[Résolu] Besoin analyse rapport hijackthis

[Invité el-babak]

Je ne doute pas de la fiabilité de l'outil, mais plutôt de la mienne! J'ai préféré recommencer depuis le départ.

 

 

############################## | UsbFix 7.021 | [Recherche]

 

Utilisateur: Olivier! (Administrateur) # PC-DE-OLIVIER [TOSHIBA Satellite A200]

Mis à jour le 20/08/10 par El Desaparecido / C_XX

Lancé à 12:58:23 | 22/08/2010

Site Web: Bienvenue dans nos Pages Persos

Contact: FindyKill.Contact@gmail.com

 

CPU: Intel® Core2 Duo CPU T5250 @ 1.50GHz

CPU 2: Intel® Core2 Duo CPU T5250 @ 1.50GHz

Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2

Internet Explorer 8.0.6001.18943

 

Pare-feu Windows: Activé

RAM -> 2046 Mo

C:\ (%systemdrive%) -> Disque fixe # 116 Go (20 Go libre(s) - 17%) [Vista] # NTFS

D:\ -> CD-ROM

E:\ -> Disque fixe # 115 Go (4 Go libre(s) - 3%) [Data] # NTFS

F:\ -> CD-ROM

G:\ -> CD-ROM

H:\ -> Disque amovible # 958 Mo (0 Mo libre(s) - 0%) [LARACH] # FAT

I:\ -> Disque amovible # 968 Mo (483 Mo libre(s) - 50%) [] # FAT

 

################## | Éléments infectieux |

 

 

################## | Registre |

 

 

################## | Mountpoints2 |

 

HKCU\.\.\.\.\Explorer\MountPoints2\H

Shell\AutoRun\Command = H:\LaunchU3.exe -a

 

 

################## | Vaccin |

 

C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

E:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

 

################## | E.O.F |

 

 

 

 

 

 

############################## | UsbFix 7.021 | [suppression]

 

Utilisateur: Olivier! (Administrateur) # PC-DE-OLIVIER [TOSHIBA Satellite A200]

Mis à jour le 20/08/10 par El Desaparecido / C_XX

Lancé à 13:08:21 | 22/08/2010

Site Web: Bienvenue dans nos Pages Persos

Contact: FindyKill.Contact@gmail.com

 

CPU: Intel® Core2 Duo CPU T5250 @ 1.50GHz

CPU 2: Intel® Core2 Duo CPU T5250 @ 1.50GHz

Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2

Internet Explorer 8.0.6001.18943

 

Pare-feu Windows: Activé

RAM -> 2046 Mo

C:\ (%systemdrive%) -> Disque fixe # 116 Go (20 Go libre(s) - 17%) [Vista] # NTFS

D:\ -> CD-ROM

E:\ -> Disque fixe # 115 Go (4 Go libre(s) - 3%) [Data] # NTFS

F:\ -> CD-ROM

G:\ -> CD-ROM

H:\ -> Disque amovible # 958 Mo (0 Mo libre(s) - 0%) [LARACH] # FAT

I:\ -> Disque amovible # 968 Mo (483 Mo libre(s) - 50%) [] # FAT

 

################## | Éléments infectieux |

 

 

################## | Registre |

 

 

################## | Mountpoints2 |

 

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\H

 

################## | Listing |

 

[22/08/2010 - 13:09:53 | SHD ] C:\$Recycle.Bin

[18/09/2006 - 23:43:36 | A | 24] C:\autoexec.bat

[22/08/2010 - 12:22:06 | RASHD ] C:\Autorun.inf

[01/08/2009 - 13:04:08 | SHD ] C:\Boot

[11/04/2009 - 08:36:36 | RASH | 333257] C:\bootmgr

[18/04/2007 - 07:03:08 | RAS | 8192] C:\BOOTSECT.BAK

[18/09/2006 - 23:43:37 | A | 10] C:\config.sys

[27/01/2010 - 13:49:33 | D ] C:\Counter-Strike Source

[02/11/2006 - 15:02:03 | SHD ] C:\Documents and Settings

[10/04/2010 - 12:41:42 | D ] C:\Films 2

[18/04/2007 - 07:45:21 | D ] C:\Intel

[09/02/2008 - 18:51:27 | RASH | 0] C:\IO.SYS

[07/05/2010 - 12:01:14 | A | 127] C:\mbam-error.txt

[09/02/2008 - 18:51:27 | RASH | 0] C:\MSDOS.SYS

[05/05/2008 - 13:30:12 | RHD ] C:\MSOCache

[22/08/2010 - 12:55:10 | ASH | 2459635712] C:\pagefile.sys

[20/08/2010 - 00:44:31 | D ] C:\PerfLogs

[21/08/2010 - 19:07:41 | RD ] C:\Program Files

[23/06/2010 - 02:00:33 | HD ] C:\ProgramData

[09/11/2008 - 23:45:24 | RSHD ] C:\RECYCLER

[21/08/2010 - 16:26:27 | D ] C:\rsit

[23/12/2008 - 18:00:07 | A | 90] C:\Setup.log

[16/10/2007 - 06:42:55 | AH | 282] C:\SWSTAMP.TXT

[21/08/2010 - 15:51:28 | SHD ] C:\System Volume Information

[24/01/2009 - 14:05:51 | D ] C:\Toshiba

[22/08/2010 - 13:09:53 | D ] C:\UsbFix

[22/08/2010 - 13:08:22 | A | 2403] C:\UsbFix.txt

[07/03/2010 - 22:33:15 | RD ] C:\Users

[21/08/2010 - 12:37:08 | D ] C:\Windows

[15/10/2007 - 17:05:25 | AT | 24504] C:\_wdsuef.dmp

[22/08/2010 - 13:09:53 | SHD ] E:\$RECYCLE.BIN

[20/04/2008 - 15:57:08 | D ] E:\Adam F & DJ Fresh presents Breakbeat Kaos - Full Album

