connexion lente je pense avoir un virus

[amine_hr]

ComboFix 09-09-20.01 - Achour 21/09/2009 14:08:36.4.1 - NTFSx86

Microsoft Windows XP Professionnel 5.1.2600.3.1256.213.1036.18.1278.700 [GMT 1:00]

Running from: C:\Documents and Settings\Achour\Mes documents\Downloads\Programs\ComboFix.exe

AV: AVG Anti-Virus plus Firewall *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}

.

The following files were disabled during the run:

C:\Program Files\SuperCopier2\SC2Hook.dll

 

 

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\WINDOWS\Installer\439c9.msp

C:\WINDOWS\Installer\5355d1.msi

C:\WINDOWS\Installer\8368f.msi

C:\WINDOWS\Installer\fe48bd.msi

C:\WINDOWS\system32\msconfig.exe

 

C:\WINDOWS\system32\calc.exe . . . is infected!!

 

C:\WINDOWS\system32\freecell.exe . . . is infected!!

 

.

((((((((((((((((((((((((( Files Created from 2009-08-21 to 2009-09-21 )))))))))))))))))))))))))))))))

.

 

2009-09-20 21:18:02 . 2009-09-20 23:25:11 0 d-----w- C:\$AVG8.VAULT$

2009-09-20 21:06:11 . 2009-09-20 21:06:11 12552 ----a-w- C:\WINDOWS\system32\drivers\avgrkx86.sys

2009-09-20 21:06:11 . 2009-09-20 21:06:11 11952 ----a-w- C:\WINDOWS\system32\avgrsstx.dll

2009-09-20 21:06:10 . 2009-09-20 21:06:10 108552 ----a-w- C:\WINDOWS\system32\drivers\avgtdix.sys

2009-09-20 21:06:04 . 2009-09-20 21:06:04 335240 ----a-w- C:\WINDOWS\system32\drivers\avgldx86.sys

2009-09-20 21:06:03 . 2009-09-20 21:06:03 27784 ----a-w- C:\WINDOWS\system32\drivers\avgmfx86.sys

2009-09-20 21:05:59 . 2009-09-21 12:13:20 0 d-----w- C:\WINDOWS\system32\drivers\Avg

2009-09-20 21:04:42 . 2009-09-20 21:04:42 50968 ----a-w- C:\WINDOWS\system32\avgfwdx.dll

2009-09-20 21:04:42 . 2009-09-20 21:04:42 29208 ----a-w- C:\WINDOWS\system32\drivers\avgfwdx.sys

2009-09-20 21:04:42 . 2009-09-20 21:04:42 0 d-----w- C:\Program Files\AVG

2009-09-20 21:04:41 . 2009-09-20 21:04:42 0 d-----w- C:\Documents and Settings\All Users\Application Data\avg8

2009-09-20 16:10:21 . 2009-09-20 16:10:21 0 d-----w- C:\Documents and Settings\Achour\Application Data\Malwarebytes

2009-09-20 14:08:54 . 2009-09-20 16:08:37 0 d-----w- C:\QUARANTINE

2009-09-20 12:10:11 . 2009-09-20 12:10:11 0 d-----w- C:\Documents and Settings\Achour\Application Data\Uniblue

2009-09-20 00:46:42 . 2009-09-20 00:46:42 0 d-----w- C:\Documents and Settings\All Users\Application Data\page

2009-09-09 09:41:50 . 2009-06-21 21:47:52 153088 -c----w- C:\WINDOWS\system32\dllcache\triedit.dll

2009-09-08 17:49:19 . 2009-09-08 17:49:19 0 d-----w- C:\Program Files\NVIDIA Corporation

2009-09-08 17:49:15 . 2009-09-08 17:49:15 0 d-----w- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation

2009-09-07 20:11:43 . 2009-09-08 16:52:41 0 d-----w- C:\Documents and Settings\Achour\Application Data\Auslogics

2009-09-07 20:10:40 . 2009-09-07 20:10:40 0 d-----w- C:\Program Files\Auslogics

2009-09-06 20:22:56 . 2009-09-06 20:22:56 0 d-----w- C:\WINDOWS\system32\wbem\Repository

2009-09-05 23:04:46 . 2009-09-05 23:04:46 0 d-----w- C:\Documents and Settings\Achour\Application Data\Lavasoft

