Aller au contenu
  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Messages recommandés

Posté(e)

Bonjour,

 

Une étudiante qui revient de Taiwan m'a laissé son ordinateur portable pour tenter de le nettoyer...

J'ai passer Malware byte qui a trouver beaucoup de choses il y en avait pour 6 ou 7 pages.

J'ai lancé un scan d'antivir.

Mais à chaque démarrage il y a le programme 'Trojan remover' qui détecte deux exe mmmpc.exe et ozzfhv.exe mais comme il y a plus de trente jours qu'elle l'a installé il ne fait pas plus que les détecter.

Je ne sais même pas si c'est important et si oui comment on les enlève?

 

Par ailleurs j'ai essayé de passer les antivirus en ligne Kaperski, panda et bit defender aucun ne veut démarrer j'ai à chaque fois des erreurs avant qu'il démarre ( je peux vous donner les messages..)

 

Je peux vous fournir le log Hijackthis.

Je suis entrain de faire tourner anti malware d'emisoft que je viens de télcharger (il a trouvé ente autre Midgare)

Posté(e)

Bonjour,

 

Pour pouvoir vous aider , il faut plus de renseignements:

 

Téléchargez cet outil de diagnostic.

.

Téléchargez Random's system information tool (RSIT) et sauvegardez-le sur le Bureau

Sous Xp

Double-cliquez sur RSIT.exe pour le lancer.

Sous Vista

Clic droit sur l'icône et "Exécuter en tant qu'administrateur"

Sous Sept

Sur le bureau, faire un clic droit sur le fichier RSIT.exe

Dans Propriétés->onglet Compatibilité-> cocher Exécuter ce programme en mode compatibilité pour

et dans le menu choisir Vista SP2 et la case dans Niveau de privilège.

Valider par Appliquer.

 

* Cliquez Continue à l'écran Disclaimer.

* Si l'outil HIjackThis (version à jour) n'est pas présent ou détecté sur l'ordinateur, RSIT le télécharge et vous acceptez la licence.

* L'analyse terminée, deux fichiers texte s'ouvriront.:

Poster le contenu de log.txt (qui sera affiché)

ainsi que de info.txt (qui sera réduit dans la Barre des Tâches).

* Si ces deux rapports n'apparaissent pas, vous les trouverez dans le dossier C:\rsit

 

Comment poster les rapports

Vous copiez/collez tout ou partie des rapports dans un ou plusieurs messages.

Autre solution:

Aller sur le site :Ci-Jointicne2cjoint.png

Appuyez sur Parcourir et chercher les rapports sur le disque,

Ensuite appuyez sur Créer le lien CJoint,

>> dans la page suivante --> ,,

une adresse http//.. sera créée

Copier /coller cette adresse dans votre prochain message.

 

 

 

Rsit, comme Hijackthis, ne connait pas les OS 64 bits, d'où les "File Missing"

Si vous êtes dans ce cas Lancez plutôt cet outil de diagnostic:

Téléchargez ZhpDiag de Coolman

Il ne nécessite aucune installation.

- Il peut être lancé depuis n'importe quelle unité de disque.

- Il peut être lancé d'une clé USB.

 

ZHPDiag.jpg

Cliquez sur le tournevis

Dans la fenêtre qui s'ouvre, cochez tout.

Clic sur la Loupe pour lancer le scan

Au bout d'un moment ,vous pouvez avoir à Accepter Sysinternal->I agree

Postez en le rapport qui apparait en cliquant l'appareil photo.

Posté(e)

Bonsoir,

Voilà c'est fait et cela me parait gros

 

 

Logfile of random's system information tool 1.08 (written by random/random)

Run by Meysieng at 2010-08-26 21:43:17

MicrosoftR Windows Vista? Edition Familiale Premium Service Pack 2

System drive C: has 167 GB (73%) free of 229 GB

Total RAM: 3069 MB (53% free)

 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 21:43:33, on 26/08/2010

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.18943)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\HP\QuickPlay\QPService.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\IDT\WDM\sttray.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE

C:\Users\Meysieng\Program Files\DNA\btdna.exe

C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Windows\ehome\ehmsas.exe

C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

C:\Windows\system32\DllHost.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\Taskmgr.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\explorer.exe

C:\Users\Meysieng\Downloads\RSIT.exe

C:\Program Files\trend micro\Meysieng.exe

 

R3 - URLSearchHook: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O1 - Hosts: ::1 localhost

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"

O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot

O4 - HKLM\..\Run: [sysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [iSW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"

O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Users\Meysieng\Program Files\DNA\btdna.exe"

O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RESEAU')

O4 - Startup: OneNote 2007 - Capture d'ecran et lancement.lnk

O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Envoyer a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O15 - ESC Trusted Zone: http://*.update.microsoft.com

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab

O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\aestsrv.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe

O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe

O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe

O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe

O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Easybits Shared Services for Windows (ezSharedSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe

O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Service Google Update (gupdate1ca4b2c1625a717) (gupdate1ca4b2c1625a717) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Service de l!|iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe

O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe

O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe

O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe

O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe

O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe

O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe

O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe

O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\STacSV.exe

O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe

O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe

O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe

O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe

O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe

 

--

End of file - 25749 bytes

 

======Scheduled tasks folder======

 

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\User_Feed_Synchronization-{4C128B28-7E9D-4B0E-8038-690B23E6E920}.job

 

======Registry dump======

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]

Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]

ZoneAlarm Toolbar - C:\Program Files\ZoneAlarm\tbZone.dll [2010-05-09 2517088]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]

Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]

ZoneAlarm Security Engine Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2010-05-26 591336]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - Veoh Web Player Video Finder - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll [2009-05-20 429816]

{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

{66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - ZoneAlarm Toolbar - C:\Program Files\ZoneAlarm\tbZone.dll [2010-05-09 2517088]

{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2010-05-26 591336]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-01-17 1033512]

"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-12-24 222504]

"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2008-05-14 468264]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-03-14 202032]

"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-11-01 554288]

"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]

"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-04-15 70912]

"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-11-20 488752]

"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]

"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-09-21 305440]

"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

"TrojanScanner"=C:\Program Files\Trojan Remover\Trjscan.exe [2009-09-15 1069960]

"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-04-16 442433]

"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2010-06-23 1043968]

"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2010-05-26 730600]

"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-02-26 2289664]

"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]

"BitTorrent DNA"=C:\Users\Meysieng\Program Files\DNA\btdna.exe [2009-11-07 323392]

"VeohPlugin"=C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [2009-05-20 3561720]

"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]

"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

 

C:\Users\Meysieng\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

OneNote 2007 - Capture d'ecran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"BindDirectlyToPropertySetStorage"=0

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

"C:\Users\Meysieng\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\COI17FCY\ppstreamsetup[1].exe"="C:\Users\Meysieng\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\COI17FCY\ppstreamsetup[1].exe:*:Enabled:PPStream Installer"

"C:\Program Files\PPStream\PPStream.exe"="C:\Program Files\PPStream\PPStream.exe:*:Enabled:PPSIoAcμcEO"

"C:\Program Files\PPStream\PPSAP.exe"="C:\Program Files\PPStream\PPSAP.exe:*:Enabled:PPS IoAc?OEUA÷"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

 

======File associations======

 

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

 

======List of files/folders created in the last 1 months======

 

2010-08-26 21:25:51 ----D---- C:\rsit

2010-08-26 13:39:29 ----D---- C:\Program Files\Emsisoft Anti-Malware

2010-08-25 22:35:36 ----D---- C:\Program Files\Trend Micro

2010-08-25 22:20:37 ----D---- C:\FyK

2010-08-25 22:12:55 ----A---- C:\Windows\system32\drivers\pavboot.sys

2010-08-25 22:12:52 ----D---- C:\Program Files\Panda Security

2010-08-25 21:38:23 ----D---- C:\Windows\BDOSCAN8

2010-08-24 13:35:53 ----DC---- C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}