[20/01/2009 - 22:33:21 | SH | 2897] E:\AlbumArtSmall.jpg

[27/12/2008 - 14:31:47 | SH | 8487] E:\AlbumArt_{00000000-0000-0000-0000-000000000000}_Large.jpg

[27/12/2008 - 14:31:43 | SH | 2288] E:\AlbumArt_{00000000-0000-0000-0000-000000000000}_Small.jpg

[17/01/2009 - 21:04:53 | SH | 13457] E:\AlbumArt_{145718E9-7478-4B73-9226-8C877D386133}_Large.jpg

[17/01/2009 - 21:03:41 | SH | 2895] E:\AlbumArt_{145718E9-7478-4B73-9226-8C877D386133}_Small.jpg

[27/12/2008 - 14:05:05 | SH | 15739] E:\AlbumArt_{18ABF119-E249-4FAF-B1F2-2C6A86718A30}_Large.jpg

[27/12/2008 - 14:05:00 | SH | 3417] E:\AlbumArt_{18ABF119-E249-4FAF-B1F2-2C6A86718A30}_Small.jpg

[17/01/2009 - 18:49:57 | SH | 13050] E:\AlbumArt_{25194C5F-5107-49ED-9D27-928CFE4A85B1}_Large.jpg

[17/01/2009 - 18:49:09 | SH | 2948] E:\AlbumArt_{25194C5F-5107-49ED-9D27-928CFE4A85B1}_Small.jpg

[27/12/2008 - 14:13:00 | SH | 10659] E:\AlbumArt_{2F2885E2-EAF0-485E-B691-85C354CAACEC}_Large.jpg

[27/12/2008 - 14:12:57 | SH | 2667] E:\AlbumArt_{2F2885E2-EAF0-485E-B691-85C354CAACEC}_Small.jpg

[16/01/2009 - 01:18:34 | SH | 8785] E:\AlbumArt_{6F6A4D55-FB8B-4CA5-8879-12B4973585F1}_Large.jpg

[16/01/2009 - 01:18:23 | SH | 2356] E:\AlbumArt_{6F6A4D55-FB8B-4CA5-8879-12B4973585F1}_Small.jpg

[09/01/2009 - 17:27:39 | SH | 9576] E:\AlbumArt_{86D83E2A-3589-4CE4-86A5-840DC7E5D82D}_Large.jpg

[09/01/2009 - 17:27:13 | SH | 2448] E:\AlbumArt_{86D83E2A-3589-4CE4-86A5-840DC7E5D82D}_Small.jpg

[17/01/2009 - 18:59:57 | SH | 17983] E:\AlbumArt_{889BC016-6EAF-4ED1-B0F8-79476617C93E}_Large.jpg

[17/01/2009 - 18:59:53 | SH | 3832] E:\AlbumArt_{889BC016-6EAF-4ED1-B0F8-79476617C93E}_Small.jpg

[14/01/2009 - 15:33:48 | SH | 11397] E:\AlbumArt_{8ED12B8E-0196-4223-8358-C4CC8806B7BA}_Large.jpg

[14/01/2009 - 15:33:31 | SH | 2643] E:\AlbumArt_{8ED12B8E-0196-4223-8358-C4CC8806B7BA}_Small.jpg

[20/01/2009 - 22:33:54 | SH | 12092] E:\AlbumArt_{A2E22582-A4D4-49FF-B798-B92BCE7E977B}_Large.jpg

[20/01/2009 - 22:33:21 | SH | 2897] E:\AlbumArt_{A2E22582-A4D4-49FF-B798-B92BCE7E977B}_Small.jpg

[17/01/2009 - 21:17:29 | SH | 10128] E:\AlbumArt_{B0373BF8-DAA4-4811-85FC-1B52D018D34C}_Large.jpg

[17/01/2009 - 21:17:17 | SH | 2525] E:\AlbumArt_{B0373BF8-DAA4-4811-85FC-1B52D018D34C}_Small.jpg

[06/01/2009 - 22:06:01 | SH | 8574] E:\AlbumArt_{B7B9914B-4D16-4CF0-AF3B-FF73B88AB9E8}_Large.jpg

[06/01/2009 - 22:05:30 | SH | 2473] E:\AlbumArt_{B7B9914B-4D16-4CF0-AF3B-FF73B88AB9E8}_Small.jpg

[17/01/2009 - 18:56:47 | SH | 10233] E:\AlbumArt_{C4024B5E-2CE2-43F4-A449-9CF8A7AEFF48}_Large.jpg