2009-09-05 22:54:59 . 2009-09-21 13:07:00 0 d-----w- C:\WINDOWS\system32\CatRoot2

2009-09-05 11:24:48 . 2009-09-05 11:24:48 0 d-----w- C:\Program Files\DAVILEX

2009-09-04 19:31:24 . 2009-09-04 19:31:24 0 d-----w- C:\Documents and Settings\Achour\Application Data\Leadertech

2009-09-04 13:13:31 . 2009-09-04 13:13:31 0 d-----w- C:\Program Files\THQ

2009-09-04 11:36:38 . 2009-09-05 21:46:36 0 d-----w- C:\Documents and Settings\Achour\Local Settings\Application Data\PHPNukeFR

2009-09-04 11:36:38 . 2009-09-04 11:36:38 0 d-----w- C:\Program Files\Conduit

2009-09-04 11:36:38 . 2009-09-04 11:36:38 0 d-----w- C:\Documents and Settings\Achour\Local Settings\Application Data\Conduit

2009-09-04 11:36:37 . 2009-09-04 11:36:38 0 d-----w- C:\Program Files\PHPNukeFR

2009-09-03 22:48:07 . 2009-09-07 20:08:13 0 d--h--w- C:\WINDOWS\msdownld.tmp

2009-09-03 22:00:07 . 2009-09-03 22:00:19 0 d-----w- C:\Program Files\Oberon Media

2009-09-03 22:00:07 . 2009-09-03 22:00:07 0 d-----w- C:\Program Files\Fichiers communs\Oberon Media

2009-09-03 20:40:21 . 2009-09-04 16:45:08 0 d-----w- C:\Program Files\Microsoft Games

2009-09-02 22:19:30 . 2009-09-03 13:34:24 0 d-----w- C:\Documents and Settings\Achour\Application Data\Synthesia

2009-09-02 22:03:03 . 2009-09-02 22:07:45 0 d-----w- C:\Documents and Settings\Achour\Local Settings\Application Data\Deployment

2009-09-01 12:00:59 . 2009-06-25 08:26:32 54272 -c----w- C:\WINDOWS\system32\dllcache\wdigest.dll

2009-09-01 12:00:59 . 2009-06-25 08:26:31 301568 -c----w- C:\WINDOWS\system32\dllcache\kerberos.dll

2009-09-01 12:00:58 . 2009-06-25 08:26:32 136192 -c----w- C:\WINDOWS\system32\dllcache\msv1_0.dll

2009-09-01 12:00:58 . 2009-06-24 11:18:41 92928 -c----w- C:\WINDOWS\system32\dllcache\ksecdd.sys

2009-08-27 23:46:59 . 2009-08-27 23:48:57 0 d-----w- C:\Documents and Settings\Achour\Application Data\MozillaControl

2009-08-27 23:46:35 . 2009-08-27 23:46:35 0 d-----w- C:\WINDOWS\'Full Speed' Internet Booster + Performance Tests

2009-08-27 15:07:55 . 2009-08-27 15:07:59 0 d-----w- C:\Program Files\Skype

2009-08-22 23:41:53 . 2002-03-13 16:46:46 53248 ----a-w- C:\WINDOWS\system32\zlib.dll

2009-08-22 23:41:53 . 2000-10-01 23:00:00 119568 ----a-w- C:\WINDOWS\system32\VB6FR.DLL

2009-08-22 23:41:52 . 2009-08-22 23:41:54 0 d-----w- C:\Program Files\scrabbleproB

2009-08-22 18:00:48 . 2009-08-22 18:01:56 0 d-----w- C:\Program Files\Microsoft

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-09-21 13:15:09 . 2009-04-07 22:28:44 0 d-----w- C:\Program Files\SuperCopier2

2009-09-21 12:47:52 . 2009-04-06 23:28:38 0 d-----w- C:\Documents and Settings\Achour\Application Data\DMCache

2009-09-21 12:42:03 . 2009-09-16 00:01:37 0 d-----w- C:\Program Files\IDMan

2009-09-21 12:31:20 . 2009-07-21 17:41:36 0 d-----w- C:\Documents and Settings\Achour\Application Data\vlc

2009-09-20 22:16:47 . 2009-09-16 00:04:42 0 d-----w- C:\Documents and Settings\Achour\Application Data\IDM

2009-09-20 21:31:55 . 2009-04-08 21:49:51 0 d-----w- C:\Program Files\Java

2009-09-20 17:01:38 . 2009-04-06 19:42:11 0 d-----w- C:\Program Files\Yahoo!