2010-08-24 06:30:22 ----D---- C:\ProgramData\Spybot - Search & Destroy

2010-08-24 06:30:22 ----D---- C:\Program Files\Spybot - Search & Destroy

2010-08-23 22:45:09 ----D---- C:\Users\Meysieng\AppData\Roaming\CheckPoint

2010-08-23 22:44:36 ----D---- C:\Program Files\Conduit

2010-08-23 22:44:33 ----D---- C:\Program Files\ZoneAlarm

2010-08-23 22:42:41 ----D---- C:\Program Files\CheckPoint

2010-08-23 22:42:26 ----A---- C:\Windows\system32\vsregexp.dll

2010-08-23 22:41:59 ----A---- C:\Windows\system32\drivers\netio.sys

2010-08-23 22:41:41 ----A---- C:\Windows\system32\zlcommdb.dll

2010-08-23 22:41:41 ----A---- C:\Windows\system32\zlcomm.dll

2010-08-23 22:41:29 ----A---- C:\Windows\system32\vswmi.dll

2010-08-23 22:41:26 ----A---- C:\Windows\system32\zpeng25.dll

2010-08-23 22:41:26 ----A---- C:\Windows\system32\vsxml.dll

2010-08-23 22:41:25 ----A---- C:\Windows\system32\vspubapi.dll

2010-08-23 22:41:25 ----A---- C:\Windows\system32\vsmonapi.dll

2010-08-23 22:41:24 ----A---- C:\Windows\system32\vsdata.dll

2010-08-23 22:41:13 ----D---- C:\Windows\system32\ZoneLabs

2010-08-23 22:41:13 ----A---- C:\Windows\system32\drivers\vsdatant.sys

2010-08-23 22:41:11 ----D---- C:\Program Files\Zone Labs

2010-08-23 22:39:39 ----D---- C:\ProgramData\CheckPoint

2010-08-23 22:39:38 ----D---- C:\Windows\Internet Logs

2010-08-23 22:39:37 ----A---- C:\Windows\system32\vsutil.dll

2010-08-23 22:39:37 ----A---- C:\Windows\system32\vsinit.dll

2010-08-23 22:37:58 ----D---- C:\Users\Meysieng\AppData\Roaming\Malwarebytes

2010-08-23 22:37:49 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys

2010-08-23 22:37:48 ----D---- C:\ProgramData\Malwarebytes

2010-08-23 22:37:47 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2010-08-23 22:37:47 ----A---- C:\Windows\system32\drivers\mbam.sys

2010-08-22 23:45:33 ----A---- C:\Windows\system32\UIAnimation.dll

2010-08-22 23:45:30 ----A---- C:\Windows\system32\UIRibbonRes.dll

2010-08-22 23:45:29 ----A---- C:\Windows\system32\UIRibbon.dll

2010-08-22 17:09:24 ----D---- C:\Program Files\Windows Portable Devices

2010-08-22 16:46:29 ----A---- C:\Windows\system32\WMPhoto.dll

2010-08-22 16:46:26 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys

2010-08-22 16:46:26 ----A---- C:\Windows\system32\cdd.dll

2010-08-22 16:46:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll

2010-08-22 16:46:22 ----A---- C:\Windows\system32\d3d10warp.dll

2010-08-22 16:46:21 ----A---- C:\Windows\system32\XpsRasterService.dll

2010-08-22 16:46:21 ----A---- C:\Windows\system32\XpsGdiConverter.dll

2010-08-22 16:46:21 ----A---- C:\Windows\system32\d2d1.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\WindowsCodecsExt.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\WindowsCodecs.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\dxdiagn.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\dxdiag.exe

2010-08-22 16:46:19 ----A---- C:\Windows\system32\XpsPrint.dll

2010-08-22 16:46:19 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe

2010-08-22 16:46:18 ----A---- C:\Windows\system32\xpsservices.dll

2010-08-22 16:46:18 ----A---- C:\Windows\system32\OpcServices.dll

2010-08-22 16:46:18 ----A---- C:\Windows\system32\FntCache.dll

2010-08-22 16:46:17 ----A---- C:\Windows\system32\DWrite.dll

2010-08-22 16:46:17 ----A---- C:\Windows\system32\d3d10level9.dll

2010-08-22 16:46:17 ----A---- C:\Windows\system32\d3d10core.dll

2010-08-22 16:46:16 ----A---- C:\Windows\system32\dxgi.dll

2010-08-22 16:46:16 ----A---- C:\Windows\system32\d3d11.dll

2010-08-22 16:46:16 ----A---- C:\Windows\system32\d3d10_1core.dll

2010-08-22 16:46:16 ----A---- C:\Windows\system32\d3d10_1.dll

2010-08-22 16:46:15 ----A---- C:\Windows\system32\d3d10.dll

2010-08-22 16:43:40 ----A---- C:\Windows\system32\WPDShextAutoplay.exe

2010-08-22 16:43:39 ----A---- C:\Windows\system32\wpdbusenum.dll

2010-08-22 16:43:39 ----A---- C:\Windows\system32\BthMtpContextHandler.dll

2010-08-22 16:43:27 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll

2010-08-22 16:43:12 ----A---- C:\Windows\system32\WpdMtpUS.dll

2010-08-22 16:43:12 ----A---- C:\Windows\system32\WpdConns.dll

2010-08-22 16:43:11 ----A---- C:\Windows\system32\drivers\WpdUsb.sys

2010-08-22 16:43:09 ----A---- C:\Windows\system32\WPDShServiceObj.dll

2010-08-22 16:43:09 ----A---- C:\Windows\system32\wpdshext.dll

2010-08-22 16:43:09 ----A---- C:\Windows\system32\wpd_ci.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\WpdMtp.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\PortableDeviceTypes.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\PortableDeviceApi.dll

2010-08-22 16:43:07 ----A---- C:\Windows\system32\WPDSp.dll

2010-08-22 16:38:05 ----A---- C:\Windows\system32\oleaccrc.dll

2010-08-22 16:38:03 ----A---- C:\Windows\system32\oleacc.dll

2010-08-22 16:38:02 ----A---- C:\Windows\system32\UIAutomationCore.dll

2010-08-20 23:19:09 ----D---- C:\Windows\system32\eu-ES

2010-08-20 23:19:09 ----D---- C:\Windows\system32\ca-ES

2010-08-20 23:19:07 ----D---- C:\Windows\system32\vi-VN

2010-08-20 22:09:14 ----D---- C:\Windows\system32\EventProviders

2010-08-20 22:04:29 ----A---- C:\Windows\system32\browserchoice.exe

2010-08-18 12:06:44 ----A---- C:\Windows\system32\iertutil.dll

2010-08-18 12:06:41 ----A---- C:\Windows\system32\mshtml.dll

2010-08-18 12:06:37 ----A---- C:\Windows\system32\ieframe.dll

2010-08-18 12:06:34 ----A---- C:\Windows\system32\urlmon.dll

2010-08-18 12:06:32 ----A---- C:\Windows\system32\wininet.dll

2010-08-18 12:06:32 ----A---- C:\Windows\system32\msfeeds.dll

2010-08-18 12:06:32 ----A---- C:\Windows\system32\iedkcs32.dll

2010-08-18 12:06:32 ----A---- C:\Windows\system32\ie4uinit.exe

2010-08-18 12:06:31 ----A---- C:\Windows\system32\mstime.dll

2010-08-18 12:06:31 ----A---- C:\Windows\system32\ieui.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\occache.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\msfeedsbs.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\ieUnatt.exe

2010-08-18 12:06:30 ----A---- C:\Windows\system32\iesysprep.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\iesetup.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\iernonce.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\iepeers.dll

2010-08-18 12:06:29 ----A---- C:\Windows\system32\msfeedssync.exe

2010-08-18 12:06:29 ----A---- C:\Windows\system32\jsproxy.dll

2010-08-18 12:06:25 ----A---- C:\Windows\system32\iccvid.dll

2010-08-18 12:06:20 ----A---- C:\Windows\system32\schannel.dll

2010-08-18 12:05:55 ----A---- C:\Windows\system32\ntkrnlpa.exe

2010-08-18 12:05:52 ----A---- C:\Windows\system32\ntoskrnl.exe

2010-08-18 12:05:47 ----A---- C:\Windows\system32\rtutils.dll

2010-08-18 12:05:40 ----A---- C:\Windows\system32\win32k.sys

2010-08-18 12:05:30 ----A---- C:\Windows\system32\msxml3.dll

2010-08-18 12:05:26 ----A---- C:\Windows\system32\drivers\srv2.sys

2010-08-18 12:05:26 ----A---- C:\Windows\system32\drivers\srv.sys

2010-08-18 12:05:21 ----A---- C:\Windows\system32\drivers\tcpip.sys

2010-08-18 12:05:20 ----A---- C:\Windows\system32\drivers\tcpipreg.sys

2010-08-03 20:41:52 ----A---- C:\Windows\system32\shell32.dll

2010-07-30 11:29:10 ----A---- C:\Windows\system32\MRT.INI

2010-07-30 11:29:09 ----D---- C:\Windows\system32\MpEngineStore

2010-07-30 11:16:21 ----A---- C:\Windows\system32\PresentationHostProxy.dll

2010-07-30 11:16:21 ----A---- C:\Windows\system32\PresentationHost.exe

2010-07-30 11:16:21 ----A---- C:\Windows\system32\netfxperf.dll

2010-07-30 11:16:21 ----A---- C:\Windows\system32\mscoree.dll

2010-07-30 11:16:21 ----A---- C:\Windows\system32\dfshim.dll

2010-07-29 12:08:20 ----A---- C:\Windows\system32\asycfilt.dll

2010-07-29 12:08:04 ----A---- C:\Windows\system32\gameux.dll

2010-07-29 12:08:02 ----A---- C:\Windows\system32\Apphlpdm.dll

2010-07-29 12:08:01 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll

2010-07-29 12:07:51 ----A---- C:\Windows\system32\atmlib.dll

2010-07-29 12:07:51 ----A---- C:\Windows\system32\atmfd.dll

 