[17/01/2009 - 18:56:31 | SH | 2584] E:\AlbumArt_{C4024B5E-2CE2-43F4-A449-9CF8A7AEFF48}_Small.jpg

[12/03/2008 - 19:17:19 | SH | 9077] E:\AlbumArt_{D235E4C8-190D-4E07-9D3A-91B04099B933}_Large.jpg

[12/03/2008 - 19:17:19 | SH | 2082] E:\AlbumArt_{D235E4C8-190D-4E07-9D3A-91B04099B933}_Small.jpg

[17/01/2009 - 19:12:45 | SH | 10506] E:\AlbumArt_{DAFA354E-F347-47E6-9E07-9ECCEE7B86BB}_Large.jpg

[17/01/2009 - 19:12:40 | SH | 1852] E:\AlbumArt_{DAFA354E-F347-47E6-9E07-9ECCEE7B86BB}_Small.jpg

[17/01/2009 - 21:18:01 | SH | 8517] E:\AlbumArt_{E3852992-CFBA-43BB-9095-DD85473199D2}_Large.jpg

[17/01/2009 - 21:17:48 | SH | 2315] E:\AlbumArt_{E3852992-CFBA-43BB-9095-DD85473199D2}_Small.jpg

[20/01/2009 - 22:27:18 | SH | 9547] E:\AlbumArt_{E6043A2C-BBEB-49C5-BCF0-5259B6332C34}_Large.jpg

[20/01/2009 - 22:27:14 | SH | 2464] E:\AlbumArt_{E6043A2C-BBEB-49C5-BCF0-5259B6332C34}_Small.jpg

[06/01/2009 - 22:48:55 | SH | 9966] E:\AlbumArt_{F74627BD-178D-4AD2-B133-9EF89794550B}_Large.jpg

[06/01/2009 - 22:48:36 | SH | 2545] E:\AlbumArt_{F74627BD-178D-4AD2-B133-9EF89794550B}_Small.jpg

[22/08/2010 - 12:22:09 | RASHD ] E:\Autorun.inf

[09/02/2009 - 17:42:36 | D ] E:\Breakbeat Kaos (Bbk009) - Pendulum Vs Freestylers

[06/04/2008 - 14:55:03 | D ] E:\Buddha Bar - Chill Out In Paris 3 - Musicangel 6X To - 2004

[08/04/2010 - 11:46:13 | D ] E:\Buddha Bar - Erotic Lounge

[08/03/2008 - 20:06:02 | D ] E:\Chill Cafe Del Mar Cafe Ibiza Best Of Baleatic Ambient & Chill Out Music' Narayana Mp3Out - Groove Jazzy Lounge Et Deep House

[20/04/2008 - 15:56:23 | D ] E:\Coldcut - Let us play (1997)

[21/04/2008 - 09:07:05 | D ] E:\Coldcut - Whats That Noise

[06/04/2008 - 14:55:22 | D ] E:\Daedelus-Exquisite Corpse (2005)

[20/01/2009 - 22:34:34 | SH | 370] E:\desktop.ini

[09/04/2008 - 16:37:11 | D ] E:\DJ_Shadow-The_Outsider-(Proper_Advance)-2006-VOiCE

[19/05/2008 - 09:32:04 | D ] E:\Eklectro - jungle breakbeat mix compresse ( rony size photek technical itch total science ltj bukem)

[21/08/2010 - 19:12:01 | D ] E:\Films

[20/01/2009 - 22:33:54 | SH | 12092] E:\Folder.jpg

[08/04/2008 - 11:16:55 | D ] E:\Freestylers - Pressure Point @ 256 KBPS by TykhoMoon

[01/06/2010 - 22:52:32 | D ] E:\Freestylers_-_Adventures_In_Freestyle-2006-4SPiTE

[21/08/2010 - 00:39:00 | D ] E:\gnnn

[15/02/2009 - 16:11:06 | D ] E:\Hiphop-Rap-Beats-Instrumentals-2005-From Ghosttown Productions-

[08/04/2008 - 19:58:58 | D ] E:\ILS_-_Soul_Trader released by zaireeka

[08/04/2008 - 11:17:11 | D ] E:\James_Delleck-Le_Cri_Du_Papillon-Advance_CD-FR-2007-QUEER

[20/04/2008 - 15:56:37 | D ] E:\Mr Scruff - Keep It Solid Steel

[07/04/2010 - 18:38:37 | D ] E:\Mr Scruff- Keep It Unreal

[21/03/2010 - 16:12:16 | RD ] E:\Musics

[22/07/2008 - 13:20:44 | A | 2672768] E:\Norah Jones - Dont Know Why.mp3

[02/04/2010 - 17:37:16 | D ] E:\Omnikrom - Trop Banane! (1er album) - By nco_

[26/05/2010 - 23:29:24 | D ] E:\Pendulum - Hold Your Colour-Retail Cd-2005-Boss

[04/06/2008 - 17:52:36 | D ] E:\Photek - Form & Function

[08/04/2008 - 14:20:00 | D ] E:\Photek - Modus Operandi

[08/04/2008 - 19:59:07 | D ] E:\Photek.-.Solaris.(EAC-VBR).(by.Charly)