2009-09-20 17:01:24 . 2009-07-25 17:42:22 0 d-----w- C:\Program Files\IObit

2009-09-20 13:08:07 . 2009-05-29 23:13:48 0 d-----w- C:\Program Files\Google

2009-09-19 13:07:52 . 2009-09-10 21:02:00 0 d-----w- C:\Documents and Settings\Achour\Application Data\Thinstall

2009-09-18 17:07:07 . 2009-04-07 17:20:05 336824 ----a-w- C:\Documents and Settings\Achour\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-09-18 11:10:49 . 2009-09-18 11:10:49 0 d-----w- C:\Documents and Settings\All Users\Application Data\Musicnotes

2009-09-18 11:09:06 . 2009-09-18 11:09:06 0 d-----w- C:\Program Files\Musicnotes

2009-09-17 13:46:30 . 2009-04-22 17:30:11 0 d-----w- C:\Documents and Settings\Anis\Application Data\vlc

2009-09-16 00:01:38 . 2009-09-16 00:01:38 3553 ----a-w- C:\Program Files\Uninstall.ini

2009-09-16 00:01:38 . 2009-09-11 16:09:58 67538 ----a-w- C:\Program Files\Uninstall.exe

2009-09-11 13:32:03 . 2009-09-11 13:32:03 23600 ----a-w- C:\WINDOWS\system32\drivers\TVICHW32.SYS

2009-09-11 13:05:22 . 2009-04-08 09:07:55 0 d-----w- C:\Documents and Settings\Achour\Application Data\Media Player Classic

2009-09-10 21:33:18 . 2009-09-10 21:33:18 664 ----a-w- C:\WINDOWS\system32\d3d9caps.dat

2009-09-09 21:34:10 . 2009-04-08 08:53:29 0 d-----w- C:\Documents and Settings\Achour\Application Data\dvdcss

2009-09-09 15:22:09 . 2009-04-07 09:09:08 0 d-----w- C:\Documents and Settings\All Users\Application Data\Microsoft Help

2009-09-09 11:43:10 . 2009-09-16 11:54:11 210352 ----a-w- C:\WINDOWS\system32\idmmbc.dll

2009-09-08 17:17:21 . 2009-04-09 16:02:05 0 d-----w- C:\Program Files\ma-config.com

2009-09-08 17:17:21 . 2009-04-09 16:02:05 0 d-----w- C:\Documents and Settings\All Users\Application Data\ma-config.com

2009-09-05 23:01:13 . 2004-08-28 14:00:00 83676 ----a-w- C:\WINDOWS\system32\perfc00C.dat

2009-09-05 23:01:13 . 2004-08-28 14:00:00 510144 ----a-w- C:\WINDOWS\system32\perfh00C.dat

2009-09-05 11:27:36 . 2009-04-06 19:36:12 0 d--h--w- C:\Program Files\InstallShield Installation Information

2009-09-03 18:04:06 . 2009-08-17 11:31:29 0 d-----w- C:\Program Files\midi

2009-09-01 14:41:11 . 2009-08-08 07:31:39 0 d-----w- C:\Documents and Settings\Anis\Application Data\IObit

2009-08-28 15:25:17 . 2009-08-17 10:31:24 0 d-----w- C:\Documents and Settings\Achour\Application Data\Skype

2009-08-27 23:01:38 . 2009-08-17 10:35:15 0 d-----w- C:\Documents and Settings\Achour\Application Data\skypePM

2009-08-17 10:35:16 . 2009-08-17 10:35:16 56 ---ha-w- C:\WINDOWS\system32\ezsidmv.dat

2009-08-17 10:30:22 . 2009-08-17 10:30:22 0 d-----w- C:\Program Files\Fichiers communs\Skype

2009-08-17 10:30:18 . 2009-08-17 10:30:11 0 d-----w- C:\Documents and Settings\All Users\Application Data\Skype

2009-08-17 02:03:50 . 2009-08-17 02:03:50 3674112 ----a-w- C:\WINDOWS\system32\nvwssr.dll