======List of files/folders modified in the last 1 months======

 

2010-08-26 21:43:16 ----D---- C:\Windows\Temp

2010-08-26 21:33:59 ----D---- C:\Users\Meysieng\AppData\Roaming\DNA

2010-08-26 21:26:06 ----D---- C:\Windows\Prefetch

2010-08-26 21:09:43 ----D---- C:\Windows\System32

2010-08-26 21:09:43 ----A---- C:\Windows\system32\PerfStringBackup.INI

2010-08-26 21:09:42 ----D---- C:\Windows\inf

2010-08-26 21:08:44 ----D---- C:\Program Files\Mozilla Firefox

2010-08-26 13:53:37 ----D---- C:\autorun.inf

2010-08-26 13:39:29 ----RD---- C:\Program Files

2010-08-26 13:21:06 ----AD---- C:\ProgramData\TEMP

2010-08-26 13:08:14 ----SHD---- C:\System Volume Information

2010-08-25 22:19:17 ----D---- C:\Windows\system32\drivers

2010-08-25 22:12:05 ----SD---- C:\Windows\Downloaded Program Files

2010-08-25 21:38:24 ----D---- C:\Windows

2010-08-24 13:35:53 ----D---- C:\ProgramData

2010-08-24 13:35:20 ----SHD---- C:\Windows\Installer

2010-08-24 08:43:20 ----D---- C:\Windows\Debug

2010-08-24 06:17:26 ----D---- C:\Windows\winsxs

2010-08-23 23:07:43 ----D---- C:\Windows\MSAgent

2010-08-23 23:04:07 ----D---- C:\RECYCLER

2010-08-23 22:42:11 ----D---- C:\Windows\system32\catroot2

2010-08-23 22:42:11 ----D---- C:\Windows\system32\catroot

2010-08-22 23:46:10 ----D---- C:\Windows\system32\fr-FR

2010-08-22 17:26:08 ----RSD---- C:\Windows\assembly

2010-08-22 17:15:26 ----D---- C:\Windows\system32\Tasks

2010-08-22 17:14:15 ----D---- C:\Windows\Microsoft.NET

2010-08-22 17:09:25 ----D---- C:\Windows\system32\drivers\fr-FR

2010-08-22 17:09:24 ----D---- C:\Windows\system32\wbem

2010-08-22 17:09:17 ----D---- C:\Windows\system32\zh-HK

2010-08-22 17:09:17 ----D---- C:\Windows\system32\uk-UA

2010-08-22 17:09:17 ----D---- C:\Windows\system32\tr-TR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\th-TH

2010-08-22 17:09:17 ----D---- C:\Windows\system32\sv-SE

2010-08-22 17:09:17 ----D---- C:\Windows\system32\sr-Latn-CS

2010-08-22 17:09:17 ----D---- C:\Windows\system32\sl-SI

2010-08-22 17:09:17 ----D---- C:\Windows\system32\pt-PT

2010-08-22 17:09:17 ----D---- C:\Windows\system32\pt-BR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\pl-PL

2010-08-22 17:09:17 ----D---- C:\Windows\system32\nl-NL

2010-08-22 17:09:17 ----D---- C:\Windows\system32\ko-KR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\it-IT

2010-08-22 17:09:17 ----D---- C:\Windows\system32\hu-HU

2010-08-22 17:09:17 ----D---- C:\Windows\system32\hr-HR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\he-IL

2010-08-22 17:09:17 ----D---- C:\Windows\system32\fi-FI

2010-08-22 17:09:17 ----D---- C:\Windows\system32\es-ES

2010-08-22 17:09:17 ----D---- C:\Windows\system32\el-GR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\bg-BG

2010-08-22 17:09:16 ----D---- C:\Windows\system32\zh-TW

2010-08-22 17:09:16 ----D---- C:\Windows\system32\zh-CN

2010-08-22 17:09:16 ----D---- C:\Windows\system32\sk-SK

2010-08-22 17:09:16 ----D---- C:\Windows\system32\ru-RU

2010-08-22 17:09:16 ----D---- C:\Windows\system32\ro-RO

2010-08-22 17:09:16 ----D---- C:\Windows\system32\nb-NO

2010-08-22 17:09:16 ----D---- C:\Windows\system32\lv-LV

2010-08-22 17:09:16 ----D---- C:\Windows\system32\lt-LT

2010-08-22 17:09:16 ----D---- C:\Windows\system32\ja-JP

2010-08-22 17:09:16 ----D---- C:\Windows\system32\et-EE

2010-08-22 17:09:16 ----D---- C:\Windows\system32\en-US

2010-08-22 17:09:16 ----D---- C:\Windows\system32\de-DE

2010-08-22 17:09:16 ----D---- C:\Windows\system32\da-DK

2010-08-22 17:09:16 ----D---- C:\Windows\system32\cs-CZ

2010-08-22 17:09:16 ----D---- C:\Windows\system32\ar-SA

2010-08-22 17:08:59 ----D---- C:\Windows\system32\drivers\UMDF

2010-08-22 16:59:52 ----D---- C:\Program Files\CCleaner

2010-08-21 12:32:24 ----D---- C:\Users\Meysieng\AppData\Roaming\Skype

2010-08-21 08:19:11 ----SD---- C:\Users\Meysieng\AppData\Roaming\Microsoft

2010-08-21 08:07:13 ----D---- C:\Users\Meysieng\AppData\Roaming\skypePM

2010-08-20 23:34:12 ----SHD---- C:\boot

2010-08-20 23:21:07 ----D---- C:\Program Files\Windows Mail

2010-08-20 23:21:07 ----D---- C:\Program Files\Windows Calendar

2010-08-20 23:21:07 ----D---- C:\Program Files\Movie Maker

2010-08-20 23:21:05 ----D---- C:\Program Files\Windows Sidebar

2010-08-20 23:21:05 ----D---- C:\Program Files\Internet Explorer

2010-08-20 23:21:04 ----D---- C:\Program Files\Windows Media Player

2010-08-20 23:21:03 ----D---- C:\Program Files\Windows Journal

2010-08-20 23:21:03 ----D---- C:\Program Files\Windows Collaboration

2010-08-20 23:21:01 ----D---- C:\Program Files\Windows Photo Gallery

2010-08-20 23:21:01 ----D---- C:\Program Files\Common Files\System

2010-08-20 23:20:54 ----D---- C:\Windows\servicing

2010-08-20 23:20:54 ----D---- C:\Program Files\Windows Defender

2010-08-20 23:20:53 ----D---- C:\Windows\ehome

2010-08-20 23:20:29 ----D---- C:\Windows\system32\XPSViewer

2010-08-20 23:20:29 ----D---- C:\Windows\IME

2010-08-20 23:20:28 ----D---- C:\Windows\system32\oobe

2010-08-20 23:20:27 ----D---- C:\Windows\system32\migration

2010-08-20 23:20:27 ----D---- C:\Windows\system32\fr

2010-08-20 23:20:22 ----D---- C:\Windows\system32\AdvancedInstallers

2010-08-20 23:20:15 ----D---- C:\Windows\system32\setup

2010-08-20 23:20:14 ----D---- C:\Windows\system32\SLUI

2010-08-20 23:20:13 ----D---- C:\Windows\system32\manifeststore

2010-08-20 23:20:06 ----D---- C:\Windows\system32\migwiz

2010-08-20 23:19:19 ----RSD---- C:\Windows\Fonts

2010-08-20 23:19:18 ----D---- C:\Windows\AppPatch

2010-08-20 23:19:07 ----D---- C:\Windows\system32\Boot

2010-08-20 22:56:41 ----A---- C:\Windows\fonts\GlobalUserInterface.CompositeFont

2010-08-20 22:03:32 ----D---- C:\Program Files\Common Files\microsoft shared

2010-08-20 22:02:20 ----D---- C:\Program Files\Microsoft

2010-08-20 21:34:19 ----D---- C:\Program Files\Microsoft Works

2010-08-20 21:15:31 ----D---- C:\ProgramData\Microsoft Help

2010-08-03 20:09:31 ----A---- C:\Windows\system32\mrt.exe

2010-08-01 17:06:40 ----D---- C:\Program Files\Microsoft Silverlight

2010-08-01 17:05:32 ----SD---- C:\ProgramData\Microsoft

 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R0 ahcix86s;ahcix86s; C:\Windows\system32\DRIVERS\ahcix86s.sys [2008-04-15 170000]