[04/06/2008 - 17:52:48 | D ] E:\Playlists

[07/03/2010 - 15:12:02 | D ] E:\Plump DJs - A Plump Night Out

[11/07/2010 - 16:26:49 | D ] E:\Plump DJs - Eargasm

[08/04/2008 - 11:17:35 | D ] E:\Plump Djs - Saturday Night Lotion (2005)

[08/04/2008 - 14:20:07 | D ] E:\Plump_Djs_Annie Nightingale_18_12_2006_

[15/05/2010 - 12:59:16 | D ] E:\Prefuse_73-One_Word_Extinguisher-ADVANCE-2003-ESC

[09/03/2008 - 16:08:24 | D ] E:\Radio Nova - Nova Tunes Volume 11

[08/04/2008 - 19:59:14 | D ] E:\Ram-Chase And Status-Ramm64-Vinyl-2007-Sour

[08/04/2008 - 19:59:16 | D ] E:\Renegade Hardware-Chase And Status-The Tenne Tonne Ep Rh69-Promo-Vls-2005-Musiq

[09/04/2008 - 16:36:52 | D ] E:\Soul_Of_Man - Re-Licked (Best Of And Remixes) 2007

[07/04/2008 - 15:40:21 | D ] E:\Stanton_Warriors-Stanton_Sessions_Vol.2-2CD-2006

[08/04/2008 - 11:16:24 | D ] E:\Svinkels - Dj pone réveille le Svink' (1997-2005)

[25/12/2007 - 03:13:46 | SHD ] E:\System Volume Information

[27/12/2008 - 14:16:46 | D ] E:\Tabla Beat Science - Karsh Kale - Zakir Hussain - Palmistry

[08/04/2008 - 12:00:15 | D ] E:\The Crystal Method - Tweekend (2005) - Electronic

[08/04/2008 - 19:59:29 | D ] E:\The_Crystal_Method-Drive-2007-SnS

[08/04/2008 - 11:16:37 | D ] E:\Tipper -Surrounded-2004-

[08/04/2008 - 19:59:37 | D ] E:\Ulrich Schnauss - A Strangely Isolated Place - Promo

[10/04/2008 - 16:42:34 | D ] E:\Ulrich.Schnauss.-.Far.Away.Trains.Passing.By_192CBR_kabniel

[25/04/2010 - 19:33:10 | D ] E:\USB

[02/03/2010 - 10:52:10 | D ] E:\USB 2

[09/03/2008 - 16:12:28 | D ] E:\VA-Nova_Tunes_1.5-2007-SAW.(osloskop.net)

[09/03/2008 - 16:01:48 | D ] E:\VA-Nova_Tunes_1.7-2008-JUST.(osloskop.net)

[25/04/2010 - 19:42:58 | D ] E:\VA_-_Lounge_Del_Mare_Chillout_Cafe_Pearls_Vol.1-2007-MOD

[07/08/2010 - 00:36:39 | D ] E:\Zick babou

[02/01/2009 - 18:54:30 | D ] E:\[Dub Compilation] Psychobydub_Machines Supremacy (OnDubGround, Twelve Code, Casualty, Dring Toy, Zion Train, La Phaze, Freestylers)

[21/08/2010 - 13:53:38 | D ] E:\µ torrent

 

################## | Vaccin |

 

C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

E:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

 

################## | E.O.F |

 

 

Je lance un scan de MBAM, le rapport sera posté dans 2 petites heures.

 

++!

[Invité el-babak]

Et voici le rapport de MBAM qui n'a rien trouvé apparemment + log RSIT à la suite.

 

Remarque: le fichier info.txt de RSIT ne s'est pas ouvert automatiquement comme hier ni réduit dans la barre des tâches et impossible de le trouver dans C:/RSIT : Il n'y a que le log d'aujourd'hui et le fichier info d'hier.

 

Merci à toi, bne aprèm, ++!

 

Version de la base de données: 4461

 

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18943

 

22/08/2010 15:02:37

mbam-log-2010-08-22 (15-02-37).txt

 

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|)

Elément(s) analysé(s): 286138

Temps écoulé: 1 heure(s), 38 minute(s), 47 seconde(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

(Aucun élément nuisible détecté)

 

 

Logfile of random's system information tool 1.08 (written by random/random)

Run by Olivier! at 2010-08-22 15:14:16

Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2

System drive C: has 20 GB (17%) free of 119 GB

Total RAM: 2046 MB (50% free)

 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 15:14:35, on 22/08/2010

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.18943)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\TOSHIBA\Utilities\KeNotify.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\ehome\ehtray.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Windows\system32\conime.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Users\Olivier!\Desktop\RSIT.exe

C:\Program Files\trend micro\Olivier!.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe

O4 - HKLM\..\Run: [sVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe

O4 - HKLM\..\Run: [smoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe

O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"

O4 - HKLM\..\Run: [synTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe

O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - eBay - Achetez et vendez vos objets neufs ou d'occasion. Enchères, prix fixe, petites annonces - Et vous, vous achetez comment ? (file missing)