2009-08-17 02:02:52 . 2009-08-17 02:02:52 229376 ----a-w- C:\WINDOWS\system32\nvmccs.dll

2009-08-16 23:57:00 . 2009-07-09 14:04:20 485920 ----a-w- C:\WINDOWS\system32\nvudisp.exe

2009-08-16 23:57:00 . 2009-06-10 05:03:00 868352 ----a-w- C:\WINDOWS\system32\nvapi.dll

2009-08-16 23:57:00 . 2009-06-10 05:03:00 2189856 ----a-w- C:\WINDOWS\system32\nvcuvid.dll

2009-08-16 23:57:00 . 2009-06-10 05:03:00 2002944 ----a-w- C:\WINDOWS\system32\nvcuda.dll

2009-08-16 23:57:00 . 2009-06-10 05:03:00 1706528 ----a-w- C:\WINDOWS\system32\nvcuvenc.dll

2009-08-16 23:57:00 . 2009-06-10 05:03:00 1597690 ----a-w- C:\WINDOWS\system32\nvdata.bin

2009-08-16 23:57:00 . 2009-06-10 05:03:00 155648 ----a-w- C:\WINDOWS\system32\nvcodins.dll

2009-08-16 23:57:00 . 2009-06-10 05:03:00 155648 ----a-w- C:\WINDOWS\system32\nvcod.dll

2009-08-16 23:57:00 . 2009-06-10 05:03:00 10457088 ----a-w- C:\WINDOWS\system32\nvoglnt.dll

2009-08-16 23:57:00 . 2004-08-28 14:00:00 7729568 ----a-w- C:\WINDOWS\system32\drivers\nv4_mini.sys

2009-08-16 23:57:00 . 2004-08-28 14:00:00 5845760 ----a-w- C:\WINDOWS\system32\nv4_disp.dll

2009-08-15 19:31:31 . 2009-08-15 19:31:31 0 d-----w- C:\Program Files\ParetoLogic

2009-08-11 11:35:08 . 2009-07-09 14:04:01 485920 ----a-w- C:\WINDOWS\system32\NVUNINST.EXE

2009-08-05 09:00:38 . 2004-08-28 14:00:00 205312 ----a-w- C:\WINDOWS\system32\mswebdvd.dll

2009-07-26 15:44:56 . 2009-07-26 15:44:56 48448 ----a-w- C:\WINDOWS\system32\sirenacm.dll

2009-07-25 19:27:59 . 2009-07-25 17:42:23 0 d-----w- C:\Documents and Settings\Achour\Application Data\IObit

2009-07-25 04:23:00 . 2009-04-08 21:50:25 411368 ----a-w- C:\WINDOWS\system32\deploytk.dll

2009-07-17 19:03:33 . 2004-08-28 14:00:00 58880 ----a-w- C:\WINDOWS\system32\atl.dll

2009-07-15 10:48:31 . 2009-07-15 10:19:03 133844 ----a-w- C:\WINDOWS\HPHins11.dat

2009-07-13 22:43:24 . 2004-08-28 14:00:00 286208 ----a-w- C:\WINDOWS\system32\wmpdxm.dll

2009-07-03 16:57:51 . 2004-08-28 14:00:00 915456 ----a-w- C:\WINDOWS\system32\wininet.dll

2009-06-25 08:26:32 . 2004-08-28 14:00:00 736768 ----a-w- C:\WINDOWS\system32\lsasrv.dll

2009-06-25 08:26:32 . 2004-08-28 14:00:00 56832 ----a-w- C:\WINDOWS\system32\secur32.dll

2009-06-25 08:26:32 . 2004-08-28 14:00:00 54272 ----a-w- C:\WINDOWS\system32\wdigest.dll

2009-06-25 08:26:32 . 2004-08-28 14:00:00 147456 ----a-w- C:\WINDOWS\system32\schannel.dll

2009-06-25 08:26:32 . 2004-08-28 14:00:00 136192 ----a-w- C:\WINDOWS\system32\msv1_0.dll

2009-06-25 08:26:31 . 2004-08-28 14:00:00 301568 ----a-w- C:\WINDOWS\system32\kerberos.dll

2009-06-24 11:18:41 . 2004-08-28 14:00:00 92928 ----a-w- C:\WINDOWS\system32\drivers\ksecdd.sys

.