R0 Amddfltr;Amd Disk Lower Filter Driver; C:\Windows\system32\DRIVERS\Amddfltr.sys [2008-01-07 15416]

R0 AtiPcie;ATI PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2006-10-29 7680]

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2008-03-27 24424]

R0 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

R0 pavboot;pavboot; C:\Windows\system32\drivers\pavboot.sys [2009-06-30 28552]

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]

R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]

R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]

R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2010-05-15 457304]

R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-12-10 56816]

R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [2010-05-26 26352]

R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2008-03-27 34664]

R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-04-27 909824]

R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-03-28 3544064]

R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-01-23 52736]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]

R3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]

R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]

R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2008-04-01 81296]

R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-04-14 118784]

R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2008-04-16 379904]

R3 usbvideo;Peripherique video USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]

S1 dsadhhco;dsadhhco; \??\C:\Windows\system32\drivers\dsadhhco.sys []

S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]

S3 drmkaud;Filtre de decodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]

S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]

S3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]

S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-01-21 987648]

S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]

S3 MSKSSRV;Proxy de service de repartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]

S3 MSPCLOCK;Proxy d'horloge de repartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]

S3 MSPQM;Proxy de gestion de qualite de repartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]

S3 MSTEE;Convertisseur en T/site-a-site de repartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]

S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl.sys [2009-06-05 17408]

S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]

S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

S3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-01-17 196784]

S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-08-28 40448]

S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]

S3 vsdatant7;vsdatant7; C:\Windows\System32\drivers\vsdatant.win7.sys []

S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-01-21 654336]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]

S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\aestsrv.exe [2008-02-12 73728]

R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712]

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-03-28 667648]

R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]

R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2008-01-21 21504]

R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-04-15 94208]

R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2008-03-18 19456]

R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2010-05-26 493032]

R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-02-26 73728]

R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2008-05-14 292248]

R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2008-05-14 116112]

R2 Recovery Service for Windows;Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [2008-03-26 341328]

R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]

R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]

R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]

R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\STacSV.exe [2008-04-16 221239]

R2 vsmon;TrueVector Internet Monitor; C:\Windows\System32\ZoneLabs\vsmon.exe [2010-06-23 2435592]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]

R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]

R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-01-25 148832]

R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-09-21 545568]

S2 gupdate1ca4b2c1625a717;Service Google Update (gupdate1ca4b2c1625a717); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-12 133104]

S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]

S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2007-07-24 181800]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

 

-----------------EOF-----------------

Posté(e)

Bonsoir,

Voilà c'est fait

 

 

Logfile of random's system information tool 1.08 (written by random/random)

Run by Meysieng at 2010-08-26 21:43:17

MicrosoftR Windows Vista? Edition Familiale Premium Service Pack 2

System drive C: has 167 GB (73%) free of 229 GB

Total RAM: 3069 MB (53% free)

 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 21:43:33, on 26/08/2010

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.18943)

Boot mode: Normal

 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\HP\QuickPlay\QPService.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\IDT\WDM\sttray.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE

C:\Users\Meysieng\Program Files\DNA\btdna.exe

C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Windows\ehome\ehmsas.exe

C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

C:\Windows\system32\DllHost.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\Taskmgr.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\explorer.exe

C:\Users\Meysieng\Downloads\RSIT.exe

C:\Program Files\trend micro\Meysieng.exe

 

R3 - URLSearchHook: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O1 - Hosts: ::1 localhost

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"

O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot

O4 - HKLM\..\Run: [sysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [iSW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"

O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Users\Meysieng\Program Files\DNA\btdna.exe"

O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RESEAU')

O4 - Startup: OneNote 2007 - Capture d'ecran et lancement.lnk

O8 - Extra context menu item: &Recherche AOL Toolbar - C:\ProgramData\AOL\ieToolbar\resources\fr-FR\local\search.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Envoyer a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O15 - ESC Trusted Zone: http://*.update.microsoft.com

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab

O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\aestsrv.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe

O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe

O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe

O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe

O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Easybits Shared Services for Windows (ezSharedSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe

O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Service Google Update (gupdate1ca4b2c1625a717) (gupdate1ca4b2c1625a717) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Service de l!|iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe

O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe

O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe

O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe

O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe

O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe

O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe

O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe

O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe

O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\STacSV.exe

O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe

O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe

O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe

O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe

O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe

 

--

End of file - 25749 bytes

 

======Scheduled tasks folder======

 

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\User_Feed_Synchronization-{4C128B28-7E9D-4B0E-8038-690B23E6E920}.job

 

======Registry dump======

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]

Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]

ZoneAlarm Toolbar - C:\Program Files\ZoneAlarm\tbZone.dll [2010-05-09 2517088]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]

Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]

ZoneAlarm Security Engine Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2010-05-26 591336]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - Veoh Web Player Video Finder - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll [2009-05-20 429816]

{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

{66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - ZoneAlarm Toolbar - C:\Program Files\ZoneAlarm\tbZone.dll [2010-05-09 2517088]

{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Security Engine - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2010-05-26 591336]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-01-17 1033512]

"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-12-24 222504]

"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2008-05-14 468264]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-03-14 202032]

"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-11-01 554288]

"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]

"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-04-15 70912]

"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-11-20 488752]

"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]

"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-09-21 305440]

"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

"TrojanScanner"=C:\Program Files\Trojan Remover\Trjscan.exe [2009-09-15 1069960]

"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-04-16 442433]

"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2010-06-23 1043968]

"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2010-05-26 730600]

"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-02-26 2289664]

"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]

"BitTorrent DNA"=C:\Users\Meysieng\Program Files\DNA\btdna.exe [2009-11-07 323392]

"VeohPlugin"=C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [2009-05-20 3561720]

"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]

"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

 

C:\Users\Meysieng\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

OneNote 2007 - Capture d'ecran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"BindDirectlyToPropertySetStorage"=0

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

"C:\Users\Meysieng\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\COI17FCY\ppstreamsetup[1].exe"="C:\Users\Meysieng\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\COI17FCY\ppstreamsetup[1].exe:*:Enabled:PPStream Installer"

"C:\Program Files\PPStream\PPStream.exe"="C:\Program Files\PPStream\PPStream.exe:*:Enabled:PPSIoAcμcEO"

"C:\Program Files\PPStream\PPSAP.exe"="C:\Program Files\PPStream\PPSAP.exe:*:Enabled:PPS IoAc?OEUA÷"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

 

======File associations======

 

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

 

======List of files/folders created in the last 1 months======

 

2010-08-26 21:25:51 ----D---- C:\rsit

2010-08-26 13:39:29 ----D---- C:\Program Files\Emsisoft Anti-Malware

2010-08-25 22:35:36 ----D---- C:\Program Files\Trend Micro

2010-08-25 22:20:37 ----D---- C:\FyK

2010-08-25 22:12:55 ----A---- C:\Windows\system32\drivers\pavboot.sys

2010-08-25 22:12:52 ----D---- C:\Program Files\Panda Security

2010-08-25 21:38:23 ----D---- C:\Windows\BDOSCAN8

2010-08-24 13:35:53 ----DC---- C:\ProgramData\{ECC164E0-3133-4C70-A831-F08DB2940F70}