O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - Amazon.fr: livres, DVD, jeux video, CD, lecteurs MP3, ordinateurs, appareils photo, logiciels et plus encore! (file missing)

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - Pricepirates.com - comparer de prix (file missing)

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O17 - HKLM\System\CCS\Services\Tcpip\..\{BE3660D1-0666-4B47-A557-E538F898A8D7}: NameServer = 192.168.1.1

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe

O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe

O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE

O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Propagation du certificat (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe

O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe

O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe

O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Assistance IP (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Ma-Config Service (maconfservice) - Unknown owner - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe

O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe

O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Net Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe

O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe

O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Ouverture de session secondaire (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe

O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe

O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe

O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Service Panneau de saisie Tablet PC (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HD DVD PLAYER\TNaviSrv.exe

O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe

O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

O23 - Service: Client de suivi de lien distribué (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe

O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe

O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: WebClient - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe

O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100 (WPFFontCache_v0400) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Windows Search (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe

O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe

 

--

End of file - 22839 bytes

 

======Scheduled tasks folder======

 

C:\Windows\tasks\Google Software Updater.job

C:\Windows\tasks\User_Feed_Synchronization-{1E45849C-D4CD-4FB4-BF3A-14F8CBED59A7}.job

 

======Registry dump======

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]

Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-02-19 1262888]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]

Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-21 668656]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-02-19 1262888]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]

"KeNotify"=C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [2006-11-06 34352]

"SVPWUTIL"=C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe [2006-03-22 438272]

"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-09-03 4702208]

"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2007-03-29 411192]

"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2006-12-07 55416]

"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2007-04-03 509496]

"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2007-05-22 538744]

"NDSTray.exe"=NDSTray.exe []

"topi"=C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [2007-07-10 581632]

"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]

"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-07-27 204800]

"Toshiba Registration"=C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe [2007-02-19 571024]

"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-02-12 174872]

"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-03-20 1451304]

"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]

"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]

C:\Program Files\DAEMON Tools\daemon.exe [2006-11-12 157592]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]

C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

C:\Program Files\Winamp\winampa.exe [2009-07-01 37888]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=0

"NoDriveAutoRun"=0

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"BindDirectlyToPropertySetStorage"=0

"NoDriveAutoRun"=0

"NoDriveTypeAutoRun"=0

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

 

======File associations======

 

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

 

======List of files/folders created in the last 1 months======

 