 

------- Sigcheck -------

 

 

[7] 2008-04-13 17:33:40 . E598D81197E2E0EC42A0C55772BB00E8 . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\regsvc.dll

 

[-] 2004-08-28 14:00:00 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\mspmsnsv.dll

 

C:\WINDOWS\system32\drivers\beep.sys ... is missing !!

C:\WINDOWS\system32\regsvc.dll ... is missing !!

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SuperCopier2.exe"="C:\Program Files\SuperCopier2\SuperCopier2.exe" [2006-07-07 16:45:00 1052672]

"ccleaner"="C:\Program Files\CCleaner\CCleaner.exe" [2009-08-26 16:53:28 1681208]

"IDMan"="C:\Program Files\IDMan\IDMan.exe" [2009-09-10 15:30:20 3118512]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Vistadrv"="C:\WINDOWS\system32\Vistadrive\vsdrv.exe" [2006-07-30 01:37:14 121089]

"nwiz"="C:\Program Files\NVIDIA Corporation\nView\nwiz.exe" [2009-08-12 22:40:58 1657376]

"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2009-08-17 02:03:00 13877248]

"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2009-08-17 02:03:00 86016]

"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2009-09-20 21:05:52 2022680]

"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-07-25 04:23:12 149280]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-13 17:34:00 15360]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"nltide_3"="advpack.dll" - C:\WINDOWS\system32\advpack.dll [2009-03-08 03:32:48 128512]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"NoSMHelp"= 1 (0x1)

 

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]

"NoSMHelp"= 1 (0x1)

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]

2009-09-20 21:06:11 11952 ----a-w- C:\WINDOWS\system32\avgrsstx.dll

 

[HKLM\~\startupfolder\C:^Documents and Settings^Achour^Menu Démarrer^Programmes^Démarrage^hamachi.lnk]

path=C:\Documents and Settings\Achour\Menu Démarrer\Programmes\Démarrage\hamachi.lnk

backup=C:\WINDOWS\pss\hamachi.lnkStartup

 

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]

path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk

backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"avast! Mail Scanner"=3 (0x3)

"avast! Web Scanner"=3 (0x3)

"aswUpdSv"=2 (0x2)

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"NeroFilterCheck"=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

"snpstd"=C:\WINDOWS\vsnpstd.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

"FirewallOverride"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"23870:TCP"= 23870:TCP:BitComet 23870 TCP

"23870:UDP"= 23870:UDP:BitComet 23870 UDP

 

R0 AvgRkx86;avgrkx86.sys;C:\WINDOWS\system32\drivers\avgrkx86.sys [20/09/2009 22:06:11 12552]

R0 xfilt;VIA SATA IDE Hot-plug Driver;C:\WINDOWS\system32\drivers\xfilt.sys [28/08/2004 15:00:00 22168]

R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\drivers\avgldx86.sys [20/09/2009 22:06:04 335240]

R1 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\drivers\avgtdix.sys [20/09/2009 22:06:10 108552]

R2 ADSLAutoconnect;ADSLAutoconnect;C:\Program Files\ADSL Autoconnect\ADSL Autoconnect.exe [13/06/2009 01:48:47 446464]

R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [20/09/2009 22:05:51 297752]

R2 avgfws8;AVG8 Firewall;C:\PROGRA~1\AVG\AVG8\avgfws8.exe [20/09/2009 22:05:52 1370488]

R2 LF30FS;LF30FS;C:\Program Files\Everstrike Software\Lock Folder XP 3.6\LF30XP.sys [19/11/2004 18:07:00 101488]

R3 Avgfwdx;Avgfwdx;C:\WINDOWS\system32\drivers\avgfwdx.sys [20/09/2009 22:04:42 29208]

S2 ELOADER;General Purpose USB Driver (adildr.sys);C:\WINDOWS\system32\drivers\adildr.sys [22/06/2009 19:18:34 56088]

S3 Avgfwfd;AVG network filter service;C:\WINDOWS\system32\drivers\avgfwdx.sys [20/09/2009 22:04:42 29208]

S3 maconfservice;Ma-Config Service;C:\Program Files\ma-config.com\maconfservice.exe [01/09/2009 08:07:48 234864]

 

--- Other Services/Drivers In Memory ---

 

*Deregistered* - mchInjDrv

*Deregistered* - project

 

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]

"C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

.