2010-08-24 06:30:22 ----D---- C:\ProgramData\Spybot - Search & Destroy

2010-08-24 06:30:22 ----D---- C:\Program Files\Spybot - Search & Destroy

2010-08-23 22:45:09 ----D---- C:\Users\Meysieng\AppData\Roaming\CheckPoint

2010-08-23 22:44:36 ----D---- C:\Program Files\Conduit

2010-08-23 22:44:33 ----D---- C:\Program Files\ZoneAlarm

2010-08-23 22:42:41 ----D---- C:\Program Files\CheckPoint

2010-08-23 22:42:26 ----A---- C:\Windows\system32\vsregexp.dll

2010-08-23 22:41:59 ----A---- C:\Windows\system32\drivers\netio.sys

2010-08-23 22:41:41 ----A---- C:\Windows\system32\zlcommdb.dll

2010-08-23 22:41:41 ----A---- C:\Windows\system32\zlcomm.dll

2010-08-23 22:41:29 ----A---- C:\Windows\system32\vswmi.dll

2010-08-23 22:41:26 ----A---- C:\Windows\system32\zpeng25.dll

2010-08-23 22:41:26 ----A---- C:\Windows\system32\vsxml.dll

2010-08-23 22:41:25 ----A---- C:\Windows\system32\vspubapi.dll

2010-08-23 22:41:25 ----A---- C:\Windows\system32\vsmonapi.dll

2010-08-23 22:41:24 ----A---- C:\Windows\system32\vsdata.dll

2010-08-23 22:41:13 ----D---- C:\Windows\system32\ZoneLabs

2010-08-23 22:41:13 ----A---- C:\Windows\system32\drivers\vsdatant.sys

2010-08-23 22:41:11 ----D---- C:\Program Files\Zone Labs

2010-08-23 22:39:39 ----D---- C:\ProgramData\CheckPoint

2010-08-23 22:39:38 ----D---- C:\Windows\Internet Logs

2010-08-23 22:39:37 ----A---- C:\Windows\system32\vsutil.dll

2010-08-23 22:39:37 ----A---- C:\Windows\system32\vsinit.dll

2010-08-23 22:37:58 ----D---- C:\Users\Meysieng\AppData\Roaming\Malwarebytes

2010-08-23 22:37:49 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys

2010-08-23 22:37:48 ----D---- C:\ProgramData\Malwarebytes

2010-08-23 22:37:47 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2010-08-23 22:37:47 ----A---- C:\Windows\system32\drivers\mbam.sys

2010-08-22 23:45:33 ----A---- C:\Windows\system32\UIAnimation.dll

2010-08-22 23:45:30 ----A---- C:\Windows\system32\UIRibbonRes.dll

2010-08-22 23:45:29 ----A---- C:\Windows\system32\UIRibbon.dll

2010-08-22 17:09:24 ----D---- C:\Program Files\Windows Portable Devices

2010-08-22 16:46:29 ----A---- C:\Windows\system32\WMPhoto.dll

2010-08-22 16:46:26 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys

2010-08-22 16:46:26 ----A---- C:\Windows\system32\cdd.dll

2010-08-22 16:46:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll

2010-08-22 16:46:22 ----A---- C:\Windows\system32\d3d10warp.dll

2010-08-22 16:46:21 ----A---- C:\Windows\system32\XpsRasterService.dll

2010-08-22 16:46:21 ----A---- C:\Windows\system32\XpsGdiConverter.dll

2010-08-22 16:46:21 ----A---- C:\Windows\system32\d2d1.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\WindowsCodecsExt.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\WindowsCodecs.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\dxdiagn.dll

2010-08-22 16:46:20 ----A---- C:\Windows\system32\dxdiag.exe

2010-08-22 16:46:19 ----A---- C:\Windows\system32\XpsPrint.dll

2010-08-22 16:46:19 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe

2010-08-22 16:46:18 ----A---- C:\Windows\system32\xpsservices.dll

2010-08-22 16:46:18 ----A---- C:\Windows\system32\OpcServices.dll

2010-08-22 16:46:18 ----A---- C:\Windows\system32\FntCache.dll

2010-08-22 16:46:17 ----A---- C:\Windows\system32\DWrite.dll

2010-08-22 16:46:17 ----A---- C:\Windows\system32\d3d10level9.dll

2010-08-22 16:46:17 ----A---- C:\Windows\system32\d3d10core.dll

2010-08-22 16:46:16 ----A---- C:\Windows\system32\dxgi.dll

2010-08-22 16:46:16 ----A---- C:\Windows\system32\d3d11.dll

2010-08-22 16:46:16 ----A---- C:\Windows\system32\d3d10_1core.dll

2010-08-22 16:46:16 ----A---- C:\Windows\system32\d3d10_1.dll

2010-08-22 16:46:15 ----A---- C:\Windows\system32\d3d10.dll

2010-08-22 16:43:40 ----A---- C:\Windows\system32\WPDShextAutoplay.exe

2010-08-22 16:43:39 ----A---- C:\Windows\system32\wpdbusenum.dll

2010-08-22 16:43:39 ----A---- C:\Windows\system32\BthMtpContextHandler.dll

2010-08-22 16:43:27 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll

2010-08-22 16:43:12 ----A---- C:\Windows\system32\WpdMtpUS.dll

2010-08-22 16:43:12 ----A---- C:\Windows\system32\WpdConns.dll

2010-08-22 16:43:11 ----A---- C:\Windows\system32\drivers\WpdUsb.sys

2010-08-22 16:43:09 ----A---- C:\Windows\system32\WPDShServiceObj.dll

2010-08-22 16:43:09 ----A---- C:\Windows\system32\wpdshext.dll

2010-08-22 16:43:09 ----A---- C:\Windows\system32\wpd_ci.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\WpdMtp.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\PortableDeviceTypes.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll

2010-08-22 16:43:08 ----A---- C:\Windows\system32\PortableDeviceApi.dll

2010-08-22 16:43:07 ----A---- C:\Windows\system32\WPDSp.dll

2010-08-22 16:38:05 ----A---- C:\Windows\system32\oleaccrc.dll

2010-08-22 16:38:03 ----A---- C:\Windows\system32\oleacc.dll

2010-08-22 16:38:02 ----A---- C:\Windows\system32\UIAutomationCore.dll

2010-08-20 23:19:09 ----D---- C:\Windows\system32\eu-ES

2010-08-20 23:19:09 ----D---- C:\Windows\system32\ca-ES

2010-08-20 23:19:07 ----D---- C:\Windows\system32\vi-VN

2010-08-20 22:09:14 ----D---- C:\Windows\system32\EventProviders

2010-08-20 22:04:29 ----A---- C:\Windows\system32\browserchoice.exe

2010-08-18 12:06:44 ----A---- C:\Windows\system32\iertutil.dll

2010-08-18 12:06:41 ----A---- C:\Windows\system32\mshtml.dll

2010-08-18 12:06:37 ----A---- C:\Windows\system32\ieframe.dll

2010-08-18 12:06:34 ----A---- C:\Windows\system32\urlmon.dll

2010-08-18 12:06:32 ----A---- C:\Windows\system32\wininet.dll

2010-08-18 12:06:32 ----A---- C:\Windows\system32\msfeeds.dll

2010-08-18 12:06:32 ----A---- C:\Windows\system32\iedkcs32.dll

2010-08-18 12:06:32 ----A---- C:\Windows\system32\ie4uinit.exe

2010-08-18 12:06:31 ----A---- C:\Windows\system32\mstime.dll

2010-08-18 12:06:31 ----A---- C:\Windows\system32\ieui.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\occache.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\msfeedsbs.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\ieUnatt.exe

2010-08-18 12:06:30 ----A---- C:\Windows\system32\iesysprep.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\iesetup.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\iernonce.dll

2010-08-18 12:06:30 ----A---- C:\Windows\system32\iepeers.dll

2010-08-18 12:06:29 ----A---- C:\Windows\system32\msfeedssync.exe

2010-08-18 12:06:29 ----A---- C:\Windows\system32\jsproxy.dll

2010-08-18 12:06:25 ----A---- C:\Windows\system32\iccvid.dll

2010-08-18 12:06:20 ----A---- C:\Windows\system32\schannel.dll

2010-08-18 12:05:55 ----A---- C:\Windows\system32\ntkrnlpa.exe

2010-08-18 12:05:52 ----A---- C:\Windows\system32\ntoskrnl.exe

2010-08-18 12:05:47 ----A---- C:\Windows\system32\rtutils.dll

2010-08-18 12:05:40 ----A---- C:\Windows\system32\win32k.sys

2010-08-18 12:05:30 ----A---- C:\Windows\system32\msxml3.dll

2010-08-18 12:05:26 ----A---- C:\Windows\system32\drivers\srv2.sys

2010-08-18 12:05:26 ----A---- C:\Windows\system32\drivers\srv.sys

2010-08-18 12:05:21 ----A---- C:\Windows\system32\drivers\tcpip.sys

2010-08-18 12:05:20 ----A---- C:\Windows\system32\drivers\tcpipreg.sys

2010-08-03 20:41:52 ----A---- C:\Windows\system32\shell32.dll

2010-07-30 11:29:10 ----A---- C:\Windows\system32\MRT.INI

2010-07-30 11:29:09 ----D---- C:\Windows\system32\MpEngineStore

2010-07-30 11:16:21 ----A---- C:\Windows\system32\PresentationHostProxy.dll

2010-07-30 11:16:21 ----A---- C:\Windows\system32\PresentationHost.exe

2010-07-30 11:16:21 ----A---- C:\Windows\system32\netfxperf.dll

2010-07-30 11:16:21 ----A---- C:\Windows\system32\mscoree.dll

2010-07-30 11:16:21 ----A---- C:\Windows\system32\dfshim.dll

2010-07-29 12:08:20 ----A---- C:\Windows\system32\asycfilt.dll

2010-07-29 12:08:04 ----A---- C:\Windows\system32\gameux.dll

2010-07-29 12:08:02 ----A---- C:\Windows\system32\Apphlpdm.dll

2010-07-29 12:08:01 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll

2010-07-29 12:07:51 ----A---- C:\Windows\system32\atmlib.dll

2010-07-29 12:07:51 ----A---- C:\Windows\system32\atmfd.dll

 

======List of files/folders modified in the last 1 months======

 

2010-08-26 21:43:16 ----D---- C:\Windows\Temp

2010-08-26 21:33:59 ----D---- C:\Users\Meysieng\AppData\Roaming\DNA

2010-08-26 21:26:06 ----D---- C:\Windows\Prefetch

2010-08-26 21:09:43 ----D---- C:\Windows\System32

2010-08-26 21:09:43 ----A---- C:\Windows\system32\PerfStringBackup.INI

2010-08-26 21:09:42 ----D---- C:\Windows\inf

2010-08-26 21:08:44 ----D---- C:\Program Files\Mozilla Firefox

2010-08-26 13:53:37 ----D---- C:\autorun.inf

2010-08-26 13:39:29 ----RD---- C:\Program Files

2010-08-26 13:21:06 ----AD---- C:\ProgramData\TEMP

2010-08-26 13:08:14 ----SHD---- C:\System Volume Information

2010-08-25 22:19:17 ----D---- C:\Windows\system32\drivers

2010-08-25 22:12:05 ----SD---- C:\Windows\Downloaded Program Files

2010-08-25 21:38:24 ----D---- C:\Windows

2010-08-24 13:35:53 ----D---- C:\ProgramData

2010-08-24 13:35:20 ----SHD---- C:\Windows\Installer

2010-08-24 08:43:20 ----D---- C:\Windows\Debug

2010-08-24 06:17:26 ----D---- C:\Windows\winsxs

2010-08-23 23:07:43 ----D---- C:\Windows\MSAgent

2010-08-23 23:04:07 ----D---- C:\RECYCLER

2010-08-23 22:42:11 ----D---- C:\Windows\system32\catroot2

2010-08-23 22:42:11 ----D---- C:\Windows\system32\catroot

2010-08-22 23:46:10 ----D---- C:\Windows\system32\fr-FR

2010-08-22 17:26:08 ----RSD---- C:\Windows\assembly

2010-08-22 17:15:26 ----D---- C:\Windows\system32\Tasks

2010-08-22 17:14:15 ----D---- C:\Windows\Microsoft.NET

2010-08-22 17:09:25 ----D---- C:\Windows\system32\drivers\fr-FR

2010-08-22 17:09:24 ----D---- C:\Windows\system32\wbem

2010-08-22 17:09:17 ----D---- C:\Windows\system32\zh-HK

2010-08-22 17:09:17 ----D---- C:\Windows\system32\uk-UA

2010-08-22 17:09:17 ----D---- C:\Windows\system32\tr-TR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\th-TH

2010-08-22 17:09:17 ----D---- C:\Windows\system32\sv-SE

2010-08-22 17:09:17 ----D---- C:\Windows\system32\sr-Latn-CS

2010-08-22 17:09:17 ----D---- C:\Windows\system32\sl-SI

2010-08-22 17:09:17 ----D---- C:\Windows\system32\pt-PT

2010-08-22 17:09:17 ----D---- C:\Windows\system32\pt-BR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\pl-PL

2010-08-22 17:09:17 ----D---- C:\Windows\system32\nl-NL

2010-08-22 17:09:17 ----D---- C:\Windows\system32\ko-KR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\it-IT

2010-08-22 17:09:17 ----D---- C:\Windows\system32\hu-HU

2010-08-22 17:09:17 ----D---- C:\Windows\system32\hr-HR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\he-IL

2010-08-22 17:09:17 ----D---- C:\Windows\system32\fi-FI

2010-08-22 17:09:17 ----D---- C:\Windows\system32\es-ES

2010-08-22 17:09:17 ----D---- C:\Windows\system32\el-GR

2010-08-22 17:09:17 ----D---- C:\Windows\system32\bg-BG

2010-08-22 17:09:16 ----D---- C:\Windows\system32\zh-TW

2010-08-22 17:09:16 ----D---- C:\Windows\system32\zh-CN

2010-08-22 17:09:16 ----D---- C:\Windows\system32\sk-SK

2010-08-22 17:09:16 ----D---- C:\Windows\system32\ru-RU

2010-08-22 17:09:16 ----D---- C:\Windows\system32\ro-RO

2010-08-22 17:09:16 ----D---- C:\Windows\system32\nb-NO

2010-08-22 17:09:16 ----D---- C:\Windows\system32\lv-LV

2010-08-22 17:09:16 ----D---- C:\Windows\system32\lt-LT

2010-08-22 17:09:16 ----D---- C:\Windows\system32\ja-JP

2010-08-22 17:09:16 ----D---- C:\Windows\system32\et-EE

2010-08-22 17:09:16 ----D---- C:\Windows\system32\en-US

2010-08-22 17:09:16 ----D---- C:\Windows\system32\de-DE

2010-08-22 17:09:16 ----D---- C:\Windows\system32\da-DK

2010-08-22 17:09:16 ----D---- C:\Windows\system32\cs-CZ

2010-08-22 17:09:16 ----D---- C:\Windows\system32\ar-SA

2010-08-22 17:08:59 ----D---- C:\Windows\system32\drivers\UMDF

2010-08-22 16:59:52 ----D---- C:\Program Files\CCleaner

2010-08-21 12:32:24 ----D---- C:\Users\Meysieng\AppData\Roaming\Skype

2010-08-21 08:19:11 ----SD---- C:\Users\Meysieng\AppData\Roaming\Microsoft

2010-08-21 08:07:13 ----D---- C:\Users\Meysieng\AppData\Roaming\skypePM

2010-08-20 23:34:12 ----SHD---- C:\boot

2010-08-20 23:21:07 ----D---- C:\Program Files\Windows Mail

2010-08-20 23:21:07 ----D---- C:\Program Files\Windows Calendar

2010-08-20 23:21:07 ----D---- C:\Program Files\Movie Maker

2010-08-20 23:21:05 ----D---- C:\Program Files\Windows Sidebar

2010-08-20 23:21:05 ----D---- C:\Program Files\Internet Explorer

2010-08-20 23:21:04 ----D---- C:\Program Files\Windows Media Player

2010-08-20 23:21:03 ----D---- C:\Program Files\Windows Journal

2010-08-20 23:21:03 ----D---- C:\Program Files\Windows Collaboration

2010-08-20 23:21:01 ----D---- C:\Program Files\Windows Photo Gallery

2010-08-20 23:21:01 ----D---- C:\Program Files\Common Files\System

2010-08-20 23:20:54 ----D---- C:\Windows\servicing

2010-08-20 23:20:54 ----D---- C:\Program Files\Windows Defender

2010-08-20 23:20:53 ----D---- C:\Windows\ehome

2010-08-20 23:20:29 ----D---- C:\Windows\system32\XPSViewer

2010-08-20 23:20:29 ----D---- C:\Windows\IME

2010-08-20 23:20:28 ----D---- C:\Windows\system32\oobe

2010-08-20 23:20:27 ----D---- C:\Windows\system32\migration

2010-08-20 23:20:27 ----D---- C:\Windows\system32\fr

2010-08-20 23:20:22 ----D---- C:\Windows\system32\AdvancedInstallers

2010-08-20 23:20:15 ----D---- C:\Windows\system32\setup

2010-08-20 23:20:14 ----D---- C:\Windows\system32\SLUI

2010-08-20 23:20:13 ----D---- C:\Windows\system32\manifeststore

2010-08-20 23:20:06 ----D---- C:\Windows\system32\migwiz

2010-08-20 23:19:19 ----RSD---- C:\Windows\Fonts

2010-08-20 23:19:18 ----D---- C:\Windows\AppPatch

2010-08-20 23:19:07 ----D---- C:\Windows\system32\Boot

2010-08-20 22:56:41 ----A---- C:\Windows\fonts\GlobalUserInterface.CompositeFont

2010-08-20 22:03:32 ----D---- C:\Program Files\Common Files\microsoft shared

2010-08-20 22:02:20 ----D---- C:\Program Files\Microsoft

2010-08-20 21:34:19 ----D---- C:\Program Files\Microsoft Works

2010-08-20 21:15:31 ----D---- C:\ProgramData\Microsoft Help

2010-08-03 20:09:31 ----A---- C:\Windows\system32\mrt.exe

2010-08-01 17:06:40 ----D---- C:\Program Files\Microsoft Silverlight

2010-08-01 17:05:32 ----SD---- C:\ProgramData\Microsoft

 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R0 ahcix86s;ahcix86s; C:\Windows\system32\DRIVERS\ahcix86s.sys [2008-04-15 170000]

R0 Amddfltr;Amd Disk Lower Filter Driver; C:\Windows\system32\DRIVERS\Amddfltr.sys [2008-01-07 15416]

R0 AtiPcie;ATI PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2006-10-29 7680]

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2008-03-27 24424]

R0 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

R0 pavboot;pavboot; C:\Windows\system32\drivers\pavboot.sys [2009-06-30 28552]

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]

R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]

R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]

R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2010-05-15 457304]

R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-12-10 56816]

R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [2010-05-26 26352]

R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2008-03-27 34664]

R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-04-27 909824]

R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-03-28 3544064]

R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-01-23 52736]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]

R3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]

R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]

R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2008-04-01 81296]

R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-04-14 118784]

R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2008-04-16 379904]

R3 usbvideo;Peripherique video USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]

S1 dsadhhco;dsadhhco; \??\C:\Windows\system32\drivers\dsadhhco.sys []

S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]

S3 drmkaud;Filtre de decodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]

S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]

S3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]

S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-01-21 987648]

S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]

S3 MSKSSRV;Proxy de service de repartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]

S3 MSPCLOCK;Proxy d'horloge de repartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]

S3 MSPQM;Proxy de gestion de qualite de repartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]

S3 MSTEE;Convertisseur en T/site-a-site de repartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]

S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl.sys [2009-06-05 17408]

S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]

S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

S3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-01-17 196784]

S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-08-28 40448]

S3 usbaudio;Pilote USB audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]

S3 vsdatant7;vsdatant7; C:\Windows\System32\drivers\vsdatant.win7.sys []

S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-01-21 654336]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]

S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

 

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\aestsrv.exe [2008-02-12 73728]

R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712]

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-03-28 667648]

R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]

R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2008-01-21 21504]

R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-04-15 94208]

R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2008-03-18 19456]

R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2010-05-26 493032]

R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-02-26 73728]

R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2008-05-14 292248]

R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2008-05-14 116112]

R2 Recovery Service for Windows;Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [2008-03-26 341328]

R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]

R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]

R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]

R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f691e717\STacSV.exe [2008-04-16 221239]

R2 vsmon;TrueVector Internet Monitor; C:\Windows\System32\ZoneLabs\vsmon.exe [2010-06-23 2435592]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]

R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]

R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-01-25 148832]

R3 iPod Service;Service de l’iPod; C:\Program Files\iPod\bin\iPodService.exe [2009-09-21 545568]

S2 gupdate1ca4b2c1625a717;Service Google Update (gupdate1ca4b2c1625a717); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-12 133104]

S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]

S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2007-07-24 181800]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

 

-----------------EOF-----------------

Posté(e)

Bonjour,

 

Téléchargez Hijackthis de TrendMicro.

* Décompressez le dans un dossier à la racine du disque dur(généralement C:\)

* Lancer le fichier Hijackthis.exe

startup-screen.jpg

* Cliquer sur Do a system scan and save a log file

Cochez:

R3 - URLSearchHook: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O3 - Toolbar: ZoneAlarm Toolbar - {66f2e20d-0da8-4c11-a9c8-dd8477b88acd} - C:\Program Files\ZoneAlarm\tbZone.dll

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe

 

Cliquez sur fix checked.

 

Supprimer Ctfmon

Suppression des fonctionnalités Modes d'entrée utilisateur complémentaires des Services de texte

Démarrer-> Panneau de configuration.

-> Options régionales, date, heure et langue,

-> Options régionales et linguistiques.

Sous l'onglet Langues, cliquez sur Détails.

Sous Services installés, sélectionnez chaque élément d'entrée répertorié,

->cliquez sur Supprimer pour supprimer l'élément en question.

Tous les éléments doivent être supprimés, un par un, à l'exception du service d'entrée suivant :

Français (France) – clavier : Français

Ensuite

Copiez collez ce qui suit dans le bloc notes.

Enregistrez sur le bureau sous ctf.bat.

Double cliquez sur le fichier.

 

 

Désinstallez Spybot, aujourd'hui dépassé, et d'autant plus que vous disposez de Maleware'sbytes, bien meilleur.

 

Si vous êtes sous Vista:Désactiver L'UAC ,avant sont utilisation.

Menu Démarrer \ Panneau de Configuration \ Comptes d'utilisateurs et protection des utilisateurs \ Comptes d'utilisateurs \ Activer ou désactiver le contrôle des comptes d'utilisateurs \ décoche la case Utiliser le contrôle ... et valider par OK ,

il sera demandé de redémarrer

 

 

Téléchargez AD-Remover sur le bureau

Déconnectez-vous et fermez toutes les applications en cours

Cliquer sur "Ad-R.exe" pour lancer l'installation et laisser les paramètres par défaut .

Une fenêtre s'affichera Vous prévenant des risques de l'utilisation de ce logiciel

Cliquez sur "OUI"

Double cliquer sur l'icône Ad-remover sur le bureau

fyjor7.jpg

Au menu principal choisir l'optionScanner et Validez

 

Patientez pendant le travail de l'outil.

Poster le rapport qui apparait à la fin .

Il est sauvegardé aussi sous C:\Ad-report.log

 

Ensuite

 

Relancer Ad- remover , choisir l'option Nettoyer

 

Il y aura 2 rapports à poster après Scanner et Nettoyer

 

Pour désinstaller AD-Remover, lancez avec l'option D puis supprimer l'icône du bureau.

 

 

Téléchargez MBAM

 

Branchez tous les supports amovibles avant de faire ce scan (clé usb/disque dur externe etc)

Avant de lancer Mbam

Vous devez d'abord désactiver vos protections mais vous ne savez pas comment faire

 

Double cliquez sur l'icône Download_mbam-setup.exe pour lancer le processus d'installation.

Enregistrez le sur le bureau .

Fermer toutes les fenêtres et programmes

Suivez les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet)

N'apportez aucune modification aux réglages par défaut et, en fin d'installation,

Vérifiez que les options Update et Launch soient cochées

MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse.

cliquer sur OK pour fermer la boîte de dialogue..

Dans l'onglet "mise à jour", cliquez sur le bouton Recherche de mise à jour:

mbam.jpg

Si le pare-feu demande l'autorisation de connecter MBAM, acceptez.

Une fois la mise à jour terminée, allez dans l'onglet Recherche.

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

.L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

 

Si MBAM n'a rien trouvé, il le dira aussi.

Cliquez sur "Ok" pour poursuivre.

Fermez les navigateurs.

Cliquez sur Afficher les résultats .

 

Nettoyage

Relancez Mbam

Sélectionnez "Exécuter un examen complet"

Cliquez sur "Rechercher"

L' analyse prendra un certain temps, soyez patient !

A la fin , un message affichera :

L'examen s'est terminé normalement.

Sélectionnez tout et cliquez sur Supprimer la sélection ,

MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

puis ouvrir le Bloc-notes et y copier le rapport d'analyse qui peut être retrouvé sous l'onglet Rapports/logs.

Copiez-collez ce rapport dans la prochaine réponse.

Posté(e)

Bonjour,

Hijack fait

 

ctfmon: j'ai supprimer les deux claviers anglais et chinois de Taiwan (pour autant il y a toujours des caractères chinois un peu partout!!)