2010-08-22 13:16:40 ----RASHD---- C:\Autorun.inf

2010-08-21 16:25:24 ----D---- C:\rsit

2010-08-21 14:56:38 ----A---- C:\Windows\system32\vbscript.dll

2010-08-21 14:56:37 ----A---- C:\Windows\system32\jscript.dll

2010-08-21 12:40:05 ----A---- C:\Windows\system32\occache.dll

2010-08-21 12:40:05 ----A---- C:\Windows\system32\mstime.dll

2010-08-21 12:40:05 ----A---- C:\Windows\system32\msfeedsbs.dll

2010-08-21 12:40:05 ----A---- C:\Windows\system32\msfeeds.dll

2010-08-21 12:40:05 ----A---- C:\Windows\system32\jsproxy.dll

2010-08-21 12:40:05 ----A---- C:\Windows\system32\iepeers.dll

2010-08-21 12:40:04 ----A---- C:\Windows\system32\wininet.dll

2010-08-21 12:40:04 ----A---- C:\Windows\system32\ieui.dll

2010-08-21 12:40:04 ----A---- C:\Windows\system32\iesetup.dll

2010-08-21 12:40:04 ----A---- C:\Windows\system32\iernonce.dll

2010-08-21 12:40:03 ----A---- C:\Windows\system32\msfeedssync.exe

2010-08-21 12:40:03 ----A---- C:\Windows\system32\ieUnatt.exe

2010-08-21 12:40:03 ----A---- C:\Windows\system32\iertutil.dll

2010-08-21 12:40:03 ----A---- C:\Windows\system32\iedkcs32.dll

2010-08-21 12:40:03 ----A---- C:\Windows\system32\ie4uinit.exe

2010-08-21 12:40:02 ----A---- C:\Windows\system32\urlmon.dll

2010-08-21 12:40:02 ----A---- C:\Windows\system32\iesysprep.dll

2010-08-21 12:40:01 ----A---- C:\Windows\system32\ieframe.dll

2010-08-21 12:40:00 ----A---- C:\Windows\system32\mshtml.dll

2010-08-21 12:34:01 ----A---- C:\Windows\system32\mshtmler.dll

2010-08-21 12:34:01 ----A---- C:\Windows\system32\mshtmled.dll

2010-08-21 12:34:01 ----A---- C:\Windows\system32\icardie.dll

2010-08-21 12:34:01 ----A---- C:\Windows\system32\admparse.dll

2010-08-21 12:34:00 ----A---- C:\Windows\system32\msls31.dll

2010-08-21 12:34:00 ----A---- C:\Windows\system32\corpol.dll

2010-08-21 12:33:59 ----A---- C:\Windows\system32\imgutil.dll

2010-08-21 12:33:59 ----A---- C:\Windows\system32\ieakeng.dll

2010-08-21 12:33:59 ----A---- C:\Windows\system32\dxtmsft.dll

2010-08-21 12:33:58 ----A---- C:\Windows\system32\licmgr10.dll

2010-08-21 12:33:58 ----A---- C:\Windows\system32\inseng.dll

2010-08-21 12:33:58 ----A---- C:\Windows\system32\ieaksie.dll

2010-08-21 12:33:58 ----A---- C:\Windows\system32\dxtrans.dll

2010-08-21 12:33:57 ----A---- C:\Windows\system32\WinFXDocObj.exe

2010-08-21 12:33:57 ----A---- C:\Windows\system32\wextract.exe

2010-08-21 12:33:57 ----A---- C:\Windows\system32\webcheck.dll

2010-08-21 12:33:57 ----A---- C:\Windows\system32\msrating.dll

2010-08-21 12:33:57 ----A---- C:\Windows\system32\ieakui.dll

2010-08-21 12:33:56 ----A---- C:\Windows\system32\pngfilt.dll

2010-08-21 12:33:56 ----A---- C:\Windows\system32\ieapfltr.dll

2010-08-21 12:33:56 ----A---- C:\Windows\system32\advpack.dll

2010-08-21 12:33:55 ----A---- C:\Windows\system32\url.dll

2010-08-21 12:33:54 ----A---- C:\Windows\system32\SetIEInstalledDate.exe

2010-08-21 12:33:54 ----A---- C:\Windows\system32\SetDepNx.exe

2010-08-21 12:33:54 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2010-08-21 12:33:54 ----A---- C:\Windows\system32\PDMSetup.exe

2010-08-21 12:33:54 ----A---- C:\Windows\system32\mshta.exe

2010-08-21 12:33:54 ----A---- C:\Windows\system32\iexpress.exe

2010-08-18 13:22:00 ----A---- C:\Windows\system32\javaws.exe

2010-08-18 13:22:00 ----A---- C:\Windows\system32\javaw.exe

2010-08-18 13:22:00 ----A---- C:\Windows\system32\java.exe

2010-08-13 01:50:51 ----A---- C:\Windows\system32\iccvid.dll

2010-08-13 01:50:47 ----A---- C:\Windows\system32\drivers\srv2.sys

2010-08-13 01:50:47 ----A---- C:\Windows\system32\drivers\srv.sys

2010-08-13 01:50:22 ----A---- C:\Windows\system32\schannel.dll

2010-08-13 01:50:18 ----A---- C:\Windows\system32\win32k.sys

2010-08-13 01:50:16 ----A---- C:\Windows\system32\rtutils.dll

2010-08-13 01:50:02 ----A---- C:\Windows\system32\ntoskrnl.exe

2010-08-13 01:50:02 ----A---- C:\Windows\system32\ntkrnlpa.exe

2010-08-13 01:49:59 ----A---- C:\Windows\system32\msxml3.dll

2010-08-13 01:49:54 ----A---- C:\Windows\system32\drivers\tcpip.sys

2010-08-11 23:26:32 ----SHD---- C:\Users\Olivier!\AppData\Roaming\jh87uhnoe3

2010-08-11 00:16:47 ----D---- C:\Program Files\uTorrent

2010-08-11 00:15:00 ----D---- C:\Users\Olivier!\AppData\Roaming\uTorrent

2010-08-03 02:32:17 ----A---- C:\Windows\system32\shell32.dll

 

======List of files/folders modified in the last 1 months======

 