Contents of the 'Scheduled Tasks' folder

 

2009-09-20 C:\WINDOWS\Tasks\ParetoLogic Registration.job

- C:\Program Files\Fichiers communs\ParetoLogic\UUS2\UUS.dll [2009-01-13 14:59:10 . 2009-01-13 14:59:10]

 

2009-09-20 C:\WINDOWS\Tasks\ParetoLogic Update Version2.job

- C:\Program Files\Fichiers communs\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-13 14:59:10 . 2009-01-13 14:59:10]

 

2009-09-21 C:\WINDOWS\Tasks\User_Feed_Synchronization-{CC12604D-D98D-4465-8371-4230BBDAA0B8}.job

- C:\WINDOWS\system32\msfeedssync.exe [2004-08-28 14:00:00 . 2009-03-08 03:31:54]

.

.

------- Supplementary Scan -------

.

uStart Page = hxxp://y.lo.st/

uDefault_Search_URL = hxxp://www.google.fr/keyword/%s

uSearchURL,(Default) = hxxp://www.google.fr/keyword/%s

IE: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

IE: Télécharger avec IDM - C:\Program Files\IDMan\IEExt.htm

IE: Télécharger le contenu de video FLV avec IDM - C:\Program Files\IDMan\IEGetVL.htm

IE: Télécharger tous les liens avec IDM - C:\Program Files\IDMan\IEGetAll.htm

LSP: C:\WINDOWS\system32\idmmbc.dll

TCP: {89673A50-1CE7-4002-9EC6-AE1E17846735} = 208.67.222.222,208.67.220.220,192.168.1.254

FF - ProfilePath - C:\Documents and Settings\Achour\Application Data\Mozilla\Firefox\Profiles\4zrohl8t.default\

FF - prefs.js: browser.search.defaulturl - hxxp://fr.search.yahoo.com/search?ei=UTF-8&fr=ytff-cclean&p=

FF - prefs.js: browser.search.selectedEngine - Yahoo

FF - prefs.js: browser.startup.homepage - hxxp://google.fr

FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?ei=UTF-8&fr=ytff-cclean&p=

FF - component: C:\Documents and Settings\Achour\Application Data\IDM\idmmzcc3\components\idmmzcc.dll

FF - component: C:\Program Files\AVG\AVG8\Firefox\components\avgssff.dll

FF - plugin: C:\Program Files\ma-config.com\nphardwaredetection.dll

FF - plugin: C:\Program Files\Microsoft\Office Live\npOLW.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

 

---- FIREFOX POLICIES ----

FF - user.js: browser.cache.memory.capacity - 65536

FF - user.js: browser.chrome.favicons - fales

FF - user.js: browser.display.show_image_placeholders - true

FF - user.js: browser.turbo.enabled - true

FF - user.js: browser.urlbar.autocomplete.enabled - true

FF - user.js: browser.urlbar.autofill - true

FF - user.js: content.interrupt.parsing - true

FF - user.js: content.max.tokenizing.time - 2250000

FF - user.js: content.notify.backoffcount - 5

FF - user.js: content.notify.interval - 750000

FF - user.js: content.notify.ontimer - true

FF - user.js: content.switch.threshold - 750000

FF - user.js: network.http.max-connections - 48

FF - user.js: network.http.max-connections-per-server - 16

FF - user.js: network.http.max-persistent-connections-per-proxy - 16

FF - user.js: network.http.max-persistent-connections-per-server - 8

FF - user.js: network.http.pipelining - true

FF - user.js: network.http.pipelining.maxrequests - 8

FF - user.js: network.http.proxy.pipelining - true

FF - user.js: network.http.request.max-start-delay - 0

FF - user.js: nglayout.initialpaint.delay - 50

FF - user.js: plugin.expose_full_path - true

FF - user.js: ui.submenuDelay - 0

FF - user.js: yahoo.homepage.dontask - true

FF - user.js: browser.blink_allowed - true

FF - user.js: network.prefetch-next - true

FF - user.js: layout.spellcheckDefault - 1

FF - user.js: browser.search.openintab - false

FF - user.js: browser.tabs.closeButtons - 1

FF - user.js: browser.tabs.opentabfor.middleclick - true

FF - user.js: browser.tabs.tabMinWidth - 100

.

- - - - ORPHANS REMOVED - - - -

 

BHO-{EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll