2009-09-08 21:47:23 ----D---- C:\Program Files\Internet Explorer

2009-09-08 21:47:22 ----D---- C:\Windows\system32\en-US

2009-09-08 21:47:22 ----D---- C:\Windows\PolicyDefinitions

2009-09-08 21:40:16 ----D---- C:\Windows\system32\catroot

2009-09-08 21:39:18 ----D---- C:\Windows\system32\catroot2

2009-09-08 21:38:07 ----D---- C:\Windows

2009-09-08 21:10:51 ----D---- C:\ProgramData\Spybot - Search & Destroy

2009-09-08 21:02:40 ----D---- C:\Program Files\Alwil Software

2009-09-08 20:37:55 ----SD---- C:\Windows\Downloaded Program Files

2009-09-08 19:37:14 ----D---- C:\Program Files\Mozilla Firefox

2009-09-08 19:36:03 ----D---- C:\Users\John\AppData\Roaming\uTorrent

2009-09-08 19:08:33 ----D---- C:\Users\John\AppData\Roaming\dvdcss

2009-09-08 18:23:28 ----D---- C:\Program Files\Bonjour

2009-09-08 17:45:17 ----D---- C:\Program Files\QuickTime

2009-09-08 17:18:27 ----D---- C:\Program Files\Common Files\Adobe

2009-09-08 17:18:27 ----D---- C:\Program Files\Adobe

2009-09-08 12:50:57 ----D---- C:\Windows\Minidump

2009-09-08 12:50:57 ----D---- C:\Windows\Debug

2009-09-08 12:40:06 ----D---- C:\Program Files\CCleaner

2009-09-08 12:30:09 ----SD---- C:\Users\John\AppData\Roaming\Microsoft

2009-09-08 12:25:27 ----D---- C:\Windows\system32\config

2009-09-08 12:00:04 ----D---- C:\Program Files\TuneUp Utilities 2008

2009-09-08 11:09:20 ----D---- C:\Program Files\Intel

2009-09-08 10:43:03 ----D---- C:\Windows\Microsoft.NET

2009-09-08 10:42:42 ----RSD---- C:\Windows\assembly

2009-09-08 10:25:00 ----DC---- C:\Windows\system32\DRVSTORE

2009-09-08 10:24:58 ----D---- C:\Program Files\Windows Live

2009-09-08 10:24:04 ----SD---- C:\ProgramData\Microsoft

2009-09-08 09:40:15 ----D---- C:\Program Files\Common Files\microsoft shared

2009-09-08 09:22:05 ----D---- C:\Program Files\Microsoft Silverlight

2009-09-08 09:22:04 ----D---- C:\Program Files\Spybot - Search & Destroy

2009-09-08 03:00:38 ----D---- C:\Windows\ehome

2009-09-08 03:00:23 ----D---- C:\Windows\system32\wbem

2009-09-08 03:00:22 ----D---- C:\Windows\system32\manifeststore

2009-09-08 03:00:21 ----D---- C:\Windows\AppPatch

2009-09-08 03:00:18 ----D---- C:\Program Files\Windows Media Player

2009-09-08 03:00:13 ----D---- C:\Program Files\Windows Mail

2009-09-08 02:01:08 ----D---- C:\Program Files\Microsoft Works

2009-09-07 21:19:14 ----D---- C:\Windows\Prefetch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys [2009-09-07 11608]

R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-09-07 75096]

R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]

R2 int15;int15; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys [2007-07-03 15392]

R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2008-01-24 12672]

R2 PDIHWCTL;PDIHWCTL; \??\C:\Windows\system32\drivers\pdihwctl.sys [2007-01-25 14416]

R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys [2008-01-03 16432]

R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys [2008-01-03 59952]

R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-08 45568]

R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]

R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]

R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2008-01-24 8704]

R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys [2009-09-07 52056]

R3 bdfm;BDFM; C:\Windows\system32\drivers\bdfm.sys [2009-09-08 146312]

R3 bdfsfltr;bdfsfltr; C:\Windows\system32\DRIVERS\bdfsfltr.sys [2009-04-06 266376]

R3 BDSelfPr;BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys [2009-01-12 8832]

R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]

R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-02 21264]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]

R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-01-24 984064]

R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-01-24 208384]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-24 1950552]

R3 NETw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-11-17 3668480]

R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-02-18 6144]

R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-01-30 7629504]

R3 Profos;Profos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys [2008-09-02 13056]