 

Spybot supprimer OK

 

Il est sous Vista mais je n'ai pas dans Comptes d'utilisateurs: Activer ou désactiver le contrôle des comptes

 

AD-Remover téléchargé mais erreur au démarrage:

 

line 9006 (file "C:\Programm Files\Ad-Remover\main.exe

Error: Variable used without being declared

 

J'ai quand même lancé Malwarebytes: Voilà le log avec un peu de chinois (en tout cas sur mon écran)

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

 

Version de la base de donn嶪s: 4467

 

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18943

 

28/08/2010 10:15:17

mbam-log-2010-08-28 (10-15-17).txt

 

Type d'examen: Examen complet (C:\|D:\|)

El幦ent(s) analys?s): 294950

Temps 嶰oul? 1 jour(s), 6 heure(s), 59 minute(s)

 

Processus m幦oire infect?s): 0

Module(s) m幦oire infect?s): 0

Cl?s) du Registre infect嶪(s): 0

Valeur(s) du Registre infect嶪(s): 0

El幦ent(s) de donn嶪s du Registre infect?s): 0

Dossier(s) infect?s): 0

Fichier(s) infect?s): 1

 

Processus m幦oire infect?s):

(Aucun 幨幦ent nuisible d彋ect?

 

Module(s) m幦oire infect?s):

(Aucun 幨幦ent nuisible d彋ect?

 

Cl?s) du Registre infect嶪(s):

(Aucun 幨幦ent nuisible d彋ect?

 

Valeur(s) du Registre infect嶪(s):

(Aucun 幨幦ent nuisible d彋ect?

 

El幦ent(s) de donn嶪s du Registre infect?s):

(Aucun 幨幦ent nuisible d彋ect?

 

Dossier(s) infect?s):

(Aucun 幨幦ent nuisible d彋ect?

 

Fichier(s) infect?s):

C:\Windows\System32\drivers\qenpw.sys (Rootkit.Agent) -> Quaran

 

 

J'ai toujours Trojan Remover qui démarre et me parle de mmmpc et ozzfhv

Posté(e)

Bonjour,

 

En cherchant en attendant une réponse, j'ai trouvé le moyen de supprimer tous les caractères chinois: il fallait aussi aller dans "administration" de "options régionales..." dans configuration et tout mettre en français.

 

Maintenant je peux démarrer AD-Remover dont voilà le résultat, je ne sais pas si il ditqu'il y a des pb ou pas et si il a seulement fait un état des lieux car il ne m'a pas proposé de nettoyer quoi que ce soit. Merci d'avance

 

======= RAPPORT D'AD-REMOVER 2.0.0.1,D | UNIQUEMENT XP/VISTA/7 =======

 

Mis à jour par C_XX le 26/07/10 à 12:00

Contact: AdRemover.contact[AT]gmail.com

Site web: Ad_Remover

 

C:\Program Files\Ad-Remover\main.exe (SCAN [5]) -> Lancé à 09:19:17 le 05/09/2010, Mode normal

 

Microsoft® Windows Vista Édition Familiale Premium Service Pack 2 (X86)

Meysieng@HP (Hewlett-Packard HP Pavilion dv5 Notebook PC)

 

============== RECHERCHE ==============

 

 

0,Fichier trouvé: C:\Program Files\Mozilla FireFox\Components\AskSearch.js

0,Fichier trouvé: C:\Users\Meysieng\AppData\Roaming\Mozilla\FireFox\Profiles\d66jjp8x.default\searchplugins\ask.xml

0,Dossier trouvé: C:\Users\Meysieng\AppData\LocalLow\Conduit

0,Dossier trouvé: C:\Program Files\Conduit

0,Dossier trouvé: C:\ProgramData\Viewpoint

0,Dossier trouvé: C:\Program Files\Viewpoint

 

-- Fichier ouvert: C:\Users\Meysieng\AppData\Roaming\Mozilla\FireFox\Profiles\d66jjp8x.default\Prefs.js --

Ligne trouvée: user_pref("CT2611275.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER...

Ligne trouvée: user_pref("CT2611275.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT261...

Ligne trouvée: user_pref("CT2611275.ct2611275.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_...

Ligne trouvée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://toolbar.ask.com/toolbarv/askRedir...

Ligne trouvée: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2611275&Sea...

Ligne trouvée: user_pref("extensions.snipit.askTbInstalled", true);

Ligne trouvée: user_pref("extensions.snipit.chromeURL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&...

Ligne trouvée: user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2611275&q=");

-- Fichier Fermé --

 

 

1,Clé trouvée: HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}

1,Clé trouvée: HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

1,Clé trouvée: HKLM\Software\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}

0,Clé trouvée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl

0,Clé trouvée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtl.1

0,Clé trouvée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary

0,Clé trouvée: HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1

0,Clé trouvée: HKLM\Software\Classes\Toolbar.CT2611275

0,Clé trouvée: HKLM\Software\Conduit

0,Clé trouvée: HKLM\Software\MetaStream

0,Clé trouvée: HKLM\Software\Viewpoint

0,Clé trouvée: HKCU\Software\AppDataLow\Software\Conduit

3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}

3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}

0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer

0,Clé trouvée: HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}

0,Clé trouvée: HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}

 

 

============== SCAN ADDITIONNEL ==============

 

** Mozilla Firefox Version [3.6.8 (fr)] **

 

-- C:\Users\Meysieng\AppData\Roaming\Mozilla\FireFox\Profiles\d66jjp8x.default\Prefs.js --

browser.download.dir, C:\\Users\\Meysieng\\Downloads

browser.download.lastDir, C:\\Users\\Meysieng\\Desktop

browser.search.defaultenginename, Live Search

browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2611275&SearchSource=3&q={searchTerms}

browser.search.selectedEngine, Google

browser.startup.homepage, hxxp://go.microsoft.com/fwlink/?LinkId=69157

browser.startup.homepage_override.mstone, rv:1.9.2.8

keyword.URL, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2611275&q=

 

========================================

 

** Internet Explorer Version [8.0.6001.18943] **

 

[HKCU\Software\Microsoft\Internet Explorer\Main]

Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb

Do404Search: 0x01000000

Enable Browser Extensions: yes

Local Page: C:\Windows\system32\blank.htm

Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896

Show_ToolBar: yes

Start Page: hxxp://www.th123.com

Use Search Asst: no

 

[HKLM\Software\Microsoft\Internet Explorer\Main]

AutoHide: yes

Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb

Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896

Delete_Temp_Files_On_Exit: yes

Enable Browser Extensions: yes

Local Page: C:\Windows\System32\blank.htm

Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896

Start Page: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb

Use Search Asst: no

 

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

Blank: res://mshtml.dll/blank.htm

 

========================================

 

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)

C:\Program Files\Ad-Remover\Backup: 5 Fichier(s)

 

C:\Ad-Report-SCAN[1].txt - 28/08/2010 (455 Octet(s))

C:\Ad-Report-SCAN[2].txt - 28/08/2010 (455 Octet(s))

C:\Ad-Report-SCAN[3].txt - 28/08/2010 (455 Octet(s))

C:\Ad-Report-SCAN[4].txt - 05/09/2010 (455 Octet(s))

C:\Ad-Report-SCAN[5].txt - 05/09/2010 (5580 Octet(s))

 

Fin à: 09:22:29, 05/09/2010

 

============== E.O.F ==============

Posté(e) (modifié)

Bonjour,

 

Faites le nettoyage de Ad-Remover.

 

Relancez Mbam

 

'Trojan remover' qui détecte deux exe mmmpc.exe et ozzfhv.exe

 

Donnez en le chemin svp, ou, mieux postez le rapport.

Modifié par pear
Posté(e)

Bonsoir,

 

J'ai lancé le nettoyage avec AD-remover puis malwarebyte

Pour mes deux loubards mmmpc.exe et ozzfhv.exe ils ont disparu Trojan remover n'a plus rien trouvé.

 

Donc je crois que cela doit être tout bon. J'ai passé aussi AD-Adware est-il dépassé aussi comme Spybot?

 

Sauf erreur de ma part c'est la fin de mon problème donc merci encore

 

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

 

Version de la base de données: 4550

 

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18943

 

05/09/2010 18:56:05

mbam-log-2010-09-05 (18-56-05).txt

 

Type d'examen: Examen complet (C:\|D:\|)

Elément(s) analysé(s): 289627

Temps écoulé: 1 heure(s), 38 minute(s), 51 seconde(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 1

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 1

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell (Worm.Palevo) -> No action taken.

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

C:\Windows\System32\drivers\qenpw.sys (Rootkit.Agent) -> No action taken.

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...