2010-08-22 15:14:30 ----D---- C:\Windows\Prefetch

2010-08-22 15:14:25 ----D---- C:\Windows\Temp

2010-08-22 15:14:21 ----D---- C:\Program Files\trend micro

2010-08-22 13:48:10 ----D---- C:\Windows\Tasks

2010-08-22 13:09:53 ----SHD---- C:\$Recycle.Bin

2010-08-22 12:23:26 ----D---- C:\Windows\system32\catroot2

2010-08-22 11:38:32 ----D---- C:\ProgramData\Google Updater

2010-08-22 01:46:49 ----D---- C:\Users\Olivier!\AppData\Roaming\vlc

2010-08-21 19:29:43 ----D---- C:\Windows\System32

2010-08-21 19:29:43 ----D---- C:\Windows\inf

2010-08-21 19:29:43 ----A---- C:\Windows\system32\PerfStringBackup.INI

2010-08-21 19:07:41 ----RD---- C:\Program Files

2010-08-21 16:16:56 ----SHD---- C:\Windows\Installer

2010-08-21 16:16:55 ----D---- C:\Windows\system32\Tasks

2010-08-21 15:52:09 ----D---- C:\Windows\winsxs

2010-08-21 15:51:28 ----SHD---- C:\System Volume Information

2010-08-21 15:02:29 ----D---- C:\Users\Olivier!\AppData\Roaming\LimeWire

2010-08-21 14:56:26 ----D---- C:\Windows\system32\catroot

2010-08-21 13:01:13 ----D---- C:\Windows\rescache

2010-08-21 12:42:21 ----D---- C:\Windows\system32\migration

2010-08-21 12:42:21 ----D---- C:\Program Files\Internet Explorer

2010-08-21 12:42:18 ----D---- C:\Windows\system32\fr-FR

2010-08-21 12:42:12 ----D---- C:\Windows\PolicyDefinitions

2010-08-21 12:42:11 ----D---- C:\Windows\system32\en-US

2010-08-21 12:37:08 ----D---- C:\Windows

2010-08-21 12:33:06 ----D---- C:\Windows\SoftwareDistribution

2010-08-21 00:55:32 ----D---- C:\Users\Olivier!\AppData\Roaming\dvdcss

2010-08-20 00:44:31 ----D---- C:\PerfLogs

2010-08-20 00:32:07 ----D---- C:\Users\Olivier!\AppData\Roaming\Uniblue

2010-08-19 00:40:51 ----D---- C:\ProgramData\Spybot - Search & Destroy

2010-08-18 15:40:25 ----D---- C:\Windows\tapi

2010-08-18 15:40:25 ----D---- C:\Windows\system32\drivers

2010-08-18 13:24:10 ----D---- C:\Program Files\Common Files\Java

2010-08-18 13:21:56 ----D---- C:\Program Files\Java

2010-08-18 11:49:30 ----D---- C:\Windows\system32\LogFiles

2010-08-17 17:56:03 ----D---- C:\Windows\system32\drivers\etc

2010-08-14 13:15:39 ----D---- C:\Program Files\LimeWire

2010-08-14 12:28:20 ----D---- C:\Windows\Debug

2010-08-13 22:50:03 ----D---- C:\Windows\DigitalLocker

2010-08-13 15:39:44 ----D---- C:\ProgramData\Avira

2010-08-13 13:24:27 ----D---- C:\Windows\Microsoft.NET

2010-08-13 13:23:57 ----RSD---- C:\Windows\assembly

2010-08-13 03:15:09 ----D---- C:\Program Files\Movie Maker

2010-08-13 03:04:58 ----A---- C:\Windows\win.ini

2010-08-13 03:00:51 ----D---- C:\Program Files\Windows Mail

2010-08-11 20:07:20 ----D---- C:\Windows\twain_32

2010-08-10 14:14:07 ----D---- C:\Program Files\Mozilla Firefox

2010-08-04 01:14:28 ----D---- C:\Program Files\CCleaner

2010-08-03 20:09:31 ----A---- C:\Windows\system32\mrt.exe

2010-08-03 02:31:00 ----D---- C:\Program Files\Microsoft.NET

 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-02-12 277784]

R0 LPCFilter;LPC Lower Filter Driver; C:\Windows\system32\DRIVERS\LPCFilter.sys [2006-07-28 19456]

R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2009-04-28 44944]

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2008-02-19 639224]

R0 tos_sps32;TOSHIBA tos_sps32 Service; C:\Windows\system32\DRIVERS\tos_sps32.sys [2007-07-02 285184]

R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2007-11-09 23640]

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]

R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]

R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-07-31 28520]

R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2005-08-01 64896]

R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-12-10 56816]

R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888]

R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-09-20 3077632]

R3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-09-05 1953944]

R3 NETw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-11-17 3668480]

R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-04-30 81408]

R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-03-20 208688]

R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 16128]

R3 tifm21;tifm21; C:\Windows\system32\drivers\tifm21.sys [2007-01-24 290304]

R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2006-10-10 41600]

R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2006-10-23 9216]

R3 usbvideo;Chicony USB 2.0 Camera; C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]

R3 UVCFTR;UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [2007-04-16 11776]

R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

S3 aq1njsnw;aq1njsnw; C:\Windows\system32\drivers\aq1njsnw.sys []

S3 athr;Pilote de périphérique LAN sans fil extensible Atheros; C:\Windows\system32\DRIVERS\athr.sys [2006-11-02 467456]

S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [2009-01-24 14336]

S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]

S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]

S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]

S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]

S3 NETw4v32;Pilote de carte Intel® Wireless WiFi Link pour Windows Vista 32 bits; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-04-26 2216448]

S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-19 8192]

S3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2007-02-22 113920]

S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2006-11-20 36480]

S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]

S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]

S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2007-01-22 53376]

S3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2007-02-28 41344]

S3 TpChoice;Touch Pad Detection Filter driver; C:\Windows\system32\DRIVERS\TpChoice.sys []

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]

S4 CplIR;Embedded IR Driver; C:\Windows\system32\DRIVERS\CplIR.SYS [2007-03-06 14848]

S4 KR10I;KR10I; C:\Windows\system32\drivers\kr10i.sys [2007-01-18 219392]

S4 KR10N;KR10N; C:\Windows\system32\drivers\kr10n.sys [2007-01-18 211072]

 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2006-10-05 9216]

R2 AntiVirMailService;Avira AntiVir MailGuard; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [2009-07-31 194817]

R2 AntiVirSchedulerService;Avira AntiVir Planificateur; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-07-31 108289]

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-18 185089]

R2 AntiVirWebService;Avira AntiVir WebGuard; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2009-07-31 434945]

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-09-20 610304]

R2 CFSvcs;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2006-11-14 40960]

R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-02-12 355096]

R2 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-01-24 216232]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]

R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]

R2 TNaviSrv;TOSHIBA Navi Support Service; C:\Program Files\TOSHIBA\TOSHIBA HD DVD PLAYER\TNaviSrv.exe [2007-09-21 77824]

R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2006-05-25 114688]

R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2007-03-29 427576]

R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-21 183280]

S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]

S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]

S3 SonicStage Back-End Service;SonicStage Back-End Service; C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe [2007-02-05 112184]

S3 SPTISRV;Sony SPTI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]

S3 SSScsiSV;SonicStage SCSI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe [2007-02-05 75320]

S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-11-01 320760]

S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

 

-----------------EOF-----------------

[Apollo]

Re,

 

Comment va le pc?

 

Le log est plutôt bon.

On va faire un dernier contrôle pour voir si rien de mauvais ne traîne encore par là.

 

Assure toi que la console Java est bien la plus récente; pour le savoir rends-toi sur cette page et clique sur Vérifier la version de Java -> Vérification de l'installation de Java -> Il te sera indiqué si tu dois installer la dernière version.

Si tu installes une nouvelle version Java, désinstalle toutes les plus anciennes via ajout/suppr de programmes.

 

JavaRa ou désinstaller proprement les anciennes versions de la console Java

 

Fais un scan en ligne avec Kaspersky.

 

Va dans outils/options internet et sous l'onglet sécurité, clique sur "par défaut".

 

TUTO: Comment faire un scan en ligne avec Kaspersky : Aide pour supprimer les virus

 

Désactive ton antivirus le temps d'installation et de mises à jour du webscanner Kaspersky.

 

• 
  
• Fais un scan en ligne Kaspersky
  
• Clique sur Accept
  
• Patiente le temps d'installation du Webscanner.
  
• Les bases de mises à jour vont s'installer, patiente un moment
  
• Clique sur Next.
  
• Clique sur My Computer, le scan se met en route; attends la fin du scan sans fermer la fenêtre sinon il s'arrêtera.

 

A la fin du scan, si des objets infectés sont découverts, clique sur Save report as... Choisis bureau et nomme le rapport "rapport Kaspersky" et dans le champ d'enregistrement, choisis "fichiers texte" enregistre alors le rapport.

 

Copie l'entièreté du fichier texte ouvert, par clic droit dessus, sélectionner tout/copier.

 

Colle ce rapport dans ta réponse sur le forum.

 

NB: fais gaffe aux P2P, c'est très dangereux de nos jours, clique la bannière.

 

 

J'espère que tu changeras d'avis à propos du téléchargement peer-to-peer: va faire un tour sur le forum de désinfection: le peer-to-peer est l'un des principaux vecteurs de virus via les cracks, keygens, fakes...

 

Article créé par oGu, conseiller en sécurité

 

@++

[Invité el-babak]

Et bonjour!

 

Le PC va bien, il te dit merci! Il rame toujours un peu plus qu'avant mais je pense que je vais m'orienter vers la section optimisation pour cela?

 

J'ai eu un message d'erreur avant de lancer l'installation de Kaspersky du genre: "la signature numérique est erronée"... avec comme choix: éxecuter ou annuler. Le scan n'a rien trouvé, rapport à la suite même si il n'y a rien.

 

Concernant le P2P, je prends note de tes recommandations. Il est bon de rappeler les risques (multiples) encourus. J'utilise parfois le P2P pour choper des films mais avec beaucoup de retenue et de précaution.. "Uti, non abuti." : "Usez de tout, mais n'abusez de rien."

 

 

 

KASPERSKY ONLINE SCANNER 7.0: scan report

Monday, August 23, 2010

Operating system: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 2 (build 6002)

Kaspersky Online Scanner version: 7.0.26.13

Last database update: Monday, August 23, 2010 05:08:49

Records in database: 4135172

--------------------------------------------------------------------------------

 

Scan settings:

scan using the following database: extended

Scan archives: yes

Scan e-mail databases: yes

 

Scan area - My Computer:

C:\

D:\

E:\

F:\

G:\

H:\

I:\

 

Scan statistics:

Objects scanned: 173989

Threats found: 0

Infected objects found: 0

Suspicious objects found: 0

Scan duration: 03:08:10

 

No threats found. Scanned area is clean.

 

Selected area has been scanned.

 

 

++ !

Modifié le 23 août 2010 par el-babak

[Apollo]

Bonjour,

 

Kaspersky qui ne trouve rien => excellente nouvelle.

 

Car ce scan est sûrement le plus pointu qu'on puisse faire, donc pour moi, tout est ok côté désinfection.

 

@++

[Invité el-babak]

YEEEEEEHA! Un grand merci pour ta disponibilité et le temps passé sur mon problème. Je trinque à ta santé et à celle de Zebulon ce soir! ^^

 

 

++

[Invité el-babak]

OUCH!

 

Ne crions pas victoire trop vite: Voila ce que MBAM a trouvé aujourd'hui:

 

Clé(s) du Registre infectée(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe (Security.Hijack) -> No action taken.

 

 

Je vais créer un nouveau sujet.. dont voici le lien: http://forum.zebulon.fr/re-besoin-analyse-rapport-hijackthis-t178966.html

 

++!

Modifié le 25 août 2010 par el-babak