R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2007-06-12 1729152]

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-01-24 192816]

R3 Trufos;Trufos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys [2009-04-03 39808]

R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-01-24 660480]

R3 winbondcir;Winbond IR Transceiver; C:\Windows\system32\DRIVERS\winbondcir.sys [2008-01-24 43008]

R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]

S1 hidfltr;HID Filter Driver; C:\Windows\system32\drivers\MWhid.sys [2004-11-03 13332]

S3 a71leffw;a71leffw; C:\Windows\system32\drivers\a71leffw.sys []

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-01-24 179712]

S3 brfilt;Pilote de filtre Brother MFC; C:\Windows\System32\Drivers\Brfilt.sys [2006-11-02 3840]

S3 BrUsbScn;Pilote de scanneur Brother MFC USB; C:\Windows\System32\Drivers\BrUsbScn.sys [2006-11-02 11648]

S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]

S3 EyeOneDp;EyeOneDp; C:\Windows\system32\drivers\EyeOneDp.sys []

S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]

S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]

S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]

S3 mbr;mbr; \??\C:\Users\John\AppData\Local\Temp\mbr.sys []

S3 mf;mf; C:\Windows\system32\DRIVERS\mf.sys [2008-01-21 109056]

S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]

S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]

S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]

S3 NETw3v32;Pilote de carte Intel® PRO/sans fil 3945ABG pour Windows Vista 32 bits; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664]

S3 NETw4v32;Pilote de carte Intel® Wireless WiFi Link pour Windows Vista 32 bits; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-26 2251776]

S3 ST330;ST330; C:\Windows\system32\drivers\st330.sys [2008-08-17 30464]

S3 STBUS;STBUS; C:\Windows\system32\drivers\stbus.sys [2008-08-17 12672]

S3 STETH;SpeedTouch Ethernet Adapter NT Driver; C:\Windows\system32\DRIVERS\steth.sys [2008-08-17 40320]

S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []

S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2008-11-07 32000]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]

S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]

S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ALaunchService;ALaunch Service; C:\Acer\ALaunch\ALaunchSvc.exe [2007-09-19 51200]

R2 AntiVirScheduler;Avira AntiVir Personal - Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-25 68865]

R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-25 151297]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-05-29 144712]

R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]

R2 brmfrsmg;Brother Resource manager service; C:\Windows\system32\BrmfRsmg.exe [2006-11-02 49152]

R2 eDataSecurity Service;eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-01-03 506416]

R2 eLockService;eLock Service; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [2007-10-01 24576]

R2 eNet Service;eNet Service; C:\Acer\Empowering Technology\eNet\eNet Service.exe [2007-12-20 131072]

R2 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2007-09-10 57344]

R2 eSettingsService;eSettings Service; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [2007-12-19 24576]

R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2008-10-16 860160]

R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-11-22 358936]

R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]

R2 LIVESRV;BitDefender Desktop Update Service; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [2009-04-29 419096]

R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2007-11-27 110592]

R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2008-10-16 466944]

R2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2007-09-28 233472]

R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]

R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]

R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504]

R2 VSSERV;BitDefender Virus Shield; C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe [2009-04-21 1631512]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]

R2 WMIService;ePower Service; C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [2007-09-20 167936]

R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2008-01-24 386560]

S3 Boonty Games;Boonty Games; C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe []

S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-07-28 654848]

S3 fsssvc;Service Windows Live Contrôle parental; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]

S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-04 136120]

S3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 scan;BitDefender Threat Scanner; C:\Windows\System32\svchost.exe [2008-01-21 21504]

S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [2009-09-08 306432]

-----------------EOF-----------------

et le Info text:

info.txt logfile of random's system information tool 1.06 2009-09-09 01:04:01

======Uninstall list======

-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

ACDSee 10 Photo Manager-->MsiExec.exe /I{F8B98EB6-FC06-45BF-87D4-9784E0408611}

Acer Crystal Eye webcam-->C:\Program Files\InstallShield Installation Information\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}\setup.exe -runfromtemp -l0x040c -removeonly -u

Acer Crystal Eye webcam-->C:\Program Files\InstallShield Installation Information\{AA047D7C-5E7C-4878-B75C-77589151B563}\setup.exe -runfromtemp -l0x0009 -removeonly

Acer eAudio Management-->"C:\Program Files\InstallShield Installation Information\{57265292-228A-41FA-9AEC-4620CBCC2739}\Setup.exe" -uninstall

Acer eDataSecurity Management-->C:\Acer\Empowering Technology\eDataSecurity\x86\eDSnstHelper.exe -Operation UNINSTALL

Acer eLock Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}\setup.exe" -l0x40c -removeonly

Acer Empowering Technology-->"C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -runfromtemp -l0x040c -removeonly

Acer eNet Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C06554A1-2C1E-4D20-B613-EE62C79927CC}\setup.exe" -l0x40c -removeonly

Acer ePower Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\setup.exe" -l0x40c -removeonly

Acer ePresentation Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BF839132-BD43-4056-ACBF-4377F4A88E2A}\setup.exe" -l0x40c -removeonly

Acer eSettings Management-->"C:\Program Files\InstallShield Installation Information\{CE65A9A0-9686-45C6-9098-3C9543A412F0}\setup.exe" -runfromtemp -l0x040c -removeonly

Acer GridVista-->C:\Windows\GVUni.exe GridV.UNI

Acer Mobility Center Plug-In-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11316260-6666-467B-AC34-183FCB5D4335}\setup.exe" -l0x40c -removeonly

Acer ScreenSaver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly

Acer VCM-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}\setup.exe" -l0x40c -removeonly

Add or Remove Adobe Creative Suite 3 Master Collection-->C:\Program Files\Common Files\Adobe\Installers\4dcfd9b7e901b57f81f667144603236\Setup.exe

Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}

Adobe After Effects CS3 Presets-->MsiExec.exe /I{193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285}

Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}

Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}

Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}

Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}

Adobe BridgeTalk Plugin CS3-->MsiExec.exe /I{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}

Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}

Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}

Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}

Adobe Color Common Settings-->C:\Program Files\Common Files\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe

Adobe Color Common Settings-->MsiExec.exe /I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}

Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}

Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}

Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}

Adobe Creative Suite 3 Master Collection-->MsiExec.exe /I{8718DC03-D066-4957-94E5-50C3C5042E8E}

Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}

Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}

Adobe ExtendScript Toolkit 2-->C:\Program Files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe

Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}

Adobe Extension Manager CS3-->MsiExec.exe /I{BE5F3842-8309-4754-92D5-83E02E6077A3}

Adobe Flash CS3-->MsiExec.exe /I{6B52140A-F189-4945-BFFC-DB3F00B8C589}

Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe

Adobe Flash Video Encoder-->MsiExec.exe /I{2EFFFC71-1E66-454E-A6E6-CEEC800B96D2}

Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}

Adobe Help Viewer CS3-->MsiExec.exe /I{7ACFB90E-8FD0-4397-AD3A-5195412623A3}

Adobe InDesign CS3 Icon Handler-->MsiExec.exe /I{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}

Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}

Adobe MotionPicture Color Files-->MsiExec.exe /I{6B708481-748A-4EB4-97C1-CD386244FF77}

Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}

Adobe Photoshop CS3-->MsiExec.exe /I{0046FA01-C5B9-4985-BACB-398DC480FC05}

Adobe Premiere Pro CS3 Functional Content-->MsiExec.exe /I{50F102CA-4BE2-41A9-9810-5BB05EB91B9A}

Adobe Premiere Pro CS3 Third Party Content-->MsiExec.exe /I{485ACF57-F364-440A-8496-E1E81C8FA1AA}

Adobe Premiere Pro CS3-->MsiExec.exe /I{58DCEEE5-532E-44F4-B1D7-A146EF9E9FDA}

Adobe Reader 8.1.2-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81200000003}

Adobe Setup-->MsiExec.exe /I{4458C442-7376-4CF9-AF58-E8CEA6722363}

Adobe Setup-->MsiExec.exe /I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}

Adobe Setup-->MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}

Adobe Shockwave Player 11-->C:\Windows\system32\adobe\SHOCKW~1\UNWISE.EXE C:\Windows\system32\Adobe\SHOCKW~1\Install.log

Adobe SING CS3-->MsiExec.exe /I{B671CBFD-4109-4D35-9252-3062D3CCB7B2}

Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}

Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}

Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}

Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}

Adobe Video Profiles-->MsiExec.exe /I{845A8DB9-8802-4FD3-9FE3-938A6C46A2EC}

Adobe WAS CS3-->MsiExec.exe /I{C5BD220A-EFE8-48A5-B70E-9503D535FACE}

Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}

Adobe XMP DVA Panels CS3-->MsiExec.exe /I{0224CACC-994D-45F8-B973-D65056EA9C2F}

Adobe XMP Panels CS3-->MsiExec.exe /I{D5A31AB1-345D-47C7-A87B-036A669F6DF1}

Advanced Renamer-->"C:\Program Files\Advanced Renamer\unins000.exe"

AHV content for Acrobat and Flash-->MsiExec.exe /I{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}

Album Art Downloader XUI 0.24-->C:\Program Files\AlbumArtDownloader\uninst.exe

Album Cover Art Downloader 1.6.0-->"C:\Program Files\Album Cover Art Downloader\unins000.exe"

AP Guitar Tuner-->C:\Windows\uninst.exe -f"C:\Program Files\Audio Phonics, Inc.\AP Guitar Tuner\DeIsL1.isu" -c"C:\Program Files\Audio Phonics, Inc.\AP Guitar Tuner\_ISREG32.DLL"

Apple Mobile Device Support-->MsiExec.exe /I{659B48CD-0608-4ED5-94C0-0B6C87114F10}

Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}

Assistant de connexion Windows Live ID-->MsiExec.exe /X{10A44844-4465-456E-8C97-80BDD4F68845}

Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe"

Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE

BitDefender Free Edition 2009-->MsiExec.exe /X{44B436FA-FB33-4B24-8AD1-D8C9A50474E9}

Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}

Broadcom Gigabit Integrated Controller-->MsiExec.exe /X{D3B3B9B2-FE73-44CB-8C0A-F737D92F991B}

Canon RAW Codec-->"C:\Program Files\Common Files\Canon\UIW\1.3.0.0\Uninst.exe" "C:\Program Files\Canon\RAWCodec120\CRCUnInstall.ini"

CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"

Doyles Room Poker-->C:\MICROG~1\Poker\DOYLES~1\DOYLES~1\UNWISE.EXE C:\MICROG~1\Poker\DOYLES~1\DOYLES~1\INSTALL.LOG

EPSON SMART PANEL for Scanner-->C:\Windows\unin040c.exe -f"C:\Program Files\EPSON\EPSON SMART PANEL for Scanner\DeIsL1.isu"

EssentialPIM-->C:\Program Files\EssentialPIM\uninstall.exe

Exact Audio Copy 0.99pb4-->C:\Program Files\Exact Audio Copy\uninst.exe

Eye-One Match 3.6.2-->"C:\Program Files\GretagMacbeth\i1\Eye-One Match 3\unins000.exe"

FileZilla Client 3.1.5-->C:\Program Files\FileZilla FTP Client\uninstall.exe

FixTunes (remove only)-->"C:\Program Files\FixTunes\uninstall.exe"

foobar2000-->"C:\Program Files\foobar2000\uninstall.exe"

Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}

Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}

HDAUDIO Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFAOR2C06_118\UIU32m.exe -U -IAcrZUn32z.inf

HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

iArt 3-->"C:\Program Files\iArt\unins000.exe"

iGnuteel 0.8.1-->"C:\Program Files\iGnuteel\unins000.exe"

Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe

Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}

Intel PROSet Wireless-->Intel PROSet Wireless

Intel® Matrix Storage Manager-->C:\Windows\system32\imsmudlg.exe -uninstall

iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}

Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}

Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}

KC Softwares AudioGrail-->"C:\Program Files\KC Softwares\AudioGrail\unins000.exe"

Launch Manager-->C:\Windows\UnInst32.exe QtZgAcer.UNI

Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

MediaInfo 0.7.7.6-->C:\Program Files\MediaInfo\uninst.exe

MediaMonkey 3.0-->"C:\Program Files\MediaMonkey\unins000.exe"

MegaStore Game Controller (Ver. 3.0)-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{8A827E50-7DF0-4876-BB20-92549B117C99}

Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}

Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

Microsoft Office Live Add-in 1.4-->MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}

Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}

Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}

Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}

Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}

Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe

Mozilla Firefox (3.5.2)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

Mp3tag v2.42-->C:\Program Files\Mp3tag\Mp3tagUninstall.EXE

MSRuntime Libraries-->MsiExec.exe /I{ECA2B21B-A180-4775-B93F-6E404E36A8CC}

MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe

NFO viewer v 2.1-->"C:\Program Files\NFO viewer\unins000.exe"

NTI Backup NOW! 4.7-->"C:\Program Files\InstallShield Installation Information\{1598034D-7147-432C-8CA8-888E0632D124}\setup.exe" -removeonly

NTI Backup NOW! 4.7-->C:\Program Files\InstallShield Installation Information\{1598034D-7147-432C-8CA8-888E0632D124}\setup.exe -runfromtemp -l0x040c

NTI CD & DVD-Maker-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1036 CDM7

NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI

Orion-->MsiExec.exe /X{0BF78E88-A7C9-4406-89CF-0BA473BA7821}

Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}

Picasa 2-->"C:\Program Files\Picasa2\Uninstall.exe"

PowerProducer-->"C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\Setup.exe" -uninstall

QuickTime-->MsiExec.exe /I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}

RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly

Safari-->MsiExec.exe /X{582D2A53-F426-4C5E-A2E6-43C1AB36B907}

Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"

Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall

TeraCopy 2.0 beta 4-->"C:\Program Files\TeraCopy\unins000.exe"

TuneUp Utilities 2008-->MsiExec.exe /I{5888428E-699C-4E71-BF71-94EE06B497DA}

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

VideoLAN VLC media player 0.8.6i-->C:\Program Files\VideoLAN\VLC\uninstall.exe

Winbond CIR Drivers-->MsiExec.exe /X{427967BF-09F8-46D5-9275-37001CCBBA5D}

Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}

Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}

Windows Live Contrôle parental-->MsiExec.exe /X{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}

Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}

Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}

Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}

Windows Live Movie Maker-->MsiExec.exe /X{53B20C18-D8D4-4588-8737-9BBFE303C354}

Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}

Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}

Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe

Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

=====HijackThis Backups=====

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll [2009-09-08]

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-09-08]

O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) [2009-09-08]

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-09-08]

======Hosts File======

127.0.0.1 www.007guard.com

127.0.0.1 007guard.com

127.0.0.1 008i.com

127.0.0.1 www.008k.com

127.0.0.1 008k.com

127.0.0.1 www.00hq.com

127.0.0.1 00hq.com

127.0.0.1 010402.com

127.0.0.1 www.032439.com

127.0.0.1 032439.com

======Security center information======

AS: BitDefender AntiSpam (disabled)

AS: Spybot - Search and Destroy (disabled)

AS: Windows Defender

======System event log======

Computer Name: Dolphitron2

Event Code: 8

Message: Les travaux dans la file d’attente d’impression de l’imprimante Brother MFC8600/9650 Series (Copie 2) ont été supprimés. Aucune intervention utilisateur n’est requise.

Pour arrêter l’enregistrement des avertissements du spouleur d’impression, dans le Panneau de configuration, ouvrez Imprimantes, cliquez avec le bouton droit dans une zone vide de la fenêtre, cliquez sur Exécuter en tant qu’administrateur, cliquez sur Propriétés du serveur, cliquez sur l’onglet Avancé, puis désactivez la case à cocher Activer l’enregistrement des événements d’avertissement du spouleur.

Record Number: 76020

Source Name: Microsoft-Windows-PrintSpooler

Time Written: 20090114133850.000000-000

Event Type: Avertissement

User: Dolphitron2\John

Computer Name: Dolphitron2

Event Code: 4226

Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 76031

Source Name: Tcpip

Time Written: 20090114182807.991004-000

Event Type: Avertissement

User:

Computer Name: Dolphitron2

Event Code: 4226

Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 76032

Source Name: Tcpip

Time Written: 20090114183409.161604-000

Event Type: Avertissement

User:

Computer Name: Dolphitron2

Event Code: 4

Message: Broadcom NetLink Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Record Number: 76043

Source Name: b57nd60x

Time Written: 20090114215254.753604-000

Event Type: Avertissement

User:

Computer Name: Dolphitron2

Event Code: 6008

Message: L'arrêt système précédant à 03:47:20 le 15/01/2009 n'était pas prévu.

Record Number: 76051

Source Name: EventLog

Time Written: 20090115094416.000000-000

Event Type: Erreur

User:

=====Application event log=====

Computer Name: Dolphitron2

Event Code: 4113

Message:

Record Number: 24908

Source Name: Avira AntiVir

Time Written: 20090908201946.000000-000

Event Type: Avertissement

User: AUTORITE NT\SYSTEM

Computer Name: Dolphitron2

Event Code: 3012

Message: Les chaînes de performance dans la valeur de Registre Performance sont endommagées lors du traitement du fournisseur de compteurs d'extension Performance. La valeur BaseIndex à partir du Registre de performance est le premier DWORD dans la section Données, la valeur LastCounter est le deuxième DWORD dans la section Données, et la valeur LastHelp est le troisième DWORD dans la section Données.

Record Number: 24909

Source Name: Microsoft-Windows-LoadPerf

Time Written: 20090908202210.000000-000

Event Type: Erreur

User:

Computer Name: Dolphitron2

Event Code: 10

Message: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.

Record Number: 24936

Source Name: Microsoft-Windows-WMI

Time Written: 20090908202612.000000-000

Event Type: Erreur

User:

Computer Name: Dolphitron2

Event Code: 4113

Message:

Record Number: 24954

Source Name: Avira AntiVir

Time Written: 20090908202748.000000-000

Event Type: Avertissement

User: AUTORITE NT\SYSTEM

Computer Name: Dolphitron2

Event Code: 3012

Message: Les chaînes de performance dans la valeur de Registre Performance sont endommagées lors du traitement du fournisseur de compteurs d'extension Performance. La valeur BaseIndex à partir du Registre de performance est le premier DWORD dans la section Données, la valeur LastCounter est le deuxième DWORD dans la section Données, et la valeur LastHelp est le troisième DWORD dans la section Données.

Record Number: 24955

Source Name: Microsoft-Windows-LoadPerf

Time Written: 20090908203323.000000-000

Event Type: Erreur

User:

=====Security event log=====

Computer Name: Dolphitron2

Event Code: 5038

Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys

Record Number: 22761

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090908230348.689696-000

Event Type: Échec de l'audit

User:

Computer Name: Dolphitron2

Event Code: 5038

Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys

Record Number: 22762

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090908230348.782696-000

Event Type: Échec de l'audit

User:

Computer Name: Dolphitron2

Event Code: 5038

Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys

Record Number: 22763

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090908230348.870696-000

Event Type: Échec de l'audit

User:

Computer Name: Dolphitron2

Event Code: 5038

Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys

Record Number: 22764

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090908230348.961696-000

Event Type: Échec de l'audit

User:

Computer Name: Dolphitron2

Event Code: 5038

Message: L’intégrité du code a déterminé que le hachage de l’image d’un fichier n’est pas valide. Le fichier peut être endommagé en raison d’une modification non autorisée ou le hachage non valide peut indiquer une erreur d’unité de disque potentielle.

Nom du fichier : \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys

Record Number: 22765

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090908230349.048696-000

Event Type: Échec de l'audit

User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe

"FP_NO_HOST_CHECK"=NO

"OS"=Windows_NT

"Path"=%CommonProgramFiles%\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Acer\Empowering Technology\eDataSecurity\;C:\Acer\Empowering Technology\eDataSecurity\x86;C:\Acer\Empowering Technology\eDataSecurity\x64;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\QuickTime\QTSystem\

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC

"PROCESSOR_ARCHITECTURE"=x86

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

"USERNAME"=SYSTEM

"windir"=%SystemRoot%

"PROCESSOR_LEVEL"=6

"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 6, GenuineIntel

"PROCESSOR_REVISION"=1706

"NUMBER_OF_PROCESSORS"=2

"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat

"DFSTRACINGON"=FALSE

"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

"QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

-----------------EOF-----------------

Thanos · le 9 septembre 2009

salut

Rien d'inquiétant sur tes rapports.

La version gratuite d'Antivir m'indique la présence de ce virus HTML/Infected.WebPage.Gen sur mon disque et "bip" en permanence.

Est ce que tu peux me dire où ce malware a été détecté ?

Ouvre Antivir en double-cliquant sur l'icône en bas à droite dans la barre des tâches (à côté de l'horloge)
Dans "Aperçu" clique sur Rapports
Double clique sur la ligne correspondant au dernier scan
Dans la fenêtre qui va s'ouvrir, clique sur Rapport
Copie-colle tout son contenu dans ta prochaine réponse..

Ce que je te disait plus haut >>

Tu peux commencer par désinstaller Avast pour commencer icon_smile.gif Celui ci est moins efficace qu'Antivir d'une part, et d'autre part il ne faut conserver qu'un seul antivirus sur ton pc sous peine de le faire planter.

Je vois que tu as aussi BitDefender...! Il te faudra choisir entre ce programme et Antivir.

bluesboy · le 9 septembre 2009

Voici les infos concernant les dernières détection faites par Antivir au dernier démarrage du PC

Dans le fichier 'C:\Users\John\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T6N5F1YV\anticheat[1].htm'